alphalion.goprimer.com

Issued by R3

About this certificate

This digital certificate with serial number 04:83:00:4c:29:14:b7:45:53:81:8e:76:62:d8:df:91:31:c7 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alphalion.goprimer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:83:00:4c:29:14:b7:45:53:81:8e:76:62:d8:df:91:31:c7
Serial Number (int): 393026529241465250514126387156884502163911
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 64:2e:01:c4:f6:08:df:c0:fe:67:62:47:71:4b:2d:dd:1e:ec:53:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:92:b8:89:5a:72:ff:5e:f2:11:5f:05:b3:eb:ee:cd:19:62:80:41
Fingerprint (sha256): cc:a5:dc:03:89:48:9d:3a:b1:db:23:ae:30:0a:bc:97:d9:66:f0:71:28:dd:e9:2a:30:08:b7:37:9d:50:83:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alphalion.goprimer.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alphalion.goprimer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alphalion.goprimer.com
apostrophe.goprimer.com
betterplaceforests.goprimer.com
breathe.milacares.com
buy.tonies.com
cameo.goprimer.com
clubmagichour.goprimer.com
criobru.goprimer.com
curalife.goprimer.com
cutbackcoach.goprimer.com
dario.goprimer.com
discover.betterplaceforests.com
discover.fieldtriphealth.com
diversyfund.goprimer.com
donefirst.goprimer.com
drink.criobru.com
evernow.goprimer.com
evernow2.goprimer.com
everymanjack.goprimer.com
explore.wineaccess.com
fieldtriphealth.goprimer.com
fiton.goprimer.com
gainful.goprimer.com
get.fitonapp.com
get.honehealth.com
get.metabolicrenewal.com
get.monarchmoney.com
get.montikids.com
getresults.iloveskininc.us
go.gainful.com
go.vaulthealth.com
goodfair.goprimer.com
honehealth.goprimer.com
invest.diversyfund.com
ladder.goprimer.com
langehair.goprimer.com
lifeprofitness.goprimer.com
metabolicrenewal.goprimer.com
mila.goprimer.com
monarchmoney.goprimer.com
montikids.goprimer.com
offer.mydario.com
otter.goprimer.com
picsart.goprimer.com
prowritingaid.goprimer.com
radfordbeauty.goprimer.com
rb.victoriaradford.com
rocksbox.goprimer.com
savvy.goprimer.com
secure.goprimer.com
shop.alphalion.com
shop.goodfair.com
skininc.goprimer.com
soothe.goprimer.com
start.farmsteadapp.com
start.getsunday.com
subscribe.rocksbox.com
sunday.goprimer.com
tonies.goprimer.com
try.apostrophe.com
try.cameo.com
try.clubmagichour.com
try.curalife.com
try.cutbackcoach.com
try.donefirst.com
try.evernow.co
try.evernow.com
try.everymanjack.com
try.joinladder.com
try.langehair.com
try.lifeprofitness.com
try.otter.ai
try.picsart.com
try.prowritingaid.com
try.savvy.insure
try.soothe.com
try.upstep.com
upstep.goprimer.com
vaulthealth.goprimer.com
wineaccess.goprimer.com

Other certificates including the domain name goprimer.com

(limited to 100 certificates)
apostrophe.goprimer.com
tls.automattic.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
getapp.in
getapp.in
5000772504.goprimer.co
allwellbeauty.goprimer.com
alphalion.goprimer.com
apostrophe.goprimer.com
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
alphalion.goprimer.com
allwellbeauty.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
getapp.in
goprimer.com
buy.letsbld.com
apostrophe.goprimer.com
tls.automattic.com
getapp.in
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
alphalion.goprimer.com
alphalion.goprimer.com
buy.letsbld.com
tls.automattic.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
ios.goprimer.com
allwellbeauty.goprimer.com
*.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
help.goprimer.com
apostrophe.goprimer.com
apostrophe.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
agirlnamedotis.goprimer.com
getapp.in
getapp.in
ios.goprimer.com
android.goprimer.com
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
tls.automattic.com
allwellbeauty.goprimer.com
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
tls.automattic.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
allwellbeauty.goprimer.com
alphalion.goprimer.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
aj.goprimer.co
getapp.in
apostrophe.goprimer.com
alphalion.goprimer.com
getapp.in
apostrophe.goprimer.com
help.goprimer.com
5000772504.goprimer.co
alphalion.goprimer.com
tls.automattic.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in

Certificate

The complete raw certificate details for alphalion.goprimer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOfViXQm2qyFiv/ZzC9k
pZl6zjdRs313Qo45gFz2TNq2MaPtOy8c+MaGJO7Nvw4uaxoKHVPlez4eCQnwvAwo
2h2m5g8D0IcjPhHuErv0rupho+x+9MonaXDdNMeiAId9q5TpKt2fCdDYl/nG6YYd
fpQogxcIRDMpm5D0VUzzfRkT0fW7kAnHf+nUXpGaPkF1Ef+Mlzmujq83kHEb0jga
jmf7uHVFzRVi+jPtxrLMYguQiLEiTLOXHeywSb397Z2I1LIIPKL0yWagZIcHDnu1
prHMl4d8prLLemoofnU8+42COZ2WfxfelYto3zzfA4ty0mZYSbNcgL6lJscgEDOS
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393026529241465250514126387156884502163911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-18 22:21:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-16 22:21:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alphalion.goprimer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25866935882729052275230815814679482167972102401014994906984536156864611899066546076603891805116004205292243552871693047737276323519198943512595384192469864635263277485472399452540416960360234767408753606783230685964322190680877866502342696612092398166292406027902297533166521144592162429725807888591788405638407915797182418400207584435199947002067387173427819940686707866150651991512757365201119163356390690574118066464698425972660466782962157379819487711893495186326379058473877806236091944699546177316972133466430849967312172405798998012760292942669803350449268851316413294818828316763533689401179382520018860479193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							642e01c4f608dfc0fe676247714b2ddd1eec5366
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphalion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterplaceforests.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breathe.milacares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.tonies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameo.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmagichour.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criobru.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dario.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.betterplaceforests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.fieldtriphealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donefirst.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drink.criobru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow2.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everymanjack.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldtriphealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainful.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.honehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.monarchmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getresults.iloveskininc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gainful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.vaulthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honehealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladder.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mila.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchmoney.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offer.mydario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowritingaid.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rb.victoriaradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savvy.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.alphalion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goodfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skininc.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soothe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonies.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cameo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.clubmagichour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.donefirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.everymanjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.joinladder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.prowritingaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.savvy.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.soothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaulthealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineaccess.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017d355ad3720000040300463044022037bd70232410195b8fd639474a820a121478ba6df9fad67306c15457e1f270d2022046b12b8f6332797e48d80434632db79d5073a8adfbd06fc7c4f0ada2eb9fc8c70076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017d355ad54d0000040300473045022100db9cf93119a302bac0083c9e2cd9efe6f855febda5fdada9f5ba26860ae72d8202205795498d460b3efd9f3e971e367684dae7f494feb97d61c60e180e2a724c5c7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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