lists.grandsquares.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:c1:92:67:32:69:ae:75:a4:66:bb:37:ae:fd:c2:1c:8c was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.grandsquares.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:c1:92:67:32:69:ae:75:a4:66:bb:37:ae:fd:c2:1c:8c
Serial Number (int): 297323807493589417588338904322442493303948
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:c1:dd:a4:9f:61:a2:b4:0e:15:1e:64:e9:61:71:88:14:6f:e3:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:fc:00:2d:5d:8d:d7:09:94:5b:6c:04:48:9b:3f:50:0a:20:7a:61
Fingerprint (sha256): d7:c8:66:bf:39:e1:7f:70:46:16:cb:68:fe:b0:aa:2c:66:55:c2:40:49:f0:69:ba:63:4a:bd:83:f8:81:61:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lists.grandsquares.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.grandsquares.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.grandsquares.com
lists.greatwhatsit.com
lists.greenvillewv.net
lists.grooveentertainmentnj.com
lists.hauntedisle.org
lists.hawaiigenetics.org
lists.healinggardenworld.com
lists.hearthcom.com
lists.hearthcommunities.com
lists.iajgs2018.org
lists.inuverse.com
lists.joelhalpern.com
lists.johnjdomont.com
lists.justmakestuff.org
lists.kfjc.org
lists.lettiejones.com
lists.mawturners.com
lists.mindfulswfl.com
lists.neramta.org
lists.oaklandish.com
lists.pfemployees.com
lists.reshmaazmi.com
lists.reshmaazmi.net
lists.restoringthetrust.org
lists.rgvrd.us
lists.ricklavoie.com
lists.ritagoldengelman.com
lists.robandmollie.com
lists.robertscreekcohousing.ca
lists.rochestercyclingalliance.org
lists.rollinsit.com
lists.roriekelly.com
lists.rosentrust.org.uk
lists.ruinasdebonampak.edu.mx
lists.ruthstaunton.com
lists.s-p-a-c-e-invader.com
lists.sandiegobridgeacademy.com
lists.sanjose10.com
lists.sarahanddan.org
lists.savath.com
lists.scholatutorials.com
lists.scholatutorials.net
lists.scholatutorials.org
lists.scientificlifestyle.com
lists.scvbrewing.com
lists.seagulls.org.uk
lists.seattledancenet.org
lists.secondsound.com
lists.secretcandyrecords.com
lists.sengnet.com
lists.serfes.org
lists.sfiop.org
lists.shearerpainting.com
lists.shorelinetrolley.com
lists.shorelinetrolley.org
lists.showcaseshows.com
lists.silvercablenet.com
lists.skagitriverpoetry.org
lists.skeletonhome.com
lists.sketchklubb.com
lists.sligoheritage.com
lists.smallbusinessdc.org
lists.smcgo.org
lists.smifmail.org
lists.somethinginthemail.com
lists.southbayclub.org
lists.southbayskiclub.org
lists.southwestinterfaith.org
lists.southwestschoolofdancemn.com
lists.sowtrue.com
lists.spagyricus.com
lists.spidermonkeycycling.com
lists.sprinkledwithwords.com
lists.srcoc.org
lists.ssff.us
lists.stgeorgebristol.org
lists.stormcloud0.com
lists.superednet.com
lists.susanhigginbotham.com
lists.sustainablejournalism.org
lists.swansmarketcohousing.org
lists.swedishschool.org
lists.swilkanim.net
lists.swiny.org
lists.swschoolofdance.com
lists.swsdance.com
lists.tacomaphoto.org
lists.talestotideyouover.com
lists.tcvr.us
lists.tdxs.net
lists.tdxs.org
lists.teamvance.com
lists.teamwebsites.org
lists.terabytasaurus.com
lists.teramoto.info
lists.th-audio.net
lists.thallenbeck.com
lists.thallenbeck.net

Other certificates including the domain name grandsquares.com

(limited to 100 certificates)
lists.eglisededieu-larochelle.com
web08.tigertechnologies.net
*.pdesoln.com
web08.tigertechnologies.net
*.carlyonphoto.com
*.simplytransitions.com
lists.dysym.com
lists.thaudio.net
lists.dysym.com
web08.tigertechnologies.net
*.carlyonphoto.com
web08.tigertechnologies.net
lists.dysym.com
lists.familyheartcamp.org
lists.elizabethandesserts.com
lists.dysym.com
*.carlyonphoto.com
lists.dutchmansdock.com
grandsquares.com
*.vannaweaver.com
web08.tigertechnologies.net
lists.dysym.com
lists.dysym.com
customers.tigertech.net
lists.thejoyfulforager.com
*.pdesoln.com
customers.tigertech.net
lists.s-p-a-c-e-invader.com
*.carlyonphoto.com
*.carlyonphoto.com
web08.tigertechnologies.net
*.plcequipment.com
*.carlyonphoto.com
lists.engagesimply.com
*.carlyonphoto.com
lists.grandsquares.com
lists.dysym.com
lists.the-green-mother.com
web08.tigertechnologies.net
*.carlyonphoto.com
lists.thebitterpoet.com
lists.dysym.com
lists.dysym.com
*.pdesoln.com
*.pdesoln.com

Certificate

The complete raw certificate details for lists.grandsquares.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlF6Klu0djG8c+5SeUp
L7N+ejHU/fT2yivnlOWRX3nFqPgCr2PQofgXPSNK6XMbMLZUAUR1Mwx0XI9cp35h
QkqIyK/ekonNY1YBhH/X0ThI41X8UYdrCAsdrFvd0F4CQZnFw3k7B64WGdlYVUyx
sgSj4JwaFtUZoqc8uPuuY7JY8qWq1TdKAuT9EW5gik9yK1sD8q3GKH+Ofx6E/npz
jmNZuCR9QntAinRLbHmW+rcbKk2iZ6QRUAsIYdXByRt39JqAMFTwmCZr1Cd3SH6J
1HiIEhPoptD0Qa74xBhrAqDtzMUKUDWQ4b7cibJ4rSQCMnH/I2KDyyyQyPYsz5yi
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297323807493589417588338904322442493303948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 23:19:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 23:19:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.grandsquares.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27650761514427149602033558811317846423207531556153438554187510783830505669673197512410116943173028157684872969702828790075113033339834758379576366116634491429824057950069752812888773121015244804462686950096095981115547671260512974887432280576810073398469123666507412683513098342118399040218130758183196571946608721694064927579899192393114819393786474948947108760406597093406235713436093498623941738664624220023524878123301456118276278304701546529991055038316670777107709752291633363287118960082885591993765727588309300066845799677100049170165435207833019534795880921481308954969360249412381206461707265996179963159279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ac1dda49f61a2b40e151e64e9617188146fe352
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.grandsquares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.greatwhatsit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.greenvillewv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.grooveentertainmentnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hauntedisle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hawaiigenetics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.healinggardenworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hearthcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.hearthcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.iajgs2018.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.inuverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.joelhalpern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.johnjdomont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.justmakestuff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.kfjc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.lettiejones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mawturners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mindfulswfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.neramta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.oaklandish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.pfemployees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.reshmaazmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.reshmaazmi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.restoringthetrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rgvrd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ricklavoie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ritagoldengelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.robandmollie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.robertscreekcohousing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rochestercyclingalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rollinsit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.roriekelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.rosentrust.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ruinasdebonampak.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ruthstaunton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.s-p-a-c-e-invader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sandiegobridgeacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sanjose10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sarahanddan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.savath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.scholatutorials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.scholatutorials.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.scholatutorials.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.scientificlifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.scvbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.seagulls.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.seattledancenet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.secondsound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.secretcandyrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sengnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.serfes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sfiop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.shearerpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.shorelinetrolley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.shorelinetrolley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.showcaseshows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.silvercablenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.skagitriverpoetry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.skeletonhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sketchklubb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sligoheritage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.smallbusinessdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.smcgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.smifmail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.somethinginthemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.southbayclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.southbayskiclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.southwestinterfaith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.southwestschoolofdancemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sowtrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.spagyricus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.spidermonkeycycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sprinkledwithwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.srcoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.ssff.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.stgeorgebristol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.stormcloud0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.superednet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.susanhigginbotham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.sustainablejournalism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swansmarketcohousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swedishschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swilkanim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swiny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swschoolofdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.swsdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.tacomaphoto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.talestotideyouover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.tcvr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.tdxs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.tdxs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.teamvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.teamwebsites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.terabytasaurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.teramoto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.th-audio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.thallenbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.thallenbeck.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a81026040000040300473045022014f4bae164806eef73bfa61df8d22c2cebb3cc196a084bcdd7de76eed9c335e9022100b67da980c45cf6326d5eacac60f00b5d882fa80fa21c262b7525265b37183177007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a81025f80000040300473045022026c472603ceccec49265a3251a56272e14bac7f1c5a151aa702fd574e7b50848022100ffbb45e086a6b790e6a4fe57bb0176feaf77c43fd2a2fa1532f97777a859a635
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030ec50273d717e4947c7d27d49ee5c279ed9064e5639fb671d29d3103eb5977108b9373dc1a1d80268dcf61b6cb54c3b3649c0668005bff745e247c44c44d5d3123f3fb75086129ed41752ebc7e51efa67e4d42e31c7141877a8017bac125936dfbd2afd1d93328da79f53fd636b7a1416995ea8f3576859858c025294ef47d4b7d3356f39b99e51b7478fe88987ebe7c9924850e6bc5cf8d62e359a46742225c4acd34994d14cf2cc2f8fe40c5a71c92cee4425999aae4f3602f287d5efb7e9705526598057cb2c27d3ad17fade43500fc3f4f727d5a649f99fa766afc801b4a0e27b2374ab39d1fc44193b5e2f3e06ebd49974bd10c06a3ee2740984bbe370