www.leafscrush.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2e:94:18:46:39:29:77:45:68:ca:99:c6:e6:d0:aa:b5:9e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.leafscrush.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:94:18:46:39:29:77:45:68:ca:99:c6:e6:d0:aa:b5:9e
Serial Number (int): 277186698456442192238521332454154874566046
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:ba:e0:27:63:ac:58:cd:c9:8d:23:f6:5e:e7:d7:ef:43:a8:1c:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:d4:f5:c4:4c:0e:3c:6e:7d:96:8d:99:03:41:83:aa:45:d9:7f:eb
Fingerprint (sha256): fc:0f:9c:c8:07:80:79:0b:99:4d:a2:1e:08:e3:26:25:b5:6a:4e:9f:55:43:4c:fb:5f:c9:95:50:64:37:c6:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.leafscrush.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.leafscrush.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

253leaf.com
323leaf.com
amour-bridal.com
batonrougestemcell.com
bionicduck.com
bjrco.com
bytesrc.com
callmyai.com
championstable.com
costkill.com
dicksexlick.com
dodcase.com
drhelpline.com
eddymitchell.com
gaoho.com
garage-tech.com
gloriosi.com
hardbikeco.com
hybrid.legal
johannwolfganggoethe.com
leafscrush.com
learningliving.com
london-locksmith.com
makeup.organic
migliaia.com
missyoumemorial.com
morethanmuse.com
newriverpizza.com
olympictrampoline.com
orthopedicmedicinestemcell.com
ovara.com
playwired.com
presencecoaching.com
productdropshipping.com
productreviewsearch.com
sangano.com
sans-gene.com
schoolrealtime.com
shanrock.com
specialops-case.com
spiritualacupuncture.com
sportsdoctorsminnesota.com
sportsmedicinelincoln.com
stemcellsstpaul.com
tumano.com
windraven.com
wwiipacific.com
www.253leaf.com
www.323leaf.com
www.amour-bridal.com
www.batonrougestemcell.com
www.bionicduck.com
www.bjrco.com
www.bytesrc.com
www.callmyai.com
www.championstable.com
www.costkill.com
www.dicksexlick.com
www.dodcase.com
www.drhelpline.com
www.eddymitchell.com
www.gaoho.com
www.garage-tech.com
www.gloriosi.com
www.hardbikeco.com
www.hybrid.legal
www.johannwolfganggoethe.com
www.leafscrush.com
www.learningliving.com
www.london-locksmith.com
www.makeup.organic
www.migliaia.com
www.missyoumemorial.com
www.morethanmuse.com
www.newriverpizza.com
www.olympictrampoline.com
www.orthopedicmedicinestemcell.com
www.ovara.com
www.playwired.com
www.presencecoaching.com
www.productdropshipping.com
www.productreviewsearch.com
www.sangano.com
www.sans-gene.com
www.schoolrealtime.com
www.shanrock.com
www.specialops-case.com
www.spiritualacupuncture.com
www.sportsdoctorsminnesota.com
www.sportsmedicinelincoln.com
www.stemcellsstpaul.com
www.tumano.com
www.windraven.com
www.wwiipacific.com
www.xn--qma.com
www.xwmo.com
www.yactown.com
xn--qma.com
xwmo.com
yactown.com

Other certificates including the domain name leafscrush.com

(limited to 100 certificates)
leafscrush.com
sportsbettingarcade.com
www.dodcase.com
www.samanta.co
micsignal.com
www.vibrantdojo.com
www.shrinkalink.com
www.dodcase.com
shanrock.com
www.sportsbettinggarage.com
www.bionicduck.com
sportsdoctorsminnesota.com
productreviewsearch.com
www.leafscrush.com

Certificate

The complete raw certificate details for www.leafscrush.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSxFev6NxmsJIuC6HqZg
eELOKvHPpc9ZTc4Vlf5ssaiFS+LTvbTEyY0B902nZfQr3Gqh/rD3lbXviRI95Ia3
EzvpmbS4jTK3gMSCDarQT8Yj2aXcRs1PM3EnyP3uukvEG6jrdCKbLzGKdF32hVq3
DTDDMHmwog0CWs1VkVEof8gxYETT86FXFdN6b5IXZ8hM/K8T/TfaA0h3hne59eHq
HV70KN90k0V5ksFSb+86ygOCecz2dX17mqF0NZNuE9IMy0Gpbj06ZytGSKl4Myfz
lleS5VAnv2DtDyoNsNyqZ1mYnscyrELDrTyfqTc3GsZ0w498UBVrsVNJlSbHaXlV
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277186698456442192238521332454154874566046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 14:53:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 14:53:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.leafscrush.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21356104584200357587888052418515783429332096303577785697222023239401805629089082646652759173265444275179882839480984658467832838529251814776665428127253605632354512669024217238144272297148273444587399038300035383957032167552533456902292109397099040838662397340749910177352409717700194665044123920647923315688930567105851136543156416155056330177375594799518254562578269017363016846947157365377831857173154787032075267875607936113124877569018800247716504571303570470781299371778291100033624545371622783205471714675504456094281490060434577340164745589375624582707089660566857970750410016667313244198488782808007646467413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95bae02763ac58cdc98d23f65ee7d7ef43a81c8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1968 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '253leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '323leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amour-bridal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batonrougestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionicduck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytesrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callmyai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'championstable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costkill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicksexlick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drhelpline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddymitchell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gloriosi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardbikeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johannwolfganggoethe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafscrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'london-locksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeup.organic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migliaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missyoumemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morethanmuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newriverpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympictrampoline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthopedicmedicinestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playwired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presencecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productdropshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productreviewsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sans-gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolrealtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialops-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualacupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsdoctorsminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinelincoln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsstpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tumano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windraven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwiipacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.253leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.323leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amour-bridal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.batonrougestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bionicduck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bjrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bytesrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callmyai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championstable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costkill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dicksexlick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drhelpline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eddymitchell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garage-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gloriosi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hardbikeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hybrid.legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johannwolfganggoethe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leafscrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.london-locksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeup.organic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.migliaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missyoumemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morethanmuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newriverpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympictrampoline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orthopedicmedicinestemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playwired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presencecoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.productdropshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.productreviewsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sangano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sans-gene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolrealtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.specialops-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritualacupuncture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsdoctorsminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinelincoln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsstpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tumano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windraven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwiipacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--qma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xwmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yactown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--qma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xwmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yactown.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170069bb170000004030046304402202cf91240637aa871b90e7c96b38d25f8aff99cdef13373670f76dd072c6dbb770220720406e70376ed38741c5ce163198da51cc777fd3d79c708a36ba8c9d6d59d92007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170069bb161000004030047304502206e290fd8f1e623446e5081e8569631f03db80ade4210d9e39d653522cabf88df022100e2e6e07718f61b830196ebd0dae0d6f3e16e0c292a096bfcc82dc6202e439647
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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