www.tucksy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:87:eb:c1:ca:e4:70:dc:c9:0c:9a:ce:a5:fe:19:91:d8 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tucksy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:87:eb:c1:ca:e4:70:dc:c9:0c:9a:ce:a5:fe:19:91:d8
Serial Number (int): 302011129358644977776562176997230573621720
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:21:0a:f6:c8:ac:e3:27:60:82:77:c8:92:44:24:fd:3f:4c:bc:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:ef:24:1f:95:8a:c9:08:9e:90:8e:c2:e0:3b:7c:1e:fc:4f:e7:71
Fingerprint (sha256): b8:ee:4b:1d:4c:3a:5f:1b:72:71:55:5b:b3:63:c4:23:6d:58:3b:70:e7:90:ea:8e:81:9c:08:3c:03:77:1b:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tucksy.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tucksy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

casinoautomaty.com
coconutcreekdentistry.com
demingdentistry.com
dentalcarekaty.com
dickinsondentistry.com
doctormallory.com
esportscoventry.com
gadsdendentistry.com
grandforksoptometry.com
havredentistry.com
heytrinity.com
jeffersondentistry.com
lavergnedentistry.com
lenexadentistry.com
losalamosdentistry.com
newhempsteaddentistry.com
newiberiadentistry.com
non-gmofooddirectory.com
olivebranchdentistry.com
planojewelry.com
prpdirectory.com
quakesy.com
rcauthority.com
rockspringsdentistry.com
russellvilledentistry.com
soldotnadentistry.com
sportsmedicinekaty.com
stjohndentistry.com
the-story.com
theinsidersdirectory.com
theoxygenfactory.com
tucksy.com
waimaludentistry.com
www.casinoautomaty.com
www.coconutcreekdentistry.com
www.demingdentistry.com
www.dentalcarekaty.com
www.dickinsondentistry.com
www.doctormallory.com
www.esportscoventry.com
www.gadsdendentistry.com
www.grandforksoptometry.com
www.havredentistry.com
www.heytrinity.com
www.jeffersondentistry.com
www.lavergnedentistry.com
www.lenexadentistry.com
www.losalamosdentistry.com
www.newhempsteaddentistry.com
www.newiberiadentistry.com
www.non-gmofooddirectory.com
www.olivebranchdentistry.com
www.planojewelry.com
www.prpdirectory.com
www.quakesy.com
www.rcauthority.com
www.rockspringsdentistry.com
www.russellvilledentistry.com
www.soldotnadentistry.com
www.sportsmedicinekaty.com
www.stjohndentistry.com
www.the-story.com
www.theinsidersdirectory.com
www.theoxygenfactory.com
www.tucksy.com
www.waimaludentistry.com

Other certificates including the domain name tucksy.com

(limited to 100 certificates)
casinoautomaty.com
havredentistry.com
www.newyorkstemcellcenters.com
tucksy.com
www.domainjail.com
www.sportsmedicinekaty.com
www.tucksy.com
www.hawaiistemcelltherapy.com
www.tucksy.com
www.markdiaz.com
gilgameshsecurity.com

Certificate

The complete raw certificate details for www.tucksy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRSQGdoHFfBMBDxgHmP8
wi6scQZqZnR7mXRioLZl/ASWfrnzBOO+vlb9/Mc6kzjmYJ9GjxgaAH+ebuNCoIxP
285xu0OripcIl7/3JZbR/k0DRoUP8Q6Xij88ijXV/AkDbY4gQ6uAfvJTcMXau9yn
Aj05mNkD275Yt1XjHvnXdBbcK7ht7gBEFtuTgq3HPDezu86sS5oa2Zrq8MxaMwlm
GIDrN1o2C6sb5fFxOUYO4mq8OkS+MTIPakitBKFXq0/QaYNIod6Uc/0ksZtvJCSb
cY720pMvCm+na0Voy+13dCQ7kbLzO570PlnZLmGd0zKT5rfFu9XKnyghCH9PxvIL
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302011129358644977776562176997230573621720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 13:04:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 13:04:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tucksy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19829553820852771642053662718115652288161701214223148524447714105985501617560481014391350114253608031846271250694046891206587673050266254466119985107422323157213313669039669290972170412317488761784788577783959791440213601397108035045993591486161480305874017171595812410699921155682945356589764859529588292210003443600987194979567341128093362293985369140079558876421619799589234635104068654981939990447017660843688914289805827122485653740376822126424266365486270648674871704635684534627619110910839634248402994201287056717538450290075874381987923345948241649555523792828977805770454920231885470199183923677245918546703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6210af6c8ace327608277c8924424fd3f4cbcc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1564 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoautomaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coconutcreekdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demingdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalcarekaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dickinsondentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctormallory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportscoventry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadsdendentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandforksoptometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havredentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heytrinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffersondentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavergnedentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenexadentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losalamosdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhempsteaddentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newiberiadentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'non-gmofooddirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivebranchdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planojewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockspringsdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russellvilledentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soldotnadentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinekaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohndentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-story.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theinsidersdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoxygenfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucksy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimaludentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinoautomaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coconutcreekdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demingdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentalcarekaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dickinsondentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doctormallory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportscoventry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadsdendentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksoptometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havredentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heytrinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffersondentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavergnedentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lenexadentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losalamosdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhempsteaddentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newiberiadentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.non-gmofooddirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olivebranchdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planojewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockspringsdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russellvilledentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soldotnadentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinekaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohndentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-story.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theinsidersdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoxygenfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tucksy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimaludentistry.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001706810d1300000040300473045022100c97fee4015209f9b7d644c020aa18f6855f51fa54cf6362d8aafa8b3143d354a022035ee4a78ac394afa237c7e84c5545d17b598df72cce649d9a9d914b33cf6bda7007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706810d1240000040300473045022078d1c681ea44fd4115023c1f8a53a3d109818b2f664af971e6c1ca649cd628fb022100be34a496eec932b10d5f157ffdacd3c76381ab35f7dc6f9ea4d9105de273e461
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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