www.canadasgta.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:5c:ff:b9:c5:3e:06:98:e5:76:65:6b:af:2e:46:5d:f9 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.canadasgta.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:5c:ff:b9:c5:3e:06:98:e5:76:65:6b:af:2e:46:5d:f9
Serial Number (int): 299231817302688968762724190609374454373881
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:04:99:50:3f:2b:a5:95:32:b0:c9:37:ea:1c:da:27:4e:72:2d:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:33:30:44:1d:79:8a:f3:8c:4a:d5:4b:61:16:84:e9:67:07:02:78
Fingerprint (sha256): 94:56:00:d8:31:79:69:0c:ee:2c:85:b1:bf:9e:e7:33:58:56:37:61:f7:a4:88:8f:49:b0:a3:98:b4:86:81:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.canadasgta.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.canadasgta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

480leaf.com
accelmate.com
americanbirthinjuryalliance.com
artesiana.com
authenticityopensdoors.org
battled.com
canadasgta.com
coastwineclub.com
cointocredit.uk
cowfree.org
delhipalacesc.com
displayscape.com
durascape.com
dynatrue.com
egyventure.com
getatmcard.com
handjolie.com
hnva.com
howtofiledivorce.com
ijza.com
jcpoa.com
jointpaingreenville.com
kellywallace.com
keywestdiscountcard.com
lapizzaitaliana.com
lawlessinc.com
leckma.com
master-guard.com
masterglaze.com
melbourne-plumbing.com
mochamate.com
neighborhoodloveorchestra.org
newmomzone.com
optisea.com
polarwind.com
pressionefiscale.com
razorpage.com
savannahsportsmed.com
smart-attendance.com
suicidetoserenity.blog
swimcore.com
tempesportsmed.com
terrorofscience.com
thespiceofmywife.com
www.480leaf.com
www.accelmate.com
www.americanbirthinjuryalliance.com
www.artesiana.com
www.authenticityopensdoors.org
www.battled.com
www.canadasgta.com
www.coastwineclub.com
www.cointocredit.uk
www.cowfree.org
www.delhipalacesc.com
www.displayscape.com
www.durascape.com
www.dynatrue.com
www.egyventure.com
www.getatmcard.com
www.handjolie.com
www.hnva.com
www.howtofiledivorce.com
www.ijza.com
www.jcpoa.com
www.jointpaingreenville.com
www.kellywallace.com
www.keywestdiscountcard.com
www.lapizzaitaliana.com
www.lawlessinc.com
www.leckma.com
www.master-guard.com
www.masterglaze.com
www.melbourne-plumbing.com
www.mochamate.com
www.neighborhoodloveorchestra.org
www.newmomzone.com
www.optisea.com
www.polarwind.com
www.pressionefiscale.com
www.razorpage.com
www.savannahsportsmed.com
www.smart-attendance.com
www.suicidetoserenity.blog
www.swimcore.com
www.tempesportsmed.com
www.terrorofscience.com
www.thespiceofmywife.com
www.yogastore.com
yogastore.com

Other certificates including the domain name canadasgta.com

(limited to 100 certificates)
www.hypechimp.com
localtarianlife.com
123conveyancing.de
www.albumpromotion.com
sameless.com
illcanna.com
www.medicalstemcell.org
vbda.org
empty-leg.com
suicidetoserenity.blog
hnva.com
www.canadasgta.com
internet.ink
www.bismarckregenerativemedicine.com
www.vbda.org
tempistiche.com
guardiavecchia.com
www.makeandpaint.com
www.surferscafe.com
denaliexpeditions.com
www.miafa.com
holdmymilkshake.com

Certificate

The complete raw certificate details for www.canadasgta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNMRf3gsQy36fbBI6MOS
TvHrDxB9eflZH31MSqwVuX5IBsFR8jdSF0dstvOQzulyfE3i5MmOMz02kye6ovFK
4wB3MYQTdWP3S8oKEkCYEA9kVwmGgqOZhMeM7qWadH/QIhCITypxjPzm1nD2x6jw
imQqugNTr1x4KuYMw7kZQozIb6k/xXrBx1qQdp7bKK1lTvlwy2aUGH9VNl+7QPs0
wvekSVrOolJTkDYvOcELa6SDd9nK8xRvu42U1l5Nsq6z0Ry9tj4Hsac33LiToKL2
Y29IibkLB7dvuEr2RuhHPweGia779coNyWFYafz+5TJkI50k3eQ5phL7jzHh5Pgi
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299231817302688968762724190609374454373881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 09:42:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 09:42:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.canadasgta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23331929796947954184245039843410187128469148966590799967052492213164591863402835114613732943485278992037323497094909949353037321227468192649297071511446834872982969851994019798317243880013652016718270931308553839876817727364969568068902966625106545855851969068164355839623817634168297066909478456763508046287618722009603788392582318398078087099192874564864955059006767241953248614820733202515895194501763016014284521575627113908716034603820349636903572832534678283337281942406746672657421270196712579666104802999680049443245504867713802464411607828682125162705283111667184691543715212363049138161168653329985699324449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d0499503f2ba59532b0c937ea1cda274e722d5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1808 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '480leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accelmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanbirthinjuryalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artesiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authenticityopensdoors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadasgta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastwineclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cointocredit.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowfree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delhipalacesc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'displayscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durascape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynatrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getatmcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handjolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtofiledivorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaingreenville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellywallace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestdiscountcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapizzaitaliana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawlessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leckma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterglaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbourne-plumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mochamate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhoodloveorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmomzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optisea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polarwind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressionefiscale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'razorpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savannahsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-attendance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suicidetoserenity.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swimcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempesportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrorofscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespiceofmywife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.480leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accelmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanbirthinjuryalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artesiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.authenticityopensdoors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.battled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadasgta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coastwineclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cointocredit.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cowfree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delhipalacesc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.displayscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durascape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynatrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egyventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getatmcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handjolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtofiledivorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ijza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcpoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaingreenville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellywallace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keywestdiscountcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapizzaitaliana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawlessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leckma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.master-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterglaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbourne-plumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mochamate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neighborhoodloveorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmomzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optisea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polarwind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pressionefiscale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.razorpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savannahsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smart-attendance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suicidetoserenity.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swimcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempesportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrorofscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespiceofmywife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yogastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogastore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016da5d06f38000004030047304502204d09c7a5bd9592f692561499291a6bcdd46fcfa83811c3ba227088e389c11b81022100a49e424e3f43150f933f649faefdcb3b403d09f23692c38d7020307ac8ce7d25007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016da5d0712e0000040300483046022100f51543c6cefbfe37d1eb0f6648a05a7b9a2091e854516bb56ea977105ebda9bd022100905c1a724505e7db90acfdd2cd62fbacd4803afc8010ec224ae2ef623b23021d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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