fixleg.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:79:f8:5d:f0:7f:4b:fa:35:1f:16:58:ea:17:4c:d8:23 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fixleg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:79:f8:5d:f0:7f:4b:fa:35:1f:16:58:ea:17:4c:d8:23
Serial Number (int): 311860774282008772580608487224289327372323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:fc:ce:ff:c4:3e:f1:cf:09:89:2f:ed:37:f6:3e:97:12:6a:7c:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:83:d6:04:55:57:64:ec:a6:20:ef:20:25:8c:45:64:62:03:af:73
Fingerprint (sha256): fa:11:08:8e:0f:76:34:46:bf:7a:b1:89:ac:f3:c4:7b:4f:59:c7:79:7f:b5:17:73:99:4e:e4:69:92:8a:40:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fixleg.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fixleg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100geburtstag.com
agustipuig.com
anotherfalseflag.com
asteriskconfig.com
asterisktag.com
bogusflag.com
brovig.com
coldpressedveg.com
creedblackflag.com
dersonntag.com
discoverkalamansig.com
dressag.com
dubaimoney.net
durschlag.com
employmentdg.com
fixleg.com
globalrig.com
gravityandswag.com
investrig.com
jackdurschlag.com
juicingveg.com
literarymag.com
livesexdrag.com
madisonatballstonstationag.com
madisonballstonstationag.com
martonschimcsig.com
morefalseflag.com
newfalseflag.com
privatebankingag.com
radiowinnipeg.com
realsexdrag.com
romanticwinnipeg.com
schimcsig.com
scubasportmag.com
semisubmersibleoilrig.com
semisubmersiblerig.com
sexdrag.com
shoporganicveg.com
teaminternetag.com
thatfalseflag.com
timesbg.com
tourwinnipeg.com
trygg.com
unitedarabemiratesflag.com
untrueflag.com
varig.com
wnhashtag.com
www.100geburtstag.com
www.agustipuig.com
www.anotherfalseflag.com
www.asteriskconfig.com
www.asterisktag.com
www.bogusflag.com
www.brovig.com
www.coldpressedveg.com
www.creedblackflag.com
www.dersonntag.com
www.discoverkalamansig.com
www.dressag.com
www.dubaimoney.net
www.durschlag.com
www.employmentdg.com
www.fixleg.com
www.globalrig.com
www.gravityandswag.com
www.investrig.com
www.jackdurschlag.com
www.juicingveg.com
www.literarymag.com
www.livesexdrag.com
www.madisonatballstonstationag.com
www.madisonballstonstationag.com
www.martonschimcsig.com
www.morefalseflag.com
www.newfalseflag.com
www.privatebankingag.com
www.radiowinnipeg.com
www.realsexdrag.com
www.romanticwinnipeg.com
www.schimcsig.com
www.scubasportmag.com
www.semisubmersibleoilrig.com
www.semisubmersiblerig.com
www.sexdrag.com
www.shoporganicveg.com
www.teaminternetag.com
www.thatfalseflag.com
www.timesbg.com
www.tourwinnipeg.com
www.trygg.com
www.unitedarabemiratesflag.com
www.untrueflag.com
www.varig.com
www.wnhashtag.com

Other certificates including the domain name fixleg.com

(limited to 100 certificates)
schimcsig.com
www.dersonntag.com
creedblackflag.com
www.dressag.com
www.trygg.com
teaminternetag.com
oilfinance.com
www.dubaimoney.net
www.unitedarabemiratesflag.com
dersonntag.com
fixleg.com
www.literarymag.com
privatebankingag.com
literarymag.com
teaminternetag.com
www.scubasportmag.com
www.securityfreelance.com
www.trygg.com
www.dubaimoney.net
investrig.com
dersonntag.com
www.scubasportmag.com
creedblackflag.com
fixleg.com
www.martonschimcsig.com
scrapfinance.com
www.dersonntag.com
www.literarymag.com
teaminternetag.com
brovig.com
www.shoporganicveg.com
www.creedblackflag.com
jackdurschlag.com
fixleg.com
creedblackflag.com
fixleg.com
madisonballstonstationag.com
creedblackflag.com
creedblackflag.com
scubasportmag.com
indonesiatradefinance.com
asteriskconfig.com
fixleg.com
www.securityfreelance.com
teaminternetag.com
scrapfinance.com
dersonntag.com
www.asteriskconfig.com
teaminternetag.com
www.trygg.com
scrapfinance.com
www.varig.com
www.timesbg.com
www.securityfreelance.com
fixleg.com

Certificate

The complete raw certificate details for fixleg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gPjQwH0Q3yzEwaDHLAH
bNqmmQTZi1780BscqkJuZIVFwscoPxrMSwUERN7Qqm4paBwUj/l6QeRstEtSuTuV
6IFpke2VmPqz7rd7lE188iTQUDl1gc1r+RgG0u5zbkvg7P/fVGPpvzuaRBMigmSM
RcN3xJ3aebbboQBFhypc8mdJ0lBPlQlHLbN9KUYU+cOYIbRO2cnqLLCl57ebYRPK
oPMNqPjfiNGkZCscrlbvotmkh+RVmBQJmfH5LE+JmLKrSPCEMpW80HAKRyOseHRH
lBNjMT7X8weySxILadcZ2e5XGX8euZQ017nzvBwexHofrkhEmv+XX/CyiKPq1+Tm
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311860774282008772580608487224289327372323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-29 11:13:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-27 11:13:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fixleg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30551586918426457347288158838489896539839391245591304914072246882491669914069267026828430264587268884450196417214884501197198742719796989684797922009537778852039092308573359867243170483611763346765194968964813359455273796603524408107135543940125491504493868209859288623068251128848999128881210464761279795366811405971579997439906945384277625692068785542876858280681986325783529563214963594586318951223425736040712805776931952397388396594355673629223442298037872087948629712197585618195191899772131738972676784627758461605610095254683057826839769273650569404680499090801662943960595719388547630679477185217258617890377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8fcceffc43ef1cf09892fed37f63e97126a7cc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100geburtstag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agustipuig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asteriskconfig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asterisktag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogusflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brovig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coldpressedveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creedblackflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dersonntag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverkalamansig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dressag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaimoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employmentdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravityandswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackdurschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicingveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literarymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livesexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonatballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martonschimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morefalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiowinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realsexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanticwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scubasportmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersiblerig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoporganicveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaminternetag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedarabemiratesflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untrueflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnhashtag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100geburtstag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agustipuig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asteriskconfig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asterisktag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogusflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brovig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coldpressedveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creedblackflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dersonntag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoverkalamansig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dressag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaimoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employmentdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gravityandswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackdurschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juicingveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literarymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livesexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonatballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martonschimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morefalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiowinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realsexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romanticwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scubasportmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersiblerig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoporganicveg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teaminternetag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedarabemiratesflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untrueflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnhashtag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000164e5f5752f0000040300483046022100c1af50e5ec23cbed68c12d066360afee71fce31401b88799f37feb5bf0627a41022100a453929afbb601d1f915f7a56cf125b54cc8d390c368f6661bc8265bb5d20e33007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164e5f5753f000004030047304502206163eddbfa1beb244ae011c2bea6768951a94aafc024d7d3379d6758a99abbed022100e0ac5b7425be6312d1cc376f7aff26f05a49d98f73e0a876c2199f5517e66bdd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00651762583a8e2ee212ea2f1e67d08f4689c037a7ac90b4c38ec9154303946f45af22d9b206fd31f3fbc1cfbcbfe22792786eae8977562adfbcf60fd1e7632e410c3da589c7f6660b2bd4bf852512b7339303b4f43fb35a504893908d98d482c7688c9c73fe6877604d3b720cea3a0e712c587c2001d38e060e72addf5c1e3ff7342996a6cbce11df043e5ba3a95919a1d7c408a89616de48795f6925b1f4b363c2a9f5b284ecd0a372f5d2a973b000dd266ba54e39009d94b260abd06a9c9324a0154afdcc5b4e5d109d8916ad5825478ca38e3b3d84cae78d796025738a1e4d4d7a1cfe2b861418b87f65174d2ede05311e98c7b73a34b7ecc076ad62bcb926