tuuma.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:34:75:3e:e3:2a:0c:b7:43:7f:2d:34:22:65:6a:f4:9f:bd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tuuma.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:75:3e:e3:2a:0c:b7:43:7f:2d:34:22:65:6a:f4:9f:bd
Serial Number (int): 279187387080520102583225574559670521339837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:cb:2c:45:59:56:94:b3:bc:7d:07:dc:ee:f8:55:3d:7d:ea:93:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:10:d0:2a:16:82:a5:fa:99:4c:70:f1:15:5e:7a:e8:a1:f8:c9:cb
Fingerprint (sha256): f3:7a:76:d4:57:16:29:08:03:0c:3c:b3:8c:ba:fa:fc:e2:56:f6:39:40:99:cd:7b:72:29:b5:6b:ea:7e:b9:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tuuma.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tuuma.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anchoragestemcell.com
dynawin.com
econosystem.com
fnoco.com
fondamentalismoislamico.com
fortwaynejointpain.com
hbrco.com
hklco.com
iibco.com
inforacquisition.com
jetathlon.com
jointpainsanjose.com
jslco.com
justlikeme.com
jwnco.com
kabico.com
keenclean.com
ktqi.com
kwrco.com
lotuscafe.com
lpuco.com
lrkco.com
mesajointpain.com
mmasanfrancisco.com
neologin.com
obhco.com
omnipore.com
oneearthweb.com
ovuli.com
pgbco.com
poisonivyidentificationawarenessweek.com
polyen.com
polyfeel.com
polyiron.com
qualtherm.com
skinsculpture.com
sleepingdragon.com
sportsmedicineboston.com
stvincentandthegrenadinesrealestate.com
triphaze.com
tuuma.com
uagco.com
uaoco.com
visitati.com
vtlco.com
windowreplacementhouston.com
wrinkleregeneration.com
www.anchoragestemcell.com
www.dynawin.com
www.econosystem.com
www.fnoco.com
www.fondamentalismoislamico.com
www.fortwaynejointpain.com
www.hbrco.com
www.hklco.com
www.iibco.com
www.inforacquisition.com
www.jetathlon.com
www.jointpainsanjose.com
www.jslco.com
www.justlikeme.com
www.jwnco.com
www.kabico.com
www.keenclean.com
www.ktqi.com
www.kwrco.com
www.lotuscafe.com
www.lpuco.com
www.lrkco.com
www.mesajointpain.com
www.mmasanfrancisco.com
www.neologin.com
www.obhco.com
www.omnipore.com
www.oneearthweb.com
www.ovuli.com
www.pgbco.com
www.poisonivyidentificationawarenessweek.com
www.polyen.com
www.polyfeel.com
www.polyiron.com
www.qualtherm.com
www.skinsculpture.com
www.sleepingdragon.com
www.sportsmedicineboston.com
www.stvincentandthegrenadinesrealestate.com
www.triphaze.com
www.tuuma.com
www.uagco.com
www.uaoco.com
www.visitati.com
www.vtlco.com
www.windowreplacementhouston.com
www.wrinkleregeneration.com
www.yanktondental.com
www.ymoco.com
www.zivco.com
yanktondental.com
ymoco.com
zivco.com

Other certificates including the domain name tuuma.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tuuma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AIajvKWnnDXDrO0FvmT
XGgNZ/RlQdZ8rsCZdmQhLAm9L8e7MdcERD9KynuG7Jr1Vfy5cM9GhJboJGnIKJhv
sVqiqTKhVNiWi9UEuZimXsXcRvxDvR3fNmdj6wZd3Meh6uLp9hXpK5/kA4S8L/U5
wrdVEdBbeu8+Rk6ffoKT/0egcIjhD82YHp7SWO/6mlQXChuG9IJfGyFksweAx7Ks
kXujaKENMvcxrO5CuBOvgU0TnZuR9JHaoeny2MC5t5PwdIIDoMYyPpuea3zB0gP/
+i6S8Qsw34a8qggoD7wj4Lp+T5beHlUa51haDnWHmLnnbemtnPNGrw8us0n+1rmo
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279187387080520102583225574559670521339837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 14:51:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 14:51:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tuuma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30803183806404671755660878652847051299609144934564263164346028367619085510379267841978183929986081111017607136698322534254486707281022468368900788292996252293235269353141823014918082206150051073196371441095622556311344290465945651158572324818496178845993001405570595289962629536663702746798434760941940930572928166814398145838567226712179095416137921046008860276577484982746872189162309122715357028541787735240631065837566851883410193232949243954737409277011222201230431984165280025622763719871009408922632324098464698309379792536137767087713800070907938587485345274561613138138306001865464620092175909210907171465377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6cb2c45595694b3bc7d07dceef8553d7dea939b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchoragestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynawin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econosystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondamentalismoislamico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortwaynejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hklco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iibco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inforacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetathlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainsanjose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jslco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justlikeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwnco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keenclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotuscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesajointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmasanfrancisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neologin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obhco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnipore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneearthweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovuli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgbco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyidentificationawarenessweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyfeel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyiron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualtherm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinsculpture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepingdragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentandthegrenadinesrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triphaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uagco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uaoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowreplacementhouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrinkleregeneration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anchoragestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynawin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econosystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fnoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondamentalismoislamico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortwaynejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hklco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iibco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inforacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetathlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainsanjose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jslco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justlikeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jwnco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kabico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keenclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotuscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesajointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmasanfrancisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neologin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obhco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omnipore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneearthweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovuli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pgbco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivyidentificationawarenessweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polyfeel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polyiron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualtherm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skinsculpture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sleepingdragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentandthegrenadinesrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triphaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uagco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uaoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vtlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windowreplacementhouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrinkleregeneration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yanktondental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zivco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yanktondental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zivco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a26d850020000040300463044022001951399517fa443fa3f8b62ce8fda2249a37abaa5ad7c2d255be47bb60205c302204b501ab59ef2dba22997f35b7f15f253c13af69d6bb0b217ec005e44a7b6ebd6007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a26d85084000004030046304402200d1048266dbec8574dbb18c3b9e7fca8d3eb4d9a734b6edae64ef0246403e71b022013d083288eccbb91c85f5380292b337285dffaa49afefcdad0d9cfaecd4aca8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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