*.borisbrenman.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:52:e1:e1:9f:79:ec:ca:7a:af:0a:12:37:2d:1f:0a:90:8d was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.borisbrenman.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:e1:e1:9f:79:ec:ca:7a:af:0a:12:37:2d:1f:0a:90:8d
Serial Number (int): 376652545614965734887644690443669686882445
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:56:0e:18:88:28:ad:5b:41:6f:5a:86:5e:76:ab:06:5e:fb:d6:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:b4:17:36:6f:8e:40:ad:86:ea:31:c7:ef:d1:45:0a:dd:05:e9:9a
Fingerprint (sha256): 9f:63:e2:e3:21:7c:6d:92:49:79:3d:c5:c7:aa:af:f9:5d:ed:67:17:44:ba:64:eb:65:da:6a:14:d1:31:6f:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.borisbrenman.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.borisbrenman.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4lowercrescent.com
*.ablecpr.com
*.alexandrarubinstein.com
*.annessdesign.com
*.archonhq.com
*.badfiddler.com
*.borisbrenman.com
*.childrenloverobots.org
*.delabarrepublishing.com
*.delplatochiropractic.com
*.desegur.com
*.edchristman.com
*.extralargeblues.com
*.gscreative.com
*.highpassmedia.com
*.jamesgodwinart.com
*.jnj8084.com
*.judyleavitt.com
*.katherinefu.com
*.kerrandjones.com
*.maileohye.com
*.margaretmcquiggan.com
*.mindybenowitz.com
*.novelwritingschool.com
*.oddjobhandyman.net
*.scenepublique.net
*.skydogcreative.com
*.sonomahomesforsale.net
*.sonomalistingsearch.com
*.sonomalistingupdates.com
*.spazcosoft.com
*.thelusciousway.com
*.trimetronews.com
*.ulsterproperties.com
*.ulsterproperties.net
*.waychuang.com
*.williampowers.com
*.winecountryhomesonline.net
*.xtel.biz
4lowercrescent.com
ablecpr.com
alexandrarubinstein.com
annessdesign.com
archonhq.com
badfiddler.com
borisbrenman.com
childrenloverobots.org
delabarrepublishing.com
delplatochiropractic.com
desegur.com
edchristman.com
extralargeblues.com
gscreative.com
highpassmedia.com
jamesgodwinart.com
jnj8084.com
judyleavitt.com
katherinefu.com
kerrandjones.com
maileohye.com
margaretmcquiggan.com
mindybenowitz.com
novelwritingschool.com
oddjobhandyman.net
scenepublique.net
skydogcreative.com
sonomahomesforsale.net
sonomalistingsearch.com
sonomalistingupdates.com
spazcosoft.com
thelusciousway.com
trimetronews.com
ulsterproperties.com
ulsterproperties.net
waychuang.com
williampowers.com
winecountryhomesonline.net
xtel.biz

Other certificates including the domain name borisbrenman.com

(limited to 100 certificates)
*.swiftriver-comics.com
web01.tigertech.net
*.swiftriver-comics.com
customers.tigertech.net
customers.tigertech.net
borisbrenman.com
customers.tigertech.net
customers.tigertech.net
web01.tigertech.net
*.borisbrenman.com
*.vivianleecosmetics.com
*.borisbrenman.com
*.swiftriver-comics.com
*.swiftriver-comics.com
web01.tigertech.net
web01.tigertech.net
web01.tigertech.net
*.skighostzombie.com
customers.tigertech.net
*.swiftriver-comics.com
web01.tigertech.net
*.swiftriver-comics.com
customers.tigertech.net
*.swiftriver-comics.com
*.swiftriver-comics.com
web01.tigertech.net
*.borisbrenman.com
*.swiftriver-comics.com
borisbrenman.com
customers.tigertech.net
*.swiftriver-comics.com

Certificate

The complete raw certificate details for *.borisbrenman.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCptvK27f5W/1YFjUStP
2ECnka0yxCFAWSpbjbiv3aq2OF2M3tbHbXJVOf0s+TjQ4g+m2mEppEGc7+c7Kkeb
QXBBxZZF8tN2f1s+AiEfeyz/lhAua90t66B+nztdviKXtBYY8mmx02FWOhbjkggx
7pFY66OMSEOhKdGJN2q2HQ4x12qWNkooBmHQVUPFZBivVnq9yZL+C4L1FE+GoVdl
8YQaYhSur06qtBWPinoJAvt/dkvQQH6j3CEe+j8vG4LrjKATOdPFhmLiTQdqxFPl
tZc92oHbIN+g/s5uC9FhiX3qECPBXVE/DZr/Jhd+/p/t9p+gtkUs5fNBkdpFhZ/u
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376652545614965734887644690443669686882445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 08:12:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 08:12:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.borisbrenman.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22238864026186085240048205943669403278374061637541217142917048212721818675333225915551572169148945417031495400912976160846746954162237130469891260416929479182185415557183123656115685344180904942896881967160179040354601710685744025239791705657940880262394329456627992568538350220093004649522948924485691956906735586150442004841055712346877587155239871942527863076240349654023529086297425744412259603090254642870394343983085312255097103006189604238153379215637316999933783232918836538893372758022646779618169173862261277554353617897380482963314759509430293044477763844591695757720923677865464631465178523719589708164731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20560e188828ad5b416f5a865e76ab065efbd62b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4lowercrescent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ablecpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexandrarubinstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annessdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.archonhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badfiddler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borisbrenman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrenloverobots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delabarrepublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delplatochiropractic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desegur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edchristman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extralargeblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gscreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highpassmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamesgodwinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jnj8084.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.judyleavitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katherinefu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kerrandjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maileohye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margaretmcquiggan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindybenowitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novelwritingschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oddjobhandyman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scenepublique.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skydogcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonomahomesforsale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonomalistingsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonomalistingupdates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spazcosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelusciousway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trimetronews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulsterproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulsterproperties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waychuang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.williampowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winecountryhomesonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xtel.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4lowercrescent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablecpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandrarubinstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annessdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archonhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badfiddler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borisbrenman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrenloverobots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delabarrepublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delplatochiropractic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desegur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edchristman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extralargeblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gscreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highpassmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesgodwinart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnj8084.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judyleavitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katherinefu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerrandjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maileohye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaretmcquiggan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindybenowitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novelwritingschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oddjobhandyman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scenepublique.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skydogcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomahomesforsale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomalistingsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomalistingupdates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spazcosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelusciousway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimetronews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulsterproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulsterproperties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waychuang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williampowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winecountryhomesonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtel.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f7f46cd2c0000040300473045022006be70c18fd8a1e6deb9b7db26642eb3594d701f3e4d051e53f25c15a555661f02210088d31d7425235f78a5e3482f65ac977c53d44939de8f55cd5328841861cb8862007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7f46cd280000040300463044022012714dba196437e6a3fc37b915ff221f3c30ea3dcb718998300ee315480b80e5022040ce207694cd18aebbef4c2877b76381e163f050317a6ceaeeae12959e24ba7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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