www.bayareastructural.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ce:e7:9f:68:bf:e9:e1:68:b9:95:3a:14:55:71:a4:dd:8c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bayareastructural.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ce:e7:9f:68:bf:e9:e1:68:b9:95:3a:14:55:71:a4:dd:8c
Serial Number (int): 331742904747796446347706097483338435845516
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:17:1b:ac:85:51:a5:de:c7:05:d7:bd:93:4c:a6:79:fc:bf:31:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:18:57:c9:f4:64:d8:b3:31:b2:bb:ea:87:fe:24:91:ce:c1:98:41
Fingerprint (sha256): c3:02:10:7e:5e:c5:c9:03:75:1f:12:03:09:bd:39:aa:3b:bb:7c:64:02:81:f5:45:15:02:f0:79:37:44:b5:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bayareastructural.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bayareastructural.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afccupbetting.com
arbitragetokyo.com
austinyogastudio.com
bayareastructural.com
blizzam.com
brony.team
casinoengine.online
cheaperthanretail.com
chiyako.com
conservancy.network
dentistcapital.com
denverbicycleshop.com
dollardownauto.com
drinkgallon.com
eliminatingdebt.org
filmedownloaden.com
happyplacebar.com
hempcannabidiol.com
jointpainwyoming.com
keywestattraction.com
lasvegasthisweek.com
londonmoleremoval.com
londonrap.com
maia.online
manvitamin.com
mehmeduzun.com
mengjing.com
newporthospitalfoundation.com
newporthospitalfoundation.org
nightadventuresmontreal.com
nomedo.com
perscriptionaddiction.com
plateletplasmainjection.com
podcasttranslation.com
science.horse
screamatthewall.com
smartparks.network
spiritemoji.com
spiritmoji.com
tennesseejointpain.com
terranamerican.com
texaswrongfultermination.com
traveal.com
umichurch.com
urbanfaithchurch.com
volfra.com
waterfrontdistinction.com
waterk.com
www.afccupbetting.com
www.arbitragetokyo.com
www.austinyogastudio.com
www.bayareastructural.com
www.blizzam.com
www.brony.team
www.casinoengine.online
www.cheaperthanretail.com
www.chiyako.com
www.conservancy.network
www.dentistcapital.com
www.denverbicycleshop.com
www.dollardownauto.com
www.drinkgallon.com
www.eliminatingdebt.org
www.filmedownloaden.com
www.happyplacebar.com
www.hempcannabidiol.com
www.jointpainwyoming.com
www.keywestattraction.com
www.lasvegasthisweek.com
www.londonmoleremoval.com
www.londonrap.com
www.maia.online
www.manvitamin.com
www.mehmeduzun.com
www.mengjing.com
www.newporthospitalfoundation.com
www.newporthospitalfoundation.org
www.nightadventuresmontreal.com
www.nomedo.com
www.perscriptionaddiction.com
www.plateletplasmainjection.com
www.podcasttranslation.com
www.science.horse
www.screamatthewall.com
www.smartparks.network
www.spiritemoji.com
www.spiritmoji.com
www.tennesseejointpain.com
www.terranamerican.com
www.texaswrongfultermination.com
www.traveal.com
www.umichurch.com
www.urbanfaithchurch.com
www.volfra.com
www.waterfrontdistinction.com
www.waterk.com
www.yahvsvi.com
www.yourkombucha.com
yahvsvi.com
yourkombucha.com

Other certificates including the domain name bayareastructural.com

(limited to 100 certificates)
bayareastructural.com
bayareastructural.com
bayareastructural.com
bayareastructural.com
www.bayareastructural.com
bayareastructural.com
bayareastructural.com
bayareastructural.com

Certificate

The complete raw certificate details for www.bayareastructural.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRGQ1j/7w2aocGzUQZjI
pcUVk9+6Qog6/LJ6JG4dNVenel3VpE+9iq8g7YtVMIkOoJjpmtq7oh1ude6AxQcD
S//ebut++b94R017+56Pwfr63MMQzzzVbEg/EgNyEpvofN+5Ub3MUybu/AP8y9WI
APHegEkkqaFx66l3emqSkC1Y/0gwAMYbrcPTHhXBamo4XjQMJkNohypA2zV9KKmz
+7p7FD14Yq6Aoc+iaDwm5YenRY8loXNVMLfYuuNyzfiwrBjqUzLxbIZkQnLAgstQ
IumBpUCMy7SaJc8k2SmQV3YK3lFwRSjoAxA9UGfm6GGmp4BHv6vbvqKnDMsbK4d3
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331742904747796446347706097483338435845516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 19:43:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 19:43:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bayareastructural.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24372654862076452970058743251850290954260922734437748813144245705663991728871429098849379219605037114439093038411660116646878809935823522867785822223096149690163600002497430901994218766265340227006924918249103704104531103114792783395328282600792470634283526634472734782498824374593772919172137336389223351708211866919327352845360751019794994214836773902043917202939787511899982742932043008881537354423065688000802642074801015867071209255272351658382371661401539983570091657707281913746438074847345403499420434594113916542318709337561307374439511234508180094500509940585869047787771096011856665229572804083029411067681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89171bac8551a5dec705d7bd934ca679fcbf316f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afccupbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragetokyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinyogastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayareastructural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blizzam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brony.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoengine.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheaperthanretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiyako.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservancy.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverbicycleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollardownauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkgallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliminatingdebt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmedownloaden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyplacebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempcannabidiol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainwyoming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestattraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegasthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonmoleremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manvitamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehmeduzun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mengjing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newporthospitalfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newporthospitalfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightadventuresmontreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perscriptionaddiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plateletplasmainjection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcasttranslation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.horse'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screamatthewall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartparks.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritemoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennesseejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terranamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswrongfultermination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traveal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umichurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanfaithchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volfra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfrontdistinction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afccupbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arbitragetokyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.austinyogastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayareastructural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blizzam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brony.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinoengine.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheaperthanretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiyako.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conservancy.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentistcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denverbicycleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dollardownauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkgallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliminatingdebt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmedownloaden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happyplacebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hempcannabidiol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainwyoming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keywestattraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lasvegasthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonmoleremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manvitamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mehmeduzun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mengjing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newporthospitalfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newporthospitalfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nightadventuresmontreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nomedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perscriptionaddiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plateletplasmainjection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podcasttranslation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.science.horse'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.screamatthewall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartparks.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritemoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennesseejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terranamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texaswrongfultermination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traveal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umichurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbanfaithchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volfra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterfrontdistinction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yahvsvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourkombucha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahvsvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourkombucha.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017141c8770300000403004630440220623ceb7e10e976f6b61906dd4121f286ca72934538b36dc16fd79332089415ff02202c6daff6d8bf9262ff98afe25dc7d4eb62fb279792a03187a296c049828893e100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017141c877080000040300473045022027577b06845f1cec78e10ecc1a2a21d61fb1fb3c377c7251b88e7613a6c633a2022100f42119c5d0773d45c9466bd4ac1f913691c2d13e84638827c26c6a4d95e940b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0070c1055b51204d56006961affd73b9e855721f1f697b3b3a623172a8411f8c17c8373a7a03b9a548dacd1185b3c7e9e29c788b8b2b5c156174660be3b65fdab12a5d0e2c7f90d79951db42bd6d14ec832504865283440f16cb0df23a48820a0c674961ec690ccec787b44c5e5176ad32294aced51ff5523df00cc969d78b2867c545dc61ba7d4fcf27eb34c1562909d9fbe2355ecf7ab000d22f06ebd9065554ee614b4e6de8f6a843a4eaf39676018e42e7c8fe74ab525903be9dac544dbc3752e98ba69fcafd2201d6c6a580e6e3714da346f8f5e96822b60fde27a2e70e64c19f3a4c5426071c12807735a41f8587d15fabbe87c6b3c89e41a2b59f06c703