lists.crossroadshudsonvalley.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:0e:ea:de:f3:15:92:33:d0:a5:40:10:2d:43:98:95:64 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.crossroadshudsonvalley.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:0e:ea:de:f3:15:92:33:d0:a5:40:10:2d:43:98:95:64
Serial Number (int): 305933676573283616060162002578853131228516
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:c1:dd:a4:9f:61:a2:b4:0e:15:1e:64:e9:61:71:88:14:6f:e3:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:8e:5b:66:c7:cb:eb:ad:1a:b9:11:b4:c8:f5:b2:f8:19:e7:03:b4
Fingerprint (sha256): bb:d9:3c:d8:e0:ef:fe:a3:76:12:80:9d:d8:15:c5:04:92:ed:d4:54:19:e0:a6:0d:d2:0f:32:ac:36:e6:43:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lists.crossroadshudsonvalley.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.crossroadshudsonvalley.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.crossroadshudsonvalley.org
lists.crossroadshv.org
lists.downeycubscouts.com
lists.larochepottery.com
lists.locallygrownnorthfield.org
lists.luckypet.com
lists.lylefire.com
lists.magnaenterprise.net
lists.malvernsweatlodge.com
lists.margaretmcgaffeyfisk.com
lists.marthamiller.com
lists.master-comasic.fr
lists.master-rosalind-franklin.fr
lists.masters-herbrand.fr
lists.mattiedaughtry.com
lists.maubc.com
lists.maubc.org
lists.maxpartner.com
lists.medinacoogs.org
lists.memorial-umc.org
lists.menschworks.com
lists.mgstudios.biz
lists.mikebrayton.com
lists.mistbinder.org
lists.mldirtworks.com
lists.mmfcf.com
lists.momsclubofeastlyme.org
lists.moneytowrite.com
lists.mpowir.org
lists.mtmplayers.org
lists.mupc.org
lists.murorosso.com
lists.musictherapynewengland.org
lists.mvranews.com
lists.mwsn.ca
lists.mypcshomecare.net
lists.mypocketchurch.com
lists.mysticaljudaism.net
lists.mysticaljudaism.org
lists.myturnmobile.com
lists.n8hee.com
lists.nacaa.com
lists.nationallawyersguild.org
lists.nativitycathedral.org
lists.ncas.org
lists.neighborswhocare.net
lists.nekos-dedricks.com
lists.nekosdedricks.com
lists.nekosdedrickspharmacy.com
lists.neonsigh.com
lists.newenglandmusictherapy.org
lists.nhaama.org
lists.nickmathews.com
lists.nikha.org
lists.nikibiki.com
lists.nikibiki.net
lists.nlgnyc.org
lists.nonchalance.com
lists.nonchalance.org
lists.northernvirginiayouthwinds.org
lists.northfieldearthday.com
lists.northfieldeastside.org
lists.novanow.org
lists.npcomp.com
lists.nvyw.org
lists.nwbasketweavers.org
lists.nycreative.biz
lists.nylandcohousing.org
lists.oaklandfieldofdreams.org
lists.oaklandish.org
lists.oaklandtech.com
lists.officematebook.com
lists.offsetworld.com
lists.oldriveryf.com
lists.oldriveryouth.com
lists.oldriveryouthfoundation.com
lists.oldtownlafayette.com
lists.operapopolare.com
lists.orangecountyregional.com
lists.oregonglassguild.com
lists.oregonglassguild.org
lists.orks.org
lists.orleanspondcoalition.org
lists.ossweb.com
lists.otolithonline.com
lists.ozonofilguate.com
lists.pacificsouthwestregional.com
lists.pacoeweb.com
lists.palmspringsregional.com
lists.paperhat.org
lists.pcconsumibles.com
lists.pent.com
lists.peroxygensolutions.com
lists.znrcds.com

Other certificates including the domain name crossroadshudsonvalley.org

(limited to 100 certificates)
lists.larochepottery.com
*.twohandsfree.org
*.ealingneu.org.uk
*.shawnkowaleski.net
*.ealingneu.org.uk
*.keithavenue.org
*.michellejungart.com
*.twohandsfree.org
customers.tigertech.net
*.specializedtrans.net
lists.carsplusdms.com
lists.yeshuarts.com
customers.tigertech.net
lists.mikebrayton.com
customers.tigertech.net
lists.crossroadshudsonvalley.org
*.aetrox.net
customers.tigertech.net
customers.tigertech.net
lists.crossroadshudsonvalley.org
lists.crossroadshudsonvalley.org
customers.tigertech.net
customers.tigertech.net
lists.cfms.org
customers.tigertech.net
*.bmxweekly.com
customers.tigertech.net
lists.leonard-harris.com
lists.locallygrownnorthfield.org
lists.crossroadshudsonvalley.org
*.healinghorsesfoundation.org
customers.tigertech.net

Certificate

The complete raw certificate details for lists.crossroadshudsonvalley.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlF6Klu0djG8c+5SeUp
L7N+ejHU/fT2yivnlOWRX3nFqPgCr2PQofgXPSNK6XMbMLZUAUR1Mwx0XI9cp35h
QkqIyK/ekonNY1YBhH/X0ThI41X8UYdrCAsdrFvd0F4CQZnFw3k7B64WGdlYVUyx
sgSj4JwaFtUZoqc8uPuuY7JY8qWq1TdKAuT9EW5gik9yK1sD8q3GKH+Ofx6E/npz
jmNZuCR9QntAinRLbHmW+rcbKk2iZ6QRUAsIYdXByRt39JqAMFTwmCZr1Cd3SH6J
1HiIEhPoptD0Qa74xBhrAqDtzMUKUDWQ4b7cibJ4rSQCMnH/I2KDyyyQyPYsz5yi
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305933676573283616060162002578853131228516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 07:58:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 07:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.crossroadshudsonvalley.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27650761514427149602033558811317846423207531556153438554187510783830505669673197512410116943173028157684872969702828790075113033339834758379576366116634491429824057950069752812888773121015244804462686950096095981115547671260512974887432280576810073398469123666507412683513098342118399040218130758183196571946608721694064927579899192393114819393786474948947108760406597093406235713436093498623941738664624220023524878123301456118276278304701546529991055038316670777107709752291633363287118960082885591993765727588309300066845799677100049170165435207833019534795880921481308954969360249412381206461707265996179963159279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ac1dda49f61a2b40e151e64e9617188146fe352
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.crossroadshudsonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.crossroadshv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.downeycubscouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.larochepottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.locallygrownnorthfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.luckypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lylefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.magnaenterprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.malvernsweatlodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.margaretmcgaffeyfisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.marthamiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.master-comasic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.master-rosalind-franklin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.masters-herbrand.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mattiedaughtry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maubc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maubc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.maxpartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.medinacoogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.memorial-umc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.menschworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mgstudios.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mikebrayton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mistbinder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mldirtworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mmfcf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.momsclubofeastlyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.moneytowrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mpowir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mtmplayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mupc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.murorosso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.musictherapynewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mvranews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mwsn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mypcshomecare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mypocketchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mysticaljudaism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mysticaljudaism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.myturnmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.n8hee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nacaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nationallawyersguild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nativitycathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ncas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.neighborswhocare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nekos-dedricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nekosdedricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nekosdedrickspharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.neonsigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.newenglandmusictherapy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nhaama.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nickmathews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nikha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nikibiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nikibiki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nlgnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nonchalance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nonchalance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.northernvirginiayouthwinds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.northfieldearthday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.northfieldeastside.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.novanow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.npcomp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nvyw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nwbasketweavers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nycreative.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.nylandcohousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oaklandfieldofdreams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oaklandish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oaklandtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.officematebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.offsetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oldriveryf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oldriveryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oldriveryouthfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oldtownlafayette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.operapopolare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.orangecountyregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oregonglassguild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oregonglassguild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.orks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.orleanspondcoalition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ossweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.otolithonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ozonofilguate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.pacificsouthwestregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.pacoeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.palmspringsregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.paperhat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.pcconsumibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.pent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.peroxygensolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.znrcds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170578531bb0000040300483046022100d010106721f2e4f927034ed62de48054be3f244eea68fe2f60f436111088d240022100927cb48c4a88a92aa0cd674eec526664b3447bfd60f531347c352a3fc09cbda2007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170578531bb0000040300483046022100da99e3410747a4516606250dba0de94002ba0167843c3c68fba934a1a302fad0022100b1579b191d6924506d36c44bf88d9148192023b4888a81d4e85e601264703198
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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