www.bankown.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:6b:6b:96:fe:71:19:49:f7:ac:9a:cd:69:c6:78:77:85 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bankown.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:6b:6b:96:fe:71:19:49:f7:ac:9a:cd:69:c6:78:77:85
Serial Number (int): 328515270112538862672044000504422153615237
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:37:5b:a4:87:d3:03:b6:91:f8:af:57:62:6f:e3:21:43:bd:08:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e4:8a:ad:13:b3:13:cb:81:11:c6:58:3c:07:d5:79:89:04:10:14:1e
Fingerprint (sha256): c5:2c:5f:62:ea:fa:3c:22:c7:e8:06:9b:ea:57:b5:4c:c8:08:72:40:02:4e:9c:76:ca:60:c4:f7:fa:30:5b:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bankown.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bankown.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

almaplena.com
azforeclosureprevention.org
bancodecomercio.com
bankown.com
basketballcrush.com
bessin.com
bettelyoun.com
betterthanmost.com
bilmar.com
blonigen.com
bonnebaise.com
clickerticker.com
corporatedebitcard.com
dambra.com
desotell.com
devarajan.com
diache.com
easymexicanfood.com
esvce.bible
festicciole.com
firemouse.com
fladger.com
fleszar.com
gaetan.com
go81.info
hauspreise.com
knewso.com
krapahut.com
lacoll.com
methalizaswahili.com
nissini.com
novamundi.com
operereligiose.com
perumagazine.com
prostatepharmacy.com
radiosistemi.com
segwo.com
sextalkcafe.com
snoringpillows.com
sportsdoctorsnewjersey.com
state-street.com
studywars.com
substanceabusehelp.org
technu.com
texasdentalhygienist.com
thecbddistillery.co.uk
threerivershomehealth.com
twitch.me
viewfinderphotography.com
www.almaplena.com
www.azforeclosureprevention.org
www.bancodecomercio.com
www.bankown.com
www.basketballcrush.com
www.bessin.com
www.bettelyoun.com
www.betterthanmost.com
www.bilmar.com
www.blonigen.com
www.bonnebaise.com
www.clickerticker.com
www.corporatedebitcard.com
www.dambra.com
www.desotell.com
www.devarajan.com
www.diache.com
www.easymexicanfood.com
www.esvce.bible
www.festicciole.com
www.firemouse.com
www.fladger.com
www.fleszar.com
www.gaetan.com
www.go81.info
www.hauspreise.com
www.knewso.com
www.krapahut.com
www.lacoll.com
www.methalizaswahili.com
www.nissini.com
www.novamundi.com
www.operereligiose.com
www.perumagazine.com
www.prostatepharmacy.com
www.radiosistemi.com
www.segwo.com
www.sextalkcafe.com
www.snoringpillows.com
www.sportsdoctorsnewjersey.com
www.state-street.com
www.studywars.com
www.substanceabusehelp.org
www.technu.com
www.texasdentalhygienist.com
www.thecbddistillery.co.uk
www.threerivershomehealth.com
www.twitch.me
www.viewfinderphotography.com
www.yougurt.com
yougurt.com

Other certificates including the domain name bankown.com

(limited to 100 certificates)
caribbeantransfer.com
giaidethi.com
datingfrontier.com
iniciaadif.es
luxespas.com
alreport.com
bankown.com
musao.com
www.bankown.com
iniciaadif.es

Certificate

The complete raw certificate details for www.bankown.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nUBqMgTTrqLie8iAQef
qkDgOLLW14j6LSRh2Mx0hO+J7VfCWrUeg5WRoygfC/DCuzQ8CUFY/UhedHB6dUek
Rpv0dXXUDZd+izOXs50VMohV12mdLzaEG5w0QWSGsRJSGreJ94T3/+pBquNKUi78
HGPYt8nv5Y+n21zaqrq6up9lk9C5F5Ly4VU6duzeKj1IK/IqwVKWLMsB93j8gri3
l+8Y7HZTZP4A6fghA7cdOJiRYwJ8zdK8ri3iEvRfwoSATUn4Caoy5Wjq0uJ1/Zfj
rU2SEdqk5WoUGpNUMve633OlVWFCiH1uQKbxi0AKla564BDcoe36WmnxzcE0+nmn
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328515270112538862672044000504422153615237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 10:39:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 10:39:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bankown.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31112321068188659583707810135944782938186370686309029201697616443956044579032828535281441083200547925404070565609617703771773270124969618792697160443569010812204280167146327942780271679298842598340940350707378442357250628657453967307308176853678996954137801240300497972409230713085444347493044160588284082677978919017735704646021410867191169174956716819688152426440421424219096041392858326261703498042505222483241340623161167478073500337287926611524526282738901670007472640188040784971463989346504397735016052764848733738618574580899454042731701812655610430017465105760244329939488148773109540645499471442214064334603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6375ba487d303b691f8af57626fe32143bd0809
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaplena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azforeclosureprevention.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancodecomercio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballcrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bessin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettelyoun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterthanmost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blonigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnebaise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickerticker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatedebitcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dambra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desotell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devarajan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easymexicanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esvce.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festicciole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firemouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fladger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleszar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaetan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go81.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hauspreise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knewso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krapahut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methalizaswahili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nissini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamundi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operereligiose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perumagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prostatepharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiosistemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sextalkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snoringpillows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsdoctorsnewjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'state-street.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studywars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substanceabusehelp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasdentalhygienist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecbddistillery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threerivershomehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewfinderphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almaplena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azforeclosureprevention.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bancodecomercio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballcrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bessin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettelyoun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterthanmost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bilmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blonigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonnebaise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clickerticker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatedebitcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dambra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desotell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devarajan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easymexicanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esvce.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.festicciole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firemouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fladger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fleszar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaetan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.go81.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hauspreise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knewso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krapahut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.methalizaswahili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nissini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novamundi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operereligiose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perumagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prostatepharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiosistemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sextalkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snoringpillows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsdoctorsnewjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.state-street.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studywars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.substanceabusehelp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasdentalhygienist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecbddistillery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threerivershomehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twitch.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewfinderphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yougurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yougurt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017163e2e2b300000403004830460221009b2df5b9444fc5ba5bb8167c45408545bffe2ff349acd7485b56d76c36f3a036022100df7ae593d04d1cdf1b652d410185096489916b58194975f1f6cc63c4c90e02e10075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017163e2e2df0000040300463044022026ca0dcbfac874486569200bd7c521d34489b694c38df064891d8056ad3bb566022064e1f76243cf31e15261f15780856e788c57e0ed984889db72082c59222ef020
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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