*.hr64.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:aa:7f:b9:be:ed:b1:74:a5:ff:9a:36:1a:11:03:97:1c was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.hr64.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:aa:7f:b9:be:ed:b1:74:a5:ff:9a:36:1a:11:03:97:1c
Serial Number (int): 287424949629629222815914265267512962946844
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:62:8e:4a:ca:1c:2b:83:e6:30:7c:a8:47:8b:1f:99:2a:87:3e:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:7f:25:6a:29:a9:f1:5e:0b:d0:63:77:1c:31:16:54:af:52:8d:88
Fingerprint (sha256): e9:c5:c5:13:f2:9f:08:40:a8:12:28:01:b0:54:6b:a3:70:01:ac:e3:8b:96:39:eb:80:ee:b3:29:b0:67:9c:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.hr64.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hr64.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.6thinfantry.com
*.arsenalshorts.net
*.badr84hari.com
*.bheagency.com
*.brunsarchitecture.com
*.calypso-charter.com
*.championfleming.com
*.cocdev.com
*.comfortcheckheatingair.com
*.cvharborfest.com
*.deliverydoula.com
*.dichotomywines.com
*.dormanassociates.com
*.downtownbendrental.com
*.dtmwebmanager.com
*.dynamictransitionsllp.com
*.envintus.com
*.focusdailynews.com
*.greenlight-devo.com
*.hr64.org
*.imlicious.com
*.improvingpsych.org
*.indyfolkseries.org
*.jacquecoe.com
*.jennhorowitz.com
*.jkowanconsulting.com
*.justarsenalfans.com
*.lewisburgfarmersmarket.com
*.listranksell.com
*.noveltywoods.com
*.oconeerental.com
*.paththreemarketing.com
*.robertswygal.com
*.schenklaw.com
*.seoexpertcentral.com
*.sf-attorney.com
*.targetgolf.com
*.terrismithdetails.com
*.theunicornsidekick.com
*.tradesform.com
*.truspout.com
*.vixensweets.com
*.willardpta.org
*.wkneedle.org
6thinfantry.com
arsenalshorts.net
badr84hari.com
bheagency.com
brunsarchitecture.com
calypso-charter.com
championfleming.com
cocdev.com
comfortcheckheatingair.com
cvharborfest.com
deliverydoula.com
dichotomywines.com
dormanassociates.com
downtownbendrental.com
dtmwebmanager.com
dynamictransitionsllp.com
envintus.com
focusdailynews.com
greenlight-devo.com
hr64.org
imlicious.com
improvingpsych.org
indyfolkseries.org
jacquecoe.com
jennhorowitz.com
jkowanconsulting.com
justarsenalfans.com
lewisburgfarmersmarket.com
listranksell.com
noveltywoods.com
oconeerental.com
paththreemarketing.com
robertswygal.com
schenklaw.com
seoexpertcentral.com
sf-attorney.com
targetgolf.com
terrismithdetails.com
theunicornsidekick.com
tradesform.com
truspout.com
vixensweets.com
willardpta.org
wkneedle.org

Other certificates including the domain name hr64.org

(limited to 100 certificates)
lists.secondsound.com
customers.tigertech.net
web10.tigertechnologies.com
*.yourcareerfind.com
*.yourcareerfind.com
customers.tigertech.net
*.skyfarerpwds.com
lists.galvanys.com
lists.bigteezesalon.com
*.hr64.org
customers.tigertech.net
lists.brazosvalleyco-op.com
*.photographersurabaya.com
lists.electricalcontrolservice.com
lists.swimkingpools.com
*.berrinjames.com
lists.fonebone.net
customers.tigertech.net
lists.love-of-life.net
web10.tigertechnologies.com
lists.bigteezesalon.com
customers.tigertech.net
lists.upsstorage.com
customers.tigertech.net
customers.tigertech.net
*.internetoholics.info
web10.tigertechnologies.com
*.susanwoodproject.org
lists.0100101110101101.org
web10.tigertechnologies.com
*.yourcareerfind.com
customers.tigertech.net
web10.tigertechnologies.com
web10.tigertechnologies.com
lists.genealogycenter.net
*.yourcareerfind.com
*.yourcareerfind.com
customers.tigertech.net
*.yourcareerfind.com
web10.tigertechnologies.com
customers.tigertech.net
*.yourcareerfind.com
*.hr64.org
*.innermountainhealing.com
*.berrinjames.com

Certificate

The complete raw certificate details for *.hr64.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTwnvkt/rqmfhW/RDKi
TTvztGYwkO+vyXku22t1UGmsIIBjI3cVSHes29R9wf/KW8oCCwyq5rVIuhH3Xj1x
f/jXfzfzzJS4jTTRH/xLnLpsX06FIpVyH1B/pYdMaxrak2CKIpqwsGe1MdHYrjU4
HtjBCuq06ENtt8zmsAxCIrNaTDz9rith3eH5/a8h9yRAxWMiEP3anE+hSz+zvnrg
ij889L/k1spC9Mt9WDLjpRmRMaJMNaOL9pTOk8EB9Rhj65vXVu7hQYC2Q+WRsCmQ
aEUrQpT3NKACG3+PoUkT9cVWEtqdPtguQUy/FYbChTqBxbP5OSiKt+X5Wf9hCgxg
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287424949629629222815914265267512962946844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 09:18:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 09:18:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hr64.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23380192069074614503612620979768095217869035430559388218061962942491291867392265171370480635328177553658739465501069779155343807323024149221317027269971930709543715521421254564678050088095582979177158131018338062458840209367653275980195928417508658144539519798900390463591961967938376976296565089334693223511074353502238375438695055715037080980567436863806769660639924960607743196958841225263150057929301532290720656333764666165514224570039064925391498828650352196824619627575999429345122099814529002106232392746438611204812758442748380855251104257855164582127131554903442061387902792975123832508456261641095340646649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5628e4aca1c2b83e6307ca8478b1f992a873ef1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1762 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6thinfantry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arsenalshorts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badr84hari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bheagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brunsarchitecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calypso-charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.championfleming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortcheckheatingair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvharborfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deliverydoula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dichotomywines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dormanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downtownbendrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtmwebmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamictransitionsllp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envintus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focusdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenlight-devo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hr64.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imlicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.improvingpsych.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indyfolkseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacquecoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jennhorowitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkowanconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justarsenalfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewisburgfarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.listranksell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noveltywoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oconeerental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paththreemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robertswygal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schenklaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seoexpertcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sf-attorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.targetgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terrismithdetails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theunicornsidekick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradesform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truspout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vixensweets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willardpta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wkneedle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6thinfantry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsenalshorts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badr84hari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bheagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunsarchitecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calypso-charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'championfleming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortcheckheatingair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvharborfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliverydoula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dichotomywines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downtownbendrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtmwebmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamictransitionsllp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envintus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focusdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlight-devo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr64.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imlicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'improvingpsych.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indyfolkseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacquecoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jennhorowitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkowanconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justarsenalfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewisburgfarmersmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listranksell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noveltywoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oconeerental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paththreemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertswygal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schenklaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seoexpertcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf-attorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targetgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrismithdetails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theunicornsidekick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradesform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truspout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vixensweets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willardpta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wkneedle.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d9120ded10000040300463044022058bbfb428dbfac0e65dd7c223f6e6e40722c3965ab51b1f033d274f664c8640a02205b1266c38852f151e08906a0be3de1f2982c2c64d03fc93fe62bb65920362cf8007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016d9120e0980000040300463044022017b3c7b1706253ccd1a398d2e6a83a5e93cfa8635fdf968b9c3ffe63df70c1ea02205200491febb9f7943039273f049abc8cc7204fce24eb300129ec0bf2ee3e9ecb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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