www.scienceandmeditation.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:2c:c4:3b:2e:b8:06:14:22:90:15:1c:eb:c1:3f:f5:da was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.scienceandmeditation.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:2c:c4:3b:2e:b8:06:14:22:90:15:1c:eb:c1:3f:f5:da
Serial Number (int): 304612223316602348605894894054190553757146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:a3:f0:f5:73:b1:75:74:ae:4e:54:b3:49:59:11:64:50:b5:d4:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:6c:2f:8a:31:e3:c2:d2:bb:fb:10:61:85:06:8e:d2:af:37:d6:56
Fingerprint (sha256): e2:36:76:ec:3c:69:35:25:de:bf:5a:02:34:40:bd:47:e3:03:a0:86:aa:a3:d2:f9:34:d5:39:20:96:61:a9:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.scienceandmeditation.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.scienceandmeditation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

420nyccafe.com
4droom.com
alankeith.com
albaniabride.com
australianrealestate.mobi
bratcher.org
centralairsystem.com
choconline.com
countertopsaustin.com
dakotaoil.com
dentistryarlington.com
ditteautotrasporti.com
estoniamarriage.com
exactmark.com
galaktik.com
hempcutting.com
herinneringen.com
kathrynskitchen.com
kitirc.com
labooking.com
levelupgaming.com
live-aid.com
loveyolife.com
manhattan.casa
markmadden.com
mindonthemove.com
neommena.com
netcollectible.com
nevadacleaningservice.com
newrefinancehomemortgage.com
perderlabarriga.com
phonenumberforwarding.com
poshmi.com
pro-mam.com
prpindiana.org
pumpsforapurpose.com
raleighsportsmedicine.com
risk-insurance.com
rixeyville.com
saucyasfcuk.com
scienceandmeditation.com
seattlejointpain.com
stakingrig.com
stemcellcartilage.com
stemcellregen.com
surfersparadisewhalewatching.com
urbanshepherd.com
webuycarshere.org
www.420nyccafe.com
www.4droom.com
www.alankeith.com
www.albaniabride.com
www.australianrealestate.mobi
www.bratcher.org
www.centralairsystem.com
www.choconline.com
www.countertopsaustin.com
www.dakotaoil.com
www.dentistryarlington.com
www.ditteautotrasporti.com
www.estoniamarriage.com
www.exactmark.com
www.galaktik.com
www.hempcutting.com
www.herinneringen.com
www.kathrynskitchen.com
www.kitirc.com
www.labooking.com
www.levelupgaming.com
www.live-aid.com
www.loveyolife.com
www.manhattan.casa
www.markmadden.com
www.mindonthemove.com
www.neommena.com
www.netcollectible.com
www.nevadacleaningservice.com
www.newrefinancehomemortgage.com
www.perderlabarriga.com
www.phonenumberforwarding.com
www.poshmi.com
www.pro-mam.com
www.prpindiana.org
www.pumpsforapurpose.com
www.raleighsportsmedicine.com
www.risk-insurance.com
www.rixeyville.com
www.saucyasfcuk.com
www.scienceandmeditation.com
www.seattlejointpain.com
www.stakingrig.com
www.stemcellcartilage.com
www.stemcellregen.com
www.surfersparadisewhalewatching.com
www.urbanshepherd.com
www.webuycarshere.org
www.xn--f2baa.com
www.zippyme.com
xn--f2baa.com
zippyme.com

Other certificates including the domain name scienceandmeditation.com

(limited to 100 certificates)
hpvvaccination.com
www.conncasino.com
digitalhustleco.com
hologramfunnels.com
tickbiteprotection.com
www.pitock.com
www.circodelsol.com
boytaku.com
malerealdoll.com
family-immigration.com
bottegafantasia.com
www.4droom.com
www.emohi.com
moozak.com
albuquerquestemcellcenter.com
nationwidemobilemarketing.com
julianamoore.com
www.thecardplan.com
iconic.click
www.eiyco.com
www.scienceandmeditation.com
sanpietroinlama.org
circodelsol.com
dakotaoil.com

Certificate

The complete raw certificate details for www.scienceandmeditation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7pUk+Yo04xB6KvdTvE
8PYFNUqN1thbKNnz2MsXjSdec2jFj+y5F36LCMxivT/wwdAo51z6Pv4mB4vHgRsi
GgO4RisFqfKFv8vw59xzaTTq7weFuqKZt5mptvL7nCUEMLOzU0YqzcKUSGN42D/O
10O7IiH9Tvnl4TgkxI1+ixbNnA4xoMW159GRoWDhv8PxfMTcl+bDufRtSEvQ5pNr
Jf18vRN4S/zG/yvKcn6x7STo8UlwDiGg7mAXJegAecwycyO7W6/r4GI9VULOol43
lwPdMTGaRBkymmLNpo+iUHxGL4xNffvhCsJvF9vT+W/5/V5lDTfAqP3a9ewZeeho
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304612223316602348605894894054190553757146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 07:32:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 07:32:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.scienceandmeditation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23314100145775264145462502323971525149892343214929751619963864090520045520207852383803987016709679436779604741408760484219679710277723082855603808544909415951472175643647724453294156116577397333097871009139052234102589397207716467460837163548994761434506115951681739982227540604418036184867446452383086158843738809165608911353418723518411584595135758450737086170791618306391717898806685195890211126167136440701276339986791510269212760360182126496631036458594791015953037966122401376823669710119284844697466318447531404668185267229961520771714773285300886728404233931105139663392001684784550230933602276703063591381187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38a3f0f573b17574ae4e54b34959116450b5d498
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420nyccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4droom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alankeith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albaniabride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bratcher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralairsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countertopsaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotaoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistryarlington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditteautotrasporti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estoniamarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exactmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaktik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempcutting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herinneringen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathrynskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitirc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levelupgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-aid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveyolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattan.casa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markmadden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindonthemove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neommena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netcollectible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevadacleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newrefinancehomemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perderlabarriga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonenumberforwarding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poshmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-mam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpindiana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumpsforapurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risk-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rixeyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saucyasfcuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienceandmeditation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattlejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stakingrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellcartilage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellregen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfersparadisewhalewatching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanshepherd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuycarshere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.420nyccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4droom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alankeith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albaniabride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australianrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bratcher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralairsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countertopsaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakotaoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentistryarlington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditteautotrasporti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estoniamarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exactmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galaktik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hempcutting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herinneringen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathrynskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitirc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelupgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live-aid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loveyolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manhattan.casa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markmadden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindonthemove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neommena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netcollectible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadacleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrefinancehomemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perderlabarriga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phonenumberforwarding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poshmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro-mam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpindiana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpsforapurpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.risk-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rixeyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saucyasfcuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scienceandmeditation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattlejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stakingrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellcartilage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellregen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfersparadisewhalewatching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbanshepherd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webuycarshere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--f2baa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zippyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--f2baa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zippyme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fd1881a390000040300483046022100c0ca828a9d6d25a8653f5f7d4cf1517557b3451d4f7fb26f49f4798553edd0a1022100af07d599f28f6dcb1e7e5deffee3e8d13f36810f5adf69724f9948406be1f61200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fd1881a8e0000040300473045022100ca7002e40071246f9aba0cc98afb774c24e56f051d7e55fac69733b5ae997f73022000af3db5a0db22d3cbbbea920738a2c2f4d2948db828a75d72c8920e8c854b6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00472741be61e9d3ba46bb5249158526777b84365230eb7617accbba0621ea72ac5e618ffe8ac3325f5b94bc3ceb638d45601c4500000e82c2d05c987b08482c8e8d0ef3fca17d3cff1dfb599b5a27bf750d1e0ee555d027ee162e866f4f92c8f770cd74bb1654150bcfa602b68734da7c9ebadb6ab4722c5cd794388f9c35908e90922000c017f092a1176514d39c3f89ef171a3bcfdcab6f8da17f91f56fa511669c8c3bbc282382a98f417bbb029bb16f7d877503250cb5533e45bb4aff784e343332785910b1f4f00a784abc3a931296f639ec0b804d157778c19184f8bd89ba4d97817d9c5647fe2920a60f79cbb008837e082a3e8b657beaebc31a6ece3c