www.allthingsfreshfarms.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:30:ba:89:ee:4a:f3:2a:16:23:35:50:6b:90:29:2c:ac was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.allthingsfreshfarms.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:30:ba:89:ee:4a:f3:2a:16:23:35:50:6b:90:29:2c:ac
Serial Number (int): 346472221034098333482676103767297417096364
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:01:f5:a1:71:80:8f:88:c1:9f:73:e8:67:3f:06:2a:ca:f8:85:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:7e:5f:8f:33:f3:3c:1b:6f:54:6f:ce:39:d6:ac:92:b1:64:8c:67
Fingerprint (sha256): 90:cf:a2:27:13:e9:28:da:df:b1:6d:e5:8d:fb:e1:66:70:91:30:4b:d7:73:42:9d:86:a9:3a:c3:72:2f:1f:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.allthingsfreshfarms.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.allthingsfreshfarms.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allthingsfreshfarms.com
alonsocabinets.com
animalarearugs.com
btctrotters.com
budtenderfaqs.com
campusmatters.com
capewaves.com
cashmereslippers.com
charlottedemers.com
connecticutsportsdoctors.com
crystalpos.com
dermafillers.com
dgcos.com
fairavsolutions.com
fairfieldindians.com
formfocusfitness.com
hairtowers.com
houstonstemcellcenters.com
hydrotaxis.com
insurebigtrucks.com
iowastemcellcenters.com
ipfsdomains.com
jerseyduilawyers.com
juliannephillips.com
kuipers.com
languagemasters.com
lifeandfitness.com
locatormaps.com
madeswiss.com
majorlaughs.com
menwintercoats.com
mil-paks.com
mississippisportsdoctors.com
mocannabis.com
nevadasportsphysicians.com
newmexicosportsdoctors.com
nyspeakers.com
organicflannelsheets.com
peregrinefalcons.com
personalized-napkins.com
rawdairyproducts.com
runner-rugs.com
slideoutplatforms.com
stpaulsportsdoctors.com
sydneypenthouses.com
thereasins.com
tulsa-movers.com
vtranslations.com
weedingtools.com
www.allthingsfreshfarms.com
www.alonsocabinets.com
www.animalarearugs.com
www.btctrotters.com
www.budtenderfaqs.com
www.campusmatters.com
www.capewaves.com
www.cashmereslippers.com
www.charlottedemers.com
www.connecticutsportsdoctors.com
www.crystalpos.com
www.dermafillers.com
www.dgcos.com
www.fairavsolutions.com
www.fairfieldindians.com
www.formfocusfitness.com
www.hairtowers.com
www.houstonstemcellcenters.com
www.hydrotaxis.com
www.insurebigtrucks.com
www.iowastemcellcenters.com
www.ipfsdomains.com
www.jerseyduilawyers.com
www.juliannephillips.com
www.kuipers.com
www.languagemasters.com
www.lifeandfitness.com
www.locatormaps.com
www.madeswiss.com
www.majorlaughs.com
www.menwintercoats.com
www.mil-paks.com
www.mississippisportsdoctors.com
www.mocannabis.com
www.nevadasportsphysicians.com
www.newmexicosportsdoctors.com
www.nyspeakers.com
www.organicflannelsheets.com
www.peregrinefalcons.com
www.personalized-napkins.com
www.rawdairyproducts.com
www.runner-rugs.com
www.slideoutplatforms.com
www.stpaulsportsdoctors.com
www.sydneypenthouses.com
www.thereasins.com
www.tulsa-movers.com
www.vtranslations.com
www.weedingtools.com
www.wyomingsportsphysicians.com
wyomingsportsphysicians.com

Other certificates including the domain name allthingsfreshfarms.com

(limited to 100 certificates)
www.divorcedrings.com
www.weedkillerforlawns.com
cybersecuritylessons.com
keeperofthemountains.com
iowastemcellcenters.com
www.jackbet.co
www.cointalko.com
www.tendonitisachilles.com
www.8seedproductions.com
stemresearchcenter.com
www.factoryoutletmalls.com
wisconsinrecycle.com
www.cannaadult.com
www.canuckspoker.com
www.thegnnplus.com
southafricacallertune.com
www.allthingsfreshfarms.com
tailgatevans.com
www.valleyfitnesscenter.com
www.valleyfitnesscenter.com
www.subtxt.com
www.miguelmorales.com
www.gypsyjournalofwanderingthoughts.com
bostonstemcelltreatments.com

Certificate

The complete raw certificate details for www.allthingsfreshfarms.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOHDCCDQSgAwIBAgISA/owuonuSvMqFiM1UGuQKSysMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjUwNjE3NTVaFw0x
OTEwMjMwNjE3NTVaMCYxJDAiBgNVBAMTG3d3dy5hbGx0aGluZ3NmcmVzaGZhcm1z
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL95ULaNu3DxvAZw
mp1XGeY3T9AiLVhzQU2ngdm1LHodFEv1ZX7Uj91/zUAhiL/ODXGDXErX85lF/fwd
h02jnB9SVgcMo6hhNzZCgqxfHGkx44u000SN+13ryd15uk0QP8YN2CaDSt1cvAbc
7VtFeLstotgApU+ppo8xPOdag/vDUP4MHllN0tysxqaSe1ZTinYPNeHEOmMpWSf0
rsgvjxBBKq3NQSjhvMeBBObgKp0+gDA611+7NzpR9SHo1fdP3o33ksP2dv9lEXsQ
bwkAXvteiMdTJqZTPKjhzyHshIptmC292DyqC69ks8NzfhH2CB2rEqhKgYxFYA5h
n6eZZfUCAwEAAaOCCx4wggsaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUlgH1oXGA
j4jBn3PoZz8GKsr4hXcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCCNMGA1UdEQSCCMowggjGghdhbGx0aGluZ3NmcmVz
aGZhcm1zLmNvbYISYWxvbnNvY2FiaW5ldHMuY29tghJhbmltYWxhcmVhcnVncy5j
b22CD2J0Y3Ryb3R0ZXJzLmNvbYIRYnVkdGVuZGVyZmFxcy5jb22CEWNhbXB1c21h
dHRlcnMuY29tgg1jYXBld2F2ZXMuY29tghRjYXNobWVyZXNsaXBwZXJzLmNvbYIT
Y2hhcmxvdHRlZGVtZXJzLmNvbYIcY29ubmVjdGljdXRzcG9ydHNkb2N0b3JzLmNv
bYIOY3J5c3RhbHBvcy5jb22CEGRlcm1hZmlsbGVycy5jb22CCWRnY29zLmNvbYIT
ZmFpcmF2c29sdXRpb25zLmNvbYIUZmFpcmZpZWxkaW5kaWFucy5jb22CFGZvcm1m
b2N1c2ZpdG5lc3MuY29tgg5oYWlydG93ZXJzLmNvbYIaaG91c3RvbnN0ZW1jZWxs
Y2VudGVycy5jb22CDmh5ZHJvdGF4aXMuY29tghNpbnN1cmViaWd0cnVja3MuY29t
ghdpb3dhc3RlbWNlbGxjZW50ZXJzLmNvbYIPaXBmc2RvbWFpbnMuY29tghRqZXJz
ZXlkdWlsYXd5ZXJzLmNvbYIUanVsaWFubmVwaGlsbGlwcy5jb22CC2t1aXBlcnMu
Y29tghNsYW5ndWFnZW1hc3RlcnMuY29tghJsaWZlYW5kZml0bmVzcy5jb22CD2xv
Y2F0b3JtYXBzLmNvbYINbWFkZXN3aXNzLmNvbYIPbWFqb3JsYXVnaHMuY29tghJt
ZW53aW50ZXJjb2F0cy5jb22CDG1pbC1wYWtzLmNvbYIcbWlzc2lzc2lwcGlzcG9y
dHNkb2N0b3JzLmNvbYIObW9jYW5uYWJpcy5jb22CGm5ldmFkYXNwb3J0c3BoeXNp
Y2lhbnMuY29tghpuZXdtZXhpY29zcG9ydHNkb2N0b3JzLmNvbYIObnlzcGVha2Vy
cy5jb22CGG9yZ2FuaWNmbGFubmVsc2hlZXRzLmNvbYIUcGVyZWdyaW5lZmFsY29u
cy5jb22CGHBlcnNvbmFsaXplZC1uYXBraW5zLmNvbYIUcmF3ZGFpcnlwcm9kdWN0
cy5jb22CD3J1bm5lci1ydWdzLmNvbYIVc2xpZGVvdXRwbGF0Zm9ybXMuY29tghdz
dHBhdWxzcG9ydHNkb2N0b3JzLmNvbYIUc3lkbmV5cGVudGhvdXNlcy5jb22CDnRo
ZXJlYXNpbnMuY29tghB0dWxzYS1tb3ZlcnMuY29tghF2dHJhbnNsYXRpb25zLmNv
bYIQd2VlZGluZ3Rvb2xzLmNvbYIbd3d3LmFsbHRoaW5nc2ZyZXNoZmFybXMuY29t
ghZ3d3cuYWxvbnNvY2FiaW5ldHMuY29tghZ3d3cuYW5pbWFsYXJlYXJ1Z3MuY29t
ghN3d3cuYnRjdHJvdHRlcnMuY29tghV3d3cuYnVkdGVuZGVyZmFxcy5jb22CFXd3
dy5jYW1wdXNtYXR0ZXJzLmNvbYIRd3d3LmNhcGV3YXZlcy5jb22CGHd3dy5jYXNo
bWVyZXNsaXBwZXJzLmNvbYIXd3d3LmNoYXJsb3R0ZWRlbWVycy5jb22CIHd3dy5j
b25uZWN0aWN1dHNwb3J0c2RvY3RvcnMuY29tghJ3d3cuY3J5c3RhbHBvcy5jb22C
FHd3dy5kZXJtYWZpbGxlcnMuY29tgg13d3cuZGdjb3MuY29tghd3d3cuZmFpcmF2
c29sdXRpb25zLmNvbYIYd3d3LmZhaXJmaWVsZGluZGlhbnMuY29tghh3d3cuZm9y
bWZvY3VzZml0bmVzcy5jb22CEnd3dy5oYWlydG93ZXJzLmNvbYIed3d3LmhvdXN0
b25zdGVtY2VsbGNlbnRlcnMuY29tghJ3d3cuaHlkcm90YXhpcy5jb22CF3d3dy5p
bnN1cmViaWd0cnVja3MuY29tght3d3cuaW93YXN0ZW1jZWxsY2VudGVycy5jb22C
E3d3dy5pcGZzZG9tYWlucy5jb22CGHd3dy5qZXJzZXlkdWlsYXd5ZXJzLmNvbYIY
d3d3Lmp1bGlhbm5lcGhpbGxpcHMuY29tgg93d3cua3VpcGVycy5jb22CF3d3dy5s
YW5ndWFnZW1hc3RlcnMuY29tghZ3d3cubGlmZWFuZGZpdG5lc3MuY29tghN3d3cu
bG9jYXRvcm1hcHMuY29tghF3d3cubWFkZXN3aXNzLmNvbYITd3d3Lm1ham9ybGF1
Z2hzLmNvbYIWd3d3Lm1lbndpbnRlcmNvYXRzLmNvbYIQd3d3Lm1pbC1wYWtzLmNv
bYIgd3d3Lm1pc3Npc3NpcHBpc3BvcnRzZG9jdG9ycy5jb22CEnd3dy5tb2Nhbm5h
YmlzLmNvbYIed3d3Lm5ldmFkYXNwb3J0c3BoeXNpY2lhbnMuY29tgh53d3cubmV3
bWV4aWNvc3BvcnRzZG9jdG9ycy5jb22CEnd3dy5ueXNwZWFrZXJzLmNvbYIcd3d3
Lm9yZ2FuaWNmbGFubmVsc2hlZXRzLmNvbYIYd3d3LnBlcmVncmluZWZhbGNvbnMu
Y29tghx3d3cucGVyc29uYWxpemVkLW5hcGtpbnMuY29tghh3d3cucmF3ZGFpcnlw
cm9kdWN0cy5jb22CE3d3dy5ydW5uZXItcnVncy5jb22CGXd3dy5zbGlkZW91dHBs
YXRmb3Jtcy5jb22CG3d3dy5zdHBhdWxzcG9ydHNkb2N0b3JzLmNvbYIYd3d3LnN5
ZG5leXBlbnRob3VzZXMuY29tghJ3d3cudGhlcmVhc2lucy5jb22CFHd3dy50dWxz
YS1tb3ZlcnMuY29tghV3d3cudnRyYW5zbGF0aW9ucy5jb22CFHd3dy53ZWVkaW5n
dG9vbHMuY29tgh93d3cud3lvbWluZ3Nwb3J0c3BoeXNpY2lhbnMuY29tght3eW9t
aW5nc3BvcnRzcGh5c2ljaWFucy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL
KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDiaUuuJujpQAnohhu2O4PU
Puf+dIj7pI8okwGd3fHb/gAAAWwn/lVYAAAEAwBGMEQCIGW41xh3sbYrPfQaFYqt
tLHCexdvZxWtd+g/2nvTWwCAAiBgrsdE3aw9a5TFbg+DWcZ4tV/udgFwCYMV51/q
A8Zp6gB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbCf+VU0A
AAQDAEcwRQIhAIshngoqp4TPku3iDIe+NNeTXah8oqS2qzxuUL2Wd0/6AiBti5W6
fd1dnTq8jkglzwdT0KYulogmG6mIX0kcHaRaIjANBgkqhkiG9w0BAQsFAAOCAQEA
Ens8qOhrnJWVzTGOlBi4iz1hF1mkDdKEsta3sU+5XcrfvjyJqQCpDn16YPcX8/CO
lO1ssLYuxoGn11yBg5at7ZdNJpTV6TS1Dza2cKPnUYNJ6iWg5ys6rNXU0erUVmBx
bPUHPptHo5Spno0Zzp8xLyD+0E0g0zKsfHz1zMh1s27q8hg9pnK9YdAA6LL7YdkR
WqNdk8EUhw93htYY4WvtNscyik3lMac3YWNJ644XUJv2CN7fu5/D9GG8AddnqYAA
xnOLWusVLpuligBI4vftLegum3BAhI5AEGoRpj/xVbVSjTBnzZyoYK9g58AhY+DO
uhmuNd7WgYZHrx7XCQE2mQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3lQto27cPG8BnCanVcZ
5jdP0CItWHNBTaeB2bUseh0US/VlftSP3X/NQCGIv84NcYNcStfzmUX9/B2HTaOc
H1JWBwyjqGE3NkKCrF8caTHji7TTRI37XevJ3Xm6TRA/xg3YJoNK3Vy8BtztW0V4
uy2i2AClT6mmjzE851qD+8NQ/gweWU3S3KzGppJ7VlOKdg814cQ6YylZJ/SuyC+P
EEEqrc1BKOG8x4EE5uAqnT6AMDrXX7s3OlH1IejV90/ejfeSw/Z2/2URexBvCQBe
+16Ix1MmplM8qOHPIeyEim2YLb3YPKoLr2Szw3N+EfYIHasSqEqBjEVgDmGfp5ll
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346472221034098333482676103767297417096364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 06:17:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 06:17:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.allthingsfreshfarms.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24171339045446847593589095412295636802078390665532270819610985292493012387793496750110472785486533155800701985844954252667225271628932445813795866095018109087505364998398011528869347709964493810047616805715681332312708782979546221605955972084648494746917786124469063757900547015442761989637515881499979621728626125689387037357377343312274227472515660474694213493732351617158505677657180276172285009507370287653274053073189451419645402714375547924018593934031668906640682062097981131438422160106973738910340428937150297179782220546924993282967149481342771498223467684353290711349219504208094717658896091256314568205813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9601f5a171808f88c19f73e8673f062acaf88577
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allthingsfreshfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alonsocabinets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalarearugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btctrotters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budtenderfaqs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capewaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmereslippers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottedemers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticutsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalpos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermafillers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgcos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairavsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfieldindians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formfocusfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairtowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonstemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrotaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurebigtrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowastemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfsdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyduilawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juliannephillips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuipers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'languagemasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeandfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locatormaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeswiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majorlaughs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menwintercoats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mil-paks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mississippisportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mocannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevadasportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmexicosportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyspeakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicflannelsheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peregrinefalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalized-napkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawdairyproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runner-rugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slideoutplatforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneypenthouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereasins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulsa-movers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtranslations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedingtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allthingsfreshfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alonsocabinets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animalarearugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btctrotters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budtenderfaqs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campusmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capewaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmereslippers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlottedemers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecticutsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crystalpos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dermafillers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dgcos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairavsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfieldindians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.formfocusfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hairtowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houstonstemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrotaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insurebigtrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowastemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipfsdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseyduilawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juliannephillips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuipers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.languagemasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeandfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.locatormaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madeswiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.majorlaughs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menwintercoats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mil-paks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mississippisportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mocannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadasportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmexicosportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyspeakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicflannelsheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peregrinefalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalized-napkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawdairyproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runner-rugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slideoutplatforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydneypenthouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thereasins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulsa-movers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vtranslations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weedingtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingsportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingsportsphysicians.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c27fe55580000040300463044022065b8d71877b1b62b3df41a158aadb4b1c27b176f6715ad77e83fda7bd35b0080022060aec744ddac3d6b94c56e0f8359c678b55fee760170098315e75fea03c669ea00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c27fe554d00000403004730450221008b219e0a2aa784cf92ede20c87be34d7935da87ca2a4b6ab3c6e50bd96774ffa02206d8b95ba7ddd5d9d3abc8e4825cf0753d0a62e9688261ba9885f491c1da45a22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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