www.shelterfinance.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:c3:e6:fe:b0:f1:c1:88:7d:d6:a3:00:b8:51:c0:12:83 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.shelterfinance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:c3:e6:fe:b0:f1:c1:88:7d:d6:a3:00:b8:51:c0:12:83
Serial Number (int): 334077400802647170047789386051356364640899
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:29:75:82:b4:17:53:fb:aa:cf:f9:04:f6:81:73:80:72:79:c3:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:8c:20:e8:65:05:49:ed:8e:28:d1:f8:f0:b2:9f:ce:1a:f2:48:19
Fingerprint (sha256): f2:39:4f:5b:44:98:87:47:0c:04:3d:07:3b:66:56:ff:07:97:52:3e:a3:af:2d:44:4b:ae:46:ba:41:b6:21:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.shelterfinance.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shelterfinance.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

123ip.legal
2sherwood.com
aguasalud.com
anchorageregenerativemedicine.com
bcmga.com
bilhete.click
budtenderama.com
catnipcode.com
chicagobeautyspa.com
citricfree.com
classifieds.global
collegeboundusa.com
delraymarina.com
denverprp.org
fermentedfeed.com
goodmorninggrancanaria.com
helpendcancer.org
hempzombie.com
hindsightcanada.com
hoodequity.org
hoperecovery.org
hotoka.com
howcanibuyahome.com
investmoola.com
iotatangleinside.com
londonrealestate.mobi
m249.com
maple6.com
medic.network
memorycarefacilities.org
merrijuanachristmas.org
mexicosportsmedicine.com
motoroic.com
onthe.watch
orderofprofits.org
orderofprophet.org
painterjacksonville.com
plasticsurgeries.org
playapristina.com
portlandprp.org
psalm719.com
shelterfinance.com
sophiagracetorba.com
syndicatemobile.com
tangle-inside.com
tangleinside.com
thecatscradle.com
vancouversportsmed.com
wikileacs.org
www.123ip.legal
www.2sherwood.com
www.aguasalud.com
www.anchorageregenerativemedicine.com
www.bcmga.com
www.bilhete.click
www.budtenderama.com
www.catnipcode.com
www.chicagobeautyspa.com
www.citricfree.com
www.classifieds.global
www.collegeboundusa.com
www.delraymarina.com
www.denverprp.org
www.fermentedfeed.com
www.goodmorninggrancanaria.com
www.helpendcancer.org
www.hempzombie.com
www.hindsightcanada.com
www.hoodequity.org
www.hoperecovery.org
www.hotoka.com
www.howcanibuyahome.com
www.investmoola.com
www.iotatangleinside.com
www.londonrealestate.mobi
www.m249.com
www.maple6.com
www.medic.network
www.memorycarefacilities.org
www.merrijuanachristmas.org
www.mexicosportsmedicine.com
www.motoroic.com
www.onthe.watch
www.orderofprofits.org
www.orderofprophet.org
www.painterjacksonville.com
www.plasticsurgeries.org
www.playapristina.com
www.portlandprp.org
www.psalm719.com
www.shelterfinance.com
www.sophiagracetorba.com
www.syndicatemobile.com
www.tangle-inside.com
www.tangleinside.com
www.thecatscradle.com
www.vancouversportsmed.com
www.wikileacs.org
www.zimpactadvisors.org
zimpactadvisors.org

Other certificates including the domain name shelterfinance.com

(limited to 100 certificates)
www.immointernational.com
aguasalud.com
westtexasroughnecks.com
shelterfinance.com
www.goodmorninggrancanaria.com
www.zimpactadvisors.org
selfiesmr.com
jobsinmoradabad.com
shelterfinance.com
seniors.co.in
shelterfinance.com
shelterfinance.com
www.shelterfinance.com
shelterfinance.com
www.tangle-inside.com

Certificate

The complete raw certificate details for www.shelterfinance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgeLH+9LjcqPdoRTcmrj
3eSobQxg2kgEUdm8sNc5bCzYq5cIcvvw9Fr3bGGfocZFHoMq9uraMY/npxp2IA16
nZIBMSrFwbocPycSwxm7D05QRyZ3YEfBHEYYX82TyvB563MUXC42AloZsC2X+xbO
fQVd7RwPFkVdAoBO5ocCmV8vfUjmgm+FMBvHZut/PdS8H5tW5Bckn+dXurFzFCxM
I1vecAOXEcVplTXYqdInFXqLHzLebQP95JIdoXimyR4pt3+rinhRgNmW2c+ePGrn
8XxHrOa2HKSdVvlbKePA6EEe0VBgt5aBK+g4Nr8GNxtaLLM2TW2PthaB9uMw0yi5
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334077400802647170047789386051356364640899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 05:58:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 05:58:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shelterfinance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23988997760361745139644490221712077131307218181906815208160413606081760078973991278448509659727128689448791272483981975282861733387378347836040777787867196960984701523467019624813356606122325938096494652032127647939642378761696150142310459455773440248955654543036664581732585008391937161053488525159421505501299534189860810752816407854566903835581375465369509198042810725400955533536509473441957646841209952905354477218724967706632164783700903826276139725423206282386759028793337072943340053097414525355895659962598561387773202599718517480664202625087907283328687869765382956811180024209801445945790396969664295516543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3297582b41753fbaacff904f68173807279c36a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123ip.legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2sherwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aguasalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchorageregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilhete.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budtenderama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catnipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagobeautyspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citricfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classifieds.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeboundusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delraymarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fermentedfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmorninggrancanaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpendcancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempzombie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindsightcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodequity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoperecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotoka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howcanibuyahome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmoola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotatangleinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm249.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maple6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medic.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memorycarefacilities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merrijuanachristmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexicosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoroic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onthe.watch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderofprofits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderofprophet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painterjacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasticsurgeries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playapristina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psalm719.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelterfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophiagracetorba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndicatemobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangle-inside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangleinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecatscradle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouversportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikileacs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123ip.legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2sherwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aguasalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anchorageregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bilhete.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budtenderama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catnipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagobeautyspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citricfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.classifieds.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegeboundusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delraymarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denverprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fermentedfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmorninggrancanaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpendcancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hempzombie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hindsightcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoodequity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoperecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotoka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howcanibuyahome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investmoola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iotatangleinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.londonrealestate.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m249.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maple6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medic.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memorycarefacilities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merrijuanachristmas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mexicosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motoroic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onthe.watch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orderofprofits.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orderofprophet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.painterjacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plasticsurgeries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playapristina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portlandprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psalm719.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shelterfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sophiagracetorba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syndicatemobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tangle-inside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tangleinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecatscradle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancouversportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wikileacs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zimpactadvisors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimpactadvisors.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001708fbd6a380000040300483046022100a738ac52512dc7920d875424c0ca6c2fc5ed4ebbd06f597b762e1d6cda00bb9302210086f6738474076a62e96755c5c76c5e4a4a64b5284cee398d688ea097d1b4230b00740007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001708fbd6a5a000004030045304302204f5d226b7828843e62c085ba2a4db2d40f46e2973d132b3cfc795da67006728f021f106701d4ca4bef9d7751b53ef448310a37315a7a2725c9d293a05ef1f5f5a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00361821eec8762860f0cc00728bb601d00faca623e83d3d39369acd942d41d9efaf641b071b8f2f0a74aebf7d8982a10feb068ccdec2a0fc0fc2f4ef7414fa5f3b188613059a40dbb38eaf44714d4e51f065bdce347db34cb47949a199a724cf61a61beb9890da28447d70c5ea5ada777cd1aad084cd7e5e8b3c6c1395a7d28a7e01660dca5e7a1a728566cfeef5821eb7ea44853099275046f8c4eed20ea5e04934ee37580ef497dc3c84d0886a8e5a43625268482d74432010bfcecb8388b12e5b93caff9390c0cfd9e69cbf8869e2d4329e553bb68da63bdadceb59de669de2b36af2d64761d58acbd3bff98232a12fdedc487e8fc92f243b12acb0cf55f10