skole.fsl.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:04:05:f6:13:e5:2d:b4:40:5e:de:8f:d4:4d:9e:f7:b1:f2 was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skole.fsl.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:05:f6:13:e5:2d:b4:40:5e:de:8f:d4:4d:9e:f7:b1:f2
Serial Number (int): 262705911111493794361905583116800776188402
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:4b:de:fc:cc:65:c7:ae:14:6a:83:dc:f3:f5:8b:99:cd:4f:28:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:db:b2:1f:e8:56:65:69:0a:34:c8:9d:74:fc:03:58:87:23:65:96
Fingerprint (sha256): 03:37:a2:50:d6:a3:43:79:2d:3c:c3:cf:0d:13:1b:d7:23:ae:53:06:80:b5:89:44:fb:7a:d1:8e:ba:ba:81:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate skole.fsl.dk

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skole.fsl.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmbg.leanjourney.com
cobalt.3space.us
community.freelance.com
community.leaderstoneonline.com
community.quanta.com
connect.adsa.co
connect.alalamah.com
connect.allegiant-finance.network
connect.amputeestore.com
connect.atplaysport.com
connect.bangertinc.com
connect.biomimicry.net
connect.brightlightsmi.com
connect.codyjames.in
connect.conturasrl.com
connect.cybercillin.com
connect.defenage.com
connect.dextra.com.br
connect.durhamdemocrats.org
connect.entheoshearing.com
connect.expologic.com
connect.facileserv.in
connect.firstpac.com
connect.forthecollective.com
connect.foxtechnology.net
connect.fxb.org
connect.groupbima.com
connect.havenrecruiting.de
connect.hogarcontrols.com
connect.imex.exchange
connect.inboundengine.io
connect.indicoweb.com
connect.jaxcom.net
connect.kencove.com
connect.keymedx.com
connect.kilidan.com
connect.launch-intl.com
connect.lifesluxuriesessentials.com
connect.loaninja.com.au
connect.lumencreative.agency
connect.manageengine.com
connect.mig.business
connect.modernx.co
connect.moirasariya.com
connect.mygo.pro
connect.nunut.com
connect.o2o-group.com
connect.oandsis.com
connect.outsource.digital
connect.pinoydevs.com
connect.policerecordsmanagement.com
connect.properformance.guru
connect.ripeak.com
connect.rjmediastudios.com
connect.smart4invest.com
connect.spacetel.org
connect.suiteintegrity.com
connect.thrifty.co.za
connect.unaverage.com
connect.unmannedtech.co.uk
connect.upstartvr.com
connect.vskintegrations.com
connect.zenatta.com
connect.ziamediagroup.com
connect.zitraar.com
dbook.delta9.ca
glnonline.qlf.org
hq.newconomy.media
hub.pinpointpharma.co
icomms.internetcontrasts.com
intranet.alsec.com.co
intranet.ces.plus
intranet.cinemaequip.com
jumpstart.leanjourney.com
partner.theaocollective.com
partners.triogen.nl
sales.sunshine-group.cn
sdbc.leanjourney.com
skole.fsl.dk
socialise.ise.com
teams.fonetex.com
wiki.95v.co
www.wellfitsharing.com

Other certificates including the domain name fsl.dk

(limited to 100 certificates)
skole.fsl.dk
connect.fiduro.nl
connect.sbadirectaccess.com
*.fsl.dk
mobile.fsl.dk
network.huntrex.com
*.fsl.dk
connect.saansinternational.com
connect.sbadirectaccess.com
*.fsl.dk
fsl.dk
mit.fsl.dk
fsl.dk
connect.sbadirectaccess.com
connect.forthecollective.com
connect.ampliusworkplace.com
connect.sbadirectaccess.com
fsl.dk
*.fsl.dk
connect.sbadirectaccess.com
*.fsl.dk
connect.sbadirectaccess.com
connect.sbadirectaccess.com
connect.madsciencemaine.com
toolmasters.izzyswan.com
connect.clahvay.com
connect.sbadirectaccess.com
*.fsl.dk
connect.sbadirectaccess.com
connect.getmeofficial.com
toolmasters.izzyswan.com
connect.sbadirectaccess.com
cssi.leanjourney.com
skole.fsl.dk
connect.sbadirectaccess.com
connect.sbadirectaccess.com
connect.astroline.es
www.fsl.dk
fsl.dk
fsl.dk
connect.sidburton.com
connect.seedformations.co.uk
connect.sbadirectaccess.com
*.fsl.dk
connect.ecmins.com
*.fsl.dk
fsl.dk
*.fsl.dk
connect.sbadirectaccess.com
connect.sbadirectaccess.com
connect.cds-me.com
connect.alchemex.com.au
connect.c4ecomputer.com
connect.forthecollective.com
connect.drsofa.com

Certificate

The complete raw certificate details for skole.fsl.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnUixUTdEGirnIQPyPyz
lAUxs9nC0wuenmrpxTIsB2ZCSvcn2iLqMwYXwYINiECdxdV9g0Nd/cIj95Iy/3IF
948Sujoef7VQBozmk4WDyfxFhCwMw7dmx1KgFeJSAbWVWgobM+JGuwjzyVwQXHuy
UHKAXPzMpnMICV8AU9Q4+FTyFL/8ZGQ1W3UfEeL84S82miuWOzpb9HnU89BUW294
IPASveY2CF6nsBJKLpgZotFAOXk/xBOgBCBWa3ItO1k/w/0E9o3D8BTHtLXfBweH
hmJHbliqyf2Tpar03V74GXl/M0oN0K1VSHpYNO8jVveP2XIpQRt8W8hsvbN1ClEt
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262705911111493794361905583116800776188402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-28 02:08:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-26 02:08:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skole.fsl.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19498460791702971584737572656526130083944721954593033712943027403574047573409212774447620900231268056908381552157144330312284436208339644835928897805009294985463013833871383950071178788029680674337385014712360646990725477270079779235015141976468764698755089003943577780863933635921076131648667628068548304004330100433063192724966279395202950310763535668414902285088722556306844238134671716389596674630696973050246548726534055052549253534577076903643247510102527755336082130210505335871414085558801765823573657310974926869939156231476895224130007567175544100851728272666738767295527384990063425181752324900197248347481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							834bdefccc65c7ae146a83dcf3f58b99cd4f28d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1989 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmbg.leanjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobalt.3space.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.freelance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.leaderstoneonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.quanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.adsa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.alalamah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.allegiant-finance.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.amputeestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.atplaysport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.bangertinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.biomimicry.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.brightlightsmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.codyjames.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.conturasrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cybercillin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.defenage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.dextra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.durhamdemocrats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.entheoshearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.expologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.facileserv.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.firstpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.forthecollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.foxtechnology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fxb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.groupbima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.havenrecruiting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.hogarcontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.imex.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.inboundengine.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.indicoweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.jaxcom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.kencove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.keymedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.kilidan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.launch-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lifesluxuriesessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.loaninja.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lumencreative.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.manageengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mig.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.modernx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.moirasariya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mygo.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.nunut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.o2o-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.oandsis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.outsource.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.pinoydevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.policerecordsmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.properformance.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ripeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.rjmediastudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.smart4invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.spacetel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.suiteintegrity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.thrifty.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.unaverage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.unmannedtech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.upstartvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.vskintegrations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.zenatta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ziamediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.zitraar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbook.delta9.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glnonline.qlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hq.newconomy.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.pinpointpharma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icomms.internetcontrasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.alsec.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.ces.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cinemaequip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumpstart.leanjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.theaocollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.triogen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.sunshine-group.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdbc.leanjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skole.fsl.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialise.ise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teams.fonetex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.95v.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellfitsharing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001657e817da00000040300473045022100cce50bcd18e1520aad15a19d39bd6f79cf1cb8a4bcbb6745218b3d49fbab1e810220628091e9fb5d5116f7861185a67b92409c7fc79cbabc22fd592a4a589110dde3007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001657e817dd80000040300483046022100de9d981c8c49c6e8fae7e9a53977f579f171016303aaa159886a7a22f99a6778022100f00048dfa2b6a32d3ffae7caadfd77c0bdac81b5b2fed10f8f8456575b5f7183
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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