*.segra.com.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:85:c7:70:dc:26:ef:1c:4f:e5:25:14:92:88:ec:18:1b:de was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.segra.com.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:85:c7:70:dc:26:ef:1c:4f:e5:25:14:92:88:ec:18:1b:de
Serial Number (int): 393971800901149940510000391058309720316894
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:98:90:fb:89:85:81:44:ed:c9:d2:72:45:7c:f3:05:ea:9e:c3:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:13:06:36:96:86:74:15:dd:d3:8d:fa:90:79:96:43:82:5c:9a:8c
Fingerprint (sha256): f8:4f:2e:47:0f:32:42:15:3f:e6:9c:7e:68:23:c1:7e:df:3e:5d:aa:12:88:4b:bc:7d:07:36:a4:1c:dd:e8:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.segra.com.mx

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.segra.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advancedlandscapingnw.com
*.afistfulofdharma.com
*.afistfulofdharma.net
*.avgjoesgym.com
*.avpto.com
*.benncreative.com
*.chaquejourestuneaventure.fr
*.diamondwave.com
*.digitallego.net
*.fairfaxband.org
*.floralaffairsbysarah.com
*.fpmss.org
*.fultoncoogs.org
*.g-squaredhomes.com
*.gravitywarpstime.com
*.highlands-preschool.org
*.houstonskindr.com
*.jesus-rockers.co.uk
*.jesus-rocks.co.uk
*.kandakruisers.com
*.kathycampbell.com
*.lakecountryflag.com
*.literallyracist.com
*.maplehurstfarmweddings.com
*.mlcconsulting.org
*.northernvirginiayouthwinds.org
*.nothingbutbeach.com
*.nvyw.org
*.pattt.org
*.rentacomputadoras.mx
*.rentacomputadoraspc.com
*.routeitcnc.com
*.sargentstudios.org
*.segra.com.mx
*.snakeriverrock.com
*.stuckinbeijing.com
*.svstowatch.com
*.tacticouture.com
*.tehinternetz.net
*.theeconomicconversation.com
*.visibilidaddigital.com.mx
*.weirdasianews.com
*.workingholidayinfo.com
advancedlandscapingnw.com
afistfulofdharma.com
afistfulofdharma.net
avgjoesgym.com
avpto.com
benncreative.com
chaquejourestuneaventure.fr
diamondwave.com
digitallego.net
fairfaxband.org
floralaffairsbysarah.com
fpmss.org
fultoncoogs.org
g-squaredhomes.com
gravitywarpstime.com
highlands-preschool.org
houstonskindr.com
jesus-rockers.co.uk
jesus-rocks.co.uk
kandakruisers.com
kathycampbell.com
lakecountryflag.com
literallyracist.com
maplehurstfarmweddings.com
mlcconsulting.org
northernvirginiayouthwinds.org
nothingbutbeach.com
nvyw.org
pattt.org
rentacomputadoras.mx
rentacomputadoraspc.com
routeitcnc.com
sargentstudios.org
segra.com.mx
snakeriverrock.com
stuckinbeijing.com
svstowatch.com
tacticouture.com
tehinternetz.net
theeconomicconversation.com
visibilidaddigital.com.mx
weirdasianews.com
workingholidayinfo.com

Other certificates including the domain name segra.com.mx

(limited to 100 certificates)
*.segra.com.mx
segra.com.mx
segra.com.mx
customers.tigertech.net
*.segra.com.mx
customers.tigertech.net
*.segra.com.mx
*.segra.com.mx
*.wolverhamptoncarpetcleaners.co.uk
segra.com.mx
customers.tigertech.net
segra.com.mx
*.wolverhamptoncarpetcleaners.co.uk
customers.tigertech.net
*.segra.com.mx
customers.tigertech.net
customers.tigertech.net
*.segra.com.mx
*.segra.com.mx
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.segra.com.mx
*.wolverhamptoncarpetcleaners.co.uk
*.wolverhamptoncarpetcleaners.co.uk
*.segra.com.mx
*.segra.com.mx
*.wolverhamptoncarpetcleaners.co.uk

Certificate

The complete raw certificate details for *.segra.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCbMg44XXDZBbjYs43l
ZOc2i8k6RXZxtd9NBUURVWwvEVkOm6rCVVW5VP3LYZ1VRuSgKLn7+ihGlRG3oUGI
e57oASbOnXSVchkQHuDyskuAelVgMDe1BeBXa7CWPkfockglyIk1mAq5uj4CEV82
XqNLJ5H25M2nJAMlmnSLsRWP4exaaTCsMnx15XXJyFe1EXids5a/3AXJB574MeXc
effFh0hB2LYhJKoNskORVqhyguDdHWHDDj/jONi6zJ6EkkHUS/8LOzsbCh9GtEu+
voIOO2pvQ3AdssqqHpBNCYqWL+bNY++e+2ywzW0bHby3dKfz3D+/+DhBcModDk+o
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393971800901149940510000391058309720316894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 07:31:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 07:31:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.segra.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23898788053292798754256238358322725908472676863497141772531178051273468515256074757777413002785122028606792513688837370473450877156306577536917910441231456751513090585598705941342062466130801558155785241369603993388066416137599080198882047600520307408821496874076952355792489015258910329631767444441669889471999535148250813621784619068106488269517774770708888630235821423807330306502653535677644409816496175133926517669145651762798837005608000300881689155049496198595678543145774442883377445168467991986621230818807766231217930948372288633482736748974365373892739340944261628273273651776933430469262756849451428456609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e29890fb89858144edc9d272457cf305ea9ec3b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advancedlandscapingnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afistfulofdharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afistfulofdharma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avgjoesgym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avpto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benncreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaquejourestuneaventure.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diamondwave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitallego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairfaxband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floralaffairsbysarah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fpmss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fultoncoogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g-squaredhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gravitywarpstime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highlands-preschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonskindr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jesus-rockers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jesus-rocks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kandakruisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathycampbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakecountryflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.literallyracist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maplehurstfarmweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlcconsulting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northernvirginiayouthwinds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nothingbutbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvyw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pattt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentacomputadoras.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentacomputadoraspc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.routeitcnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sargentstudios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segra.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snakeriverrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuckinbeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svstowatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tacticouture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tehinternetz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theeconomicconversation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visibilidaddigital.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weirdasianews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workingholidayinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedlandscapingnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afistfulofdharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afistfulofdharma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avgjoesgym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avpto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benncreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaquejourestuneaventure.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondwave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitallego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfaxband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floralaffairsbysarah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpmss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fultoncoogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g-squaredhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravitywarpstime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlands-preschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonskindr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesus-rockers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesus-rocks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kandakruisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathycampbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakecountryflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literallyracist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maplehurstfarmweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlcconsulting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernvirginiayouthwinds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nothingbutbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvyw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pattt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentacomputadoras.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentacomputadoraspc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routeitcnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sargentstudios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segra.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snakeriverrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuckinbeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svstowatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacticouture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehinternetz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theeconomicconversation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visibilidaddigital.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weirdasianews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingholidayinfo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a9bb7c5d0000004030047304502204644ed62d0f17b1f1712abfd277d4adef1fed7614ddc7d783bd2911209045b8d02210083d90dde5ba0e2e63f32269c4357d8871012758849c8b78f1481de3b894c4bf6007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a9bb7c7c80000040300483046022100f7c3acbf46048d7c302fa88cb843a464983bb22ee2acc7cf6ac3b949ca0bf8000221009459084e28df1bc9bbf113b532bf0b6238277435ca01fac6a5394f5cb40fd461
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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