*.akja.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5c:b0:73:6b:6b:a1:18:cf:10:1a:e5:05:d5:a1:f6:df:04 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.akja.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5c:b0:73:6b:6b:a1:18:cf:10:1a:e5:05:d5:a1:f6:df:04
Serial Number (int): 379989664903909299982317287556396166340356
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:98:90:fb:89:85:81:44:ed:c9:d2:72:45:7c:f3:05:ea:9e:c3:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:75:21:96:06:df:49:f0:ab:30:f6:7c:36:1b:7b:83:de:3d:12:4c
Fingerprint (sha256): ab:52:a9:17:18:92:be:03:04:78:83:c4:5b:6c:33:54:17:c2:c6:ca:10:eb:3f:4e:01:e3:fe:92:0f:f8:c1:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.akja.ca

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.akja.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aguanko.com
*.akja.ca
*.avpto.com
*.benncreative.com
*.civicway.org
*.counselingdegreehub.com
*.dancingstarbedandbone.com
*.dianefenster.com
*.digitallego.net
*.digitalzoom-ny.com
*.djromeo.fm
*.dynamicshift.org
*.enthusiasticguesthouse.com
*.enthusiasticspiritsguesthouse.com
*.ex-morninglanders.com
*.fairfaxband.org
*.feedingdoctor.com
*.fultoncoogs.org
*.g-squaredhomes.com
*.highlands-preschool.org
*.houstonskindr.com
*.infinitedealofnothing.com
*.kathycampbell.com
*.maplehurstfarmweddings.com
*.melchiorbuildingco.com
*.morningland.com
*.muzylowski.com
*.nationalassholeday.com
*.nopanels.com
*.nvyw.org
*.paulineavery.com
*.penguinandowlacres.com
*.polishedbrassdesign.com
*.pools-patios.com
*.raeneedsbeer.com
*.romond.com
*.sfiop.org
*.soundingheart.com
*.stevenstumpf.com
*.stmarysatpenn.org
*.stuckinsydney.com
*.susannewmanphd.com
*.svstowatch.com
*.tapetology.com
*.tehinternetz.net
*.vantoureurope.com
*.winterblooms.net
*.workingholidayinfo.com
*.workingholidaytravelinsurance.com
aguanko.com
akja.ca
avpto.com
benncreative.com
civicway.org
counselingdegreehub.com
dancingstarbedandbone.com
dianefenster.com
digitallego.net
digitalzoom-ny.com
djromeo.fm
dynamicshift.org
enthusiasticguesthouse.com
enthusiasticspiritsguesthouse.com
ex-morninglanders.com
fairfaxband.org
feedingdoctor.com
fultoncoogs.org
g-squaredhomes.com
highlands-preschool.org
houstonskindr.com
infinitedealofnothing.com
kathycampbell.com
maplehurstfarmweddings.com
melchiorbuildingco.com
morningland.com
muzylowski.com
nationalassholeday.com
nopanels.com
nvyw.org
paulineavery.com
penguinandowlacres.com
polishedbrassdesign.com
pools-patios.com
raeneedsbeer.com
romond.com
sfiop.org
soundingheart.com
stevenstumpf.com
stmarysatpenn.org
stuckinsydney.com
susannewmanphd.com
svstowatch.com
tapetology.com
tehinternetz.net
vantoureurope.com
winterblooms.net
workingholidayinfo.com
workingholidaytravelinsurance.com

Other certificates including the domain name akja.ca

(limited to 100 certificates)
*.coldrockpm.com
customers.tigertech.net
*.akja.ca
customers.tigertech.net
*.anfieldhq.com
*.eatsleepbreatheinteriordesign.com
*.akja.ca
*.akja.ca
customers.tigertech.net
*.mailboxes4u.co.uk
*.smpace.com
*.coldrockpm.com
*.coldrockpm.com
customers.tigertech.net
customers.tigertech.net
web11.tigertechnologies.com
web11.tigertechnologies.com
*.thefeedingdoctor.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.wyriwyg.com
*.akja.ca
web11.tigertechnologies.com
*.akja.ca
web11.tigertechnologies.com
web11.tigertechnologies.com
*.coldrockpm.com
web11.tigertechnologies.com
web11.tigertechnologies.com
customers.tigertech.net

Certificate

The complete raw certificate details for *.akja.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCbMg44XXDZBbjYs43l
ZOc2i8k6RXZxtd9NBUURVWwvEVkOm6rCVVW5VP3LYZ1VRuSgKLn7+ihGlRG3oUGI
e57oASbOnXSVchkQHuDyskuAelVgMDe1BeBXa7CWPkfockglyIk1mAq5uj4CEV82
XqNLJ5H25M2nJAMlmnSLsRWP4exaaTCsMnx15XXJyFe1EXids5a/3AXJB574MeXc
effFh0hB2LYhJKoNskORVqhyguDdHWHDDj/jONi6zJ6EkkHUS/8LOzsbCh9GtEu+
voIOO2pvQ3AdssqqHpBNCYqWL+bNY++e+2ywzW0bHby3dKfz3D+/+DhBcModDk+o
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379989664903909299982317287556396166340356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 08:14:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-10 08:14:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.akja.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23898788053292798754256238358322725908472676863497141772531178051273468515256074757777413002785122028606792513688837370473450877156306577536917910441231456751513090585598705941342062466130801558155785241369603993388066416137599080198882047600520307408821496874076952355792489015258910329631767444441669889471999535148250813621784619068106488269517774770708888630235821423807330306502653535677644409816496175133926517669145651762798837005608000300881689155049496198595678543145774442883377445168467991986621230818807766231217930948372288633482736748974365373892739340944261628273273651776933430469262756849451428456609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e29890fb89858144edc9d272457cf305ea9ec3b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2004 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aguanko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akja.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avpto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benncreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.civicway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.counselingdegreehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dancingstarbedandbone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dianefenster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitallego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalzoom-ny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djromeo.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamicshift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enthusiasticguesthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enthusiasticspiritsguesthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ex-morninglanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairfaxband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feedingdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fultoncoogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g-squaredhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highlands-preschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonskindr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infinitedealofnothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathycampbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maplehurstfarmweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melchiorbuildingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morningland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muzylowski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalassholeday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nopanels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvyw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paulineavery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penguinandowlacres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polishedbrassdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pools-patios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raeneedsbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfiop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundingheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevenstumpf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stmarysatpenn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuckinsydney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.susannewmanphd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svstowatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapetology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tehinternetz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vantoureurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winterblooms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workingholidayinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workingholidaytravelinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aguanko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akja.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avpto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benncreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civicway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counselingdegreehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancingstarbedandbone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dianefenster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitallego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalzoom-ny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djromeo.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamicshift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enthusiasticguesthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enthusiasticspiritsguesthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex-morninglanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfaxband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedingdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fultoncoogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g-squaredhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlands-preschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonskindr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitedealofnothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathycampbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maplehurstfarmweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melchiorbuildingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muzylowski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalassholeday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nopanels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvyw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulineavery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penguinandowlacres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polishedbrassdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pools-patios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raeneedsbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfiop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundingheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenstumpf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysatpenn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuckinsydney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susannewmanphd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svstowatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapetology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehinternetz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantoureurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winterblooms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingholidayinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingholidaytravelinsurance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016797658b270000040300463044022063042c18098858ece6f6701ca728adcd23137b979bb32998dda56a44572c17270220498081f704a4ad230b303e63a39396f852938c2b0ab1fb0a8bdcdda3dce2ea8e00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016797658b2d0000040300483046022100a1482156e46d1abade28d53d784d07cfba377e1858a48be46d9612b7bc016923022100eea7878b5e30e6320f09faf15da5a6c7b060408f89fca4f3e5defddadfd737af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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