*.gafarmlink.org

Issued by R3

About this certificate

This digital certificate with serial number 04:72:c4:e7:15:94:0b:50:5d:f0:48:34:61:98:dd:65:6c:43 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.gafarmlink.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:72:c4:e7:15:94:0b:50:5d:f0:48:34:61:98:dd:65:6c:43
Serial Number (int): 387503062101436007699173949193991947119683
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:ce:8f:30:5b:e9:ec:7e:3e:d5:4f:01:b1:48:0e:fe:e8:64:72:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:e3:d2:d0:e0:6f:8b:c0:93:65:0b:47:98:86:e9:75:08:a6:6a:8c
Fingerprint (sha256): a1:55:39:27:30:05:33:2a:72:b1:1a:bb:14:50:5f:4b:4e:bc:49:b9:a6:2f:b0:26:ce:92:b3:e2:c3:2d:3c:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.gafarmlink.org

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gafarmlink.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.andrewjimenez.com
*.catlalou.com
*.clandestineceltic.com
*.creativeinteriorsanddesigns.com
*.davidlm.com
*.design-interaction.com
*.designingabalancedlife.com
*.e-sistemedia.com
*.formenor.org
*.gafarmlink.org
*.get-money.com
*.heartlandchorale.org
*.iacmsp.org
*.justinshaulis.com
*.kathrynadamskupunihi.com
*.kathrynkupunihi.com
*.keolakupunihi.com
*.kupunihi.com
*.loveincde.org
*.markkupunihi.com
*.maubc.org
*.melaniejdrake.com
*.mypricelesslife.com
*.ourslovakroots.com
*.podcastpath.com
*.pooplog.app
*.radiantconceptsinc.com
*.randomwerks.com
*.rrcrossing.com
*.serenawellen.com
*.telfordcarpetcleaning.com
*.theboardroompcb.com
*.themuseumspaandlasercenter.com
*.thenordicwoman.com
*.tinyteacups.org
*.trader-china.com
*.trudyshomemade.com
*.vanessafoxnude.com
*.weareteamzero.org
andrewjimenez.com
catlalou.com
clandestineceltic.com
creativeinteriorsanddesigns.com
davidlm.com
design-interaction.com
designingabalancedlife.com
e-sistemedia.com
formenor.org
gafarmlink.org
get-money.com
heartlandchorale.org
iacmsp.org
justinshaulis.com
kathrynadamskupunihi.com
kathrynkupunihi.com
keolakupunihi.com
kupunihi.com
loveincde.org
markkupunihi.com
maubc.org
melaniejdrake.com
mypricelesslife.com
ourslovakroots.com
podcastpath.com
pooplog.app
radiantconceptsinc.com
randomwerks.com
rrcrossing.com
serenawellen.com
telfordcarpetcleaning.com
theboardroompcb.com
themuseumspaandlasercenter.com
thenordicwoman.com
tinyteacups.org
trader-china.com
trudyshomemade.com
vanessafoxnude.com
weareteamzero.org

Other certificates including the domain name gafarmlink.org

(limited to 100 certificates)
*.footballshouts.com
*.hardisonwood.com
*.arkofthecovenantchurch.com
*.pro-techsprinklerservices.com
*.systemadikdemo.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.smokes4less.com
customers.tigertech.net
*.shadowdiver.com
*.homeswish.com
*.smokes4less.com
customers.tigertech.net
*.sabprelaunch.com
*.artbyjohnhawkins.com
*.decorateyourspace.net
*.gafarmlink.org
*.arkofthecovenantchurch.com
*.smokes4less.com
*.washogs.org
customers.tigertech.net
*.wwaynewoodsjr.com
customers.tigertech.net
*.sabprelaunch.com

Certificate

The complete raw certificate details for *.gafarmlink.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIMl0FtLx47EXo+KEckt
GXQ/7dwhuqIuuOMQCJzjg47j6N1xMplskh6Ivv61qKEAmKUNl6QpaVyLP0+kBIsz
0U+CdkCLGCVm/W2n7szjMaom6qIiT4pXB28+fvV8L3xraSQiZnybSeRLDTzchVVn
J3/DYvcduqxxBxz3kuMYf4wOd7mP4pheuM7jJ44tZNXVp5g+86yUiLiddY0rGGdM
4sJd/JQDoX30It3+Sx0Jz/BOiASYTOwUBP2bA94N/GN8eSh8SNPfCvTQXibNVBl6
uBQ3U56Z8AE7d7YB8Ws1tk11BTVDApwzd6Avg0TaUDu4xHlJguFhvdPV8nBOsHhh
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387503062101436007699173949193991947119683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-20 08:13:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-18 08:13:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gafarmlink.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22787566240281949703942443086969753301532029145293066864520651119763239547269085179473501432193622934951821850647270340691174237415281812382376706890598418019983798268666664182966933969721456203610709786605731528204417390870432943198868787011605830221578767783923513184910039712233398706757531708605352312122799865147084687469201865976541077650749090178243395229993368163489983890595327618091057125162238578256716791906540547405490921327380991774555010067289025343902670281311805267012288625787437078702704837662168059098105135261299987940000470341622358774423236871613333400281436879806113021436191954728252434047371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01ce8f305be9ec7e3ed54f01b1480efee86472a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1588 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andrewjimenez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catlalou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clandestineceltic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativeinteriorsanddesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davidlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.design-interaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designingabalancedlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-sistemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formenor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gafarmlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.get-money.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heartlandchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iacmsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justinshaulis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathrynadamskupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathrynkupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keolakupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loveincde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markkupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maubc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melaniejdrake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypricelesslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourslovakroots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podcastpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pooplog.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiantconceptsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randomwerks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrcrossing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serenawellen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telfordcarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theboardroompcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themuseumspaandlasercenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thenordicwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinyteacups.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trader-china.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trudyshomemade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanessafoxnude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weareteamzero.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewjimenez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catlalou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clandestineceltic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativeinteriorsanddesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-interaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designingabalancedlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-sistemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formenor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gafarmlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get-money.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartlandchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iacmsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justinshaulis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathrynadamskupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathrynkupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keolakupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveincde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markkupunihi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maubc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melaniejdrake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypricelesslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourslovakroots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcastpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pooplog.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiantconceptsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randomwerks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrcrossing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serenawellen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telfordcarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theboardroompcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themuseumspaandlasercenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenordicwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyteacups.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trader-china.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trudyshomemade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanessafoxnude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weareteamzero.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179890d8d140000040300483046022100c3f0e431b808a71576264c7f0c485c23c597be537a0ec1320716454d0b5b92b6022100a3cccd27a80d613d98581fe2a37923672736072f8b14978420c124a7283c21440076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000179890d8d500000040300473045022100d0e01ae92cf02533961085243035fbea662007b70e935e5e4668a95c493d682f02202f36d027ceaa917efbb8e637be6844e67925ad8cb368c89e6dd3604916cc1009
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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