*.duerr.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:14:7d:63:80:0a:f7:99:e4:aa:c7:c3:8a:58:e8:b2:ea was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.duerr.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:14:7d:63:80:0a:f7:99:e4:aa:c7:c3:8a:58:e8:b2:ea
Serial Number (int): 340309602536064628379143350879227147236074
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:56:0e:18:88:28:ad:5b:41:6f:5a:86:5e:76:ab:06:5e:fb:d6:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:50:6b:c3:6e:ed:3f:91:4d:9f:49:4d:28:80:07:56:6f:80:35:b3
Fingerprint (sha256): f2:04:41:34:49:4f:40:5a:b0:6a:49:92:99:5c:5e:85:4e:25:21:7d:15:cc:07:c7:75:4f:da:c0:d3:9e:95:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.duerr.us

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.duerr.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1ind10.com
*.birdie-says.com
*.celticfireandfaerie.com
*.citycommons.net
*.defarstudios.com
*.diamondjjtraining.com
*.duerr.us
*.fresh-waves.com
*.gtphisigmakappa.com
*.heinzkillart.com
*.horizonfineartgallery.com
*.imperialbeachfarmersmarket.org
*.investsweat.com
*.lasantecosmetics.com
*.maurysolomonlaw.com
*.michelletatam.com
*.momsclubofeastlyme.org
*.nelsonskitchens.com
*.newmaninsuranceagency.net
*.ordwayumc.org
*.pacoeweb.com
*.parentingwithcrunch.com
*.pepeandpants.com
*.preachernotes.com
*.rosewood-music.net
*.safelifttn.com
*.sanctuarysantafe.com
*.sandiegobridgeacademy.com
*.scubapronet.com
*.stockoptionadvisors.com
*.stroscher.com
*.taxtrimmers.com
*.tryalsshop.com
*.tutsandts.com
*.utherben.com
*.wercking.com
*.wikidtab.com
*.wordsthatstay.net
*.workritesafety.com
1ind10.com
birdie-says.com
celticfireandfaerie.com
citycommons.net
defarstudios.com
diamondjjtraining.com
duerr.us
fresh-waves.com
gtphisigmakappa.com
heinzkillart.com
horizonfineartgallery.com
imperialbeachfarmersmarket.org
investsweat.com
lasantecosmetics.com
maurysolomonlaw.com
michelletatam.com
momsclubofeastlyme.org
nelsonskitchens.com
newmaninsuranceagency.net
ordwayumc.org
pacoeweb.com
parentingwithcrunch.com
pepeandpants.com
preachernotes.com
rosewood-music.net
safelifttn.com
sanctuarysantafe.com
sandiegobridgeacademy.com
scubapronet.com
stockoptionadvisors.com
stroscher.com
taxtrimmers.com
tryalsshop.com
tutsandts.com
utherben.com
wercking.com
wikidtab.com
wordsthatstay.net
workritesafety.com

Other certificates including the domain name duerr.us

(limited to 100 certificates)
*.themetrodomeroof.com
customers.tigertech.net
*.re2000group.net
customers.tigertech.net
web04.tigertechnologies.us
*.amylaskin.com
customers.tigertech.net
*.duerr.us
*.re2000group.net
*.simpleconstruction.net
*.re2000group.net
web04.tigertechnologies.us
web04.tigertechnologies.us
*.re2000group.net
*.re2000group.net
*.lisasworldofbooks.net
web04.tigertechnologies.us
*.re2000group.net
*.duerr.us
customers.tigertech.net
customers.tigertech.net
*.duerr.us
customers.tigertech.net
web04.tigertechnologies.us
customers.tigertech.net
web04.tigertechnologies.us
web04.tigertechnologies.us
customers.tigertech.net
*.duerr.us
customers.tigertech.net
*.themetrodomeroof.com

Certificate

The complete raw certificate details for *.duerr.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCptvK27f5W/1YFjUStP
2ECnka0yxCFAWSpbjbiv3aq2OF2M3tbHbXJVOf0s+TjQ4g+m2mEppEGc7+c7Kkeb
QXBBxZZF8tN2f1s+AiEfeyz/lhAua90t66B+nztdviKXtBYY8mmx02FWOhbjkggx
7pFY66OMSEOhKdGJN2q2HQ4x12qWNkooBmHQVUPFZBivVnq9yZL+C4L1FE+GoVdl
8YQaYhSur06qtBWPinoJAvt/dkvQQH6j3CEe+j8vG4LrjKATOdPFhmLiTQdqxFPl
tZc92oHbIN+g/s5uC9FhiX3qECPBXVE/DZr/Jhd+/p/t9p+gtkUs5fNBkdpFhZ/u
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340309602536064628379143350879227147236074
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 08:12:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 08:12:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.duerr.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22238864026186085240048205943669403278374061637541217142917048212721818675333225915551572169148945417031495400912976160846746954162237130469891260416929479182185415557183123656115685344180904942896881967160179040354601710685744025239791705657940880262394329456627992568538350220093004649522948924485691956906735586150442004841055712346877587155239871942527863076240349654023529086297425744412259603090254642870394343983085312255097103006189604238153379215637316999933783232918836538893372758022646779618169173862261277554353617897380482963314759509430293044477763844591695757720923677865464631465178523719589708164731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20560e188828ad5b416f5a865e76ab065efbd62b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1582 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1ind10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birdie-says.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celticfireandfaerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citycommons.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defarstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diamondjjtraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duerr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fresh-waves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtphisigmakappa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heinzkillart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horizonfineartgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperialbeachfarmersmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investsweat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasantecosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maurysolomonlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michelletatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momsclubofeastlyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nelsonskitchens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newmaninsuranceagency.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ordwayumc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacoeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parentingwithcrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pepeandpants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preachernotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosewood-music.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safelifttn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanctuarysantafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandiegobridgeacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scubapronet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockoptionadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stroscher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxtrimmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tryalsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutsandts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utherben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wercking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikidtab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordsthatstay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workritesafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1ind10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdie-says.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celticfireandfaerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycommons.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defarstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondjjtraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duerr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresh-waves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtphisigmakappa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heinzkillart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizonfineartgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperialbeachfarmersmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investsweat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasantecosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maurysolomonlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelletatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momsclubofeastlyme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonskitchens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmaninsuranceagency.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordwayumc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacoeweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentingwithcrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepeandpants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preachernotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosewood-music.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safelifttn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanctuarysantafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegobridgeacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scubapronet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockoptionadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stroscher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxtrimmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryalsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutsandts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utherben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wercking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikidtab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordsthatstay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workritesafety.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ea6fc29520000040300473045022100a69d0a9183c301463d3589d6a9f2732a0c2eb74ddce8ca3ee8db310af6acae6c02204096e44d8fa57674bffa8099537d76bc9b960d1308ccca24da9856a20fcb3e8a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ea6fc29a60000040300473045022072ba4479dfaca66cef63d7341c98d8b71832c2237ab0c737c1bb8dc6505985cf0221008c1cbdb8b9090155f1811e0afe5a3fba97372c87a0a2cf6007671a645d86abcb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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