nuvaira.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:55:d6:a2:40:95:ec:82:e9:a5:b7:5d:5d:b3:1b:86:8a was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nuvaira.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:55:d6:a2:40:95:ec:82:e9:a5:b7:5d:5d:b3:1b:86:8a
Serial Number (int): 305007099583197664949150988396191561778826
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:66:fe:d2:b5:2a:ce:c8:5a:31:f1:02:09:44:0a:77:c1:8b:66:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:a5:e2:40:ae:e7:51:10:30:45:0a:55:16:ee:f0:60:a2:e7:3f:93
Fingerprint (sha256): af:d4:0c:ea:de:72:01:fc:83:4b:1c:84:a7:89:ad:5e:d2:ac:a0:90:b9:fe:b3:3f:9f:49:9e:7e:61:72:67:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nuvaira.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nuvaira.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3ducks.com
advertsuit.com
aheadcrypto.com
amnium.com
athenaactivewear.com
athenahomeloan.com
beyond-iot.com
biodynamicsoils.com
blessedhopejax.com
bluehorsestables.com
bugexpeller.com
callerauthentication.com
camionvolteo.com
cashxr.com
chocobasket.com
cinemagraphscreator.com
consbit.com
constituir.com
cortlandcompanies.com
curvecash.com
daytonseniorpictures.com
divinefruitbaskets.com
dropsupplement.com
eastbaycannabis.com
ebookcovercreator.com
ecoverimagecreator.com
energy-token.com
financialgym.org
floraladvisor.com
forgottenfruit.com
fortunkitchenandbar.com
fortunkitchenbar.com
getstensil.com
givemesteak.com
goodtelescope.com
gotojoseph.com
gpsforahappymarriage.com
hollywoodeyes.com
hrcompanion.com
icomeet.com
interpledge.com
iotapeak.com
jobsletters.com
joint-integrity.co.uk
karlgentlesforcongress.com
killwithkindness.com
lifestructuring.com
likemap.com
metext.com
minorleaguemom.com
newcouches.com
nicaraguamls.com
nitrogeninjection.com
nkid.org
nuvaira.org
odix.org
opslag-ruimte.com
orgranix.com
perimetrosvirtuales.com
polkacheck.com
portlandhalfmarathon.com
premiumtones.com
processingpork.com
rare-succulents.com
realforeclosures.com
realtorsandiego.com
rootsandstem.com
ruetors.com
sacredcafe.com
safflowerseedoil.com
seniorpicturesmason.com
seniorportraitswestchester.com
shaadsi.com
shadowmarketreport.com
sosv.org
squadtears.com
statpro.org
theinvestinggame.com
tontoken.org
topsoiltexas.com
tothebox.com
toursouthsudan.com
tremonttrust.com
ugot2bjoking.com
ultimatelasvegas.com
urdesigns.com
vinylads.com
waterreef.com
westchesterseniorportraits.com
wfkn.com
word-domains.com
worstchristmaslightdecorations.com
www.bonvegan.com
www.cheaterscatcher.com
www.crypt247.com
www.jobzbox.com
www.thenamery.com
yoloresto.com
z7h.com

Other certificates including the domain name nuvaira.org

(limited to 100 certificates)
papisgirls.ca
nuvaira.org
nuvaira.org
nuvaira.org
okeydokeykaraoke.ca

Certificate

The complete raw certificate details for nuvaira.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PqBEr6mgKOBlMm9+rJu
DBogs4aYoc2ewsCNNVDpF9fyU2lY0vtj1MjauqRc42CqY9S0ou42k95ly5P4f9sC
4ZuO145tjAMpJ3nIWYCdLSdD6mGdvaWqe4ydbgmGUAKYR6QlFmTl+Wl/kp0l+NDQ
ulxSPnraGIV77MlLxrXY4GDGrP+e7RD1Tkyh1TxbBs622P3vezdnTZEPxOCBeyxM
3jjULp13kBBjkV76YWoOuGWDjOJ83OOAmdaDK+/YV/1+X98mZd4nGUk/MTtjAi2d
k/kpEADqxhb2z3zYqL7LJEPi9Riq/TSsHGRM95XQ1BoDNUH/jqW0nsPy2sVOQ2Rr
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305007099583197664949150988396191561778826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 21:53:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-25 21:53:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nuvaira.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26886048873973530668321382113952671101934345935341169192443090905668239843828042548939838224460953821419819785319466368711449088934797169229778704931069173237168908365943211556449270332897651514769926982829364732335965254874177037150568466257606623162010350447872101665849035540089969329862583329999379921584330356892700616962781386745653742542316287903943151372788107867810567330182046516574394849520438840502656613156242181770183080680276367154671119649891461680599796640920658335560916342114057831289281281305493543920590808900152476142295623519164058406840098684130291105586249348220888312000701957459144696163307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2966fed2b52acec85a31f10209440a77c18b66da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1855 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3ducks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertsuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aheadcrypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenaactivewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenahomeloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyond-iot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biodynamicsoils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedhopejax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluehorsestables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugexpeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callerauthentication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camionvolteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocobasket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemagraphscreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constituir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortlandcompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curvecash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daytonseniorpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinefruitbaskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dropsupplement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastbaycannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebookcovercreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecoverimagecreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy-token.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialgym.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floraladvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgottenfruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortunkitchenandbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortunkitchenbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getstensil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givemesteak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotojoseph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpsforahappymarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywoodeyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrcompanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icomeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interpledge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotapeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsletters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joint-integrity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karlgentlesforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'killwithkindness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestructuring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'likemap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minorleaguemom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcouches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicaraguamls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitrogeninjection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvaira.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odix.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opslag-ruimte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgranix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perimetrosvirtuales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polkacheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandhalfmarathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumtones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processingpork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rare-succulents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realforeclosures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtorsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rootsandstem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruetors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safflowerseedoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniorpicturesmason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniorportraitswestchester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadowmarketreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squadtears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statpro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theinvestinggame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tontoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsoiltexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tothebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toursouthsudan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tremonttrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugot2bjoking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimatelasvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinylads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterreef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westchesterseniorportraits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfkn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'word-domains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worstchristmaslightdecorations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonvegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheaterscatcher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crypt247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobzbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenamery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoloresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z7h.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001711e339a110000040300473045022100c641eceaf392443e3961b0347e8e8300e77f99ad5dab63655f645ac37c75ca6702201b55e35e269283f5066d269e537d271a2bcadcebdf78d004b36b7bc787cb86dd00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001711e339a460000040300473045022029ac86314f232314556a891d72fd37854fe6992a0849c9df69e8b5ef57ae068a022100b6eeb6b1bb5a57fa6713a82d779c2eee4d23516f721d7c2054d45be3872d03b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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