www.citireading.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:a7:ba:6d:e9:10:71:63:fb:21:99:e0:d9:4c:57:26:32 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.citireading.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:a7:ba:6d:e9:10:71:63:fb:21:99:e0:d9:4c:57:26:32
Serial Number (int): 271768277874668559777264039805772109391410
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:aa:87:b4:a0:eb:cc:4e:ab:8a:42:bd:eb:68:dd:d8:4a:93:5e:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:04:c4:18:3f:a3:d5:52:33:71:5b:37:e3:c3:08:5b:63:72:b0:8b
Fingerprint (sha256): c3:4c:a8:35:3b:a7:55:b3:41:9b:ce:b9:33:05:b3:cc:0e:2d:f3:05:b3:b7:7f:77:4e:70:69:f9:48:32:cb:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.citireading.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.citireading.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5thbase.com
advancedcannabisscience.com
ashlandmississippi.com
bannedstuff.com
bitminingcloud.com
cafecreole.com
casinodynamite.com
christianbooks.bible
cirurgiaonline.com
citireading.com
clearwaterxperience.com
coashere.com
columbusregenerativemedicine.com
connecticutregenerativemedicine.com
contentsandhomeinsurance.com
davestreeservice.com
decideforme.com
diebibel.bible
drone-case.com
encryptwise.com
epikmortgage.com
examinationtable.com
flexible-hose.com
hafweed.com
juggyd.com
labtesthere.com
labtestshere.com
lemonademortgage.com
magnotherapie.com
mapmakerexchange.com
montrealcarpetcleaning.com
msrpvaluescore.com
naturalinsomniacure.com
nonne.com
onlinecasinosdelaware.com
petconnectonline.com
pontotocmississippi.com
razorpage.com
roadtrekdodge.com
skillchecked.com
stemcellspokane.com
sweetlybaked.com
thermosbottle.com
tkdone.com
townofmyrtle.com
townofsnowlake.com
ussturtle.com
vbebe.com
www.5thbase.com
www.advancedcannabisscience.com
www.ashlandmississippi.com
www.bannedstuff.com
www.bitminingcloud.com
www.cafecreole.com
www.casinodynamite.com
www.christianbooks.bible
www.cirurgiaonline.com
www.citireading.com
www.clearwaterxperience.com
www.coashere.com
www.columbusregenerativemedicine.com
www.connecticutregenerativemedicine.com
www.contentsandhomeinsurance.com
www.davestreeservice.com
www.decideforme.com
www.diebibel.bible
www.drone-case.com
www.encryptwise.com
www.epikmortgage.com
www.examinationtable.com
www.flexible-hose.com
www.hafweed.com
www.juggyd.com
www.labtesthere.com
www.labtestshere.com
www.lemonademortgage.com
www.magnotherapie.com
www.mapmakerexchange.com
www.montrealcarpetcleaning.com
www.msrpvaluescore.com
www.naturalinsomniacure.com
www.nonne.com
www.onlinecasinosdelaware.com
www.petconnectonline.com
www.pontotocmississippi.com
www.razorpage.com
www.roadtrekdodge.com
www.skillchecked.com
www.stemcellspokane.com
www.sweetlybaked.com
www.thermosbottle.com
www.tkdone.com
www.townofmyrtle.com
www.townofsnowlake.com
www.ussturtle.com
www.vbebe.com
www.yaascbd.com
yaascbd.com

Other certificates including the domain name citireading.com

(limited to 100 certificates)
www.xn--4dbdbi2d.com
ecocom.org
cityofsaltillo.com
hollyspringsmississippi.com
foreverdee.co.uk.proudarvada.com
www.citireading.com
skillchecked.com

Certificate

The complete raw certificate details for www.citireading.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJdIUT3chWKoNP23lE6g
A2vgoYN0uUW+FdmMDt0XkB0QaBFK4cyGj61m1p7LWr73Ap1aztj9I+PYImDFA7Eu
T7nVA9lptDtLlsqY/JfGVJNlrvfhcTATWluW0fC1Va8CxIXebJPKtFND2a53mJpP
z0rjlQMHk4fEka0eatChXXnjWRGPqy9FVFyeo6U6pbhpIRa7BtRan6L+l9yTHnEI
SyJRcufGbiAhSDBh/ANoqC7drfsy6AtPvKiG4H3GMJwZYOHZgkHw2bGJ8w1915Yx
bRnPWuG9xbsKgNoCKtX/u9e8PFyDiKYeLsDqfGJuya11MOfK5YPbw4toEkcpWUli
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271768277874668559777264039805772109391410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 01:53:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 01:53:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.citireading.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21282635410330477154623675752595264250672232726501866715469103771363476567994733505294823395113599091218302343838274777279214816450838266453565377554203732028508431216792379322476796147922067044710593278897445002767734620696060849531626900136802732613093684659248559959708135405619652726312939376750734190728738682878166753420998113734599198864598092211380983100561634229596960339442328714667087143537281962290462205235133259936143244652075212550133763130874508762099759190677678387171384826581630768140315191352025576755418165357773510399229037326808130985199850213651249059022785398956400035475214892099534561305143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63aa87b4a0ebcc4eab8a42bdeb68ddd84a935ed2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2130 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5thbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedcannabisscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandmississippi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannedstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitminingcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafecreole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinodynamite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianbooks.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirurgiaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citireading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearwaterxperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coashere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticutregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentsandhomeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davestreeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decideforme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diebibel.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drone-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encryptwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epikmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examinationtable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexible-hose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafweed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juggyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labtesthere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labtestshere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonademortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnotherapie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapmakerexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montrealcarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msrpvaluescore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalinsomniacure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecasinosdelaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petconnectonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pontotocmississippi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'razorpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadtrekdodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillchecked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetlybaked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermosbottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkdone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofmyrtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofsnowlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vbebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5thbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedcannabisscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlandmississippi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bannedstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitminingcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafecreole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinodynamite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christianbooks.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cirurgiaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citireading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearwaterxperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coashere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecticutregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contentsandhomeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davestreeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decideforme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diebibel.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drone-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encryptwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epikmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.examinationtable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexible-hose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hafweed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juggyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labtesthere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labtestshere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemonademortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnotherapie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapmakerexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montrealcarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msrpvaluescore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalinsomniacure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecasinosdelaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petconnectonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pontotocmississippi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.razorpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadtrekdodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skillchecked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellspokane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweetlybaked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermosbottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkdone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofmyrtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofsnowlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ussturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vbebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yaascbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaascbd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171431bbc510000040300463044022059b9630172daaac7f03523a7d1ff2db0f870f27c8f69da726513b33264c6c392022076c5bb0effaa834a8963a10cef5a70d1a1dc37043dc156f0ad826170b326fe8b007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171431bbc40000004030048304602210082068028e25177892b5a56d96f2540e2b144d42f7d3bead338758c5c70d38292022100b0ddd81303a1f6b3d9beacb9692779666f14d16e30115efa8ede0d726cbf6fd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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