www.fittocook.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:2f:f6:af:7e:d5:23:cf:8c:8c:e1:8b:db:da:7d:4d:a1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fittocook.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:2f:f6:af:7e:d5:23:cf:8c:8c:e1:8b:db:da:7d:4d:a1
Serial Number (int): 310741555579116300471141935431496893287841
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:ae:97:23:a0:42:0c:f5:af:15:cb:7c:b4:16:07:a5:4e:2b:ad:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:6b:e8:0e:d3:1c:b1:10:93:e3:0f:16:75:8e:1d:27:50:b5:92:ed
Fingerprint (sha256): 96:3d:76:c4:40:e7:44:14:da:07:37:f0:8d:10:b9:b2:b8:58:99:66:d6:53:8e:b7:2c:45:df:78:f9:a0:1c:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fittocook.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fittocook.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquaalkaline.com
bathroom-lighting.com
bellinghamautoinsurance.com
bulldozersuk.com
bulletinabible.com
celticmania.com
chadlowe.com
coastbicycle.com
cookingrecipesonline.com
davesstuff.com
duraflush.com
dynastrength.com
etxk.com
exa-online.com
fittocook.com
followonformula.com
gawth.com
hava.bid
havit.cash
hempbud.com
hudson-mfg.com
iarctic.com
info-consulting.com
keywestdiscountcard.com
la-baie.com
madisonsportsmedicine.com
marinewrapping.com
medicalinterpreting.com
melaniesouth.com
milwaukeestemcell.org
nathanangel.com
opticleanse.com
organicintelligence.com
organicsleepingmask.com
paddlesport-superstore.com
pemconsulting.com
prosoak.com
prpflorida.org
roofingandguttering.com
rubberdyne.com
satoverse.org
sharji.com
snorable.com
snowlace.com
sportsbling.com
sportsmedicinecincinnati.com
stateoftheartfilmfund.com
theartgalleryinc.com
tollbank.com
www.aquaalkaline.com
www.bathroom-lighting.com
www.bellinghamautoinsurance.com
www.bulldozersuk.com
www.bulletinabible.com
www.celticmania.com
www.chadlowe.com
www.coastbicycle.com
www.cookingrecipesonline.com
www.davesstuff.com
www.duraflush.com
www.dynastrength.com
www.etxk.com
www.exa-online.com
www.fittocook.com
www.followonformula.com
www.gawth.com
www.hava.bid
www.havit.cash
www.hempbud.com
www.hudson-mfg.com
www.iarctic.com
www.info-consulting.com
www.keywestdiscountcard.com
www.la-baie.com
www.madisonsportsmedicine.com
www.marinewrapping.com
www.medicalinterpreting.com
www.melaniesouth.com
www.milwaukeestemcell.org
www.nathanangel.com
www.opticleanse.com
www.organicintelligence.com
www.organicsleepingmask.com
www.paddlesport-superstore.com
www.pemconsulting.com
www.prosoak.com
www.prpflorida.org
www.roofingandguttering.com
www.rubberdyne.com
www.satoverse.org
www.sharji.com
www.snorable.com
www.snowlace.com
www.sportsbling.com
www.sportsmedicinecincinnati.com
www.stateoftheartfilmfund.com
www.theartgalleryinc.com
www.tollbank.com
www.your.wedding
your.wedding

Other certificates including the domain name fittocook.com

(limited to 100 certificates)
prosoak.com
exterso.com
www.portlandstemcellclinics.com
truckphoto.com
poisonoakpowershield.com
www.desisti.com
salaryo.org
www.newyorkoutpost.com
jetbing.com
www.guitarguy.store
arredonegozi.com
docxfile.com
www.fittocook.com
shantiweinberg.com
owgr.org
fittocook.com
agilebull.com
www.mvchem.com
www.organicreisling.com
forexrobotok.com
www.chicagometalmarket.com

Certificate

The complete raw certificate details for www.fittocook.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUWpLIYGgpInOjJ3pBS7
L2RQKc0Z8ZBWmZtC3UMBUWFhMjkn1WUWU0Gh8yVPQVBMVh5XAIG08Wv0RH+SQvO4
WhjXngedqgA4ZJz3wkSOrPxVHEPyd056atkkmUlVeN/vsy9DX8eOrNtK6n2PqRBx
42ZbpNQB+LC6HcMOS1WBXgRMxv2NdDCQnoh5Zx+67mUFm7Q3KfO0xdjxQSMIMI0C
QNs4/Hl7VYwvdzKan+Qtm0oZrGnDcwfDhYKHgK3pBr/vf32CqNYbSCKuiZoPgAQp
4ql6voLoVUV+YkpwIqMkoOYA/v08aMqmagpHrFg4OSVZ3y0ZkpdvT7la+Etc2tz9
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310741555579116300471141935431496893287841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 06:09:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 06:09:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fittocook.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25408250336505328622472632916912968372037749715315353549219875940010285450180740393486735700443194115657168172397345223039938295091561309011131964638848700750308669318829392859387455472108811301111863254746792218272790270434948477901882628752648015364044373602687735406607459379470981567543393685166068232726107807622771441555391733078667649686320444312158543640723338581648481654169327321093570466651367041680448419944631392860439104724407536349342340901836338992809712157389433125059518365556601123639666550585452347611233030559665484853158115197119355343759728740258843409269995786662158773566129432930605189627237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94ae9723a0420cf5af15cb7cb41607a54e2bad14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2046 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaalkaline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroom-lighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellinghamautoinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulldozersuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulletinabible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celticmania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastbicycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookingrecipesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davesstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duraflush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynastrength.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etxk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exa-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fittocook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'followonformula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gawth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hava.bid'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havit.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempbud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudson-mfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iarctic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestdiscountcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-baie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinewrapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melaniesouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milwaukeestemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nathanangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticleanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicsleepingmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paddlesport-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pemconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosoak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofingandguttering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubberdyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satoverse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snorable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowlace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinecincinnati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateoftheartfilmfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartgalleryinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tollbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquaalkaline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bathroom-lighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellinghamautoinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulldozersuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulletinabible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celticmania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coastbicycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookingrecipesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davesstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duraflush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynastrength.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etxk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exa-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fittocook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.followonformula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gawth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hava.bid'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havit.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hempbud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudson-mfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iarctic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keywestdiscountcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.la-baie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinewrapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicalinterpreting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melaniesouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milwaukeestemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nathanangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opticleanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicsleepingmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paddlesport-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pemconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prosoak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roofingandguttering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rubberdyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satoverse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snorable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowlace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsbling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinecincinnati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stateoftheartfilmfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartgalleryinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tollbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.your.wedding'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.wedding'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c5b7647d10000040300473045022100e8745d0a35bc21d91484c8e283e45ce1f2c6b1b2f8b8f55934266020574e916902205c49da04c3f5814bf306f91e511537f65f93b15be24659e7dd01448c2388d63500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c5b7647e0000004030048304602210083911a552dd1e06d3df0dacc8deeda738782e8487a4504c569aa7ef93631154f022100a2b0417e93f3b2d39f1a72ddc09b7a44d0065dce25f21b3fc072d968dcc51ca2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0022137fe8a937853403f510d4d46d43f8e435f04009b5e405fac992e03757e5e7081f3f7bb7d6a4e54e67525bb131ba4410438bf147a37c8c333784251885caa0885820dae552a1ec14bf537f795977642185a4ecf9075ba0bdd38d302475486160c944336d0a0aea1308d5661b972b51c70a429d5a8640763081943999b9b6af30cdd003fbc9672306b1cc466a3fbf048efdd2a7fe348ea807c5c8f1aa9b0cf8f62ff1f134edc386450117a58c9f504830a8dc104875d71f225c8c648a74aeeabb38f878c04637dd3fdae41c6dbf50e195f76defcc0350a2886442d3f092922ad373ebdaa50e054901ef50f4adf4ee2d8b1bb23eb10923aa2bcb8fecc8ae5f26