*.peaceandfreedom2006.org

Issued by R3

About this certificate

This digital certificate with serial number 03:17:b8:db:38:f2:44:f1:ba:79:3d:dd:22:36:1a:08:4f:04 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.peaceandfreedom2006.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:b8:db:38:f2:44:f1:ba:79:3d:dd:22:36:1a:08:4f:04
Serial Number (int): 269409068453708258592726834788799227645700
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:62:8e:4a:ca:1c:2b:83:e6:30:7c:a8:47:8b:1f:99:2a:87:3e:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:e1:2e:54:48:75:15:3b:d4:64:8e:4a:5b:fe:df:6a:dd:14:f8:ba
Fingerprint (sha256): 9d:68:9d:90:42:41:0a:c4:65:28:0d:f9:c4:aa:8d:11:cd:55:51:7c:35:66:87:07:eb:7d:aa:d6:b3:f7:20:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.peaceandfreedom2006.org

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.peaceandfreedom2006.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alfertlaw.com
*.avocationaldesignpdx.com
*.avocationalpdx.com
*.avomuse.com
*.bellingham.org
*.bellinghamfoundry.com
*.bermuda-associates.com
*.blessingsskincare.org
*.bluestarweldingllc.com
*.brionsgrille.com
*.codeforthemasses.com
*.cole-dalton.com
*.dcslearn.com
*.fiddleheadmontessori.com
*.fistful.net
*.fortpointos.org
*.greytunes.com
*.gwenettewritersinclair.com
*.hccporterville.org
*.heartlandleadershipgroup.com
*.highfiveproperties.com
*.holdingthehope.com
*.hunterswarehouse.net
*.jahabow.com
*.kruckeberg.org
*.lawsonroad.church
*.michaelgraycpa.com
*.paperbirchimpressions.com
*.pazylibertad.org
*.pdparker.com
*.peaceandfreedom2006.org
*.plinkyou.com
*.puriteam.com
*.renovaserv.com
*.sostaged.com
*.sparkysorcgaming.com
*.subtacdata.com
*.thefiddlehead.org
*.therese-honey.com
*.vibnetwork.org
*.wedtoberfest.com
*.whalewatchingnewport.com
*.womenshealthcoaching.com
alfertlaw.com
avocationaldesignpdx.com
avocationalpdx.com
avomuse.com
bellingham.org
bellinghamfoundry.com
bermuda-associates.com
blessingsskincare.org
bluestarweldingllc.com
brionsgrille.com
codeforthemasses.com
cole-dalton.com
dcslearn.com
fiddleheadmontessori.com
fistful.net
fortpointos.org
greytunes.com
gwenettewritersinclair.com
hccporterville.org
heartlandleadershipgroup.com
highfiveproperties.com
holdingthehope.com
hunterswarehouse.net
jahabow.com
kruckeberg.org
lawsonroad.church
michaelgraycpa.com
paperbirchimpressions.com
pazylibertad.org
pdparker.com
peaceandfreedom2006.org
plinkyou.com
puriteam.com
renovaserv.com
sostaged.com
sparkysorcgaming.com
subtacdata.com
thefiddlehead.org
therese-honey.com
vibnetwork.org
wedtoberfest.com
whalewatchingnewport.com
womenshealthcoaching.com

Other certificates including the domain name peaceandfreedom2006.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.peaceandfreedom2006.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTwnvkt/rqmfhW/RDKi
TTvztGYwkO+vyXku22t1UGmsIIBjI3cVSHes29R9wf/KW8oCCwyq5rVIuhH3Xj1x
f/jXfzfzzJS4jTTRH/xLnLpsX06FIpVyH1B/pYdMaxrak2CKIpqwsGe1MdHYrjU4
HtjBCuq06ENtt8zmsAxCIrNaTDz9rith3eH5/a8h9yRAxWMiEP3anE+hSz+zvnrg
ij889L/k1spC9Mt9WDLjpRmRMaJMNaOL9pTOk8EB9Rhj65vXVu7hQYC2Q+WRsCmQ
aEUrQpT3NKACG3+PoUkT9cVWEtqdPtguQUy/FYbChTqBxbP5OSiKt+X5Wf9hCgxg
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269409068453708258592726834788799227645700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-01 10:13:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-01 10:13:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.peaceandfreedom2006.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23380192069074614503612620979768095217869035430559388218061962942491291867392265171370480635328177553658739465501069779155343807323024149221317027269971930709543715521421254564678050088095582979177158131018338062458840209367653275980195928417508658144539519798900390463591961967938376976296565089334693223511074353502238375438695055715037080980567436863806769660639924960607743196958841225263150057929301532290720656333764666165514224570039064925391498828650352196824619627575999429345122099814529002106232392746438611204812758442748380855251104257855164582127131554903442061387902792975123832508456261641095340646649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5628e4aca1c2b83e6307ca8478b1f992a873ef1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alfertlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avocationaldesignpdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avocationalpdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avomuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellinghamfoundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bermuda-associates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blessingsskincare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluestarweldingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brionsgrille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codeforthemasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cole-dalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcslearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiddleheadmontessori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fistful.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortpointos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greytunes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwenettewritersinclair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hccporterville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heartlandleadershipgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highfiveproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holdingthehope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hunterswarehouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jahabow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kruckeberg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawsonroad.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaelgraycpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paperbirchimpressions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pazylibertad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdparker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peaceandfreedom2006.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plinkyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puriteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renovaserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sostaged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkysorcgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subtacdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefiddlehead.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therese-honey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vibnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wedtoberfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whalewatchingnewport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenshealthcoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfertlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avocationaldesignpdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avocationalpdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avomuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellingham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellinghamfoundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermuda-associates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessingsskincare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluestarweldingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brionsgrille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeforthemasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cole-dalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcslearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiddleheadmontessori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fistful.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortpointos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greytunes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwenettewritersinclair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hccporterville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartlandleadershipgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highfiveproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdingthehope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunterswarehouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahabow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kruckeberg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsonroad.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelgraycpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paperbirchimpressions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pazylibertad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdparker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaceandfreedom2006.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plinkyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puriteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovaserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sostaged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkysorcgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subtacdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefiddlehead.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therese-honey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedtoberfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whalewatchingnewport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenshealthcoaching.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000176bda71e12000004030047304502204fe73d03419b7ba2f07f8f4783fb7078cac8ad541800e392506a15ab9dde438d022100f150c5d21e42ef7da946b5996e652325a5853cbddb4efeddc4d6dd3e0f47b540007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176bda71e20000004030047304502206e177350ece66fb638eca39cac1bebbc8cab093613ebfecd892fa6818e4d3420022100f4b32cf8db5f0adbd4ca584654144e7305c0f045a95ed1f0be3cc7a7389398e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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