www.hedgeasset.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:f9:5f:8a:d3:b4:15:e0:99:c4:85:c7:3f:86:69:fb:05 was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hedgeasset.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:f9:5f:8a:d3:b4:15:e0:99:c4:85:c7:3f:86:69:fb:05
Serial Number (int): 288550638636932284758753003556167414840069
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:1e:2d:81:67:f8:7e:e6:92:6e:19:c5:1b:7f:a0:d2:1f:63:62:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:e3:39:0f:2d:d7:cf:fd:9f:9c:01:5a:59:f5:88:37:f6:22:c8:c0
Fingerprint (sha256): 97:fd:86:3b:2c:d5:5c:9c:71:e3:c6:49:09:17:0a:72:f4:d8:24:6f:1b:4c:3f:90:1a:1d:ca:1e:d2:3e:73:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hedgeasset.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hedgeasset.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agenceoffshoreasset.com
angellabasset.com
bankingasset.com
bankruptasset.com
chessboardset.com
curtainrodset.com
globalsustainabilitysecret.com
goldandsilversecret.com
hedgeasset.com
indiscret.com
marineasset.com
monacoboutiques.com
pensionasset.com
propertyinvestmentasset.com
solargameset.com
solarpowerset.com
spotssecret.com
sunpowerset.com
thesustainabilitysecret.com
tradebuildings.com
understandingasset.com
understandingtheasset.com
wasteinkcounterreset.com
www.agenceoffshoreasset.com
www.angellabasset.com
www.bankingasset.com
www.bankruptasset.com
www.chessboardset.com
www.curtainrodset.com
www.gamerantiques.com
www.globalsustainabilitysecret.com
www.goldandsilversecret.com
www.hedgeasset.com
www.indiscret.com
www.marineasset.com
www.monacoboutiques.com
www.pensionasset.com
www.propertyinvestmentasset.com
www.solargameset.com
www.solarpowerset.com
www.spotssecret.com
www.sunpowerset.com
www.thesustainabilitysecret.com
www.understandingasset.com
www.understandingtheasset.com
www.wasteinkcounterreset.com

Other certificates including the domain name hedgeasset.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hedgeasset.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJezCCCGOgAwIBAgISA0/5X4rTtBXgmcSFxz+GafsFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjgxMTQ2MzJaFw0x
OTAzMjgxMTQ2MzJaMB0xGzAZBgNVBAMTEnd3dy5oZWRnZWFzc2V0LmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALPaZfszxGdNl3B2YW7phZsKOGsP
3q//+PUb5aW9yYaREK1Jn+allxEut/XQwEWFUdbVIKOJsIE0D+QilQSwtnjTtwKe
vs+dCtE/c6V+RS8C9nwUNulTPmAPXIswe2wMTgikTOazYWw3McP3fO9GFH4B+I81
LN/HB6E9jUa++4LwbH74FNQR5Dvn+AWw1c/Ko35YEjctT7ELFQgpxCy8FCBnC7z+
RVJqVYSGJZM+VaLLt7ulsXmkx3lrMLprWPxOo3P7GowV50PHiS2S6dx+yT0ik2wa
KR7SyBeJF45vBxPJeEl7Wd4vawKiCZ3pEoXAD1wesn8StE92A6jWMr9vqo0CAwEA
AaOCBoYwggaCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUSx4tgWf4fuaSbhnFG3+g
0h9jYuowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBDoGA1UdEQSCBDEwggQtghdhZ2VuY2VvZmZzaG9yZWFzc2V0LmNv
bYIRYW5nZWxsYWJhc3NldC5jb22CEGJhbmtpbmdhc3NldC5jb22CEWJhbmtydXB0
YXNzZXQuY29tghFjaGVzc2JvYXJkc2V0LmNvbYIRY3VydGFpbnJvZHNldC5jb22C
Hmdsb2JhbHN1c3RhaW5hYmlsaXR5c2VjcmV0LmNvbYIXZ29sZGFuZHNpbHZlcnNl
Y3JldC5jb22CDmhlZGdlYXNzZXQuY29tgg1pbmRpc2NyZXQuY29tgg9tYXJpbmVh
c3NldC5jb22CE21vbmFjb2JvdXRpcXVlcy5jb22CEHBlbnNpb25hc3NldC5jb22C
G3Byb3BlcnR5aW52ZXN0bWVudGFzc2V0LmNvbYIQc29sYXJnYW1lc2V0LmNvbYIR
c29sYXJwb3dlcnNldC5jb22CD3Nwb3Rzc2VjcmV0LmNvbYIPc3VucG93ZXJzZXQu
Y29tght0aGVzdXN0YWluYWJpbGl0eXNlY3JldC5jb22CEnRyYWRlYnVpbGRpbmdz
LmNvbYIWdW5kZXJzdGFuZGluZ2Fzc2V0LmNvbYIZdW5kZXJzdGFuZGluZ3RoZWFz
c2V0LmNvbYIYd2FzdGVpbmtjb3VudGVycmVzZXQuY29tght3d3cuYWdlbmNlb2Zm
c2hvcmVhc3NldC5jb22CFXd3dy5hbmdlbGxhYmFzc2V0LmNvbYIUd3d3LmJhbmtp
bmdhc3NldC5jb22CFXd3dy5iYW5rcnVwdGFzc2V0LmNvbYIVd3d3LmNoZXNzYm9h
cmRzZXQuY29tghV3d3cuY3VydGFpbnJvZHNldC5jb22CFXd3dy5nYW1lcmFudGlx
dWVzLmNvbYIid3d3Lmdsb2JhbHN1c3RhaW5hYmlsaXR5c2VjcmV0LmNvbYIbd3d3
LmdvbGRhbmRzaWx2ZXJzZWNyZXQuY29tghJ3d3cuaGVkZ2Vhc3NldC5jb22CEXd3
dy5pbmRpc2NyZXQuY29tghN3d3cubWFyaW5lYXNzZXQuY29tghd3d3cubW9uYWNv
Ym91dGlxdWVzLmNvbYIUd3d3LnBlbnNpb25hc3NldC5jb22CH3d3dy5wcm9wZXJ0
eWludmVzdG1lbnRhc3NldC5jb22CFHd3dy5zb2xhcmdhbWVzZXQuY29tghV3d3cu
c29sYXJwb3dlcnNldC5jb22CE3d3dy5zcG90c3NlY3JldC5jb22CE3d3dy5zdW5w
b3dlcnNldC5jb22CH3d3dy50aGVzdXN0YWluYWJpbGl0eXNlY3JldC5jb22CGnd3
dy51bmRlcnN0YW5kaW5nYXNzZXQuY29tgh13d3cudW5kZXJzdGFuZGluZ3RoZWFz
c2V0LmNvbYIcd3d3Lndhc3RlaW5rY291bnRlcnJlc2V0LmNvbTBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AOJp
S64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABZ/TaF5AAAAQDAEcwRQIh
AP6zYqqS9Si7pKnSUesMWyMBsISjB8gGcJPmFjBVQR41AiBqnD/On9ZyWa1oR/gh
4YOMRc0+i/YfVcgc1u+2XQKK5wB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjix
x2hUS9iNAAABZ/TaGYQAAAQDAEcwRQIgd5SrIrf4Faj7u8R012Ys5t3+3CyRycaU
F7RjNr5Xnt8CIQCrzdDjvc50lFpw0BSsJ0hT8h52PCSvLXkyDAtt6S2AnzANBgkq
hkiG9w0BAQsFAAOCAQEAb7w6sR0l+sg5lqMTj+iB0Gd1D2JsMDQXnHgKdBkIX7gx
tBlcgEuJD/sgKO25DCUMpUAqkaxp5kV2QjZuvrIcC0b1+QxP8erYVLMtfIfEKinw
9tmKEmRVAV8y1DuuGiPc1Vo+Aiqz4LgLz2kBJWWd6HW66OFdvj83YeQDTXrxlLsh
cXH4G4e0vDYJmCVgn4N0OW0LVdRFGftD+275fVOOiWVHhd6joAbr7GjwmbjMQ44K
9dSuuwFI7W6DfRv2M8a053ETiknHFWc2gz58nJBuOWQxAapp6GhzuNpxN9En6Qvt
xFklp/H5jJobbYcU9ib/d6bpjkQYlbug2as2fHHSHw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9pl+zPEZ02XcHZhbumF
mwo4aw/er//49Rvlpb3JhpEQrUmf5qWXES639dDARYVR1tUgo4mwgTQP5CKVBLC2
eNO3Ap6+z50K0T9zpX5FLwL2fBQ26VM+YA9cizB7bAxOCKRM5rNhbDcxw/d870YU
fgH4jzUs38cHoT2NRr77gvBsfvgU1BHkO+f4BbDVz8qjflgSNy1PsQsVCCnELLwU
IGcLvP5FUmpVhIYlkz5Vosu3u6WxeaTHeWswumtY/E6jc/sajBXnQ8eJLZLp3H7J
PSKTbBopHtLIF4kXjm8HE8l4SXtZ3i9rAqIJnekShcAPXB6yfxK0T3YDqNYyv2+q
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288550638636932284758753003556167414840069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 11:46:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 11:46:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hedgeasset.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22704352836250797819200496798505395250190049962584141381029079519845991956665407824317559658566207007819429830983293567303454005847853249119607752407139147336159320587811210469623868322560202722075572301264805781625254391559116216040036289346143842223732994847709559696910854422958089970903422929053925305784119795444087737454715361947417652608248638363053282106501559921395300566706011970390706181251940995582420240202790139470772110549301227042313428421911522759395412449893392500740787215269032305892807740606604436755773530336013706698027237505499200796548827115502559294818050079001673971389397809335515697097357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b1e2d8167f87ee6926e19c51b7fa0d21f6362ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1073 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenceoffshoreasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angellabasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chessboardset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curtainrodset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsustainabilitysecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldandsilversecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedgeasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiscret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marineasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monacoboutiques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyinvestmentasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solargameset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpowerset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotssecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunpowerset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesustainabilitysecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradebuildings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'understandingasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'understandingtheasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasteinkcounterreset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agenceoffshoreasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angellabasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankingasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankruptasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chessboardset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curtainrodset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamerantiques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalsustainabilitysecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldandsilversecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hedgeasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiscret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monacoboutiques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pensionasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertyinvestmentasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solargameset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarpowerset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spotssecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunpowerset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesustainabilitysecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.understandingasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.understandingtheasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wasteinkcounterreset.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167f4da17900000040300473045022100feb362aa92f528bba4a9d251eb0c5b2301b084a307c8067093e6163055411e3502206a9c3fce9fd67259ad6847f821e1838c45cd3e8bf61f55c81cd6efb65d028ae700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167f4da1984000004030047304502207794ab22b7f815a8fbbbc474d7662ce6ddfedc2c91c9c69417b46336be579edf022100abcdd0e3bdce74945a70d014ac274853f21e763c24af2d79320c0b6de92d809f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006fbc3ab11d25fac83996a3138fe881d067750f626c3034179c780a7419085fb831b4195c804b890ffb2028edb90c250ca5402a91ac69e6457642366ebeb21c0b46f5f90c4ff1ead854b32d7c87c42a29f0f6d98a126455015f32d43bae1a23dcd55a3e022ab3e0b80bcf690125659de875bae8e15dbe3f3761e4034d7af194bb217171f81b87b4bc36099825609f8374396d0b55d44519fb43fb6ef97d538e89654785dea3a006ebec68f099b8cc438e0af5d4aebb0148ed6e837d1bf633c6b4e771138a49c7156736833e7c9c906e39643101aa69e86873b8da7137d127e90bedc45925a7f1f98c9a1b6d8714f626ff77a6e98e441895bba0d9ab367c71d21f