*.wcaia.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c4:77:c9:8c:94:c1:95:58:d9:a8:de:1c:9d:68:d6:8c:b4 was issued on by Let's Encrypt.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.wcaia.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:77:c9:8c:94:c1:95:58:d9:a8:de:1c:9d:68:d6:8c:b4
Serial Number (int): 415303712278034919634316894382392698375348
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 12:21:1e:53:8d:66:0b:71:29:24:93:43:f4:5d:2b:24:e2:b1:70:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:07:03:f4:93:5f:42:74:40:10:19:4a:fc:59:dc:5d:3f:5b:95:e4
Fingerprint (sha256): df:bf:83:48:77:19:28:46:d7:62:7a:a2:bc:d9:aa:a3:ea:ff:68:02:8a:d4:4b:b8:be:3d:50:8c:36:6e:6a:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.wcaia.ca

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wcaia.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.artontile.com
*.bearfoodsmarket.com
*.bellinghamhypnosis.com
*.bigfootlikestheladies.com
*.braideez.com
*.caseywilliamswork.com
*.digital-fabrication-alliance.org
*.duckduckbar.com
*.ej-19xx.net
*.emailoholics.com
*.ericperonnard.com
*.fiveharts.com
*.garettfisbeck.com
*.garrymbsmith.com
*.hsaservicesinc.com
*.idiot-hk.com
*.imslaboratory.com
*.iucnosg.net
*.jaustinphoto.com
*.jleetaylormysteries.com
*.jmwauctions.com
*.kreshock.com
*.marsicocustomhomes.com
*.melissalevinartist.com
*.octaviaarena.com
*.optimizebook.com
*.peaceandfreedom2012.org
*.peaceandfreedom2014.org
*.pecsaas.com
*.piccthailand.org
*.preciousclayministries.com
*.rigalibarrett.com
*.rjsheehan.com
*.soeteam.com
*.susangillischapman.com
*.swsdance.com
*.szilvamusic.com
*.ucsfbreastcarecenter.org
*.waltersdesigns.com
*.wcaia.ca
*.wspring.org
artontile.com
bearfoodsmarket.com
bellinghamhypnosis.com
bigfootlikestheladies.com
braideez.com
caseywilliamswork.com
digital-fabrication-alliance.org
duckduckbar.com
ej-19xx.net
emailoholics.com
ericperonnard.com
fiveharts.com
garettfisbeck.com
garrymbsmith.com
hsaservicesinc.com
idiot-hk.com
imslaboratory.com
iucnosg.net
jaustinphoto.com
jleetaylormysteries.com
jmwauctions.com
kreshock.com
marsicocustomhomes.com
melissalevinartist.com
octaviaarena.com
optimizebook.com
peaceandfreedom2012.org
peaceandfreedom2014.org
pecsaas.com
piccthailand.org
preciousclayministries.com
rigalibarrett.com
rjsheehan.com
soeteam.com
susangillischapman.com
swsdance.com
szilvamusic.com
ucsfbreastcarecenter.org
waltersdesigns.com
wcaia.ca
wspring.org

Other certificates including the domain name wcaia.ca

(limited to 100 certificates)
customers.tigertech.net
lists.iajgs.com
*.garylcook.com
lists.hwlf.org
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.garylcook.com
lists.skylarkshiddencafe.com
lists.wcaia.ca
*.kazoologist.org
*.garylcook.com
lists.iajgs.com
lists.iajgs.org
web03.tigertechnologies.us
lists.culturescholar.org
web03.tigertechnologies.us
lists.stormintegration.com
*.thecheeseshopmysteries.com
lists.the-green-mother.com
*.garylcook.com
*.garylcook.com
web03.tigertechnologies.us
*.garylcook.com
lists.iajgs.org
lists.hwlf.org
lists.hwlf.org
lists.episcopalurbancaucus.org
customers.tigertech.net
*.nishiyama-group.com
*.swschoolofdance.com
lists.the-green-mother.com
web03.tigertechnologies.us
*.garylcook.com
*.garylcook.com
lists.znrcds.com
lists.dutchmansdock.com
web03.tigertechnologies.us
web03.tigertechnologies.us
lists.iajgs2019.com
*.nishiyama-group.com
lists.hwlf.org
lists.episcopalurbancaucus.org
lists.thelatitude.com
lists.smallbusinessdc.org
customers.tigertech.net
*.wcaia.ca
lists.iajgs.com
lists.leonard-harris.com
*.wcaia.ca
web03.tigertechnologies.us

Certificate

The complete raw certificate details for *.wcaia.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre+C/kvK2sD9GcY/xtqK
sAdkk6rdweU4q+f1zDMKLycsn2s76WvJy7D79nFc1//0FJH0DrQv/d0I1RmMM5TZ
8+yK9yJq605b6gh/ALWyfqlD92e2xuMV/7F7QLUlF82WYFm8vbPFnstMkvRGLTu4
4op+nZMcTbcvwHU70XYDnEWGfH5eMa004kPHdC5Beux8VsVVBtulUwsozbtFjEde
32BC1THFPsI6b/VBrxMasO5CbdmzaM02PWiCjLjwnHai3bgCnSKpLUgtHfxmUv4Q
Cn7u6sGeXvkdPL0Ho99Jpr+6YlwH0sLrZxqakPLTKzx+XOIgOC/mEdAW4V+cEz/b
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415303712278034919634316894382392698375348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 08:06:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 08:06:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wcaia.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21957334376754358665945867304616633957139259385936130997080854041235637867755410175036080801679051826269670945136509696013473421829423039855675562326945319814700651440011439482626201172914718967746382068049929447814135500888443418766200406269548178494665512131156466074578461090249094573134020366473661413222410619343805102350579676480221651448241684491669896354327018225164555041991453552230710904801516480947779135685548206164193473840742900929614081025446755066833729539947997467190608350113346474437071414836898017613105198381198246865807289251905667309027989125527329772487938264491916662110395449590570570210299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12211e538d660b7129249343f45d2b24e2b17014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artontile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bearfoodsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellinghamhypnosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigfootlikestheladies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braideez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caseywilliamswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digital-fabrication-alliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duckduckbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ej-19xx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailoholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ericperonnard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiveharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garettfisbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garrymbsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsaservicesinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idiot-hk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imslaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iucnosg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaustinphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jleetaylormysteries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmwauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kreshock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marsicocustomhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melissalevinartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.octaviaarena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optimizebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peaceandfreedom2012.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peaceandfreedom2014.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pecsaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piccthailand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preciousclayministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rigalibarrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjsheehan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soeteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.susangillischapman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swsdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.szilvamusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ucsfbreastcarecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waltersdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcaia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wspring.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artontile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearfoodsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellinghamhypnosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigfootlikestheladies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braideez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caseywilliamswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-fabrication-alliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckduckbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ej-19xx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailoholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericperonnard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiveharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garettfisbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrymbsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsaservicesinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idiot-hk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imslaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iucnosg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaustinphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jleetaylormysteries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmwauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreshock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsicocustomhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melissalevinartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octaviaarena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimizebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaceandfreedom2012.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaceandfreedom2014.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pecsaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piccthailand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousclayministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigalibarrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjsheehan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soeteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susangillischapman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swsdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szilvamusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucsfbreastcarecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waltersdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcaia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wspring.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016792377ed60000040300483046022100ea32265d04d921e2dae633354091ff8389e9e6045cd973ed8ce6412e0fa76d5e022100d2ca596ef1d5aa756cfd979b5b8ffe89fee58c12331fe4aa1c35749b9a00b4ed007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016792377ddd0000040300483046022100cce56c0a597889f40156be27c839e15b92afec9f7d7e77acac7f8d366abea4b6022100fde543a98326fb1a23b1f12bf92c2caabcc83fb6632d66683e669c81f2938545
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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