krietemeyer.com

Issued by R3

About this certificate

This digital certificate with serial number 04:38:96:52:15:a2:4e:9b:49:5d:d8:8a:8b:f6:31:17:bd:33 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=krietemeyer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:38:96:52:15:a2:4e:9b:49:5d:d8:8a:8b:f6:31:17:bd:33
Serial Number (int): 367704766681113569341973597248067294706995
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c3:e3:3b:63:97:6d:98:df:be:9a:4e:e6:db:56:e9:84:ee:37:2f:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:7a:7b:67:a3:31:b1:1c:ed:ad:b8:7e:fb:d3:4f:7e:b0:27:17:90
Fingerprint (sha256): 93:a2:85:9b:1f:69:19:08:17:7f:75:d9:7c:f7:7d:a6:e9:b5:6f:37:0b:e6:e9:d3:03:60:2d:48:5f:6e:e6:92

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate krietemeyer.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for krietemeyer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acidrefluxdiet.com
*.aflam.site
*.aibnbguestservices.com
*.assabah.com
*.avocato.com
*.bluecrossma.co
*.bolthangers.com
*.bradfordexchange.co
*.brendia.com
*.buhafta.com
*.carpette.com
*.confalonieri.com
*.crossfittshirts.com
*.cubiclefurniture.com
*.dafti.com.br
*.devdan.com
*.discinary.com
*.gandinroad.com
*.gigtcards.com
*.giletjaune.com
*.heioel24.de
*.hoveys.com
*.jcya.com
*.krietemeyer.com
*.lagunaseca.com
*.lesnomades.com
*.lisaowensmillerscholarship.com
*.luxuryspaaiin.com
*.mountinsidehosp.com
*.myclix.com
*.neworleansseo.com
*.noffish.com
*.northwesternmutusl.com
*.numpuz.com
*.organiccleaningproducts.com.au
*.piedmontpaper.com
*.premera.co
*.producto.net
*.shangpa.com
*.ssl-logg.com
*.talentoutlet.com
*.tbirdrestoration.com
*.tentdeals.com
*.tentshelters.com
*.villageartisanalsainteanne.com
*.visitbremen.com
*.wangkou.com
*.waterfromthesource.com
*.wimote.com
*.yeban.com
acidrefluxdiet.com
aflam.site
aibnbguestservices.com
assabah.com
avocato.com
bluecrossma.co
bolthangers.com
bradfordexchange.co
brendia.com
buhafta.com
carpette.com
confalonieri.com
crossfittshirts.com
cubiclefurniture.com
dafti.com.br
devdan.com
discinary.com
gandinroad.com
gigtcards.com
giletjaune.com
heioel24.de
hoveys.com
jcya.com
krietemeyer.com
lagunaseca.com
lesnomades.com
lisaowensmillerscholarship.com
luxuryspaaiin.com
mountinsidehosp.com
myclix.com
neworleansseo.com
noffish.com
northwesternmutusl.com
numpuz.com
organiccleaningproducts.com.au
piedmontpaper.com
premera.co
producto.net
shangpa.com
ssl-logg.com
talentoutlet.com
tbirdrestoration.com
tentdeals.com
tentshelters.com
villageartisanalsainteanne.com
visitbremen.com
wangkou.com
waterfromthesource.com
wimote.com
yeban.com

Other certificates including the domain name krietemeyer.com

(limited to 100 certificates)
cdsgrill.com
vipstand.io
krietemeyer.com
vipstand.io
krietemeyer.com
bolthangers.com
krietemeyer.com
krietemeyer.com
krietemeyer.com
www.absolutelygraphics.com
rectenna.com
kehlet.com
comwuso.me
wilusz.com

Certificate

The complete raw certificate details for krietemeyer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367704766681113569341973597248067294706995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 10:14:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 10:14:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'krietemeyer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749496417909171338467857634792035340025240808287153824035208565120122336635573871538060788219647648800445685159747645013974836670950431967026725677543356574404266224345132389370213128615949786216419483582875961334254272563403790197524676986644275057106017739162193533849324513349102037673821127096546224221439396112542601532571855528672527954278267969751243242526654868364147407651319506468599863628359028863970995604515664285082486786157208982785043517215450607098018061379995273215441949024885992844455519471884957434725449620445180193209558227699429305812922063099224288232914362591875144971358591522519093879987861807636586303354212847886596373994830839297571878924171051858337206688488823022143953129492294775680730602679413127171694913197377656078001936310164512653236440345440300591494820938324435583963434639118014301316725881070629118004798459730716325876743971033948942879738998830865449160174998278503207589797328411743433857368580452905351397725117213883825177698389116524380386973168020162288433035202542654747315124719021248402570058155152762828375616127634250164102522742188467738434792465842352289489169940591513548109506289907227609541538766050751054728224272391847872327525458666901886096031714175226268804098007837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3e33b63976d98dfbe9a4ee6db56e984ee372f24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1798 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acidrefluxdiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aflam.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aibnbguestservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assabah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avocato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluecrossma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bolthangers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bradfordexchange.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brendia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buhafta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carpette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.confalonieri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crossfittshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cubiclefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dafti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devdan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gandinroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigtcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giletjaune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heioel24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krietemeyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagunaseca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesnomades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lisaowensmillerscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxuryspaaiin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountinsidehosp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myclix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neworleansseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noffish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northwesternmutusl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.numpuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organiccleaningproducts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piedmontpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.producto.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shangpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssl-logg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talentoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbirdrestoration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tentdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tentshelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villageartisanalsainteanne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitbremen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wangkou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterfromthesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wimote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acidrefluxdiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflam.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aibnbguestservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assabah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avocato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluecrossma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolthangers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfordexchange.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brendia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buhafta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confalonieri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossfittshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubiclefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dafti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandinroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigtcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giletjaune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heioel24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krietemeyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagunaseca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesnomades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisaowensmillerscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryspaaiin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountinsidehosp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworleansseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noffish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwesternmutusl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numpuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organiccleaningproducts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'producto.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shangpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-logg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbirdrestoration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tentdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tentshelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageartisanalsainteanne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbremen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wangkou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfromthesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wimote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeban.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186f993ef1f00000403004730450220371642fc6a243b3c3848e6a8b1cd62c89feb6e04f99109729d36e3575dc45c0b022100fbf5bf0c519b38cd5cf90494335962016b8f5f82e1b446b439cb2e242f121648007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186f993ef4000000403004830460221009dd8760455eab237100ea9fc626cdabc704c85e2c596cdc0db2a62cc19679e2f022100c65d910a57571ff2de5fa4ab019b008f68bb5fbd440a13e7bca48187baacaad5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0026dda337982f79ad00b92669af6dea9553758e8a76acc0eb2e8ddd42d9cf5f8d7d49ac94a001c8f84d5fc566384c13c245f5c9e9a3949392c0ad7bd869068b40364310635305679b66116147d3e6b5edef7450e1857f6611779068b30029dc1584ce00adcd69ef8a0b473d8f1ef3181add52dc00408f5a325e9e2f73154a701c30011270a55dc7cfe87358994c58bfae722a48b60ad7335ae42cc2af67fc2948719f849d1c1411e79f1446587693fbdf17db96ca3b52e2a0cbbf8b23324208005a0bba91c5a502cbc4d121937a17e44c4963c8dce29986dcfe240aa2b4d0b274858fe4733156dd89a99abf6821354bf6fd6f84bd825fa8071580f36d5a9f4220