lists.genealogycenter.net

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:b5:ee:32:2b:ca:e5:c1:a8:22:a7:1d:89:9b:c9:d7:b8 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lists.genealogycenter.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:b5:ee:32:2b:ca:e5:c1:a8:22:a7:1d:89:9b:c9:d7:b8
Serial Number (int): 334739393734761995547680190804533608830904
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:c1:dd:a4:9f:61:a2:b4:0e:15:1e:64:e9:61:71:88:14:6f:e3:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:69:0e:0e:fb:14:72:5e:a6:cf:f4:b7:49:ae:25:25:96:ab:e8:a5
Fingerprint (sha256): bb:aa:1a:af:9d:47:b5:d4:a8:03:ff:9c:d6:e0:e9:ac:72:5e:8c:ec:31:fb:0f:65:54:e6:cc:8e:c6:64:d3:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lists.genealogycenter.net

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.genealogycenter.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.genealogycenter.net
lists.genealogycenter.org
lists.georgiabikes.org
lists.gjsgjs.com
lists.gleasonguitars.com
lists.glendoraoakland.com
lists.gracemahomet.info
lists.greatwhatsit.com
lists.grooveentertainmentnj.com
lists.haitiapgrandi.org
lists.hawaiigenetics.org
lists.healinggardenworld.com
lists.hearthcom.com
lists.hearthcommunities.com
lists.heartoftheartist.org
lists.hearty-gourmet.com
lists.hernans.com
lists.highfiveproperties.com
lists.hillabbey.org
lists.himrecruiters.com
lists.hinghamcemetery.org
lists.hopalongmail.org
lists.hopewellroofing.com
lists.hopework.org
lists.hotelklas.com
lists.hr1964.org
lists.hr64.org
lists.hwlf.org
lists.i-ddb.com
lists.iajgs.com
lists.iajgs.net
lists.iajgs.org
lists.iajgs2016.org
lists.iajgs2017.org
lists.iajgs2018.org
lists.iajgs2019.org
lists.iajgs2020.com
lists.iajgs2020.org
lists.iajgs2021.com
lists.iajgs2021.org
lists.iajgs2022.com
lists.iajgs2022.org
lists.iajgsjewishcemeteryproject.org
lists.ihubbell.com
lists.imperialbeachfarmersmarket.org
lists.improvplayworks.com
lists.indicant.net
lists.indoexpat.org
lists.indosoc.org.uk
lists.infowindnewnews.com
lists.innerphysician.com
lists.innertruthmassage.com
lists.innosci.net
lists.integrativephysicaltherapyservices.com
lists.interstell.com
lists.inuverse.com
lists.ipte.net
lists.irisarri.org
lists.israelaction.org
lists.italiansrus.com
lists.iucnosg.net
lists.jacobkaye.com
lists.jeffreygurian.com
lists.jejuneinstitute.org
lists.jessicalevine.info
lists.jessicalevineartist.com
lists.jesslevine.com
lists.jfmf.org
lists.jgsgb.com
lists.jgsgb.org
lists.jillmanning.com
lists.jkswineandliquor.com
lists.jmwauction.com
lists.jmwauctions.com
lists.joekowan.com
lists.joelpalmermusic.com
lists.johnjdomont.com
lists.joshuarich.com
lists.julieharrington.net
lists.jumpingrock.net
lists.justcomm.org
lists.justmakestuff.org
lists.justusnyc.org
lists.katzenfinch.com
lists.keithavenue.org
lists.kempiweb.net
lists.kentest.com
lists.kentnerburn.com
lists.kfjc.org
lists.kigreene.com
lists.kitbradley.net
lists.kokotele.net
lists.kokoteleguitarworks.com
lists.lacamas-shores.com
lists.lacamasshores.org
lists.lachoff.com
lists.lafayettekiwanis.org
lists.lagerrhythms.com

Other certificates including the domain name genealogycenter.net

(limited to 100 certificates)
lists.eglisededieu-larochelle.com
lists.89ertheater.com
web10.tigertechnologies.com
customers.tigertech.net
lists.galvanys.com
customers.tigertech.net
*.wandgconstruction.com
customers.tigertech.net
customers.tigertech.net
lists.dysym.com
lists.thaudio.net
lists.dysym.com
web10.tigertechnologies.com
lists.fonebone.net
lists.dysym.com
*.friendsofallencounty.org
customers.tigertech.net
*.genealogycenter.net
lists.elizabethandesserts.com
lists.dysym.com
*.thehodgesband.com
*.eastbaynosh.org
*.friendsofallencounty.org
lists.dutchmansdock.com
*.qualityrestaurantcorp.com
*.peeweespamperedpetproducts.com
*.thehodgesband.com
web10.tigertechnologies.com
customers.tigertech.net
web10.tigertechnologies.com
lists.dysym.com
*.atiron.net
customers.tigertech.net
web10.tigertechnologies.com
lists.dysym.com
lists.thejoyfulforager.com
customers.tigertech.net
*.atiron.net
lists.s-p-a-c-e-invader.com
*.personalways.com
lists.genealogycenter.net
web10.tigertechnologies.com
*.atiron.net
lists.engagesimply.com
*.atironworks.net
customers.tigertech.net
lists.dysym.com
*.atiron.us
lists.the-green-mother.com
web10.tigertechnologies.com
*.thehodgesband.com
customers.tigertech.net
lists.thebitterpoet.com
*.genealogycenter.net
*.atiron.net
lists.dysym.com
lists.dysym.com
*.qualityrestaurantcorp.com
*.theespressobar.org

Certificate

The complete raw certificate details for lists.genealogycenter.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlF6Klu0djG8c+5SeUp
L7N+ejHU/fT2yivnlOWRX3nFqPgCr2PQofgXPSNK6XMbMLZUAUR1Mwx0XI9cp35h
QkqIyK/ekonNY1YBhH/X0ThI41X8UYdrCAsdrFvd0F4CQZnFw3k7B64WGdlYVUyx
sgSj4JwaFtUZoqc8uPuuY7JY8qWq1TdKAuT9EW5gik9yK1sD8q3GKH+Ofx6E/npz
jmNZuCR9QntAinRLbHmW+rcbKk2iZ6QRUAsIYdXByRt39JqAMFTwmCZr1Cd3SH6J
1HiIEhPoptD0Qa74xBhrAqDtzMUKUDWQ4b7cibJ4rSQCMnH/I2KDyyyQyPYsz5yi
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334739393734761995547680190804533608830904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 07:08:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 07:08:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.genealogycenter.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27650761514427149602033558811317846423207531556153438554187510783830505669673197512410116943173028157684872969702828790075113033339834758379576366116634491429824057950069752812888773121015244804462686950096095981115547671260512974887432280576810073398469123666507412683513098342118399040218130758183196571946608721694064927579899192393114819393786474948947108760406597093406235713436093498623941738664624220023524878123301456118276278304701546529991055038316670777107709752291633363287118960082885591993765727588309300066845799677100049170165435207833019534795880921481308954969360249412381206461707265996179963159279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ac1dda49f61a2b40e151e64e9617188146fe352
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.genealogycenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.genealogycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.georgiabikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.gjsgjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.gleasonguitars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.glendoraoakland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.gracemahomet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.greatwhatsit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.grooveentertainmentnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.haitiapgrandi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hawaiigenetics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.healinggardenworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hearthcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hearthcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.heartoftheartist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hearty-gourmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hernans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.highfiveproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hillabbey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.himrecruiters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hinghamcemetery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hopalongmail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hopewellroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hopework.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hotelklas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hr1964.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hr64.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hwlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.i-ddb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2016.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2017.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2018.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2019.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2020.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2021.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2022.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgsjewishcemeteryproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ihubbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.imperialbeachfarmersmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.improvplayworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indicant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indoexpat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.indosoc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.infowindnewnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innerphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innertruthmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.innosci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.integrativephysicaltherapyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.interstell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.inuverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ipte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.irisarri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.israelaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.italiansrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iucnosg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jacobkaye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jeffreygurian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jejuneinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jessicalevine.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jessicalevineartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jesslevine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jfmf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jgsgb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jgsgb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jillmanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jkswineandliquor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jmwauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jmwauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joekowan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joelpalmermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.johnjdomont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joshuarich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.julieharrington.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.jumpingrock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justcomm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justmakestuff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justusnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.katzenfinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.keithavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kempiweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kentest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kentnerburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kfjc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kigreene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kitbradley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kokotele.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kokoteleguitarworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lacamas-shores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lacamasshores.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lachoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lafayettekiwanis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lagerrhythms.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3260fc2a0000040300473045022100f9b2fbc1cdfe9cc6392fd8b35f2aca3488074aa49f271e10d8550651602bb23502200883e07ec091fc435c88f63c430f6421faed835a757eece557a88ed21d501c2f0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3260fbf70000040300483046022100b7769c5d215870abe65cc40dba56e516b0b500300925b9211dfdfc730e4d6db4022100f86767f0e3f6de56e68b71915e9fd1f9be84138d9213349ec0fab3065241b6fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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