www.hcfi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:8d:81:a7:be:ff:2b:ad:a9:57:f1:c5:01:41:8c:57:09 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hcfi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:8d:81:a7:be:ff:2b:ad:a9:57:f1:c5:01:41:8c:57:09
Serial Number (int): 266288905288169028728149569952377794746121
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:b6:89:36:73:ca:55:6f:c5:23:8c:e2:52:72:f8:57:17:cd:0e:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:ee:4d:e2:6d:54:dd:69:0d:55:1e:a2:93:64:1b:3c:4a:86:11:74
Fingerprint (sha256): fc:9f:a1:a4:33:a2:d8:5e:24:c7:dd:ac:54:24:3b:33:19:ae:94:40:98:bb:04:32:70:01:84:91:ac:61:51:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hcfi.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hcfi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dpastries.com
americanwerewolfinutah.com
arbitrageweek.com
biotechnologyventurecapital.com
blogcheckup.com
calmbalm.com
catigliano.com
chromalocations.com
cityofmitchell.com
climategedon.com
deisk.com
designhomeandgarden.com
docexam.com
floridastatepoetsassociation.com
frozenhemp.com
garyturcoiswrong.com
hcfi.com
heartsongspiral.com
icotedazur.com
irelandcarsales.com
ironingaccessories.com
jamesdoctor.com
jointpainboston.com
jointpaintucson.com
k2properties.com
labudshop.com
leechun.com
libertycities.com
makeuptutor.com
mansionhotel.com
mattlesseriswrong.com
metphoto.com
mikeprop.com
nervo.com
oklahomasportsmedicine.org
priceinefficiencies.com
pricinginefficiencies.com
resolutionaries.com
rxspain.com
sacramentostemcell.com
saynotochemo.com
sherwoodsmith.com
sneakersfetish.com
soldmail.com
stephenbatchelor.com
stimatchmaker.com
supercorr.com
thecolonydental.com
todoslosgoles.com
watchando.com
www.3dpastries.com
www.americanwerewolfinutah.com
www.arbitrageweek.com
www.biotechnologyventurecapital.com
www.blogcheckup.com
www.calmbalm.com
www.catigliano.com
www.chromalocations.com
www.cityofmitchell.com
www.climategedon.com
www.deisk.com
www.designhomeandgarden.com
www.docexam.com
www.floridastatepoetsassociation.com
www.frozenhemp.com
www.garyturcoiswrong.com
www.hcfi.com
www.heartsongspiral.com
www.icotedazur.com
www.irelandcarsales.com
www.ironingaccessories.com
www.jamesdoctor.com
www.jointpainboston.com
www.jointpaintucson.com
www.k2properties.com
www.labudshop.com
www.leechun.com
www.libertycities.com
www.makeuptutor.com
www.mansionhotel.com
www.mattlesseriswrong.com
www.metphoto.com
www.mikeprop.com
www.nervo.com
www.oklahomasportsmedicine.org
www.priceinefficiencies.com
www.pricinginefficiencies.com
www.resolutionaries.com
www.rxspain.com
www.sacramentostemcell.com
www.saynotochemo.com
www.sherwoodsmith.com
www.sneakersfetish.com
www.soldmail.com
www.stephenbatchelor.com
www.stimatchmaker.com
www.supercorr.com
www.thecolonydental.com
www.todoslosgoles.com
www.watchando.com

Other certificates including the domain name hcfi.com

(limited to 100 certificates)
www.child-modeling.com
selfdefenseforwomen.training
progettiformativi.com
www.ironingaccessories.com
www.garyturcoiswrong.com
saynotochemo.com
www.non-gmofooddirectory.org
kudzucontrolestimate.com
minnesotastemcellclinic.com
champagne.media
oklahomasportsmedicine.org
www.unitedscentsofamerica.com
nicolemullen.com
www.kids-bedding.com
e-rmb.online
saynotochemo.com
sneakersfetish.com
www.organicbalsamicvinegar.com
www.fukutani.com
www.arteluxxe.com
hcfi.com
www.sportsdoctorspennsylvania.com
thaicpid.com
www.chicagobirthtrauma.com
stemdoctors.org
costofcar.com
verimaster.com
www.hcfi.com

Certificate

The complete raw certificate details for www.hcfi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGKoPm0ZcbSOHH5ET+Q1
HJIbdrkz2JMlY3eZvSsoep5OiTBEIHk2Wumh0nGOdrpZPiI3iSOliE2sr3QEB1a3
uIayi7hk6LjJnaAq9fM+JQsT6imjxDNfmpCRadXUF2zFy91dyLP3eqXui7XRTqFs
o07V8BI9+zmtyE8bjoV86qxmIP0enurNdZWOHhVHoKoQqRuAn1NCpAM5ZTeYPhoj
Rwt4dYxBKiNCS9BuTjqC0BOnDF6TuWnHn5gmHFeQoEil/41WN9OubA2eKe38CF6Z
hB7O7e3LkmdK8htwUUnDUxc4D5MHwu/UVUKEf1FlHC3ioNnkL7IhsiogjZdnLGH4
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266288905288169028728149569952377794746121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 07:22:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 07:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hcfi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24791357453122182835997091708119849144863841407341540570728705354805051014897202808783422116233883987599429706293210385272995273525897557274820243319783700177187721398866604026850894220802970525110937058908089618330014840852969486520921406484151640277029685923053326633492955089276946609622341228589805409334240946783799913616674718268005232840764730516375471559090196180683817045848188051302059244601214125414140094267504841444422780448422263143938406112204540281431601583554421592019872260404753912834898298684833793454995186505480752547530951566546181095948944610176197759193748346800383764738802130383462113343519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7b6893673ca556fc5238ce25272f85717cd0ef0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dpastries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanwerewolfinutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biotechnologyventurecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogcheckup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calmbalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catigliano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromalocations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofmitchell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climategedon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designhomeandgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docexam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridastatepoetsassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frozenhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garyturcoiswrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartsongspiral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icotedazur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irelandcarsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironingaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaintucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k2properties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labudshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leechun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeuptutor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mansionhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattlesseriswrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nervo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomasportsmedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priceinefficiencies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricinginefficiencies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resolutionaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxspain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramentostemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saynotochemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherwoodsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sneakersfetish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soldmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephenbatchelor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stimatchmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecolonydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todoslosgoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dpastries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanwerewolfinutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arbitrageweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biotechnologyventurecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogcheckup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calmbalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catigliano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chromalocations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmitchell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.climategedon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designhomeandgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docexam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floridastatepoetsassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frozenhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garyturcoiswrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartsongspiral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icotedazur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irelandcarsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ironingaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamesdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaintucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k2properties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labudshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leechun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertycities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeuptutor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mansionhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mattlesseriswrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikeprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nervo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomasportsmedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priceinefficiencies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pricinginefficiencies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resolutionaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxspain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacramentostemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saynotochemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sherwoodsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sneakersfetish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soldmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephenbatchelor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stimatchmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supercorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecolonydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todoslosgoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchando.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017168555687000004030047304502207ce12b21c3e8c6d856e006fab2415d9bd8c1d816df23d265948e6e0536a1a8be022100a5fb7a7a2660a21339f639cc17d1cfe5139c8775f9f9252d04093eec3660355d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171685556b20000040300483046022100ac2d5502b0ecd1346494f87c39cf5f06f74027c8dbd2a4e3c94e05c7b69cfed1022100b710365d5f9a5f90ee17d8d0ee8d2eb1d6dbcd1013590f8e0b7e005e6d0e2b59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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