knihajazd.tk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:ec:e2:05:09:12:f5:3a:42:4e:29:b8:c2:c9:3a:1f:79 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=knihajazd.tk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:ec:e2:05:09:12:f5:3a:42:4e:29:b8:c2:c9:3a:1f:79
Serial Number (int): 308950978165517424051339809603733329420153
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:1c:3b:9c:a3:a2:0f:b7:77:60:6a:11:52:0e:5a:8c:0c:16:c0:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:ab:90:b2:fa:1e:44:7e:7b:94:f3:29:72:82:8e:15:79:a2:ac:91
Fingerprint (sha256): 00:0c:fc:61:4f:52:cd:de:27:92:13:61:15:54:69:9d:ee:ec:25:1a:01:b3:c0:a0:18:40:9a:77:94:33:37:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate knihajazd.tk

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for knihajazd.tk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arevordi.sos.u-host.in
arevordi.tk
carlchat.sos.u-host.in
carlchat.tk
knihajazd.sos.u-host.in
knihajazd.tk
muntanyaindignats.sos.u-host.in
muntanyaindignats.tk
vallavanem.sos.u-host.in
vallavanem.tk
www.arevordi.sos.u-host.in
www.arevordi.tk
www.carlchat.sos.u-host.in
www.carlchat.tk
www.knihajazd.sos.u-host.in
www.knihajazd.tk
www.muntanyaindignats.sos.u-host.in
www.muntanyaindignats.tk
www.vallavanem.sos.u-host.in
www.vallavanem.tk
www.xn--pck0c2db7bcb1771dm87d.sos.u-host.in
www.xn--pck0c2db7bcb1771dm87d.tk
xn--pck0c2db7bcb1771dm87d.sos.u-host.in
xn--pck0c2db7bcb1771dm87d.tk

Other certificates including the domain name knihajazd.tk

(limited to 100 certificates)
knihajazd.tk
knihajazd.tk
knihajazd.tk
realdomdomsrealm.tk
deathlace.tk
worldy.tk
priateli.tk
wcorner.tk
amarcosnoticias.tk
knihajazd.tk
tangopez.tk
jgcphoto.tk
aerophon.tk
knihajazd.tk
haykojanja.tk
knihajazd.tk
www.hanitaher.sos.u-host.in

Certificate

The complete raw certificate details for knihajazd.tk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIWjCCB0KgAwIBAgISA4vs4gUJEvU6Qk4puMLJOh95MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MDgyMTU5MjhaFw0x
ODA3MDcyMTU5MjhaMBcxFTATBgNVBAMTDGtuaWhhamF6ZC50azCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMX7UE9Hw/WaWdN0xGLZFkNl5edEhnRLM6Pr
OdEsGWqxq8lzwJZmfRrXSOZvv4CjaqhGOyioCrrf94wHKDXSltjB9nhSUx5KrWmH
rhmGyWigvlfJkRtcCUAWqrNPYiIXVoapIT6aZBj/irucnTmLHZlzGogwTUxn40zX
MQ+/i/RiwgNFLrqGaRaMbLBiK1XITXqTY3xwWzQaZVX4VmSNtMo3+anB+SRXp+aS
qHD6uBMTfBUZyx+zytVgT8YvMlpNyOLgExqP+Ghge7Gl/iWpsh7gxN0MXxlB4o2V
wy37rXqJGUTsYwWvhRNfx8pCFE8KPrema6ozQuUy8BE6xfA7DqkCAwEAAaOCBWsw
ggVnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU5xw7nKOiD7d3YGoRUg5ajAwWwGIw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCCAm0GA1UdEQSCAmQwggJgghZhcmV2b3JkaS5zb3MudS1ob3N0LmluggthcmV2
b3JkaS50a4IWY2FybGNoYXQuc29zLnUtaG9zdC5pboILY2FybGNoYXQudGuCF2tu
aWhhamF6ZC5zb3MudS1ob3N0LmluggxrbmloYWphemQudGuCH211bnRhbnlhaW5k
aWduYXRzLnNvcy51LWhvc3QuaW6CFG11bnRhbnlhaW5kaWduYXRzLnRrghh2YWxs
YXZhbmVtLnNvcy51LWhvc3QuaW6CDXZhbGxhdmFuZW0udGuCGnd3dy5hcmV2b3Jk
aS5zb3MudS1ob3N0Lmlugg93d3cuYXJldm9yZGkudGuCGnd3dy5jYXJsY2hhdC5z
b3MudS1ob3N0Lmlugg93d3cuY2FybGNoYXQudGuCG3d3dy5rbmloYWphemQuc29z
LnUtaG9zdC5pboIQd3d3LmtuaWhhamF6ZC50a4Ijd3d3Lm11bnRhbnlhaW5kaWdu
YXRzLnNvcy51LWhvc3QuaW6CGHd3dy5tdW50YW55YWluZGlnbmF0cy50a4Icd3d3
LnZhbGxhdmFuZW0uc29zLnUtaG9zdC5pboIRd3d3LnZhbGxhdmFuZW0udGuCK3d3
dy54bi0tcGNrMGMyZGI3YmNiMTc3MWRtODdkLnNvcy51LWhvc3QuaW6CIHd3dy54
bi0tcGNrMGMyZGI3YmNiMTc3MWRtODdkLnRrgid4bi0tcGNrMGMyZGI3YmNiMTc3
MWRtODdkLnNvcy51LWhvc3QuaW6CHHhuLS1wY2swYzJkYjdiY2IxNzcxZG04N2Qu
dGswgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH
AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u
IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg
dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy
eXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AFWB
1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABYqd8XuwAAAQDAEcwRQIh
ALTXS+bkXFIADyvNAdjgwy7yxTH4a6rprOn4CB4Q4RMsAiAoYzM1V6cKkktZd6Jz
2qTZWfnZeEI6qWi7zWmaS+CoygB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM
9OVFR/R4AAABYqd8XwYAAAQDAEYwRAIgHSDvp5OTLOZc/jiJXlOon5Aa/bQqBcqO
rLE1uEd4uH4CID9GG3urWsOxloiXNPGMCFRl9B8dQQcamylDcCi6kpN5MA0GCSqG
SIb3DQEBCwUAA4IBAQBZFFTVc6vu+nQp07qscKpa2xOCxJZ7VdLvM/NZxn611o0L
Jz6yKI2fcjoSbRRQq3uKVoMj5a70LBnZrTWQ5pKbRwyE9BBiSVceWJ+cg4phb36f
2YmpirNNjXF7MJN5coXPaJEeYebNF+dt9h64ATwuA9DyXhlGkmnMrf4YK9tRO3jt
d56yhLfZs0i+ySDeromW5S5Xd7Vroxw/2K54voTnq7cRoRbbWEPvAKr9wy4iPOJ1
nrGvHnPpiVzJAfANG7MQUqpDL+F2CqMe7wMHLOQPQicMBZM67V1Xf79B6vYGsQd8
8i4Tm89RtBn4WyphH6xu0DnteHmMCXTrNFWkcc/0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxftQT0fD9ZpZ03TEYtkW
Q2Xl50SGdEszo+s50SwZarGryXPAlmZ9GtdI5m+/gKNqqEY7KKgKut/3jAcoNdKW
2MH2eFJTHkqtaYeuGYbJaKC+V8mRG1wJQBaqs09iIhdWhqkhPppkGP+Ku5ydOYsd
mXMaiDBNTGfjTNcxD7+L9GLCA0UuuoZpFoxssGIrVchNepNjfHBbNBplVfhWZI20
yjf5qcH5JFen5pKocPq4ExN8FRnLH7PK1WBPxi8yWk3I4uATGo/4aGB7saX+Jamy
HuDE3QxfGUHijZXDLfuteokZROxjBa+FE1/HykIUTwo+t6ZrqjNC5TLwETrF8DsO
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308950978165517424051339809603733329420153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 21:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 21:59:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'knihajazd.tk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24992873487415203337251008989943745506230713557615042715810470824616502720640684299319656370053244324911784901223214981183789134521495082394970105865430342335256361476285834477079376818736919051047087131034044798281893382043273825809627657157902336415162230307292603962245709892804795463099213474753175737440708197961773130494349221541431324002602893218099870886566682477511059441398842370206934678663584752754722895681021150105167716803171871415588189462924463372521697637779304341334497664661020148544359837041118735061071146474932458499155151832930078146349347282851334800899931699915275907695459485447449097211561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e71c3b9ca3a20fb777606a11520e5a8c0c16c062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arevordi.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arevordi.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlchat.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlchat.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knihajazd.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knihajazd.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muntanyaindignats.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muntanyaindignats.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallavanem.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallavanem.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arevordi.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arevordi.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlchat.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlchat.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knihajazd.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knihajazd.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muntanyaindignats.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muntanyaindignats.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vallavanem.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vallavanem.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--pck0c2db7bcb1771dm87d.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--pck0c2db7bcb1771dm87d.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pck0c2db7bcb1771dm87d.sos.u-host.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pck0c2db7bcb1771dm87d.tk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162a77c5eec0000040300473045022100b4d74be6e45c52000f2bcd01d8e0c32ef2c531f86baae9ace9f8081e10e1132c02202863333557a70a924b5977a273daa4d959f9d978423aa968bbcd699a4be0a8ca007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162a77c5f06000004030046304402201d20efa793932ce65cfe38895e53a89f901afdb42a05ca8eacb135b84778b87e02203f461b7bab5ac3b196889734f18c085465f41f1d41071a9b29437028ba929379
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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