paragonschools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:97:89:8d:06:d4:3e:49:3d:58:96:9c:5f:87:b0:4d:71 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paragonschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:97:89:8d:06:d4:3e:49:3d:58:96:9c:5f:87:b0:4d:71
Serial Number (int): 275489862471433167721382086119538438458737
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:cb:f1:e9:02:87:35:ef:2c:c1:da:d7:d4:71:3c:12:c7:61:70:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:5d:24:00:da:ee:9c:9d:67:d9:79:da:38:52:a5:21:d0:78:32:f3
Fingerprint (sha256): cb:ee:1e:94:1d:15:64:21:17:f0:a8:64:8c:7c:6f:d3:ab:20:28:e8:78:00:f3:25:ab:ee:f0:3b:5a:0e:c0:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate paragonschools.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paragonschools.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

112streetshops.com
acoustichymns.com
appsandplugins.com
aquidescuentos.com
arasapps.com
bellalawns.com
blazingphotos.com
bowlingpos.com
brainios.com
buyuseddomains.com
campichestudios.com
canonizations.com
coatigans.com
collegeseniorphotos.com
concessionspos.com
conveniencepos.com
conveniencestorepos.com
corporatemediasolutions.com
coryevans.com
creditcardpaymentsolutions.com
designingtools.com
digitaltowns.com
directedsolutions.com
discountedmaps.com
easyadsolutions.com
ebargainshops.com
englishteachingprograms.com
ethergems.com
experiencelagos.com
familylawforms.com
fantasticlogos.com
finalinspections.com
flythrough3dvideos.com
friedpecans.com
getrarestamps.com
ghrams.com
gimmebitcoins.com
globalproductsolutions.com
golfcoursepos.com
gymitems.com
headrestscreens.com
healthyhomegardens.com
healthyhomeinsulations.com
healthyhomepools.com
hedirectsmysteps.com
homekitchens.com
howtogetthewomanofyourdreams.com
hsdreams.com
ijos.com
interactsolutions.com
internetstoredesigns.com
ipauctions.com
ipfourauctions.com
lasbros.com
lastchancefarms.com
leadingmortgagesolutions.com
magicmaneflatirons.com
mannixpools.com
marijuana-tax-stamps.com
matthewcollins.com
missgoldengirls.com
mobileonlinecasinos.com
modernpromotions.com
mosleydolphins.com
neopearls.com
networldcasinos.com
obtaindomains.com
paintedsoultattoos.com
paragonschools.com
paseahorros.com
poconoexcursions.com
posforconcessions.com
posforzoos.com
presencemeditations.com
profitpullingflips.com
questinspections.com
remoteurls.com
rentalpropertyloans.com
roboticsscienceandsystems.com
salestaxforms.com
shoredreams.com
shoredreamsvacations.com
smith-wessonforums.com
spamarketingtools.com
suitephotos.com
sxjeans.com
textscams.com
thebestflatirons.com
thegreenerystudios.com
thehotelpos.com
tigershops.com
toursarqueologicos.com
umiworkshops.com
unnaturalselections.com
visualbasicforums.com
workstayprograms.com
yachtins.com
yourdreamcondos.com
yourswins.com

Other certificates including the domain name paragonschools.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for paragonschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXBGWvolInroUQVhV8jv
tTfDnaDNrGCP2Z8gikiU+YtG/CN8WhyruH55RPjC4rMmMXmopNERuwiPCAwyE9Np
nGOjMGzbrnl83+Qyc6J+M3arnM/v7I5YkYhwyXs70mHgUDw1bpAfXH6Vu8TN0phf
k8Q+rZWVkaXJHAjovJgy2827t4Mv/WioqJs8aStRAKGMtqBQEIRUEckhAL3x+Mcr
IjCK6QxaQ/zZKwmHgnguJgmzwWUo3AnfzbFNWWqDcK1UGsMuUUZrEP4Lx6pbZ6Xx
L+b0qIgwShh0otRj6ruBcrB+xHs2+ATfLh1HEYAQLuiEZ775d+GAavrGyLNBAICB
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275489862471433167721382086119538438458737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 08:23:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 08:23:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paragonschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22399544759019061919887171704143911982936946211649212851104090763237436141418699558176927148220037357077602964566997840240404829519114881173065518943889852824407648713339541203016252397348512216592025947658519082290590516670188797696143937258891831358902660527581972291881672237292382796024038593408012212403581836375601533052573985643239111207528818905024817908734872676371180861674345646991146003735578172180323432750283113175897253396740303324886604258133450046931067286312405094893692722188000362972970392287841258270273821240712250127723549301860097401848438138781517103413562577072941826335177446330758068207901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fcbf1e9028735ef2cc1dad7d4713c12c76170e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2035 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '112streetshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acoustichymns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsandplugins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquidescuentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arasapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellalawns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blazingphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlingpos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyuseddomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campichestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canonizations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coatigans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeseniorphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concessionspos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conveniencepos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conveniencestorepos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatemediasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coryevans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designingtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaltowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directedsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discountedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyadsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebargainshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishteachingprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethergems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiencelagos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familylawforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasticlogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalinspections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flythrough3dvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friedpecans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getrarestamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghrams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gimmebitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalproductsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfcoursepos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymitems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headrestscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomegardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomeinsulations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomepools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedirectsmysteps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homekitchens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtogetthewomanofyourdreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsdreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetstoredesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfourauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastchancefarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadingmortgagesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicmaneflatirons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannixpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marijuana-tax-stamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewcollins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missgoldengirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileonlinecasinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosleydolphins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neopearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networldcasinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obtaindomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintedsoultattoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paragonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paseahorros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poconoexcursions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posforconcessions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posforzoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presencemeditations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profitpullingflips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questinspections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoteurls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentalpropertyloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roboticsscienceandsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salestaxforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoredreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoredreamsvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smith-wessonforums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spamarketingtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitephotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxjeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textscams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestflatirons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreenerystudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehotelpos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigershops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toursarqueologicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiworkshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unnaturalselections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualbasicforums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workstayprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourdreamcondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourswins.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ae400c4a8000004030046304402206c0035ab53ca2328a8207ff32858d269bee13a838e347fdea084f298146daa7502207fb97e7cc31903b99d9f98d1be6eadee7f47157b7025cd544262d5e45d5f7025007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ae400c2d60000040300473045022100b437bd2f5358bc9fa2c6abb4d37e3c8ce765c71db378db2a5baf042cee75e13b02202385fad2c97e5f76685984862776284443008a088308a563770658af0d236de3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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