www.defenseminded.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8a:41:d5:b3:83:6f:45:f2:5a:ee:32:5e:17:6f:42:ce:d4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.defenseminded.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8a:41:d5:b3:83:6f:45:f2:5a:ee:32:5e:17:6f:42:ce:d4
Serial Number (int): 395495619782052027733944334819377358753492
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:fc:95:0b:c8:52:dd:09:56:0c:89:4a:73:05:ef:1b:54:56:c5:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:ff:4c:47:2e:99:1e:50:0e:7f:18:01:80:0c:1c:2b:cb:a3:cd:27
Fingerprint (sha256): a3:ff:ec:ff:64:68:1b:cd:e4:0f:32:17:9d:9d:b6:47:85:6e:41:02:9b:b4:5b:95:32:c1:74:f7:27:7b:5f:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.defenseminded.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.defenseminded.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

215canna.com
292884.com
813canna.com
aiiob.com
answersingenesis.bible
capincrouse.bible
champagne.cool
chewablekamagra.com
defenseminded.com
detroitstemcell.org
deutsche.mortgage
duvsa.com
eckoarts.org
edoceramic.com
geekqc.com
gotno.life
h1bcanada.com
happycowcreamyandtea.com
hava.cab
johndrevniok.ca
keroack.org
ketofitmeals.org
licuala.com
losangelespediatric.com
magicmanes.org
matthew5-11and12.com
missioneighty-5.com
navymom.org
pacella.com
petfind.org
postnewsera.com
prpcalifornia.org
psychika.com
rohaniduniya.com
selfridingcab.com
slashnyc.com
sportsmedicinenorthdakota.com
stemcellcalifornia.org
stemcellgermany.org
steviacureslyme.org
sublinha.org
tacosamerica.com
texasstemcellclinic.com
umpfen.co.za
velina.com
vzonuf.nl
watercooledpc.com
wikimeaks.org
www.215canna.com
www.292884.com
www.813canna.com
www.aiiob.com
www.answersingenesis.bible
www.capincrouse.bible
www.champagne.cool
www.chewablekamagra.com
www.defenseminded.com
www.detroitstemcell.org
www.deutsche.mortgage
www.duvsa.com
www.eckoarts.org
www.edoceramic.com
www.geekqc.com
www.gotno.life
www.h1bcanada.com
www.happycowcreamyandtea.com
www.hava.cab
www.johndrevniok.ca
www.keroack.org
www.ketofitmeals.org
www.licuala.com
www.losangelespediatric.com
www.magicmanes.org
www.matthew5-11and12.com
www.missioneighty-5.com
www.navymom.org
www.pacella.com
www.petfind.org
www.postnewsera.com
www.prpcalifornia.org
www.psychika.com
www.rohaniduniya.com
www.selfridingcab.com
www.slashnyc.com
www.sportsmedicinenorthdakota.com
www.stemcellcalifornia.org
www.stemcellgermany.org
www.steviacureslyme.org
www.sublinha.org
www.tacosamerica.com
www.texasstemcellclinic.com
www.umpfen.co.za
www.velina.com
www.vzonuf.nl
www.watercooledpc.com
www.wikimeaks.org
www.xn--mraniye-m2a.com
www.zmappvaccine.org
xn--mraniye-m2a.com
zmappvaccine.org

Other certificates including the domain name defenseminded.com

(limited to 100 certificates)
www.stuffedanimal.world
www.glyphenome.com
www.duramagic.com
sylcon.com
gamblingma.com
www.defenseminded.com
smashsubscribetwice.com
naturallynutritiousfoods.ca
defenseminded.com
livingluxxe.com

Certificate

The complete raw certificate details for www.defenseminded.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rMwv2KB6hvdDBavwWLy
24UYsWz/aaw5W2aHYcXtoZ5hLhau/1c6vBAtW0yyT/vdasgREX75Wo/pAyQSVMJB
mA1b6qGWCowpwhYTKK6hgqgiG8opWKFuxx4nDJYkfimRvSOAxtxjAYU78AmDrbbk
ZVrxjyun+Ti28dd5bQDayJm3rruNC2ZaycifKKiE+lh5vtjird9uB4LKgONdx8UN
tBhQrmzx/GQR9bF7sshlGPGIbkpUkw5o4BdDXygjDN4azmnYwZMG9JmGiGadUV9A
SEjy30iPcT6WUrtfdGNYqiOFR8IoNVXVxHq12udbSIEc/k4jCa5GtCKfEQvQ/Fuv
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395495619782052027733944334819377358753492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 20:49:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 20:49:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.defenseminded.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26598406132422524199459791465136970141512805913424852578567013694240508160087376746577270797975177766298513682951489075774098208842245227896778859379673973791659234199906973454717960973964231714701769777410988587983927400229984285429170984323668708854040360433990806681815480330062724195153655719943701016979211024412584829868146262780646006856654279089004875091174980828950028612919822204631539143815372812317728496337186942978942214158503560050568177572386604581043921692955601053310798894535579873664629653723475367298650342961743754372260594661260226779744754826635118611997378019213435742979343776437063384805373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0fc950bc852dd09560c894a7305ef1b5456c533
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '215canna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '292884.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '813canna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiiob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answersingenesis.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capincrouse.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champagne.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewablekamagra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defenseminded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroitstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche.mortgage'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eckoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edoceramic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geekqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotno.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1bcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happycowcreamyandtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hava.cab'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johndrevniok.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keroack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketofitmeals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licuala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangelespediatric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicmanes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthew5-11and12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missioneighty-5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navymom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petfind.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postnewsera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpcalifornia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rohaniduniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfridingcab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slashnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinenorthdakota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellcalifornia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellgermany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steviacureslyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sublinha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacosamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umpfen.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzonuf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watercooledpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikimeaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.215canna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.292884.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.813canna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiiob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.answersingenesis.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capincrouse.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champagne.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chewablekamagra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defenseminded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detroitstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutsche.mortgage'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eckoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edoceramic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geekqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotno.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.h1bcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happycowcreamyandtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hava.cab'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johndrevniok.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keroack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ketofitmeals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licuala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losangelespediatric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmanes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matthew5-11and12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missioneighty-5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navymom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petfind.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postnewsera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpcalifornia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psychika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rohaniduniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selfridingcab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slashnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinenorthdakota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellcalifornia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellgermany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steviacureslyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sublinha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tacosamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umpfen.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vzonuf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watercooledpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wikimeaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--mraniye-m2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zmappvaccine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mraniye-m2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmappvaccine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dd16607d70000040300473045022039ef3e8f605524815406419b3649d735923e4d7d4dd482d7fd54346987b9df3e022100d73bb59e9d6f4e5a31a2cf8eb1ac4d671427e2e4ae7ba4600ed8f16aadff19520075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd166099a0000040300463044022024901e8b77b1b542147e3efe58bb69ce25a2c3dd3f54f2a2780b80b3958dc5d0022027443a39fc553289696b6ebb05e433c370fff65697b4b2b67f49b44b62c49a53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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