healthequitu.com

Issued by R3

About this certificate

This digital certificate with serial number 03:59:c0:6c:98:ed:0c:71:25:24:20:5c:b9:bd:e0:71:9e:08 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=healthequitu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:c0:6c:98:ed:0c:71:25:24:20:5c:b9:bd:e0:71:9e:08
Serial Number (int): 291877764096202873672157450457538943360520
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:db:34:bb:a9:2c:83:63:2e:d6:ba:72:24:7b:84:11:c1:0d:b4:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:4e:cc:49:be:d3:2f:10:10:93:c7:9d:f6:e7:f3:97:e7:e4:2c:85
Fingerprint (sha256): fe:c7:94:09:e9:31:3a:40:fc:36:0c:61:c8:09:37:61:3c:8e:f5:1c:38:72:4c:6b:41:13:1b:33:15:e2:96:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate healthequitu.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthequitu.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accuratediagnosticiclabs.com
*.ahumahabms.com
*.babyscribscentral.com
*.bellyju.com
*.cannedfoodq63.com
*.carceredit.com
*.cassinozer.com
*.celectstudio.com
*.cerillodsanantonio.com
*.cheapcontentsinsurance.com.au
*.collectioonsetec.com
*.creanewsbreak.com
*.creativeendeavorsconsulitng.com
*.flexmls.co
*.fortyacres.com.au
*.ganifinasrilk.com
*.healthequitu.com
*.iaschoching.com
*.import-curacao-import.com
*.iolovely.com
*.iqoptiin.com
*.jacquielawon.com
*.kinglunaoark.com
*.kuibelle.com
*.loyaltrungkiennguyen.com
*.luckyvtamin.com
*.mapferinsurance.com
*.marketguestpost.com
*.mycouchtuner.ag
*.neverkeyword.com
*.newucloudpower.com
*.newyortst.com
*.ohltaintro.com
*.plasticxrevolution.com
*.qassidy.com
*.rtlsdrblog.com
*.saplesadvantage.com
*.schedukicity.com
*.scnidustrial.com
*.silcernerco.com
*.smbc-cad.com
*.splatterroomiowa.com
*.totalwirekess.com
*.trafficbootpro.com
*.treamliveseven.com
*.trustedstreamerservices.com
*.trustedstreamersservices.com
*.uqoption.com
*.wotkday.com
*.wwalibaba.com
accuratediagnosticiclabs.com
ahumahabms.com
babyscribscentral.com
bellyju.com
cannedfoodq63.com
carceredit.com
cassinozer.com
celectstudio.com
cerillodsanantonio.com
cheapcontentsinsurance.com.au
collectioonsetec.com
creanewsbreak.com
creativeendeavorsconsulitng.com
flexmls.co
fortyacres.com.au
ganifinasrilk.com
healthequitu.com
iaschoching.com
import-curacao-import.com
iolovely.com
iqoptiin.com
jacquielawon.com
kinglunaoark.com
kuibelle.com
loyaltrungkiennguyen.com
luckyvtamin.com
mapferinsurance.com
marketguestpost.com
mycouchtuner.ag
neverkeyword.com
newucloudpower.com
newyortst.com
ohltaintro.com
plasticxrevolution.com
qassidy.com
rtlsdrblog.com
saplesadvantage.com
schedukicity.com
scnidustrial.com
silcernerco.com
smbc-cad.com
splatterroomiowa.com
totalwirekess.com
trafficbootpro.com
treamliveseven.com
trustedstreamerservices.com
trustedstreamersservices.com
uqoption.com
wotkday.com
wwalibaba.com

Other certificates including the domain name healthequitu.com

(limited to 100 certificates)
ayik.org
boyandgirlnames.com
falloutgirst.com
healthequitu.com
healthequitu.com

Certificate

The complete raw certificate details for healthequitu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291877764096202873672157450457538943360520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 06:33:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-01 06:33:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthequitu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791894882693961727288497028873923344420106642995253424532441304595365204281375170798729152970643576204105735121290234217463664898504448182960301666105863961472860045460383115454221655285607850602605184092427228200256147001996895161778279523132252344331586033093951260414514052788959234124061105033619593495763446984535999338434355052263380644989663085722517929176722896814706565916473472999375361606872285705438191813547933126593259699107866950436537474719708416912338580900554889194922528674324383211022373197634442341340973568398686446169189691039046282882026048746578282054960788527085759670905891608208178377061257928156402361474357220876863983637985348546616017527333197417368409054690644067313298978063315604488064014480744556082439325676093809940472954676831111281346092953527296235710151294833487380862071006326917154152718624017445910929059244809070629446849068231274894086386874034874421566749750740299755441415279414303543519121367944239214194844279531146503727443856555659951243347687348376713651654849483812979767462069576299066442181448076035416796648480172468748510875923085146754490939070662432775421533473755277016169233394820954450283024633081256390653981651541349977837578772052745370005237827183969122835874747709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbdb34bba92c83632ed6ba72247b8411c10db46b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2032 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accuratediagnosticiclabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahumahabms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babyscribscentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellyju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannedfoodq63.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carceredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cassinozer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celectstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerillodsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapcontentsinsurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collectioonsetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creanewsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativeendeavorsconsulitng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flexmls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortyacres.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ganifinasrilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthequitu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iaschoching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.import-curacao-import.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iolovely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iqoptiin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacquielawon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinglunaoark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuibelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loyaltrungkiennguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luckyvtamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapferinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketguestpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycouchtuner.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neverkeyword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newucloudpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newyortst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohltaintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plasticxrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qassidy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtlsdrblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saplesadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schedukicity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scnidustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silcernerco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smbc-cad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.splatterroomiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalwirekess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trafficbootpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treamliveseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustedstreamerservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustedstreamersservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uqoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wotkday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwalibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accuratediagnosticiclabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahumahabms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyscribscentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellyju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannedfoodq63.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carceredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassinozer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celectstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerillodsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapcontentsinsurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectioonsetec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creanewsbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativeendeavorsconsulitng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexmls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortyacres.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganifinasrilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthequitu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaschoching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-curacao-import.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iolovely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqoptiin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacquielawon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinglunaoark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuibelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyaltrungkiennguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckyvtamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapferinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketguestpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycouchtuner.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neverkeyword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newucloudpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyortst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohltaintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasticxrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qassidy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtlsdrblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saplesadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schedukicity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scnidustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silcernerco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smbc-cad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splatterroomiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalwirekess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trafficbootpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treamliveseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedstreamerservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustedstreamersservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uqoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wotkday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwalibaba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018606be606600000403004830460221008be4a715cf4410a8f63ae597167c4800237669ffa75aa541f3161b309b05972002210093e6e6703c07c3811da8c393745752032b65181c4de0048ddc6667c36713e2ef007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018606be606300000403004730450221008e6855902a4a422ada024a8c4103906c8d17acfea2b76f5ab16a6f84782b9c6a02202348284e52fca3d8c0b4fe983b889f6130c26fc4dfa5f17127d3c1283f69daed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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