www.paiff.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:a6:15:20:d8:d7:aa:58:49:f8:0d:cd:c7:57:d6:ee:b4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.paiff.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:a6:15:20:d8:d7:aa:58:49:f8:0d:cd:c7:57:d6:ee:b4
Serial Number (int): 326211269062010508895563316173978195127988
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:36:29:4f:81:f3:c3:3d:7f:12:df:ac:58:02:94:5b:db:3d:d6:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:ce:07:3c:ec:c1:95:be:56:6b:1c:37:f2:a0:90:a6:b9:a0:83:2c
Fingerprint (sha256): b6:7b:8e:36:0e:c0:bd:78:6f:7c:d9:16:da:80:8a:01:62:95:64:43:54:0d:c1:f2:a6:ea:a2:46:95:84:0d:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.paiff.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.paiff.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

626leaf.com
719leaf.com
atomiclightningnetwork.com
bridgecoaching.com
cannaintelligence.com
cartelbud.com
cleanairmedia.com
domaincouncil.com
eleganthomeguide.com
ergonomicmatting.com
exploredg.com
falsenail.com
fullmooncbg.com
glass-coating.com
goldenkeylocksmith.com
greatshotsmedia.com
gta-newyork.com
herotrek.com
inthedawghouse.com
jetpi.com
jonesboropestcontrol.com
lgbtishaadi.com
machtwechsel.com
marryingwell.com
metallwerke.com
mmaybe.com
nationalpensionsystem.com
nebraskaregenerativemedicine.com
nonyl.com
oootech.com
paiff.com
phoenixaward.com
piano-bench.com
pieca.com
prpbirmingham.com
purposemyth.com
schmirgel.com
siciliaffari.com
snowswimming.com
sportsmedicinedurham.com
stemcellmilwaukee.com
storybookink.com
taxisf.com
teasol.com
techwize.com
vacanzeaparigi.com
valporoof.com
videogametrading.com
wioska.com
www.626leaf.com
www.719leaf.com
www.atomiclightningnetwork.com
www.bridgecoaching.com
www.cannaintelligence.com
www.cartelbud.com
www.cleanairmedia.com
www.domaincouncil.com
www.eleganthomeguide.com
www.ergonomicmatting.com
www.exploredg.com
www.falsenail.com
www.fullmooncbg.com
www.glass-coating.com
www.goldenkeylocksmith.com
www.greatshotsmedia.com
www.gta-newyork.com
www.herotrek.com
www.inthedawghouse.com
www.jetpi.com
www.jonesboropestcontrol.com
www.lgbtishaadi.com
www.machtwechsel.com
www.marryingwell.com
www.metallwerke.com
www.mmaybe.com
www.nationalpensionsystem.com
www.nebraskaregenerativemedicine.com
www.nonyl.com
www.oootech.com
www.paiff.com
www.phoenixaward.com
www.piano-bench.com
www.pieca.com
www.prpbirmingham.com
www.purposemyth.com
www.schmirgel.com
www.siciliaffari.com
www.snowswimming.com
www.sportsmedicinedurham.com
www.stemcellmilwaukee.com
www.storybookink.com
www.taxisf.com
www.teasol.com
www.techwize.com
www.vacanzeaparigi.com
www.valporoof.com
www.videogametrading.com
www.wioska.com
www.wwwboxerjam.com
wwwboxerjam.com

Other certificates including the domain name paiff.com

(limited to 100 certificates)
www.solobellas.com
stanleypace.com
mystea.com
americansurvivalnetwork.com
connecticutdebtconsolidation.com
stemcellmadison.com
www.bizze.com
jimcasino.com
cblissd.com
www.ifiga.com
keywestkayaking.com
www.budtenderden.com
middletownmaryland.com
www.mobilecreches.com
activemarketingllc.com
www.falsenail.com
www.ovenmarket.com
www.paiff.com
controlsmoke.com
www.paiff.com
compositerack.com
www.eleganthomeguide.com
www.justgoamerican.com
imsah.com
randman.com

Certificate

The complete raw certificate details for www.paiff.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYaO7JFdXiit0iTEAcjM
XjPA0mvlgVaPyrHX+yQkX3hBz0RTVYF8DgX6yxFyxHBSA0Y0QOxgcVN5Aytly2g1
Eq2daMmoA26xJLkwIjbDFq+z9uDQbNI+TG9fhRm2co66rFsh79JKT7f3sDqQsGWS
CcdqeVWu8hCgtrzmhuZOh5yP8cFcw8sNmVBMtrPX31umwc0dsDLiJn+iFbmy9fQp
P5EdI4ldVa6+8gMLCbeZ2U7MXHyZXFynPLi8TcKJihYEYE3xLBsix5TQW8i98Px5
Hcmn6C1HdekEWn5vcfU6kmUaIA2rLBgdD+ymAbP21QBRWsHlARtZfsGxHTRiSO9z
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326211269062010508895563316173978195127988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 12:33:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 12:33:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.paiff.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22915486368241469537971718245297263204003137769341187179439118775435538230243096433938068619791120185894083468221567536333682977551323437142885848422421030052477224071649576747384849830044564772249953309736068250205436156377041535523074639034690660114742127186205086062221174167039912452005781308286724281966960902229920622507655923218258761865835286264752112375734994178637029793990042073132722199897958051626373634699594140195048854720410963561578508172640169268056350840482269888982547974780133955239789950703103982215985486520975577541586089344638757040217912575153517545032584542406325323187835107447074502702011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be36294f81f3c33d7f12dfac5802945bdb3dd69a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1994 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '626leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '719leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomiclightningnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartelbud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanairmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaincouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eleganthomeguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ergonomicmatting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploredg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falsenail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullmooncbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glass-coating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenkeylocksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatshotsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gta-newyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herotrek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inthedawghouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonesboropestcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtishaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'machtwechsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marryingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metallwerke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmaybe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalpensionsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskaregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oootech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paiff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixaward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piano-bench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pieca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpbirmingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purposemyth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmirgel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siciliaffari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowswimming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinedurham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellmilwaukee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybookink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxisf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teasol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techwize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacanzeaparigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valporoof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videogametrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wioska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.626leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.719leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atomiclightningnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartelbud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanairmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domaincouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eleganthomeguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ergonomicmatting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exploredg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falsenail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullmooncbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glass-coating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenkeylocksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatshotsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gta-newyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herotrek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inthedawghouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonesboropestcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgbtishaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machtwechsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marryingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metallwerke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmaybe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalpensionsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskaregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oootech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paiff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixaward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piano-bench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pieca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpbirmingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purposemyth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schmirgel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siciliaffari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowswimming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinedurham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellmilwaukee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storybookink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxisf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teasol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techwize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacanzeaparigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valporoof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videogametrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wioska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwwboxerjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwboxerjam.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171170c36a80000040300483046022100a21c0465b06435949fab7ec93aa0456d560fbfad91d1237cf68b51fc11636eda022100b3f693f3a61c3cb6eff6cbdcdcdaa93bb2e699c90ef69e24a0f00073063c3704007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171170c369f0000040300483046022100e80e1fbc13704c4edfbff20fc5bb36164fe954f292c6fa48b05983f79e14dfe8022100d187c722e56d96961f64bc692140b520aae6324100c6181cb68b8a0d29a28d0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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