www.cucta.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:a5:96:51:27:8b:b7:85:10:10:43:96:fe:d1:00:44:df was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cucta.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:a5:96:51:27:8b:b7:85:10:10:43:96:fe:d1:00:44:df
Serial Number (int): 272786279013513317089339300313000646296799
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:7f:d0:e1:e3:04:fc:eb:76:21:ba:6d:8c:97:14:36:b1:53:df:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:75:77:6e:fa:68:ab:b9:4a:a5:f6:7e:53:66:6d:b4:ca:c2:68:33
Fingerprint (sha256): e9:bb:f8:db:4d:8e:2e:ed:ad:ad:6a:dc:4f:e3:a5:46:c9:29:36:c6:d9:06:93:5d:59:d3:32:91:55:6b:b1:4e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cucta.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cucta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

651canna.com
allseasonsinc.com
americanwomenshealthalliance.org
atlurgentcare.com
birthdayluxxe.com
carriagepointe.com
casinoutanbankid.com
centurymate.com
corue.com
cucta.com
dogsearch.org
duxf.com
flaschenverpackung.com
ilovepain.org
indiancoin.exchange
investtrue.com
japanesegravure.com
kohalagold.org
lafish.com
lingomate.com
loadmastertote.com
louisianasportsmed.com
luizgonzaga.com
magicwipe.com
mobicanada.com
norfolkregenerativemedicine.com
op1.com
orapure.com
organicbabywash.com
photographersomaha.com
powerteamusa.com
prestonjbyrne.com
rentattach.com
retromed.com
romaskydive.com
scogli.com
securefencing.com
smarttactic.com
sutra-band.com
thanhhang.com
thermalytic.com
tibialnerve.com
viarue.com
voler.click
www.651canna.com
www.allseasonsinc.com
www.americanwomenshealthalliance.org
www.atlurgentcare.com
www.birthdayluxxe.com
www.carriagepointe.com
www.casinoutanbankid.com
www.centurymate.com
www.corue.com
www.cucta.com
www.dogsearch.org
www.duxf.com
www.flaschenverpackung.com
www.ilovepain.org
www.indiancoin.exchange
www.investtrue.com
www.japanesegravure.com
www.kohalagold.org
www.lafish.com
www.lingomate.com
www.loadmastertote.com
www.louisianasportsmed.com
www.luizgonzaga.com
www.magicwipe.com
www.mobicanada.com
www.norfolkregenerativemedicine.com
www.op1.com
www.orapure.com
www.organicbabywash.com
www.photographersomaha.com
www.powerteamusa.com
www.prestonjbyrne.com
www.rentattach.com
www.retromed.com
www.romaskydive.com
www.scogli.com
www.securefencing.com
www.smarttactic.com
www.sutra-band.com
www.thanhhang.com
www.thermalytic.com
www.tibialnerve.com
www.viarue.com
www.voler.click

Other certificates including the domain name cucta.com

(limited to 100 certificates)
baymakservis.com
www.flaschenverpackung.com
cucta.com
www.cucta.com

Certificate

The complete raw certificate details for www.cucta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU9/uteL7Acz0/M3EkoI
g7j/2vWQ/zahEfScC31MYImPhiQ534wNAUhfYa+GG6siTXLLIpNzUnY0bnlq5b9p
07IN2SZXoPIl3vnNtUO6QA4yMpeAlKIlheG+nfgsuyM01IgGR1HXV5P44OUwqrjk
PJDiyEiP2SfnoYAyZzRLDCkh8f3IS+yQYhUgIkxh18o6xClMGuTiKOS2JqZzn//i
8hEU3GUuHm0MLwa7jNoiem3qex1T6mbuxZ3sTuUldTQ2xF+0Mhc1X0qEgWEfmkbH
tr5K25Wlojrmlnh39kG8cN/pCamVXIDirkG5f7c3sZ7M68N0UwzClALKsugghGL2
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272786279013513317089339300313000646296799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 19:42:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 19:42:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cucta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25918054908782647552153353163282646711894176788860621520369785518153568317212466712770758873925769196056391580576058394594401570607573689575592365543655595160753402494699632502159710275258734125779881490710046261037319491812709454756128610687223570030909694216838107161106155943981891009336515579081051264065893979569444448003883331656027540121882353004301535032796756459160496653542053058052007892751301480609876333159160093212038503824322633742898031132729792728348429591474888333916996223684611537292518226955746105531742373187301155071898478708793344727600001054281056215393845580191089857600753840355109303940731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c87fd0e1e304fceb7621ba6d8c971436b153df39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1710 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '651canna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allseasonsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanwomenshealthalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlurgentcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthdayluxxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriagepointe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoutanbankid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurymate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cucta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duxf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaschenverpackung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilovepain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiancoin.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investtrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanesegravure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohalagold.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingomate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadmastertote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luizgonzaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicwipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobicanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orapure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicbabywash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photographersomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerteamusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestonjbyrne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentattach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retromed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romaskydive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scogli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securefencing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarttactic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sutra-band.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanhhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermalytic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tibialnerve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viarue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voler.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.651canna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allseasonsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanwomenshealthalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlurgentcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birthdayluxxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carriagepointe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinoutanbankid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centurymate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cucta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duxf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaschenverpackung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilovepain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiancoin.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investtrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.japanesegravure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kohalagold.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lafish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lingomate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loadmastertote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisianasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luizgonzaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicwipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobicanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norfolkregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.op1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orapure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicbabywash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photographersomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerteamusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestonjbyrne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentattach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retromed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romaskydive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scogli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securefencing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smarttactic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sutra-band.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanhhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermalytic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tibialnerve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viarue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voler.click'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016da7f5ef7c000004030047304502200a581643b090dafc2c5240610e898f04326e9bb11e50d32966ac43e39d1c0deb022100cae7f45aa9a121341192c9229b60100e390a7094c259bec075e66afbf6b684ea007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016da7f5edaf000004030046304402206074139d1ea999cd6707ae7dc46c3bcdd5e0c7fa8bcd1f2116023d630f87db2d022069a2326d4f7f992ae9773be0d2d01d6dc5de97965be681dfee9d52fc501c36e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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