lists.prairievillage.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ac:ce:01:45:46:9f:95:5e:b5:00:f0:a8:53:52:c4:7c:a4 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lists.prairievillage.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ac:ce:01:45:46:9f:95:5e:b5:00:f0:a8:53:52:c4:7c:a4
Serial Number (int): 320139252470192329581931800906517199486116
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:f4:09:14:0d:4c:48:6a:14:15:ac:2f:ce:33:63:82:93:e7:52:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:5f:65:39:f6:50:6c:90:46:8f:08:85:f8:b9:84:1a:3b:81:d5:db
Fingerprint (sha256): b3:a6:ff:37:3a:34:61:97:de:8a:0c:a9:c6:d8:b6:63:19:e6:66:f7:8d:d4:0a:b8:f2:28:c4:a7:56:8b:97:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lists.prairievillage.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.prairievillage.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.500finerva.com
lists.alamedabees.org
lists.albanyguitarrepair.com
lists.bluehandmassage.com
lists.bucharestexpress.org
lists.civichuman.com
lists.cscoho.org
lists.culturescholar.org
lists.divulgacioncoda.org
lists.docemetproductions.com
lists.prairievillage.org
lists.preken.be
lists.presol.com
lists.prevaluate.com
lists.prevaluateskillsassessment.com
lists.prevaluateskillstesting.com
lists.psrcolorado.org
lists.pultneyvilleyachtclub.org
lists.qcwcycling.org
lists.qjteam.net
lists.qrnyc.com
lists.quakerbiz.org
lists.qualityrestaurantcorp.com
lists.questionfracking.org
lists.randyvincent.com
lists.rasterms.com
lists.raygeier.com
lists.raymancreative.com
lists.rccpc.org
lists.realmensch.org
lists.redpathstudio.com
lists.redphoenixtheatre.com
lists.reellifewithjane.com
lists.reshmaazmi.com
lists.reshmaazmi.net
lists.rgvrd.us
lists.ricklavoie.com
lists.ringness.org
lists.ritagoldengelman.com
lists.robandmollie.com
lists.robertkennedymusic.com
lists.robertscreekcohousing.ca
lists.rollinsit.com
lists.roriekelly.com
lists.rosentrust.org.uk
lists.ruinasdebonampak.edu.mx
lists.s-p-a-c-e-invader.com
lists.sandiegobridgeacademy.com
lists.sanjose10.com
lists.sarahanddan.org
lists.savath.com
lists.scholatutorials.org
lists.scientificlifestyle.com
lists.secondsound.com
lists.seminolepointe.church
lists.sengnet.com
lists.serfes.org
lists.sfacv.org
lists.sfiop.org
lists.shearerpainting.com
lists.shorelinetrolley.com
lists.shorelinetrolley.org
lists.showcaseshows.com
lists.silvercablenet.com
lists.skagitriverpoetry.org
lists.skeletonhome.com
lists.skylarkscafe.com
lists.skylarkshiddencafe.com
lists.sligoheritage.com
lists.smallbusinessdc.org
lists.smcgo.org
lists.smifmail.org
lists.smokes4less.com
lists.somethinginthemail.com
lists.southbayskiclub.org
lists.spagyricus.com
lists.spidermonkeycycling.com
lists.srcoc.org
lists.ssff.us
lists.stgeorgebristol.org
lists.stmarksal.org
lists.stormcloud0.com
lists.sundayslovemusic.org
lists.superednet.com
lists.suzannejackson.com
lists.swedishschool.org
lists.sweetirenemusic.com
lists.swilkanim.net
lists.swimkingpools.com
lists.swimscapes.com
lists.swiny.org
lists.talestotideyouover.com
lists.tcvr.us
lists.tdxs.net
lists.tdxs.org
lists.teamvance.com
lists.teamwebsites.org
lists.teddybeartowers.com

Other certificates including the domain name prairievillage.org

(limited to 100 certificates)
lists.casaderosado.org
*.sotratravel.org
*.mypocketmobi.com
web04.tigertechnologies.us
customers.tigertech.net
lists.swimkingpools.com
web04.tigertechnologies.us
web04.tigertechnologies.us
lists.orks.org
lists.pultneyvilleyachtclub.org
web04.tigertechnologies.us
lists.nlgstl.org
lists.frankthemusician.com
customers.tigertech.net
*.sotratravel.org
customers.tigertech.net
lists.erikpkraft.com
*.merlins-sickness.com
*.sotratravel.org
lists.reellifewithjane.com
lists.computorium.net
prairievillage.org
*.willyoscar.com
lists.iajgs2018.com
*.perfectlyhooked.com
lists.docemetproductions.com
customers.tigertech.net
lists.0100101110101101.org
customers.tigertech.net
*.uniformsforwomen.com
customers.tigertech.net
*.donnadupre.com
*.circlesofcare.com
web04.tigertechnologies.us
lists.pleasantviewum.com
lists.computorium.net
web04.tigertechnologies.us
lists.npcomp.com
lists.followustofreedom.com
lists.prairievillage.org
customers.tigertech.net
*.jaseyslittlebakery.com
lists.orks.org
lists.computorium.net
*.sotratravel.org
*.perfectlyhooked.com
customers.tigertech.net
*.dolfin-emarine.com
web04.tigertech.net
*.theoilbox.com
customers.tigertech.net
web04.tigertechnologies.us
customers.tigertech.net
customers.tigertech.net
*.francisfarmpetsit.com
lists.computorium.net

Certificate

The complete raw certificate details for lists.prairievillage.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlF6Klu0djG8c+5SeUp
L7N+ejHU/fT2yivnlOWRX3nFqPgCr2PQofgXPSNK6XMbMLZUAUR1Mwx0XI9cp35h
QkqIyK/ekonNY1YBhH/X0ThI41X8UYdrCAsdrFvd0F4CQZnFw3k7B64WGdlYVUyx
sgSj4JwaFtUZoqc8uPuuY7JY8qWq1TdKAuT9EW5gik9yK1sD8q3GKH+Ofx6E/npz
jmNZuCR9QntAinRLbHmW+rcbKk2iZ6QRUAsIYdXByRt39JqAMFTwmCZr1Cd3SH6J
1HiIEhPoptD0Qa74xBhrAqDtzMUKUDWQ4b7cibJ4rSQCMnH/I2KDyyyQyPYsz5yi
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320139252470192329581931800906517199486116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 16:04:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-26 16:04:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.prairievillage.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27650761514427149602033558811317846423207531556153438554187510783830505669673197512410116943173028157684872969702828790075113033339834758379576366116634491429824057950069752812888773121015244804462686950096095981115547671260512974887432280576810073398469123666507412683513098342118399040218130758183196571946608721694064927579899192393114819393786474948947108760406597093406235713436093498623941738664624220023524878123301456118276278304701546529991055038316670777107709752291633363287118960082885591993765727588309300066845799677100049170165435207833019534795880921481308954969360249412381206461707265996179963159279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35f409140d4c486a1415ac2fce33638293e75229
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.500finerva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.alamedabees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.albanyguitarrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bluehandmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.bucharestexpress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.civichuman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cscoho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.culturescholar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.divulgacioncoda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.docemetproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.prairievillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.preken.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.presol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.prevaluate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.prevaluateskillsassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.prevaluateskillstesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.psrcolorado.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.pultneyvilleyachtclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.qcwcycling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.qjteam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.qrnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.quakerbiz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.qualityrestaurantcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.questionfracking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.randyvincent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rasterms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.raygeier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.raymancreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rccpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.realmensch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.redpathstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.redphoenixtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.reellifewithjane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.reshmaazmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.reshmaazmi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rgvrd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ricklavoie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ringness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ritagoldengelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.robandmollie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.robertkennedymusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.robertscreekcohousing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rollinsit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.roriekelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rosentrust.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ruinasdebonampak.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.s-p-a-c-e-invader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sandiegobridgeacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sanjose10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sarahanddan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.savath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.scholatutorials.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.scientificlifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.secondsound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.seminolepointe.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sengnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.serfes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sfacv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sfiop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.shearerpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.shorelinetrolley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.shorelinetrolley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.showcaseshows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.silvercablenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.skagitriverpoetry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.skeletonhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.skylarkscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.skylarkshiddencafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sligoheritage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.smallbusinessdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.smcgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.smifmail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.smokes4less.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.somethinginthemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.southbayskiclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.spagyricus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.spidermonkeycycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.srcoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ssff.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.stgeorgebristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.stmarksal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.stormcloud0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sundayslovemusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.superednet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.suzannejackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swedishschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sweetirenemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swilkanim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swimkingpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swimscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.talestotideyouover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.tcvr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.tdxs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.tdxs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.teamvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.teamwebsites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.teddybeartowers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fc028e4380000040300473045022100a71cbf231f8139ee17fd777a2a3bbb6a47e2fedc22326c3c586e2fa114bb1dd002205509c105c21857333eaa6cbb18907116d716a63ef20467ab50025e39e96f76f20077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fc028e44f0000040300483046022100a2ac915dedbb4065ba8965040eb3a3aea01d129f921315018b91671fa0e56fcb022100abc31c14f68e34c97c9f0c1333bdab3986ea2b61e0fe511d0654a3b7200c3216
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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