*.desegur.com

Issued by R3

About this certificate

This digital certificate with serial number 03:de:01:df:e3:90:56:06:a6:47:0d:30:ea:95:c4:ef:fb:b4 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.desegur.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:01:df:e3:90:56:06:a6:47:0d:30:ea:95:c4:ef:fb:b4
Serial Number (int): 336882034977466776191781237181418809850804
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:56:0e:18:88:28:ad:5b:41:6f:5a:86:5e:76:ab:06:5e:fb:d6:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:15:b5:e1:cf:d0:f9:78:4a:e0:37:09:5d:5f:a5:7a:9b:2d:73:b7
Fingerprint (sha256): f5:24:94:07:bf:1e:89:1e:11:8c:36:87:e1:7c:dd:06:82:dc:08:3c:27:97:33:de:87:b1:a3:f9:95:f2:d6:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.desegur.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.desegur.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4lowercrescent.com
*.aaompemail.org
*.archonhq.com
*.badfiddler.com
*.carsplussoftware.com
*.circumcisionwisdom.com
*.codawa.org
*.connectingimmigrants.org
*.curemycomputer.net
*.daleholmes.com
*.dandylionrecords.com
*.darylgerber.com
*.delplatochiropractic.com
*.derekowen.com
*.desegur.com
*.dwgerber.com
*.ericdweber.com
*.erikakosina.com
*.evidencebasedta.com
*.faithpriggeinteriors.com
*.furbabyfun.com
*.gscreative.com
*.gtlitho.com
*.hamletsblackberry.com
*.highpassmedia.com
*.hoodriverresearch.com
*.jessefarber.com
*.jnj8084.com
*.katerinatouch.com
*.longspeaktraining.com
*.margaretmcquiggan.com
*.mindybenowitz.com
*.nypalms.com
*.oddjobhandyman.net
*.onethejournal.com
*.panachedog.com
*.pasoportall.com
*.pianistnada.com
*.rvservices-tx.com
*.savorthemystery.com
*.sexynapa.com
*.skydogcreative.com
*.soccerlensawards.com
*.stallingsdrivechurchofchrist.net
*.ulsterproperties.com
*.ulsterproperties.net
*.xtel.biz
4lowercrescent.com
aaompemail.org
archonhq.com
badfiddler.com
carsplussoftware.com
circumcisionwisdom.com
codawa.org
connectingimmigrants.org
curemycomputer.net
daleholmes.com
dandylionrecords.com
darylgerber.com
delplatochiropractic.com
derekowen.com
desegur.com
dwgerber.com
ericdweber.com
erikakosina.com
evidencebasedta.com
faithpriggeinteriors.com
furbabyfun.com
gscreative.com
gtlitho.com
hamletsblackberry.com
highpassmedia.com
hoodriverresearch.com
jessefarber.com
jnj8084.com
katerinatouch.com
longspeaktraining.com
margaretmcquiggan.com
mindybenowitz.com
nypalms.com
oddjobhandyman.net
onethejournal.com
panachedog.com
pasoportall.com
pianistnada.com
rvservices-tx.com
savorthemystery.com
sexynapa.com
skydogcreative.com
soccerlensawards.com
stallingsdrivechurchofchrist.net
ulsterproperties.com
ulsterproperties.net
xtel.biz

Other certificates including the domain name desegur.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.desegur.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCptvK27f5W/1YFjUStP
2ECnka0yxCFAWSpbjbiv3aq2OF2M3tbHbXJVOf0s+TjQ4g+m2mEppEGc7+c7Kkeb
QXBBxZZF8tN2f1s+AiEfeyz/lhAua90t66B+nztdviKXtBYY8mmx02FWOhbjkggx
7pFY66OMSEOhKdGJN2q2HQ4x12qWNkooBmHQVUPFZBivVnq9yZL+C4L1FE+GoVdl
8YQaYhSur06qtBWPinoJAvt/dkvQQH6j3CEe+j8vG4LrjKATOdPFhmLiTQdqxFPl
tZc92oHbIN+g/s5uC9FhiX3qECPBXVE/DZr/Jhd+/p/t9p+gtkUs5fNBkdpFhZ/u
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336882034977466776191781237181418809850804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-17 08:17:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-17 08:17:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.desegur.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22238864026186085240048205943669403278374061637541217142917048212721818675333225915551572169148945417031495400912976160846746954162237130469891260416929479182185415557183123656115685344180904942896881967160179040354601710685744025239791705657940880262394329456627992568538350220093004649522948924485691956906735586150442004841055712346877587155239871942527863076240349654023529086297425744412259603090254642870394343983085312255097103006189604238153379215637316999933783232918836538893372758022646779618169173862261277554353617897380482963314759509430293044477763844591695757720923677865464631465178523719589708164731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20560e188828ad5b416f5a865e76ab065efbd62b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4lowercrescent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaompemail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.archonhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badfiddler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carsplussoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circumcisionwisdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectingimmigrants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curemycomputer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daleholmes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dandylionrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darylgerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delplatochiropractic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derekowen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desegur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dwgerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ericdweber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erikakosina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evidencebasedta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faithpriggeinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furbabyfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gscreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtlitho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamletsblackberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highpassmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoodriverresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jessefarber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jnj8084.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katerinatouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longspeaktraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margaretmcquiggan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindybenowitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nypalms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oddjobhandyman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onethejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panachedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasoportall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pianistnada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvservices-tx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savorthemystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexynapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skydogcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soccerlensawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stallingsdrivechurchofchrist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulsterproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulsterproperties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xtel.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4lowercrescent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaompemail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archonhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badfiddler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsplussoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circumcisionwisdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectingimmigrants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curemycomputer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daleholmes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dandylionrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darylgerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delplatochiropractic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derekowen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desegur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwgerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericdweber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erikakosina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evidencebasedta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithpriggeinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furbabyfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gscreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlitho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamletsblackberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highpassmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodriverresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessefarber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnj8084.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katerinatouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longspeaktraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaretmcquiggan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindybenowitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nypalms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oddjobhandyman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onethejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panachedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasoportall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianistnada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvservices-tx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savorthemystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexynapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skydogcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerlensawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stallingsdrivechurchofchrist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulsterproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulsterproperties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtel.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001766ffd77910000040300483046022100a85fa1c776c17ae348e97e3df05e37e9f1825e7f9606b6fb0d901b71e44845f2022100f458e60d24048ab5fd5fa98a1e239175e0fa0ffc3b45c29b620211e92e110ee60076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001766ffd78950000040300473045022063e60bdebf03e02f81e276b6759d5f7a04889a2a24bfd80bd2301ed70fc563a2022100ed7c325e4281b361304471986284266d27ff8dd4627c03a0abeda66e889aa12b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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