www.hoffmayer.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:10:03:58:2a:59:c0:8a:39:eb:79:12:ed:8d:a0:8f:17 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hoffmayer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:10:03:58:2a:59:c0:8a:39:eb:79:12:ed:8d:a0:8f:17
Serial Number (int): 271226331449018494518091480495872817532695
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:50:d7:d5:a7:1c:b0:64:ec:de:52:94:f9:c8:f5:f9:07:68:af:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:67:a0:d9:a0:73:2d:22:04:36:f8:5d:aa:97:95:9c:d7:19:5d:a7
Fingerprint (sha256): a8:95:72:f2:16:79:b6:8d:46:00:12:7a:d4:b3:9e:3a:5e:9d:66:ed:cb:cc:f6:5a:3a:74:bb:26:1c:2f:a2:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hoffmayer.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hoffmayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dexterior.com
aibrewedbeer.com
arkansasstemcelldoctor.com
autoserviceandrepair.com
aviationtechnicalservices.com
bankapprovedcrypto.com
bedroom-ideas.com
bitcoinsidor.com
carolinaprp.com
creixer.com
desmotivacionesdeamor.com
display-boards.com
hoffmayer.com
jackofarttrades.com
judithtarr.com
kansascityprp.com
micromakeover.com
mobilevideocards.com
networktrafficanalyzer.com
nuceramics.com
ny-auto.com
oklahomastemcellclinics.com
oklahomastemcelltreatmentcenter.com
onlinecasinobrands.com
packingmaster.com
pavermaster.com
peermaster.com
personalizeddogcollar.com
regaldrygoods.com
safe-step.com
sandiegostemcelldoctor.com
smileyvip.com
smirkkids.com
sportsmedicinerochester.com
stevierichards.com
storybookherbs.com
suissepro.com
swiftcleaningservices.com
thecoffees.com
threeomegas.com
ticketgrazer.com
topmodelsbykorntaylor.com
traincorp.com
tucsonsportsdoctor.com
uncommoncountstwo.com
vitaminco-op.com
vorr.com
web-rep.com
worldclimbs.com
www.3dexterior.com
www.aibrewedbeer.com
www.arkansasstemcelldoctor.com
www.autoserviceandrepair.com
www.aviationtechnicalservices.com
www.bankapprovedcrypto.com
www.bedroom-ideas.com
www.bitcoinsidor.com
www.carolinaprp.com
www.creixer.com
www.desmotivacionesdeamor.com
www.display-boards.com
www.hoffmayer.com
www.jackofarttrades.com
www.judithtarr.com
www.kansascityprp.com
www.micromakeover.com
www.mobilevideocards.com
www.networktrafficanalyzer.com
www.nuceramics.com
www.ny-auto.com
www.oklahomastemcellclinics.com
www.oklahomastemcelltreatmentcenter.com
www.onlinecasinobrands.com
www.packingmaster.com
www.pavermaster.com
www.peermaster.com
www.personalizeddogcollar.com
www.regaldrygoods.com
www.safe-step.com
www.sandiegostemcelldoctor.com
www.smileyvip.com
www.smirkkids.com
www.sportsmedicinerochester.com
www.stevierichards.com
www.storybookherbs.com
www.suissepro.com
www.swiftcleaningservices.com
www.thecoffees.com
www.threeomegas.com
www.ticketgrazer.com
www.topmodelsbykorntaylor.com
www.traincorp.com
www.tucsonsportsdoctor.com
www.uncommoncountstwo.com
www.vitaminco-op.com
www.vorr.com
www.web-rep.com
www.worldclimbs.com
www.x4predator.com
x4predator.com

Other certificates including the domain name hoffmayer.com

(limited to 100 certificates)
rapidcityjointpain.com
surreyroofer.com
queen-comforter.com
proadsubmitter.com
xristmas.com
hollistar.com
18590.com
viacamp.com
www.rogue-river.com
www.personalizeddogcollar.com
worldwarvr.com
www.phptester.com
www.millennialapartments.com
bunnyfashion.com
araration.com
cleanyourscreen.com
www.gainesvillesportsdoctor.com
www.bearsurvivor.com
www.dronetennis.com
www.rogue-river.com
www.hoffmayer.com
hoffmayer.com
hoffmayer.com
www.browbasics.com
oysterbaydental.com
gamblingpics.com

Certificate

The complete raw certificate details for www.hoffmayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42U048ouQP1wUMDpjmx7
Wqy54ZJZ3Fffq3jcn32IObnRjq0MtNQUx34HDzDewJftf/QKgSvm2Bd28BsgQFb+
HyjgMvwTOfed0W83HqMHQIaL3kzpQ5vvSa3iZ0daiCtvihC8pmzNh4/3ito7lXtc
nV6RboXC7QJmmxZrMqVSTlFPY3JtBBrjLP6H70kc4OPl+uLemAUa7AYlb7I89nk/
epbZsDG0wKtBfQJXGibSzeRp6u0VNGSjY0Kt5fCSvLLM8JRJdBA6WpYvIF77WuSb
YhEnmzFsWKLJp9W3ws3QOD3qqc1GTNwouZlSCfxDWPVdZkC5TrVFUPPUWW1reutW
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271226331449018494518091480495872817532695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 01:16:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 01:16:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hoffmayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28706002062201036644326819536238485611275259357512092079824078837851179766191455219233343622301646078513543891754406580927712784925277469679663640986278968417714834870402263465806720337266277091305795917790426932603077066044985008722910800194166392429144827452224524515656684398285339717720967165089796910413118221000520026278444435613102399981549245307365724947318028903699495031589932571536321339420330325100663579477053496555150412753377488401234628985505733965334600053093942257032449862342696320224625099559066126863433031184605193920478199261229838806790286886166275378419916141028144106993162050766302331229813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5850d7d5a71cb064ecde5294f9c8f5f90768af21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dexterior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aibrewedbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoserviceandrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviationtechnicalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankapprovedcrypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedroom-ideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinsidor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinaprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creixer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmotivacionesdeamor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'display-boards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoffmayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackofarttrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judithtarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansascityprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micromakeover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilevideocards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networktrafficanalyzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuceramics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ny-auto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomastemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomastemcelltreatmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecasinobrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packingmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavermaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peermaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalizeddogcollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regaldrygoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safe-step.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegostemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smileyvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smirkkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinerochester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevierichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybookherbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suissepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swiftcleaningservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecoffees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threeomegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketgrazer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmodelsbykorntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traincorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucsonsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncommoncountstwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminco-op.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-rep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldclimbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dexterior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aibrewedbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansasstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoserviceandrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviationtechnicalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankapprovedcrypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedroom-ideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinsidor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carolinaprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creixer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desmotivacionesdeamor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.display-boards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoffmayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackofarttrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judithtarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansascityprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.micromakeover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobilevideocards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.networktrafficanalyzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuceramics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ny-auto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomastemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomastemcelltreatmentcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecasinobrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.packingmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pavermaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peermaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalizeddogcollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regaldrygoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safe-step.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandiegostemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smileyvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smirkkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinerochester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevierichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storybookherbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suissepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swiftcleaningservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecoffees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threeomegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticketgrazer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topmodelsbykorntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traincorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tucsonsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncommoncountstwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminco-op.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web-rep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldclimbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.x4predator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x4predator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c26ea155c00000403004730450220379e0997fb5c925c50c94d3a89e651997f83fe06a92fe21d4320502a74b0d285022100dcbc11b57c3d32ad03ae6ec36740a56db151b2049b78cf359f5566a80942a877007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c26ea15590000040300473045022031cbbcca296d5ebf6d0aea58d9c3d8d2e46b56702e7f21449652e1fa8c7c2350022100c629237cd90b8f5ea889855d2921812681a8627cf3c032f4003dc99604d42abd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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