www.healthynextstep.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c4:9d:2b:99:e3:89:a2:55:41:3e:93:a0:35:8c:6b:d5:3f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.healthynextstep.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:9d:2b:99:e3:89:a2:55:41:3e:93:a0:35:8c:6b:d5:3f
Serial Number (int): 415353402828884132159327525461083651036479
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:31:ef:f3:88:6a:ae:7a:18:ca:6d:ab:04:9c:ae:44:e0:b3:d0:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:cb:6e:8a:3c:6e:7b:a0:17:af:8d:3c:6a:58:48:cc:8c:d8:47:b5
Fingerprint (sha256): b0:5f:b8:15:83:ca:ec:f2:10:02:72:65:b8:50:b9:31:dd:81:95:70:d2:53:ec:5d:12:40:df:c7:78:9a:84:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.healthynextstep.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.healthynextstep.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4dbikes.com
alexy.co
allerganbiocelllitigation.com
anshad.com
armorofearth.com
austinflamenco.com
bancopay.co
biometrics.co
birdirc.com
bithand.co
ciswalters.com
clodius.com
collectibleplayingcards.com
coloradospringsstemcellclinic.com
diya.co
dubailawyers.co
ehunk.com
etxk.com
f20.co
fidweb.com
fresnosportsmedicine.com
goalfinity.com
greenfilmfestival.com
gripy.co
hardwallets.co
healthynextstep.com
iekx.com
internetofxxx.com
la-baie.com
lynxarc.co
maranodinapoli.co
megger.co
ohioprobate.co
onlinesell.co
onofrio.co
organicperch.com
p20.co
poisonivycure.co
promoteify.com
rentbyecash.com
sea-horizon.co
selfdefenceforwomenindia.in
stemcellseattle.com
thcvweightloss.com
thisisitlyrics.com
ujgcc.com
vehiclesuspension.com
wikina.com
www.4dbikes.com
www.alexy.co
www.allerganbiocelllitigation.com
www.anshad.com
www.armorofearth.com
www.austinflamenco.com
www.bancopay.co
www.biometrics.co
www.birdirc.com
www.bithand.co
www.ciswalters.com
www.clodius.com
www.collectibleplayingcards.com
www.coloradospringsstemcellclinic.com
www.diya.co
www.dubailawyers.co
www.ehunk.com
www.etxk.com
www.f20.co
www.fidweb.com
www.fresnosportsmedicine.com
www.goalfinity.com
www.greenfilmfestival.com
www.gripy.co
www.hardwallets.co
www.healthynextstep.com
www.iekx.com
www.internetofxxx.com
www.la-baie.com
www.lynxarc.co
www.maranodinapoli.co
www.megger.co
www.ohioprobate.co
www.onlinesell.co
www.onofrio.co
www.organicperch.com
www.p20.co
www.poisonivycure.co
www.promoteify.com
www.rentbyecash.com
www.sea-horizon.co
www.selfdefenceforwomenindia.in
www.stemcellseattle.com
www.thcvweightloss.com
www.thisisitlyrics.com
www.ujgcc.com
www.vehiclesuspension.com
www.wikina.com
www.xn--len-rna9r.com
www.yourwish.co
xn--len-rna9r.com
yourwish.co

Other certificates including the domain name healthynextstep.com

(limited to 100 certificates)
www.creaminteen.com
greatsaver.com
www.keywesttaxis.com
seaadventures.us
redcarpetgroup.com
kevinkelleher.com
709.me
driftrccar.com
poisonivy.club
www.dkyco.com
custom-tackle.com
www.gasman.co
www.xstrokes.com
cmmssystem.com
deemed.ca
ziphemp.com
cincinnaticarrental.com
www.acerolls.com
www.vvacations.com
enviroswift.com
cedarrapidsmovers.com
devilsdung.com
www.healthynextstep.com
ziphemp.com
www.organic-hemp.com
denversportsphysicians.com
pegsystem.com
illuminationpro.com
gamerpcshop.com
www.marketinghorn.com

Certificate

The complete raw certificate details for www.healthynextstep.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9dyjz1ZyB5idhpnxPI
0C9Sich8WbtF0p2gJofbc4LTvaWXV0y1cI2uDX1xmdakY4gSj78JeVha0D7mcz8I
nuj9gLz6X1dyUbMWc67mljZoCv0k1gomhsua5IDQijIHvpTSfvKQANRYyuhVeOtU
uTvEpWZuItVL4Zj8nPmwx2Y8tAtQ83qJFQns6LPbp9HNFqeXezpgat1GD2njm3e4
Hir8jYJkYOnSy68bmjRithA3okfnExa3Ez+V+daGpHdJMJ/akM/ocAqKvOQAci/k
ESSMT8sR8eiGfnKDgSir7JZGN9diW/Ss/7CcmVf2hgg/ahs2LBx4sKlw4U0yxAN1
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415353402828884132159327525461083651036479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 14:32:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 14:32:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.healthynextstep.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23361663856781836748245341296260312305406554015737989598291826038387361103902540206465792890065411846400275817278354036773793589064351396623429252643060598843165950198669859251836850077485619160077426024361163963201197205040279880026086506246130931344420192902257698359866005406480872921703136700688023154368151848746021902855611983351792783044763243628072683696389544824872047254534506572514996504968181059385400804408992824122885275218627871693962941894009709604090241456077655265254404556930111834062673391405502745693489390456049790808888192757365702268063881575698181446188228062613769210574700866239041812788521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8531eff3886aae7a18ca6dab049cae44e0b3d0b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1838 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allerganbiocelllitigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anshad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armorofearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinflamenco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancopay.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biometrics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdirc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bithand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciswalters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clodius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectibleplayingcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradospringsstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diya.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubailawyers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etxk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f20.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goalfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfilmfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gripy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardwallets.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthynextstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iekx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetofxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-baie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynxarc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maranodinapoli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megger.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohioprobate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinesell.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onofrio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicperch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p20.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivycure.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promoteify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentbyecash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea-horizon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfdefenceforwomenindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellseattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thcvweightloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisitlyrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujgcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiclesuspension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allerganbiocelllitigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anshad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armorofearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.austinflamenco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bancopay.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biometrics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birdirc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bithand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciswalters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clodius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collectibleplayingcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradospringsstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diya.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubailawyers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ehunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etxk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f20.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fidweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fresnosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goalfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenfilmfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gripy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hardwallets.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthynextstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iekx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetofxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.la-baie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynxarc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maranodinapoli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megger.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohioprobate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinesell.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onofrio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicperch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p20.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivycure.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promoteify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentbyecash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sea-horizon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selfdefenceforwomenindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellseattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thcvweightloss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thisisitlyrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ujgcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vehiclesuspension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wikina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--len-rna9r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourwish.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--len-rna9r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourwish.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f85c98b240000040300463044022024513b18a0f58c5c1a65fb7b700de202f78786409ef5da82b5df24db3f02255002202e99ef08e1e79cd1fb041e0009902f130d9b4beaebedffed6e2fb174927c57ab0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f85c98b5a0000040300473045022002352701ec416e1fd60f7987bef797e05d33c7f33ef27cbcdf25d5e3ffafabf6022100cfe1b2c5f2d79a4f37f301d9255bf29f44457dcf8a33706ef655e73a10f0ac76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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