annif.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:29:a2:a8:b3:1d:5a:00:84:37:38:e2:4f:d8:4c:ea:7b:41 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=annif.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:a2:a8:b3:1d:5a:00:84:37:38:e2:4f:d8:4c:ea:7b:41
Serial Number (int): 362616931644865643852763605104186331134785
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: aa:43:51:2f:52:b1:27:58:2d:ef:98:f7:7c:aa:59:2d:6b:99:c0:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:98:72:c0:7e:9b:0d:21:07:d6:33:50:6d:7c:52:94:d3:89:6b:05
Fingerprint (sha256): b6:62:c8:82:00:c1:70:75:61:f5:b4:46:b4:1c:09:16:c0:15:bd:73:44:77:4e:94:e8:c5:44:be:d3:1b:0c:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate annif.be

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for annif.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2-x.com
20p.net
24per.com
3dpsystems.com
aaqob.net
adarza.net
advertising.business
agiscointernational.com
amatoken.com
amormail.net
annif.be
arteles.com
automiot.com
bhilai.biz
blockchainxl.com
bostonburger.fr
bourgetto.com
changingriver.com
christmaslightingestimate.christmas
clothespinbags.com
dailyreferrals.com
darwin.info
desintegrador.com
dialwow.com
dominiosdiarios.com
earlyventures.com
freereolist.net
gonetzeroenergy.com
goodmorningaudio.com
hartford.biz
healthyhomex.com
helldercare.com
hydraulictruck.com
innovatorapps.com
instantism.com
investorkids.net
iramillerlaw.net
istlm.com
karlgentles.com
linkfier.com
lostourminds.com
lowsneakers.com
manhattan.expert
masterofscale.com
mazetx.net.mamaoutlet.com
miragesubsea.net
moditalbijoux.com
mohelmajority.com
nationaldebtrelif.com
new-bitcoin.com
ny.energy
nyaatorrents.net
onlyhappensinvegas.com
orchestart.com
pettesannonces.com
phonescanners.com
polymark.net
poseida.net
promoving.co
sandiegodivorcesolutions.com
saprox.com
satellogic.net
sgaadi.com
snaplearning.com
standardlegalkit.com
strainspecialist.com
stunnermodel.com
subwrite.com
taxscouts.net
thetexanlawyers.com
tindera.com
unemploymentlawbyzipcode.com
vcpin.com
viferr.com
www.eggboxx.com
www.fxcg.com.fxcg.com
www.swisshawk.com
www.violinplay.com
www.worldaxess.com
xn--5-0ga.at

Other certificates including the domain name annif.be

(limited to 100 certificates)
diskjockeys.ca
annif.be

Certificate

The complete raw certificate details for annif.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iFS3zUVvj01iQe96hRS
vP/2E1Y4BfJ9Ke4kuTDrXOglmP/WQLXwYQNm83ailzonfZWkT7RJZ/tJShTXZN5h
wCODm7sFVa83FnFwCMiGa0nWbUzYjNNm7/w0OW0IKNQAoEkq0vWxxiMUrTPSdEtD
dkZcWpc54HudK6XHv5JByXewAk8ISoh3azbFoYuW7H8q9HjKXa66x+iPuNo9h4g7
b5WnhCm6VknFeGVudXb5gPv0Lm6Y/8UCfED5urho6jSAtRD0GDg/fRC2Fs5OkPdb
cgA8x6jO87ntTWxrlUTD3CVKcNh7ltZJ+UbgXUpv5qno/Jx7nYVQGp2XoJhHWS1H
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362616931644865643852763605104186331134785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 17:38:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 17:38:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'annif.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28041336240444345574286127552274631032873579995972783712401881218319608069186461725838558414375523993796867592003577533008442390606450738491248525709287596164578267647594358326747358436644380594036434930750248252136459278457433883270149144274294654207593762989824002613866268832386667547536647591199082700540888961730668237985108155894277306296189459628522121405201097852858270466414254247912219685232777099083362985865021745565831441562175492974258444106380151113544579896426127433215789327667317609138680271448016375187587684402673598751682067989639799859505315711794903949800471341908742341305155708927808113559503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa43512f52b127582def98f77caa592d6b99c025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1392 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20p.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24per.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dpsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaqob.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adarza.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiscointernational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amatoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amormail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhilai.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonburger.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourgetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changingriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmaslightingestimate.christmas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothespinbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyreferrals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darwin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desintegrador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialwow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominiosdiarios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlyventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freereolist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonetzeroenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmorningaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartford.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helldercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydraulictruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovatorapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorkids.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iramillerlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karlgentles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkfier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostourminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowsneakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattan.expert'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterofscale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazetx.net.mamaoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miragesubsea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moditalbijoux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohelmajority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaldebtrelif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-bitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ny.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyaatorrents.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyhappensinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchestart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pettesannonces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonescanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polymark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poseida.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promoving.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegodivorcesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saprox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satellogic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snaplearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standardlegalkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strainspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stunnermodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subwrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxscouts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetexanlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tindera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unemploymentlawbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcpin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viferr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eggboxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fxcg.com.fxcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swisshawk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.violinplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldaxess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5-0ga.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000171227085b9000004030047304502202f2a039acc0e273508aec6fc6d1a8cf1e69a8367f7c4496cd061d7b51be5d24c022100cccfd0fe2057d75a85a831e4987674c729601c85ea8404209dd23c1a8b8b2c91007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171227085a900000403004630440220488f8d05acaae5b850129e8e6a6609dd903fd53d82a723b6cbafbf1e929fb686022008b13e700b3c033601ce90d769fa0f8e2149ff20a37b8b45b7a900e024e0e50a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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