allwellbeauty.goprimer.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5c:ce:01:52:af:76:a9:cc:2d:99:00:68:d9:f3:4f:67:ca was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=allwellbeauty.goprimer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5c:ce:01:52:af:76:a9:cc:2d:99:00:68:d9:f3:4f:67:ca
Serial Number (int): 380028949320255116873031433027649906108362
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:f7:43:36:8d:4d:46:66:7e:df:e2:a0:19:6f:fb:26:2b:81:c0:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:fa:75:5a:5f:3a:cc:87:d5:7f:0b:f2:2a:c2:0d:05:48:d4:98:db
Fingerprint (sha256): e6:9b:59:77:2e:59:67:0c:39:b6:dc:0a:3b:0a:5d:35:d4:0e:82:1a:f3:f7:39:fc:99:5d:b4:3f:39:8f:f2:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate allwellbeauty.goprimer.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for allwellbeauty.goprimer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allwellbeauty.goprimer.com
apostrophe.goprimer.com
betterplaceforests.goprimer.com
blincinc.goprimer.com
breathe.milacares.com
buy.liveouter.com
buy.tonies.com
clubmagichour.goprimer.com
criobru.goprimer.com
curalife.goprimer.com
cutbackcoach.goprimer.com
dario.goprimer.com
discover.betterplaceforests.com
discover.fieldtriphealth.com
diversyfund.goprimer.com
drink.criobru.com
elevation.goprimer.com
evernow.goprimer.com
everymanjack.goprimer.com
explore.wineaccess.com
fieldtriphealth.goprimer.com
fiton.goprimer.com
formhealth.goprimer.com
gardens.gardenuity.com
gardenuity.goprimer.com
get.fitonapp.com
get.honehealth.com
get.metabolicrenewal.com
get.monarchmoney.com
get.montikids.com
getresults.iloveskininc.us
go.luckyvitamin.com
go.vaulthealth.com
goodfair.goprimer.com
goprimer.goprimer.com
honehealth.goprimer.com
invest.diversyfund.com
ladder.goprimer.com
langehair.goprimer.com
lifeprofitness.goprimer.com
liveouter.goprimer.com
luckyvitamin.goprimer.com
metabolicrenewal.goprimer.com
mila.goprimer.com
mirrormate.goprimer.com
monarchmoney.goprimer.com
montikids.goprimer.com
offer.mydario.com
otter.goprimer.com
picsart.goprimer.com
poweredbyelevation.goprimer.com
proovtest.goprimer.com
prowritingaid.goprimer.com
radfordbeauty.goprimer.com
rb.victoriaradford.com
rocksbox.goprimer.com
savvy.goprimer.com
secure.goprimer.com
shop.allwellbeauty.com
shop.goodfair.com
shop.proovtest.com
skininc.goprimer.com
soothe.goprimer.com
start.farmsteadapp.com
start.getsunday.com
start.poweredbyelevation.com
subscribe.rocksbox.com
sunday.goprimer.com
tonies.goprimer.com
try.apostrophe.com
try.blincinc.com
try.clubmagichour.com
try.curalife.com
try.cutbackcoach.com
try.evernow.co
try.everymanjack.com
try.formhealth.co
try.goprimer.com
try.joinladder.com
try.langehair.com
try.lifeprofitness.com
try.mirrormate.com
try.otter.ai
try.picsart.com
try.prowritingaid.com
try.savvy.insure
try.soothe.com
try.upstep.com
try.vesselhealth.com
trysnow.goprimer.com
upstep.goprimer.com
vaulthealth.goprimer.com
vesselhealth.goprimer.com
whitening.trysnow.com
wineaccess.goprimer.com

Other certificates including the domain name goprimer.com

(limited to 100 certificates)
apostrophe.goprimer.com
tls.automattic.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
getapp.in
getapp.in
5000772504.goprimer.co
allwellbeauty.goprimer.com
alphalion.goprimer.com
apostrophe.goprimer.com
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
alphalion.goprimer.com
allwellbeauty.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
getapp.in
goprimer.com
buy.letsbld.com
apostrophe.goprimer.com
tls.automattic.com
getapp.in
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
alphalion.goprimer.com
alphalion.goprimer.com
buy.letsbld.com
tls.automattic.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
ios.goprimer.com
allwellbeauty.goprimer.com
*.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
help.goprimer.com
apostrophe.goprimer.com
apostrophe.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
agirlnamedotis.goprimer.com
getapp.in
getapp.in
ios.goprimer.com
android.goprimer.com
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
tls.automattic.com
allwellbeauty.goprimer.com
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
tls.automattic.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
allwellbeauty.goprimer.com
alphalion.goprimer.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
aj.goprimer.co
getapp.in
apostrophe.goprimer.com
alphalion.goprimer.com
getapp.in
apostrophe.goprimer.com
help.goprimer.com
5000772504.goprimer.co
alphalion.goprimer.com
tls.automattic.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in

Certificate

The complete raw certificate details for allwellbeauty.goprimer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tkdCWvCPi7YEzWX/603
J/BY2teTvs/uVPiUh73m4xXwxpseTcmmnojWhdOWtxhGEKHcTtUxdrAH+UftdF9k
CWMx5rvmaRPvBIbUcufdRoFtDa2edriLZiVzAR+o4amVrrw+6lV+ooi4jkgmuW4J
pRkniMLBr8E27KD7LIy/iav53IZx7eNADBZhQ7o7ndGHdsFfgR1VsSbQbk6WtGct
FGEeHA/40HDHRDh/E6OqMD2e8PoNlO3ybJgjuVCm4psCQBrened+w5AYnKPeRHuV
9uflE6ipol68u0rCPSjMC1ZC8fW1AJPLxYaoVGFqIDHAXhWrspLSU1bsEpOX1Hiy
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380028949320255116873031433027649906108362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-20 14:16:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-18 14:16:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allwellbeauty.goprimer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27122059882883541394165490201380443827335879754058228235113907564260578744115328420207881077118746406061517769508571127871430773596140178543150214253551791237799865106930613881507670263469350525957169882247217306015224132623595530322114368065808176758966942178218762050621354119445327717795110028243534954138730905370056278286098650574441752096447903154761432552712761354292141002232243289713194429644833701327211773092166656878138969578381076766301607651428275142354500488847906466892799963569390201205647969659153643153584526122248841254917063194343926163951817265629793633330582037040644244613479155895916002062941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60f743368d4d46667edfe2a0196ffb262b81c0aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allwellbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterplaceforests.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blincinc.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breathe.milacares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.liveouter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.tonies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmagichour.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criobru.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dario.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.betterplaceforests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.fieldtriphealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drink.criobru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevation.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everymanjack.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldtriphealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formhealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardens.gardenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenuity.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.honehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.monarchmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getresults.iloveskininc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.luckyvitamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.vaulthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goprimer.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honehealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladder.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveouter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckyvitamin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mila.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirrormate.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchmoney.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offer.mydario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poweredbyelevation.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proovtest.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowritingaid.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rb.victoriaradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savvy.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.allwellbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goodfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.proovtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skininc.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soothe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.poweredbyelevation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonies.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.blincinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.clubmagichour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.everymanjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.formhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.joinladder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mirrormate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.prowritingaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.savvy.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.soothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.vesselhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trysnow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaulthealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesselhealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitening.trysnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineaccess.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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