portal.shell.com.sq1dev.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e4:4a:fa:61:31:1f:69:91:64:db:9a:76:c0:e9:48:00:2b was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

portal.shell.com.sq1dev.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:4a:fa:61:31:1f:69:91:64:db:9a:76:c0:e9:48:00:2b
Serial Number (int): 339020900370443060267553266761026180218923
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:a1:80:bb:eb:ef:62:c9:b9:ab:16:95:76:56:e5:d2:98:21:d2:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e5:5f:3f:f9:88:11:86:51:3a:32:a3:df:95:0d:73:66:ef:3d:07:59
Fingerprint (sha256): 00:3b:35:7e:c0:be:8b:08:94:2e:b5:a1:5b:c8:bc:c8:ae:06:3f:40:99:b6:06:fb:4a:97:d5:eb:b6:6e:d1:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate portal.shell.com.sq1dev.co

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.shell.com.sq1dev.co


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

difmportal.com
midasquakerstatepromotions.com
offers.pennzoil.ca
offers.pennzoil.com
offers.quakerstate.ca
offers.quakerstate.com
offers.shell.ca
pennzoilfirestone.com
pennzoilhibdontiresplus.com
pennzoilhmvrollback.com
pennzoiljacksonswash.com
pennzoilmicheltiresplus.com
pennzoilmopar.com
pennzoiloffers.ca
pennzoilpromotionsorl.com
pennzoilpromotionspepboys.com
pennzoilpromotionspepboys.com.sq1dev.co
pennzoilpromotionspepboys.com.sq1stage.co
pennzoilsyntheticrollback.com
pennzoiltiresplus.com
pennzoilwheelworks.com
portal.shell.com.sq1dev.co
portal.shell.com.sq1stage.co
quakerstatefirestone.com
quakerstatehibdontiresplus.com
quakerstatemicheltiresplus.com
quakerstatepromotions.com
quakerstatetiresplus.com
quakerstatewheelworks.com
rotellafirestone.com
rotellahibdontiresplus.com
rotellamicheltiresplus.com
rotellapromotions.com
rotellatiresplus.com
rotellawheelworks.com
shell-promo-sonic.sq1dev.co
shell-promo-sonic.sq1stage.co
shell.bmwoffairfax.com
shell.cadillacofsouthcharlotte.com
shell.capitolhyundai.com
shell.century-bmw.com
shell.clearwatertoyota.com
shell.echopark.com
shell.hondaoffortmyers.com
shell.hondaoftysonscorner.com
shell.infinitiofcharlotte.com
shell.mercedesoffortmyers.com
shellportal.sq1.com
www.difmportal.com
www.midasquakerstatepromotions.com
www.pennzoilfirestone.com
www.pennzoilhibdontiresplus.com
www.pennzoilhmvrollback.com
www.pennzoiljacksonswash.com
www.pennzoilmicheltiresplus.com
www.pennzoilmopar.com
www.pennzoiloffers.ca
www.pennzoiloffers.com
www.pennzoilpromotions.com
www.pennzoilpromotionsorl.com
www.pennzoilpromotionspepboys.com
www.pennzoilsyntheticrollback.com
www.pennzoiltiresplus.com
www.pennzoilwheelworks.com
www.quakerstatefirestone.com
www.quakerstatehibdontiresplus.com
www.quakerstatemicheltiresplus.com
www.quakerstatepromotions.com
www.quakerstatetiresplus.com
www.quakerstatewheelworks.com
www.rotellafirestone.com
www.rotellahibdontiresplus.com
www.rotellamicheltiresplus.com
www.rotellapromotions.com
www.rotellatiresplus.com
www.rotellawheelworks.com

Certificate

The complete raw certificate details for portal.shell.com.sq1dev.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINODCCDCCgAwIBAgISA+RK+mExH2mRZNuadsDpSAArMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA4MTMwMDMwMDBaFw0x
NjExMTEwMDMwMDBaMCUxIzAhBgNVBAMTGnBvcnRhbC5zaGVsbC5jb20uc3ExZGV2
LmNvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9usIkED7oE9h+Qw
PsXdPjqLA9LbGsnVwjE+THajJeQPbOrafOeES1yijeEXqYE3eYEj57lalvaKNMK8
8xVL470vWMmlZEBL6TrD9KOtSoNnQy81on9JRv5SiiBdgRHOSEyxkOPBghWQU4Ba
LXwlX25vRHoXs0QNrSIglpdPF40DlDEVrI1u5pka1Q9pRkNldGRsWNnwjBW7JMRz
Td6eZLDp/AH095bFZWR0nehKkvYsnGvVRb+X3GoL75iAYueVS21tDirJRgRtcX6J
M9qFJkqbK8AJnkK0pbrseaoceCg6Bdq5A4RftP9vYxsoPSsH2V6I8toQUV2KvBLg
AvF7oQIDAQABo4IKOzCCCjcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTioYC76+9i
ybmrFpV2VuXSmCHSXzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBw
BggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCCEMGA1UdEQSCCDowggg2gg5kaWZtcG9ydGFsLmNv
bYIebWlkYXNxdWFrZXJzdGF0ZXByb21vdGlvbnMuY29tghJvZmZlcnMucGVubnpv
aWwuY2GCE29mZmVycy5wZW5uem9pbC5jb22CFW9mZmVycy5xdWFrZXJzdGF0ZS5j
YYIWb2ZmZXJzLnF1YWtlcnN0YXRlLmNvbYIPb2ZmZXJzLnNoZWxsLmNhghVwZW5u
em9pbGZpcmVzdG9uZS5jb22CG3Blbm56b2lsaGliZG9udGlyZXNwbHVzLmNvbYIX
cGVubnpvaWxobXZyb2xsYmFjay5jb22CGHBlbm56b2lsamFja3NvbnN3YXNoLmNv
bYIbcGVubnpvaWxtaWNoZWx0aXJlc3BsdXMuY29tghFwZW5uem9pbG1vcGFyLmNv
bYIRcGVubnpvaWxvZmZlcnMuY2GCGXBlbm56b2lscHJvbW90aW9uc29ybC5jb22C
HXBlbm56b2lscHJvbW90aW9uc3BlcGJveXMuY29tgidwZW5uem9pbHByb21vdGlv
bnNwZXBib3lzLmNvbS5zcTFkZXYuY2+CKXBlbm56b2lscHJvbW90aW9uc3BlcGJv
eXMuY29tLnNxMXN0YWdlLmNvgh1wZW5uem9pbHN5bnRoZXRpY3JvbGxiYWNrLmNv
bYIVcGVubnpvaWx0aXJlc3BsdXMuY29tghZwZW5uem9pbHdoZWVsd29ya3MuY29t
ghpwb3J0YWwuc2hlbGwuY29tLnNxMWRldi5jb4IccG9ydGFsLnNoZWxsLmNvbS5z
cTFzdGFnZS5jb4IYcXVha2Vyc3RhdGVmaXJlc3RvbmUuY29tgh5xdWFrZXJzdGF0
ZWhpYmRvbnRpcmVzcGx1cy5jb22CHnF1YWtlcnN0YXRlbWljaGVsdGlyZXNwbHVz
LmNvbYIZcXVha2Vyc3RhdGVwcm9tb3Rpb25zLmNvbYIYcXVha2Vyc3RhdGV0aXJl
c3BsdXMuY29tghlxdWFrZXJzdGF0ZXdoZWVsd29ya3MuY29tghRyb3RlbGxhZmly
ZXN0b25lLmNvbYIacm90ZWxsYWhpYmRvbnRpcmVzcGx1cy5jb22CGnJvdGVsbGFt
aWNoZWx0aXJlc3BsdXMuY29tghVyb3RlbGxhcHJvbW90aW9ucy5jb22CFHJvdGVs
bGF0aXJlc3BsdXMuY29tghVyb3RlbGxhd2hlZWx3b3Jrcy5jb22CG3NoZWxsLXBy
b21vLXNvbmljLnNxMWRldi5jb4Idc2hlbGwtcHJvbW8tc29uaWMuc3Exc3RhZ2Uu
Y2+CFnNoZWxsLmJtd29mZmFpcmZheC5jb22CInNoZWxsLmNhZGlsbGFjb2Zzb3V0
aGNoYXJsb3R0ZS5jb22CGHNoZWxsLmNhcGl0b2xoeXVuZGFpLmNvbYIVc2hlbGwu
Y2VudHVyeS1ibXcuY29tghpzaGVsbC5jbGVhcndhdGVydG95b3RhLmNvbYISc2hl
bGwuZWNob3BhcmsuY29tghpzaGVsbC5ob25kYW9mZm9ydG15ZXJzLmNvbYIdc2hl
bGwuaG9uZGFvZnR5c29uc2Nvcm5lci5jb22CHXNoZWxsLmluZmluaXRpb2ZjaGFy
bG90dGUuY29tgh1zaGVsbC5tZXJjZWRlc29mZm9ydG15ZXJzLmNvbYITc2hlbGxw
b3J0YWwuc3ExLmNvbYISd3d3LmRpZm1wb3J0YWwuY29tgiJ3d3cubWlkYXNxdWFr
ZXJzdGF0ZXByb21vdGlvbnMuY29tghl3d3cucGVubnpvaWxmaXJlc3RvbmUuY29t
gh93d3cucGVubnpvaWxoaWJkb250aXJlc3BsdXMuY29tght3d3cucGVubnpvaWxo
bXZyb2xsYmFjay5jb22CHHd3dy5wZW5uem9pbGphY2tzb25zd2FzaC5jb22CH3d3
dy5wZW5uem9pbG1pY2hlbHRpcmVzcGx1cy5jb22CFXd3dy5wZW5uem9pbG1vcGFy
LmNvbYIVd3d3LnBlbm56b2lsb2ZmZXJzLmNhghZ3d3cucGVubnpvaWxvZmZlcnMu
Y29tghp3d3cucGVubnpvaWxwcm9tb3Rpb25zLmNvbYIdd3d3LnBlbm56b2lscHJv
bW90aW9uc29ybC5jb22CIXd3dy5wZW5uem9pbHByb21vdGlvbnNwZXBib3lzLmNv
bYIhd3d3LnBlbm56b2lsc3ludGhldGljcm9sbGJhY2suY29tghl3d3cucGVubnpv
aWx0aXJlc3BsdXMuY29tghp3d3cucGVubnpvaWx3aGVlbHdvcmtzLmNvbYIcd3d3
LnF1YWtlcnN0YXRlZmlyZXN0b25lLmNvbYIid3d3LnF1YWtlcnN0YXRlaGliZG9u
dGlyZXNwbHVzLmNvbYIid3d3LnF1YWtlcnN0YXRlbWljaGVsdGlyZXNwbHVzLmNv
bYIdd3d3LnF1YWtlcnN0YXRlcHJvbW90aW9ucy5jb22CHHd3dy5xdWFrZXJzdGF0
ZXRpcmVzcGx1cy5jb22CHXd3dy5xdWFrZXJzdGF0ZXdoZWVsd29ya3MuY29tghh3
d3cucm90ZWxsYWZpcmVzdG9uZS5jb22CHnd3dy5yb3RlbGxhaGliZG9udGlyZXNw
bHVzLmNvbYIed3d3LnJvdGVsbGFtaWNoZWx0aXJlc3BsdXMuY29tghl3d3cucm90
ZWxsYXByb21vdGlvbnMuY29tghh3d3cucm90ZWxsYXRpcmVzcGx1cy5jb22CGXd3
dy5yb3RlbGxhd2hlZWx3b3Jrcy5jb20wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEw
geYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1h
eSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25s
eSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3Vu
ZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG
9w0BAQsFAAOCAQEAJK0o6adSUV8+M8PNdEfc4a2eNXi9moK78DT/EOzd/KQ6ldj3
TGa3MLrG5xWrxbq/nyiKmsoQIzbU3YBQHqOwrBtDR3FuZCzaZ811mndEpzficpVK
xcsulGqc48ao2yogTk4BNcibm0w8wXifANlawd/f5jnqKs1suzSQVXmBmKON1oRC
ePlTnKY+LluqcNimovMraiwi/8NMJjhpXvfgZnJB2GZOxfAGWoCHTNQml1QVvI0L
Hs47Pq/qB1NiGr0Z0emqUm4eESgqNjR3qU9QYTqBWrllr8uZML9iEj19EzMi24vn
WGJtkXK6YIxCX6GzL+RtRjRJhDttD/w5Jk/ELw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9usIkED7oE9h+QwPsXd
PjqLA9LbGsnVwjE+THajJeQPbOrafOeES1yijeEXqYE3eYEj57lalvaKNMK88xVL
470vWMmlZEBL6TrD9KOtSoNnQy81on9JRv5SiiBdgRHOSEyxkOPBghWQU4BaLXwl
X25vRHoXs0QNrSIglpdPF40DlDEVrI1u5pka1Q9pRkNldGRsWNnwjBW7JMRzTd6e
ZLDp/AH095bFZWR0nehKkvYsnGvVRb+X3GoL75iAYueVS21tDirJRgRtcX6JM9qF
JkqbK8AJnkK0pbrseaoceCg6Bdq5A4RftP9vYxsoPSsH2V6I8toQUV2KvBLgAvF7
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339020900370443060267553266761026180218923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-13 00:30:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-11 00:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.shell.com.sq1dev.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23714887525255311800903732082152406551518099885521458805094729515289457228638617098820299777559745340394899841808054931181750686609628474177364217626777436266842871261896319561343741936944504891176475152796382445159915345873564176515086037220147839838096606255386992966483554549516553828615810484668450118317644926442732033227699999243385236271507208292384582897417500271516278644789386171025167841549766415366173912044108122068699228838657512638072099908812596250888694913019857066552691958438832043822546237886050943425439681075241219890246011658545468854953371773377578157298821711532816889448320278108059856894881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2a180bbebef62c9b9ab16957656e5d29821d25f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midasquakerstatepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.pennzoil.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.pennzoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.quakerstate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.quakerstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.shell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilfirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilhibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilhmvrollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoiljacksonswash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilmicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilmopar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoiloffers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionsorl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com.sq1dev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilpromotionspepboys.com.sq1stage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilsyntheticrollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoiltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennzoilwheelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.shell.com.sq1dev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.shell.com.sq1stage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerstatefirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerstatehibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerstatemicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerstatepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerstatetiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quakerstatewheelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotellafirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotellahibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotellamicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotellapromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotellatiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotellawheelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell-promo-sonic.sq1dev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell-promo-sonic.sq1stage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.bmwoffairfax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.cadillacofsouthcharlotte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.capitolhyundai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.century-bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.clearwatertoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.echopark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.hondaoffortmyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.hondaoftysonscorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.infinitiofcharlotte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.mercedesoffortmyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shellportal.sq1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.difmportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midasquakerstatepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilfirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilhibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilhmvrollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoiljacksonswash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilmicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilmopar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoiloffers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoiloffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilpromotionsorl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilpromotionspepboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilsyntheticrollback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoiltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennzoilwheelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakerstatefirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakerstatehibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakerstatemicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakerstatepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakerstatetiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quakerstatewheelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotellafirestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotellahibdontiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotellamicheltiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotellapromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotellatiresplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotellawheelworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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