modalhomes.ca

Issued by R10

About this certificate

This digital certificate with serial number 03:df:4a:eb:c6:e6:88:33:24:db:6e:ad:38:fc:f2:ec:4a:c8 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=modalhomes.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:df:4a:eb:c6:e6:88:33:24:db:6e:ad:38:fc:f2:ec:4a:c8
Serial Number (int): 337319412714281587443208872646109574220488
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:ad:1e:79:e9:54:4e:2b:6a:7d:5a:d0:e7:3c:b1:8f:a8:1d:04:9f
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 5e:72:d9:8f:aa:7e:12:ea:94:79:60:cb:48:b0:49:8f:2c:a5:b2:94
Fingerprint (sha256): f2:04:b2:7d:c3:3f:c2:84:f9:ba:4c:ec:4f:3a:b4:13:82:50:fd:a7:7b:79:4e:9b:f1:f8:c0:47:b7:a8:73:d7

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate modalhomes.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for modalhomes.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

51statesrunningclub.com
abletocook.com
accessbuffalo.com
amazon.lisaandfrank.com
ansger.com
apply.truffle.vc
arbitrageurs.ch
attorneycall.com
avephilomena.org
badasslowriders.com
badmintonalberta.com
bantransgenders.com
batangascoco.com
bdlight.com
bitcoinsturkiye.com
boredvinos.com
browardsiding.com
businesscosmos.com
cannabisarbitrage.com
cerealreimagined.com
charlottehomemovers.com
chuckyshomer.com
coffeenkickstands.com
coloradocountydeer.com
consumerarbitrage.com
corporateaircraftinsurance.com
creationvolunteers.com
dallasnissan.com
dallastrustattorney.com
daresband.com
daws.one
descentralizada.com
dfwwomen.com
dieteticiens.com
discovery.cmtasphere.com
dnkservices.com
doctoraroundhere.com
domainnamestopics.com
englishivycontrol.com
expressrecords.com
factrating.com
fatherblogs.com
fortade.com
genefreedom.org
gopinning.com
gpsintegration.com
graverblocks.com
icl-techno.com
indianaman.com
isabellawhitwell.com
iwontcomplywithyourlies.com
jarmstrong.info
jaros.love
jesustherapy.com
kc4lzn.com
lindellplan.com
longlotto.com
madewithallulose.com
maplevalley.land
marsarmy.com
mcnattcompliancesolutions.com
michaelgilmourblog.com
michigancourt.com
modalhomes.ca
msnhub.com
nationalwealthpartners.com
nearyoupestctrl.com
nomurausa.com
olivoforillinois.com
optumpharmacy.com
overcomersrecovery.ca
pressurewashdeltona.com
prochristi.org
prosthodontist.co.in
reaccommodation.com
rxglp-1.com
rxsyrup.com
sailingblog.com
saintjosephgarbage.com
showconvention.com
showfreelancers.com
stone-wood.com
sugar-rx.com
supplementaldisabilityinsurance.com
t-strings.com
tahoe.wine
telica.co.uk
themotionplant.com
theusgolf.com
tolerolucror.com
tourism4vip.com
traversecounty.com
treasureislanddivers.com
usaprecision-arms.com
votechaseoliver.org
vpslinuxhosting.com
watermarkfarm.org
wickermaster.com
youtube.npbae.com

Other certificates including the domain name modalhomes.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for modalhomes.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FDovfFxr3fC0piivhsi
hTZ5Ul+Mp7P4+wB6Nlf9J7WzkcJianpGj6BqDl3fERhsIXpSmZoRWi5CB/+3/HW0
0YG1BFDbgBIctb9SEhPZPvXo3GPUEBbfDVjtdgWQyEWvupRDfQXCESX2Hpy19HVV
oveG/a5zuRUOvNf8AQYv4lGiiLf/sWQDokLqA49nd/9/nXGQkT5zDs+eDMdg8/9i
2F4YsPr+m9Fb8LWEUSMxYORG3dBpkS7OjiWBPtIFR6Yrijufdwjl/16zylZ36MXq
vmrC3asI5t422/cGHPJLGFhagfzJKGbcbv1ooxFJMlZjdNsqJE1YEAutfwyJJMZm
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337319412714281587443208872646109574220488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 21:44:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-04 21:44:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'modalhomes.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29832137760028633859620629132200473112982585062300993356839737249250637610023306225685036148127222335754305441302590279380706919992884284431306112713472233739037611055949114830920288306780129001665836458736430696941548693960332760475111926458612937548481127515794136594559384075620320489454845497225819200234474770031882660972716964746407033072804567444256703753127752661945336657474525470161820053923752088969269933064092043063007854172881722625081746618762286068417124178367910880888990464789860331596568526148212663767717027425970916509543256378427838726717941358720369816080620206355415349083733452191372637791923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cad1e79e9544e2b6a7d5ad0e73cb18fa81d049f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1919 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '51statesrunningclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abletocook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessbuffalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.lisaandfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.truffle.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorneycall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avephilomena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badasslowriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonalberta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bantransgenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batangascoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinsturkiye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boredvinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'browardsiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesscosmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerealreimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottehomemovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuckyshomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeenkickstands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradocountydeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateaircraftinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creationvolunteers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasnissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallastrustattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daresband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daws.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descentralizada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwwomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dieteticiens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovery.cmtasphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnkservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctoraroundhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainnamestopics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishivycontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factrating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genefreedom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopinning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpsintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graverblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icl-techno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianaman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isabellawhitwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwontcomplywithyourlies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarmstrong.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaros.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesustherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc4lzn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindellplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longlotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madewithallulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maplevalley.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsarmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnattcompliancesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelgilmourblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michigancourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modalhomes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msnhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalwealthpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nearyoupestctrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomurausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivoforillinois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optumpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcomersrecovery.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewashdeltona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prochristi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosthodontist.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxglp-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsyrup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailingblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjosephgarbage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showconvention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showfreelancers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stone-wood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugar-rx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplementaldisabilityinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-strings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahoe.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telica.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themotionplant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theusgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tolerolucror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourism4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traversecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasureislanddivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaprecision-arms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votechaseoliver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpslinuxhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkfarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wickermaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtube.npbae.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fefb937f3000004030047304502204aceffb5d5d47f98f4007d9caee002212b9ed816932ab9554f1a8cb4fa98df42022100bcfaddddf85f3b1ddf344716875ca22908ef51619aee8dcc5561a71d88f815bc0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fefb93804000004030046304402202e4c7dc38cd41a9de392d00ce6c2120e2a2f25e5b4e4ec425b66a42e971606660220190a5385bdd19f22c946fe82df18fff7c1b6aec86caa19f209e02f01804855ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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