www.stpaulatty.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:d8:6a:29:13:ce:8c:54:6b:72:1f:10:4b:b1:be:aa:2b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stpaulatty.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:d8:6a:29:13:ce:8c:54:6b:72:1f:10:4b:b1:be:aa:2b
Serial Number (int): 315048853865572677621685620846672461343275
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:52:d9:66:08:d3:1a:0c:65:57:14:15:ca:6c:4f:78:db:6f:9a:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:4b:11:a1:a9:3a:6e:ef:2b:72:50:18:97:fa:2c:e1:09:06:e6:23
Fingerprint (sha256): aa:60:87:a1:87:e7:9d:1e:3b:a0:ab:50:b1:bf:53:32:b3:9e:2d:bf:cf:b3:a3:c5:4c:47:0c:b9:da:aa:64:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stpaulatty.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stpaulatty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3ddresscompany.com
alisoviejodentistry.com
anpanman.co
arizonastemcell.net
ayurvediccareandcure.co.in
bambooremovalnewjersey.net
blockchainofindustry.com
breakoutrealty.com
cabletie.net
campaign-archive1.co
cases-usa.net
coloradospringsstemcelltherapy.com
coopbank.net
dctitlecompany.com
deerticks.net
dogwalkingagency.com
dreamhouses.net
e-nanny.com
everett.menu
framedleaves.com
giftbasketsdelivery.com
gravity.net
highculturesociety.com
lisca.co
mellody.com
nerdbooks.net
newrockford.menu
onitsha.city
opensourcemovies.net
oronodentistry.com
pascalpdx.com
purelysilky.com
ramapodentistry.com
smartinquiry.com
smileypaws.fun
smileywinks.net
sportagility.com
sportsmedicinenewjersey.com
stlouissportstherapy.com
stpaulatty.com
subverse.tv
surrowly.com
teddybear.repair
tracyaviary.com
vacayo.co
vie.design
viewfinderphotography.com
wahpetondentistry.com
walkoffame.co
wondez.com
www.3ddresscompany.com
www.alisoviejodentistry.com
www.anpanman.co
www.arizonastemcell.net
www.ayurvediccareandcure.co.in
www.bambooremovalnewjersey.net
www.blockchainofindustry.com
www.breakoutrealty.com
www.cabletie.net
www.campaign-archive1.co
www.cases-usa.net
www.coloradospringsstemcelltherapy.com
www.coopbank.net
www.dctitlecompany.com
www.deerticks.net
www.dogwalkingagency.com
www.dreamhouses.net
www.e-nanny.com
www.everett.menu
www.framedleaves.com
www.giftbasketsdelivery.com
www.gravity.net
www.highculturesociety.com
www.lisca.co
www.mellody.com
www.nerdbooks.net
www.newrockford.menu
www.onitsha.city
www.opensourcemovies.net
www.oronodentistry.com
www.pascalpdx.com
www.purelysilky.com
www.ramapodentistry.com
www.smartinquiry.com
www.smileypaws.fun
www.smileywinks.net
www.sportagility.com
www.sportsmedicinenewjersey.com
www.stlouissportstherapy.com
www.stpaulatty.com
www.subverse.tv
www.surrowly.com
www.teddybear.repair
www.tracyaviary.com
www.vacayo.co
www.vie.design
www.viewfinderphotography.com
www.wahpetondentistry.com
www.walkoffame.co
www.wondez.com

Other certificates including the domain name stpaulatty.com

(limited to 100 certificates)
qualbot.com
www.vrvix.com
www.stpaulatty.com
www.sacodentistry.com
ibizaspirit.com
richmondca.net
television.mex.com
www.baseweight.com

Certificate

The complete raw certificate details for www.stpaulatty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0VV6pOWAOEh8TV8F63O
Fpcf/xK+3ixcWecSPrkI33ki8te5oK/SDvN2qo8a6yXgzHp+SWWKZriucYYi4izJ
F75Qel2d3lshe7kClMfgzuOl2jvflAUnupZeqOrKveSEL7hZN2p0K0A51ZLgcmQG
tXDlBp76epR4aGU4IX3BKFR4QBjvyIWdKoj/PP7ka2d958SR0fEjEagCwzj1KDWD
3J4vcTq46UL9a2iugv1yLvYoi23tJ2KsHng9KUxdYofGtpE0Cp/kxiAaYe+9SohP
zyiM64TS2wAiTC/yP5QHkEz546a8XmqeIidzCwa6wWg3z75Glp88mtooZDCEnJNz
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315048853865572677621685620846672461343275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 10:00:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 10:00:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stpaulatty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25155613352137720745246998427115908349593578564107347991138470492087350728979218684420930896417926491405295755294142122744843662958073795774729598917664947596562975632950862390933875736160446862136469889800643556494665211003235108541708479763332922555202465275261807347126366385350119271294874369662695502970225669820695297861073128202187350799070248195121627195210102938369078630851456960455680414956690321556250216604747548890314190804552052692894647625325423794810798731838922479250160639675847109294834220731421652350202505676450925783443254969738840646343335861329821639436063031537882729783438320016034370908929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a52d96608d31a0c65571415ca6c4f78db6f9acd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2064 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3ddresscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alisoviejodentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anpanman.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonastemcell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayurvediccareandcure.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambooremovalnewjersey.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainofindustry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakoutrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabletie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign-archive1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cases-usa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradospringsstemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctitlecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deerticks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogwalkingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamhouses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-nanny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everett.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framedleaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftbasketsdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highculturesociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisca.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mellody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerdbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newrockford.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onitsha.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensourcemovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oronodentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pascalpdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purelysilky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramapodentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartinquiry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smileypaws.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smileywinks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportagility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinenewjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouissportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulatty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subverse.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surrowly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teddybear.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracyaviary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacayo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vie.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewfinderphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahpetondentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkoffame.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wondez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3ddresscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alisoviejodentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anpanman.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonastemcell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ayurvediccareandcure.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bambooremovalnewjersey.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainofindustry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakoutrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabletie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campaign-archive1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cases-usa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradospringsstemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coopbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dctitlecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deerticks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogwalkingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamhouses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-nanny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everett.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.framedleaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giftbasketsdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gravity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highculturesociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisca.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mellody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nerdbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrockford.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onitsha.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opensourcemovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oronodentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pascalpdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purelysilky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramapodentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartinquiry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smileypaws.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smileywinks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportagility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinenewjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouissportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulatty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subverse.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surrowly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teddybear.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tracyaviary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacayo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vie.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewfinderphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahpetondentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkoffame.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wondez.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bf0245ffc000004030046304402202f66fe8ef5ccb1784c9affba09d361342aa3cd293d9de2cb40ce91bb7aac947302207b28a42153fdf7f8c7ef45b0b14c4cbbe201c066754dff3d9f14235140c38c4800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bf024601b0000040300483046022100c4efcfa960fb9f9410684d73c9a106c75619cd2cf4ba847d7a1d293f4c9514bb022100d1ba30068291a91358702e7a547b1a1ee379a547e7ebd20da51f20a1f56c819f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002eaca5fa282b47ad6f0761fa81d0bb36c70e01574552aae474f2d1a6771e2d82aa82e6b5fa14aca66350a5177c1dbf74bb6fdc36c50c6dce824310248876d6b7fc40859a4972ec9c7066ca29a0c3fd14fdc643f09d953ecadc860afab09083a1ee388fe058188af0125cc7ec6e95d0ca491c882a01cf892d184ac3e91d8a3422ba034fe6f1ce5d87977741dadae65191a18005268a05120ea27edf9a771d165b079375edd7dee8697f836674bbd9a0fef3a2c8cdc2dc55e8d4e648b6f71459531fbe5fcee70e73d480d7b3165841c24ab6c619b85dafcaf669756ea5bc6c62ecf9ffb7af5b3b1fa2066571c083699eae914698afab356d0f7b4894e5d97eee24