www.bestalltime1.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:22:21:58:57:30:e3:06:15:01:e5:62:d9:0b:10:83:b8 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bestalltime1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:22:21:58:57:30:e3:06:15:01:e5:62:d9:0b:10:83:b8
Serial Number (int): 298132720312155137778348815965589043446712
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:8c:84:d0:6f:81:31:e1:ff:e6:39:5c:2d:f7:7f:5d:d3:64:1f:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:27:3a:fb:9f:6f:1c:1b:c6:8b:8d:e9:8d:20:e1:87:e9:bf:3c:15
Fingerprint (sha256): 9a:ad:77:b8:bf:b1:d4:af:72:e4:0c:a1:69:0e:2a:40:e4:34:30:57:ef:74:b3:d3:02:0e:fb:a3:8b:b0:5e:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bestalltime1.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bestalltime1.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bim.cad-deutschland.de
eng.ktartconcert.hu
eng.villanyati.hu
membership.thrivemost.com
www.affordablerestorationsolutions.com
www.alfajormardeplata.com
www.astaclic.com
www.ayannaalexis.com
www.ayurwell.in
www.barnabastask.org
www.baxvgo.nl
www.bestalltime1.com
www.bluedanubefilmfestival.hu
www.bossincorporated.org
www.cavanfryer.co.uk
www.cbarenterprize.org
www.coape.pt
www.colibri.nl
www.computerland.mn
www.con-freight.com
www.convis.mn
www.de-fond-en-comble.fr
www.digitalmarketingstrategy.eu
www.elsolancszem.hu
www.enolaj.hu
www.eorssy.hu
www.erichornerinteriors.com
www.ernst-architect.nl
www.esthersproject.org
www.eventallgroup.com
www.firmadejonghe.be
www.friedrichbendt.tk
www.grafischontwerpzaak.nl
www.harmoniasziget.hu
www.heks.hu
www.ingepanneels.com
www.jessharrisphotography.com
www.jg-pi.com
www.jirehghana.com
www.jirehmfl.com.gh
www.jitsghana.com
www.johnnyavila.com
www.junkcarspittsburgh.com
www.karmacare.in
www.keepkellycross.com
www.kelciejeanphotography.com
www.keurkost.nl
www.khalifaexecutivesuites.com
www.konyhabutorkeszites.co
www.kozutielsosegely.hu
www.ktartconcert.hu
www.laptoprepairs.hu
www.lotsandlushflowers.com
www.massivedjservices.com
www.mercyketurahapparel.com
www.miasanchez.tk
www.mideservices.com
www.motivaciosnyelvsuli.hu
www.mylestoneevents.com
www.myzhopp.com
www.netwell.mn
www.nonprofitkonyveles.hu
www.olivelife.in
www.overtonconsultants.com
www.passprime.com
www.perfectbabybump.com
www.pilipili.ch
www.pittsburghdentalequipment.com
www.plaicestation.co.uk
www.purpleboat.ml
www.ricardozambrano.com
www.rishinair.in
www.safetytalk.ca
www.salsticio.com
www.sarah-steiner.com
www.sinergy.com.br
www.sittingprettyeventdecor.co.uk
www.sociallyace.com
www.solarwohnen.de
www.southsidefilmfest.org
www.sunaelart.ch
www.tastytreatsbytammy.com
www.theblackrosellc.com
www.thombutor.hu
www.villanyati.hu
www.vincenzoromano.info
www.vistaome.ga

Other certificates including the domain name bestalltime1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bestalltime1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kWd4ZirlWQF1swXhYdL
5PA3Qrjpo5Xx1IoB4NQOGgrZwqhQcniuiFZnx9EtQ9ExXbzkOigzfEl4enpiU0wa
xuhf/9m/er6PDp3jW/NU8N0U8wYOZSBZh1RW4acoYe9dRtFy5JUI914SETx+MqVB
iU01rOqorQ0BbwFdGHP5539cT4HBQKrmaTP2I/2876UPu63ocAUhZ+imcZQQ5nnt
PFCIHCzlZKvl1wgQAyskhyb7Zm9ZxXJTRQ9qhlMFwhQ5QiKWQTVs13YqY8Be8kTM
i5yQ4VUE9ENyZJXdwucIvzXFXtRUwe17TvrTywMLUTpaovAOxX/eYANd6PUK8Ix/
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298132720312155137778348815965589043446712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 23:12:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 23:12:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bestalltime1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29574092647923737106467324737088835332055171810659406096914461785535537002874362187518873908739338701321345846635742993051090968924319950273322503353913638064385513262742562026472420119474341886231282025874459907640541388663018298038639552107125823339158388619039521936950988079081839599405108353204630840679012883309149171634457651688544275039872962237793980412523904919782050452739229014757314268426407547301059080120677797352776953653815329570491804407205336955350230570192826469939984737226846232079288793169588364424146600647383180118618366900920376018023889505073364621333324260816252917044175488549846281649983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							038c84d06f8131e1ffe6395c2df77f5dd3641fc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1983 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bim.cad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.ktartconcert.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.villanyati.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.thrivemost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affordablerestorationsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfajormardeplata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astaclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ayannaalexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ayurwell.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barnabastask.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baxvgo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestalltime1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluedanubefilmfestival.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bossincorporated.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cavanfryer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbarenterprize.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coape.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colibri.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computerland.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.con-freight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.convis.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.de-fond-en-comble.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalmarketingstrategy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsolancszem.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enolaj.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eorssy.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erichornerinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ernst-architect.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esthersproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventallgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firmadejonghe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friedrichbendt.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grafischontwerpzaak.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harmoniasziget.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heks.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingepanneels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jessharrisphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jg-pi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jirehghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jirehmfl.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jitsghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnnyavila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.junkcarspittsburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karmacare.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepkellycross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelciejeanphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurkost.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khalifaexecutivesuites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konyhabutorkeszites.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kozutielsosegely.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktartconcert.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laptoprepairs.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotsandlushflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massivedjservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercyketurahapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miasanchez.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mideservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motivaciosnyelvsuli.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mylestoneevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myzhopp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netwell.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonprofitkonyveles.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olivelife.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overtonconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectbabybump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilipili.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pittsburghdentalequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plaicestation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purpleboat.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricardozambrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rishinair.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safetytalk.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salsticio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarah-steiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinergy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingprettyeventdecor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sociallyace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarwohnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southsidefilmfest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunaelart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tastytreatsbytammy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theblackrosellc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thombutor.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villanyati.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vincenzoromano.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vistaome.ga'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c5f1f27a9000004030048304602210090f5908f87596764da318c61ea36f68ed983599c21f5d145c3fcc159481487190221009caa3c07b86395df25c9abfcf88d0674d2130288beb90ba28b31837722ed2cf2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c5f1f27c50000040300473045022100d20f8439e4031c20231804bc57fd4a2fabf64c77dad25f363cbb7fa102d9c62202207fd359dbdb19779381836f19036bfbb383dd239aeaf9ca74a21a3697460b6c9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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