wpm.ccmp.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:08:9d:9d:a9:cc:28:a5:68:77:66:04:ee:da:dd:5d:7b:b0 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wpm.ccmp.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:9d:9d:a9:cc:28:a5:68:77:66:04:ee:da:dd:5d:7b:b0
Serial Number (int): 351380910092255863590710116625033845373872
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:a7:ae:4c:f2:4e:8e:80:1c:74:bc:a9:43:67:ee:1c:e7:04:a4:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 09:88:41:2c:cd:46:2c:6b:51:56:e0:b1:f7:df:70:44:a6:3e:ab:a5
Fingerprint (sha256): 00:22:09:21:36:d6:78:68:e0:2e:af:da:a2:1a:69:6d:f8:a3:68:5c:60:e8:39:5e:33:5f:58:36:14:6a:aa:ba

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wpm.ccmp.eu

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wpm.ccmp.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awswpm.ccmp.eu
deals.teesnap.com
flight.deals.allegiant.com
i.a.starbucks.com
i.anniescatalog-news.com
i.arkbluecross.info
i.armyemail.ollies.us
i.athletics.belmont.edu
i.athletics.duq.edu
i.athletics.uconn.edu
i.athletics.usfdons.com
i.basspronews.com
i.c.auntieannes.com
i.c.carvel.com
i.c.cinnabon.com
i.c.jamba.com
i.c.mcalistersdeli.com
i.c.moes.com
i.c.schlotzskys.com
i.cadastropontosmultiplus.com.br
i.ccmp.persadolabs.com
i.cd.thelumery.net.au
i.cheetahdemo.com
i.club.lacoste.com.br
i.cm.ixigo.co
i.comunicacaounisociesc.com.br
i.e.aeropostale.com
i.e.allegiant.com
i.e.flemingssteakhouse.com
i.e.mantragroup.com.au
i.e.neimanmarcusemail.com
i.e.pchfrontpage.com
i.e.talbots.com
i.e.teesnap.com
i.edm.sgx.com
i.em.advantagememberservices.com
i.em.amica.com
i.em.answerfinancial.com
i.em.bestofbobspremium.com
i.em.collectionsetcpremiersavings.com
i.em.disneyemailexpress.com
i.em.disneyrewards.com
i.em.fieldandstreambuyersedge.com
i.em.freeshipping.com
i.email.allrecipes.com
i.email.bakersdelight.com.au
i.email.eviteideas.com
i.email.ncl.com
i.email.pens.com
i.email.perfectpen.ca
i.email.sunseekerresorts.com
i.email.watchabc.com
i.email1.roku.com
i.eml.hearstmags.com
i.h1.hilton.com
i.mail.anntaylor.com
i.mail.express-scripts.com
i.mail.loft.com
i.mail.loftoutlet.com
i.mail.markandgraham.com
i.mail.pbteen.com
i.mail.potterybarn.com
i.mail.potterybarnkids.com
i.mail.rejuvenation.com
i.mail.shape.com
i.mail.thekeyrewards.com
i.mail.westelm.com
i.mail.williams-sonoma.com
i.marketing01.email-allstate.com
i.northerntoolemail.com
i.promo-flash.newegg.com
i.promo.global.newegg.com
i.promo.newegg.ca
i.promo.newegg.com
i.promo.neweggbusiness.com
i.specialoffers.meredith.com
i.t.horchowemail.com
namwpm.eccmp.com
snamwpm.eccmp.com
sta.wpm.ccmp.eu
sts.eccmp.com
stscdn.eccmp.com
wpm.c01.marketingsuite.jp
wpm.ccmp.eu
wpm.marketingsuite.jp

Other certificates including the domain name ccmp.eu

(limited to 100 certificates)
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wts.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
returnpath.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
ats.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
rts.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
r.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
sts.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
login.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
datascience1.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
returnpath.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu

Certificate

The complete raw certificate details for wpm.ccmp.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILtTCCCp2gAwIBAgISBAidnanMKKVod2YE7trdXXuwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAxMDYxOTQ3MDFaFw0yMjA0MDYxOTQ3MDBaMBYxFDASBgNVBAMT
C3dwbS5jY21wLmV1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZJK
GbkmkMT5UqvNrbkpgJUYFu+TAbr7G6m7ZSXskjXn6xrAJKO3rBZMB10ytCgarT05
eDbJ0QcPcTTU5oz7tgLNQ8ZJF9piAy6zEWnzqoyyO9IiEdWkBMzu+OfnE3GvbQE1
xKS93SCZBEIg+NQf7Pt0B6asHVpSfGNjkOFFZ0F4cwKc1RbjaiRcAt3pNcPaZ84h
Mz1+MMSlC245Rp8AWXGJ6FKeF/kQn3Husux4qlwkVWlBR5o2EQ9dIlfX3w80L/G9
9uKh9rt33BYmF1/Gyu+EZJ6dpJtd78kxjYMPsp/84y5E1K/PcONjokTc79MtAcVS
CrwGcMtTO+w4Lx5J/QIDAQABo4II3zCCCNswDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTSp65M8k6OgBx0vKlDZ+4c5wSkzTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm
H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v
LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC
B6AGA1UdEQSCB5cwggeTgg5hd3N3cG0uY2NtcC5ldYIRZGVhbHMudGVlc25hcC5j
b22CGmZsaWdodC5kZWFscy5hbGxlZ2lhbnQuY29tghFpLmEuc3RhcmJ1Y2tzLmNv
bYIYaS5hbm5pZXNjYXRhbG9nLW5ld3MuY29tghNpLmFya2JsdWVjcm9zcy5pbmZv
ghVpLmFybXllbWFpbC5vbGxpZXMudXOCF2kuYXRobGV0aWNzLmJlbG1vbnQuZWR1
ghNpLmF0aGxldGljcy5kdXEuZWR1ghVpLmF0aGxldGljcy51Y29ubi5lZHWCF2ku
YXRobGV0aWNzLnVzZmRvbnMuY29tghFpLmJhc3Nwcm9uZXdzLmNvbYITaS5jLmF1
bnRpZWFubmVzLmNvbYIOaS5jLmNhcnZlbC5jb22CEGkuYy5jaW5uYWJvbi5jb22C
DWkuYy5qYW1iYS5jb22CFmkuYy5tY2FsaXN0ZXJzZGVsaS5jb22CDGkuYy5tb2Vz
LmNvbYITaS5jLnNjaGxvdHpza3lzLmNvbYIgaS5jYWRhc3Ryb3BvbnRvc211bHRp
cGx1cy5jb20uYnKCFmkuY2NtcC5wZXJzYWRvbGFicy5jb22CFWkuY2QudGhlbHVt
ZXJ5Lm5ldC5hdYIRaS5jaGVldGFoZGVtby5jb22CFWkuY2x1Yi5sYWNvc3RlLmNv
bS5icoINaS5jbS5peGlnby5jb4IeaS5jb211bmljYWNhb3VuaXNvY2llc2MuY29t
LmJyghNpLmUuYWVyb3Bvc3RhbGUuY29tghFpLmUuYWxsZWdpYW50LmNvbYIaaS5l
LmZsZW1pbmdzc3RlYWtob3VzZS5jb22CFmkuZS5tYW50cmFncm91cC5jb20uYXWC
GWkuZS5uZWltYW5tYXJjdXNlbWFpbC5jb22CFGkuZS5wY2hmcm9udHBhZ2UuY29t
gg9pLmUudGFsYm90cy5jb22CD2kuZS50ZWVzbmFwLmNvbYINaS5lZG0uc2d4LmNv
bYIgaS5lbS5hZHZhbnRhZ2VtZW1iZXJzZXJ2aWNlcy5jb22CDmkuZW0uYW1pY2Eu
Y29tghhpLmVtLmFuc3dlcmZpbmFuY2lhbC5jb22CGmkuZW0uYmVzdG9mYm9ic3By
ZW1pdW0uY29tgiVpLmVtLmNvbGxlY3Rpb25zZXRjcHJlbWllcnNhdmluZ3MuY29t
ghtpLmVtLmRpc25leWVtYWlsZXhwcmVzcy5jb22CFmkuZW0uZGlzbmV5cmV3YXJk
cy5jb22CIWkuZW0uZmllbGRhbmRzdHJlYW1idXllcnNlZGdlLmNvbYIVaS5lbS5m
cmVlc2hpcHBpbmcuY29tghZpLmVtYWlsLmFsbHJlY2lwZXMuY29tghxpLmVtYWls
LmJha2Vyc2RlbGlnaHQuY29tLmF1ghZpLmVtYWlsLmV2aXRlaWRlYXMuY29tgg9p
LmVtYWlsLm5jbC5jb22CEGkuZW1haWwucGVucy5jb22CFWkuZW1haWwucGVyZmVj
dHBlbi5jYYIcaS5lbWFpbC5zdW5zZWVrZXJyZXNvcnRzLmNvbYIUaS5lbWFpbC53
YXRjaGFiYy5jb22CEWkuZW1haWwxLnJva3UuY29tghRpLmVtbC5oZWFyc3RtYWdz
LmNvbYIPaS5oMS5oaWx0b24uY29tghRpLm1haWwuYW5udGF5bG9yLmNvbYIaaS5t
YWlsLmV4cHJlc3Mtc2NyaXB0cy5jb22CD2kubWFpbC5sb2Z0LmNvbYIVaS5tYWls
LmxvZnRvdXRsZXQuY29tghhpLm1haWwubWFya2FuZGdyYWhhbS5jb22CEWkubWFp
bC5wYnRlZW4uY29tghZpLm1haWwucG90dGVyeWJhcm4uY29tghppLm1haWwucG90
dGVyeWJhcm5raWRzLmNvbYIXaS5tYWlsLnJlanV2ZW5hdGlvbi5jb22CEGkubWFp
bC5zaGFwZS5jb22CGGkubWFpbC50aGVrZXlyZXdhcmRzLmNvbYISaS5tYWlsLndl
c3RlbG0uY29tghppLm1haWwud2lsbGlhbXMtc29ub21hLmNvbYIgaS5tYXJrZXRp
bmcwMS5lbWFpbC1hbGxzdGF0ZS5jb22CF2kubm9ydGhlcm50b29sZW1haWwuY29t
ghhpLnByb21vLWZsYXNoLm5ld2VnZy5jb22CGWkucHJvbW8uZ2xvYmFsLm5ld2Vn
Zy5jb22CEWkucHJvbW8ubmV3ZWdnLmNhghJpLnByb21vLm5ld2VnZy5jb22CGmku
cHJvbW8ubmV3ZWdnYnVzaW5lc3MuY29tghxpLnNwZWNpYWxvZmZlcnMubWVyZWRp
dGguY29tghRpLnQuaG9yY2hvd2VtYWlsLmNvbYIQbmFtd3BtLmVjY21wLmNvbYIR
c25hbXdwbS5lY2NtcC5jb22CD3N0YS53cG0uY2NtcC5ldYINc3RzLmVjY21wLmNv
bYIQc3RzY2RuLmVjY21wLmNvbYIZd3BtLmMwMS5tYXJrZXRpbmdzdWl0ZS5qcIIL
d3BtLmNjbXAuZXWCFXdwbS5tYXJrZXRpbmdzdWl0ZS5qcDBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAqu+NdnuMvxi7DFCI9DskFTBo3bmrb3Vh5PCH7R7LeLSvwaT+mUzk
16mbHfUoGEKz6N6YvsJ4EZuFQSvemKCahTGP7mbcQhipQvXGPo7Y5wrj83z290KB
OoACSH7j5SFY0e9G+3kf5ICf82zgEt8gbh+OY9meh/BuyYj39wHIssFWrpQ5ZFFI
uUiZ7SrqTeYg2Uyl3lNCBXX0dB8wBlRZ9GvzJ/J2ROQ+d5cEWceyVREDkVjPMCDX
8seRFIO6VcnhKQI7kSlm+7NoARN7iWQkkn3/Z4kt33cJVRsv+DG4tG58xuTvtoc9
LaEU75391KDI+ToiFoj5k3O0/dyWW9W18w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZJKGbkmkMT5UqvNrbkp
gJUYFu+TAbr7G6m7ZSXskjXn6xrAJKO3rBZMB10ytCgarT05eDbJ0QcPcTTU5oz7
tgLNQ8ZJF9piAy6zEWnzqoyyO9IiEdWkBMzu+OfnE3GvbQE1xKS93SCZBEIg+NQf
7Pt0B6asHVpSfGNjkOFFZ0F4cwKc1RbjaiRcAt3pNcPaZ84hMz1+MMSlC245Rp8A
WXGJ6FKeF/kQn3Husux4qlwkVWlBR5o2EQ9dIlfX3w80L/G99uKh9rt33BYmF1/G
yu+EZJ6dpJtd78kxjYMPsp/84y5E1K/PcONjokTc79MtAcVSCrwGcMtTO+w4Lx5J
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351380910092255863590710116625033845373872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-06 19:47:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-06 19:47:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wpm.ccmp.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25950990536926045046635387647803811818625345502014063384768137812119958803786980279361098935732989548251557400539370688633082324620624736341793984137336193637551506155041507985787925054943701797129310182604120457849139883116803108669641410786175617645826866068317317095577894157120899645506332201808250878598846143637119857084944641817381070010520467050387522655079265803246376775892063104677443848062039119447367204658110111789501390157905361980663341209798651099911896974594364766373708199639818678722241066441750778861680740068166257356681526195023384097303869477554255223831206665007424265000395241148632174316029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2a7ae4cf24e8e801c74bca94367ee1ce704a4cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1943 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awswpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals.teesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight.deals.allegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.a.starbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.anniescatalog-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.arkbluecross.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.armyemail.ollies.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.belmont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.duq.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.uconn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.usfdons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.basspronews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.auntieannes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.carvel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.cinnabon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.jamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.mcalistersdeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.moes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.schlotzskys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cadastropontosmultiplus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.ccmp.persadolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cd.thelumery.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cheetahdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.club.lacoste.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cm.ixigo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.comunicacaounisociesc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.aeropostale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.allegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.flemingssteakhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.mantragroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.neimanmarcusemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.pchfrontpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.talbots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.teesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.edm.sgx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.advantagememberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.amica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.answerfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.bestofbobspremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.collectionsetcpremiersavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.disneyemailexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.disneyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.fieldandstreambuyersedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.freeshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.bakersdelight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.eviteideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.ncl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.pens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.perfectpen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.sunseekerresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.watchabc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email1.roku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.eml.hearstmags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.h1.hilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.anntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.express-scripts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.loftoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.markandgraham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.pbteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.potterybarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.potterybarnkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.rejuvenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.thekeyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.westelm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.williams-sonoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.marketing01.email-allstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.northerntoolemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo-flash.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.global.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.newegg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.neweggbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.specialoffers.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.t.horchowemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namwpm.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snamwpm.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta.wpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stscdn.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.c01.marketingsuite.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.marketingsuite.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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