hfmgdocs.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ab:e9:73:ea:95:57:50:20:8c:47:de:cd:c3:ad:43:c3:5d was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hfmgdocs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:e9:73:ea:95:57:50:20:8c:47:de:cd:c3:ad:43:c3:5d
Serial Number (int): 319835454533833699628412366551971229057885
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:9c:69:2f:ed:51:0f:93:55:2d:87:dd:96:b5:92:35:23:07:a4:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:c6:30:45:8e:9b:56:a0:4e:8a:40:a6:9a:7b:af:10:0f:22:ab:bd
Fingerprint (sha256): bd:27:57:d9:8f:52:d1:69:53:e2:7d:a5:ec:d1:2c:62:2d:8f:4c:b9:ac:f4:3c:4a:8e:0d:db:06:46:9f:55:b2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hfmgdocs.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hfmgdocs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.albumhuter.com
*.allensmithpools.com
*.amaizinghealthplus.com
*.bajaber.com
*.bespokemobile.com
*.binqiu.com
*.bostonsexclub.com
*.bulkseller.com
*.casapropiamx.com
*.chachie.com
*.cheul.com
*.chispas.com
*.cirelli.com
*.cocopa.com
*.condom.sg
*.confalonieri.com
*.cornerhouseblog.com
*.crokeparkhotel.com
*.dalealbo.com
*.deletra.com
*.djmarcolesco.me
*.elsonambulo.com
*.extremeworldresources.com
*.gatewaygrants.com
*.hearthsidecats.org
*.hfmgdocs.com
*.hispec.com
*.iptvitaliatop.net
*.manosmilagrosas.com
*.mayork.com
*.newjailbreak.com
*.nopu.org
*.ornans.com
*.otilio.com
*.pamwe.com
*.perledo.com
*.shangpa.com
*.siladi.com
*.sketchuponline.com
*.smithen.com
*.stickwoman.com
*.theresponsegroup.com
*.trustes.com
*.usedtiresandwheels.com
*.victorion.com
*.westergyllen.com
*.yourgithost.com
*.youthletes.com
albumhuter.com
allensmithpools.com
amaizinghealthplus.com
bajaber.com
bespokemobile.com
binqiu.com
bostonsexclub.com
bulkseller.com
casapropiamx.com
chachie.com
cheul.com
chispas.com
cirelli.com
cocopa.com
condom.sg
confalonieri.com
cornerhouseblog.com
crokeparkhotel.com
dalealbo.com
deletra.com
djmarcolesco.me
elsonambulo.com
extremeworldresources.com
gatewaygrants.com
hearthsidecats.org
hfmgdocs.com
hispec.com
iptvitaliatop.net
manosmilagrosas.com
mayork.com
newjailbreak.com
nopu.org
ornans.com
otilio.com
pamwe.com
perledo.com
shangpa.com
siladi.com
sketchuponline.com
smithen.com
stickwoman.com
theresponsegroup.com
trustes.com
usedtiresandwheels.com
victorion.com
westergyllen.com
yourgithost.com
youthletes.com

Other certificates including the domain name hfmgdocs.com

(limited to 100 certificates)
hfmgdocs.com

Certificate

The complete raw certificate details for hfmgdocs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319835454533833699628412366551971229057885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-12 04:16:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-12 04:16:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hfmgdocs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 619233621118619131467353116430942529357189244328899689556549184997003846513734473122373286093136985538199027406900990135276572303298136038131667141517031303752403672475834848235071915169903155284263367591914460114308837056768266617075177942502535109194090398229882042488475923093553120127984752912636371184614726820203003557365634186260132104754408664661228146931872169503709433731853528717566015980913749253508822911767368230984188393282167491098030241127777369341379406879305267690798360317909784889115271003455206092342116301949220742609684298239551992510819227125959732520877386674756523561944147973651149921515675079440829880020446966076660913345982560131177059770411153156339686949415254134356414330584996986296292236028922677157017666423754858028144802840961474596359906504254385886940777820332437225611548692480913359222237435018603192213553557686142481915551075957981991822417845855604333935343755640126625390101397023568966557164150958031609796602346690638474791215176595659407356721899086545983685355419166388291021348265780912470502641833117271359036592672647529889769437485853518897166220451158915469403062598861134517540673084211266903669130654851390176813015303497573896487198918960196939792412240321256648711455611839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							339c692fed510f93552d87dd96b592352307a4f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1640 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albumhuter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allensmithpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amaizinghealthplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bajaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bespokemobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binqiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bostonsexclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulkseller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casapropiamx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chachie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chispas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cirelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocopa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condom.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.confalonieri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cornerhouseblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crokeparkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dalealbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deletra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djmarcolesco.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsonambulo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extremeworldresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gatewaygrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearthsidecats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hfmgdocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hispec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iptvitaliatop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manosmilagrosas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newjailbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nopu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ornans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pamwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perledo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shangpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siladi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sketchuponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smithen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stickwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theresponsegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usedtiresandwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westergyllen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourgithost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youthletes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albumhuter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allensmithpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amaizinghealthplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bajaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespokemobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binqiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonsexclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulkseller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casapropiamx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chachie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chispas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocopa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condom.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confalonieri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornerhouseblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crokeparkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalealbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deletra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djmarcolesco.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsonambulo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremeworldresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewaygrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearthsidecats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfmgdocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hispec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvitaliatop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manosmilagrosas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjailbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nopu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ornans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perledo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shangpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siladi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sketchuponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stickwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theresponsegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedtiresandwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westergyllen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourgithost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youthletes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000176f50623070000040300473045022100a8051de578620329dbb7b5710e00e372ef23915a2693719a42b517a4d46bed77022059f208ae454eda3281c8dc804ca0ca1519ff2c8214b986f4c631de16b74798610075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000176f506232c000004030046304402201ee9f6eee22ec30e811fdafe381c89870186ff0ece5e94f82c256eafbd3d92bd022002918ce9db2449795fb4523aca734352075cb7ed626c0cef83c0620c84680304
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002deafbf8ea96548c18793bfb040ab2ea3dbbd3e213bda174154154cff3db426a1583ddd3b5f60018bcc84d5b8e22fd7606696b7e2c7a35e80109c0006324d0c97f3db6e96c3e766f0e895b3e53e19ad5f564138ca6f1e45ac3ce984f52ee3c0dde47c2d2df2e67d4ebd5112111b61fdefd81188787338206a3dbe75a6149b4d2cb988e3114a3615f441dfd989a018b4b8b56ccb8c615ad6be3953d1ca1ca92c69272da2b16d15b0f9c604297f19c4e4da94359dec1644477bce2b1d432652837fd3709171e8b951fe54be34a70b998c2da2aaa0138f6aa290aadb12918f09eb38ab9517ca28de529ad3b5191c4bf9051c51b969ecfe4564442eb940cccb254e5