heritagebarn.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:20:f1:d3:6d:53:d8:6e:fc:56:b8:a6:d6:3f:d8:96:44 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=heritagebarn.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:20:f1:d3:6d:53:d8:6e:fc:56:b8:a6:d6:3f:d8:96:44
Serial Number (int): 318548086365656670995574652433009445738052
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:1e:9f:85:66:0a:a6:2e:33:4f:3e:ee:b5:85:2f:c8:cc:07:db:7e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:a9:dc:61:18:51:d9:55:72:42:28:2d:f7:e0:92:f8:85:1e:75:ed
Fingerprint (sha256): b4:0a:7e:1b:53:5c:bf:05:6e:5d:6b:c7:21:1e:a4:73:60:9c:a5:bc:83:71:b6:8d:64:cc:5d:09:6e:be:9c:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate heritagebarn.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heritagebarn.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dphotoprints.com
3dprintandeat.com
3dproducciones.com
3dtridimensional.com
abogadodedominios.com
abogadosdedominios.com
accompanyme.com
activitylist.com
asegurelo.com
backdoorhoes.com
bigclass.com
bodysparx.com
bottegafantasia.com
brainpack.com
chanukahsameach.com
chayamoussia.com
coloniatovar.com
csmconsulting.com
doctrineofjesus.com
domainfinancial.com
domainsinspanish.com
dominiosexpress.com
dropchat.com
fortstreet.com
geopods.com
goauthentic.com
grabelo.com
gradtracks.com
hairclosure.com
hallofsuccess.com
hawaiimj.com
heritagebarn.org
heritagebarns.org
ideadesignacademy.com
ideadesigned.com
ideadesignery.com
ideadesignschool.com
ideasworthbuying.com
iginfo.com
imagineville.com
indicativeseal.com
indicativeseals.com
internationalenglishschool.com
internationalenglishschools.com
iqology.com
janucasameaj.com
leapimage.com
lotwithaview.com
micrograbadores.com
mirabino.com
mjhawaii.com
mjnevada.com
mjnevada.com.webrus.com
mppv.com
myposition.com
nameriver.com
nextlevelsecurity.com
nutritionhandbook.com
ojopublico.com
onceuponamind.com
optylabs.com
poisonivyfacts.com
primeraclase.com
quispamsis.com
quizica.com
quizzica.com
rewster.com
sculpit.com
sellosdeplastico.com
sellosindicativos.com
shoutcapital.com
sinagogas.net
sinagogas.org
siqology.com
skiconnections.com
startuparchitecture.com
supposium.com
tanqueros.com
tesolcertification.com
tesolinternational.com
thatmemesite.com
todopies.com
transformable.com
tratamientoregenerativo.com
travelersdental.com
travellersdental.com
useroptions.com
vapeaclub.com
webrus.com
writeknights.com
www.goatgame.com
xuca.com

Other certificates including the domain name heritagebarn.org

(limited to 100 certificates)
www.mentala.com
5272653.ca
34755625397.ca
heritagebarn.org
34755625397.ca
azulprofundo.yoga
heritagebarn.org
34755625397.ca
5272653.ca
34755625397.ca
sundayschoolmadesimple.org
34755625397.ca
technology.world
34755625397.ca
34755625397.ca
estate.world
heritagebarn.org
34755625397.ca
5272653.ca
technology.world
bvalcollege.com
www.onlineshops.online
estate.world
34755625397.ca
heritagebarn.org
34755625397.ca
heritagebarn.org
34755625397.ca
technology.world
heritagebarn.org
heritagebarn.org
34755625397.ca
shop.kenyan.bible
technology.world

Certificate

The complete raw certificate details for heritagebarn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtajvji4ApWYteml1iJtt
4F0BgMhrivXqwoz6V92yFLsMTL9kTirQbTngsZ2hJaHTHe9yf1QPI0bto+0IJzBx
8pvH6rE1ZbjQ1R3HIbw0qDCIy06p7xAtCD7gLJnPBDP9Up/xcUjC97auHa+Mk+H/
UoZA7XUhtv6RtHbIk3bK3Abi+8KRnX2UL5GSpORcFpC43aEnzq9aBLPahtdhGqW1
UaeX/vjQeIB/ARUdlnpAB3L4LVJG+/w8jwCGMvtYL6yAFFs9MVkUKgPXeEfvS3Iy
l3D1i0/J1H7CXEHq/UnyekpfoL+4s2nHezyRJQk6yblKRjXzCdnJzTzzG0EneezY
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318548086365656670995574652433009445738052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 07:59:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 07:59:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heritagebarn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22932438528542416801530279304136900754026211638124991609801236013605109315130030135145273364223396020431988078943856264699273716175631825759359368780127771891801641279593723688321827382326294411742675447504715687970258591712651964089479761712051249764384560522741015839337933084450151665976274257375994379247107503081874858513235002652112806279278296475210985465127643656390607858608988420011444186214649901759181090841423942648112961138834294716985026253874766697047479844026937757136038185214779127967102114813429532191287910717326514584248303121949681522888314289392514243287285420939627662707485127069159595497481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							311e9f85660aa62e334f3eeeb5852fc8cc07db7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1679 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dphotoprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dprintandeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dproducciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dtridimensional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abogadodedominios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abogadosdedominios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accompanyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activitylist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asegurelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backdoorhoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodysparx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottegafantasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chanukahsameach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chayamoussia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloniatovar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csmconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctrineofjesus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainsinspanish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominiosexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dropchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geopods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grabelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradtracks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairclosure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofsuccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiimj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagebarn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagebarns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideadesignacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideadesigned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideadesignery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideadesignschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideasworthbuying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iginfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagineville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indicativeseal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indicativeseals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalenglishschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalenglishschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janucasameaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotwithaview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micrograbadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirabino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjhawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjnevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjnevada.com.webrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mppv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myposition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nameriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextlevelsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutritionhandbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojopublico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceuponamind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optylabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyfacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeraclase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quispamsis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizzica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellosdeplastico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellosindicativos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoutcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinagogas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinagogas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siqology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiconnections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startuparchitecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supposium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanqueros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesolcertification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesolinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatmemesite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todopies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transformable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tratamientoregenerativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelersdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travellersdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useroptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vapeaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writeknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170b95eb18a000004030046304402204ccaa408407e16b9ab7c495736a73caecef699c18e6509e814d676e543523bec02201e60328f95e9ccbe244d01fe44cfd62631e634f1bd3ceab8b7b36ca15f15545c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170b95eb1b60000040300473045022053eceacae47aae5cbf878f50349d97f747ef36a6d9d402245a4796bd4c0b2470022100892408beeae548f49a81bd26b8af64f89058aa35c95bc67e6794e913494fe0ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007770e051969281a8e22e0dfbdc7aa5cc7eca0d7fe82623fd36126445ecd240460e68bc560d24fed22850d5f58808887821362e3ebb0daf0c566fa93d07e85757ea861c165b1be46227fcfe93136d7ec0efce7ba63d8fc31a715c9a9317bac83889b503c8bc5517330c7382f63e9f57fa1a0b64ebae8f15d28f5dcee265150a10df57c5e1e27df83ad3b040bd97a2552ee8a6f8129f6f097eda19b6033925d3df5157adf75ecd927692f7359e6b20f1279bb8870a0028fa808832480a831b702116a4c31b7831f8879eaabaf313beb95a580d3754230b6339a742e388964b5307b8385c1cd01b610f05608785a6168b94e3da12bfa8f9e2465cd636196b8f728d