support-bb-play.digicelgroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f4:a8:ba:5b:57:13:a2:12:c3:78:0a:0b:6d:92:0b:57:fd was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support-bb-play.digicelgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f4:a8:ba:5b:57:13:a2:12:c3:78:0a:0b:6d:92:0b:57:fd
Serial Number (int): 431702319178855725236966499082623213328381
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 86:db:3f:d7:96:55:d5:07:70:2c:8c:4b:ef:be:df:a4:d9:34:cf:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:1b:f9:4d:00:ce:d0:42:6b:08:ce:0e:92:72:2a:4d:eb:5c:dc:e6
Fingerprint (sha256): 04:b4:b7:ff:27:5f:d9:dc:14:84:41:f7:1b:4a:2f:c4:e6:e6:c4:0d:8b:59:36:35:35:4b:0c:37:60:4a:96:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate support-bb-play.digicelgroup.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support-bb-play.digicelgroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support-ag.digicelgroup.com
support-ai-play.digicelgroup.com
support-ai.digicelgroup.com
support-aw.digicelgroup.com
support-bb-play.digicelgroup.com
support-bb.digicelgroup.com
support-bm.digicelgroup.com
support-cw.digicelgroup.com
support-dm-play.digicelgroup.com
support-dm.digicelgroup.com
support-fj.digicelgroup.com
support-gd.digicelgroup.com
support-gf.digicelgroup.com
support-gp.digicelgroup.com
support-gy.digicelgroup.com
support-ht.digicelgroup.com
support-jm-play.digicelgroup.com
support-jm.digicelgroup.com
support-kn.digicelgroup.com
support-ky.digicelgroup.com
support-lc.digicelgroup.com
support-mf.digicelgroup.com
support-mq.digicelgroup.com
support-ms-play.digicelgroup.com
support-nr.digicelgroup.com
support-pa.digicelgroup.com
support-pg.digicelgroup.com
support-sr.digicelgroup.com
support-sv.digicelgroup.com
support-tc-play.digicelgroup.com
support-tc.digicelgroup.com
support-to.digicelgroup.com
support-tt-play.digicelgroup.com
support-tt.digicelgroup.com
support-vc.digicelgroup.com
support-vu.digicelgroup.com
support-ws.digicelgroup.com

Other certificates including the domain name digicelgroup.com

(limited to 100 certificates)
support-bb-play.digicelgroup.com
online-top-up.digicelgroup.com
ITCMA.digicelgroup.com
aapprofile.aks.dev.digicelgroup.com
*.onlinetopup.digicelgroup.com
author.digicelgroup.com
incapsula.com
boardpad.digicelgroup.com
helpdesk.fintonhouse.org.uk
geoip.aks.dev.digicelgroup.com
mydigicelplay.digicelgroup.com
staging-network.aks.dev.digicelgroup.com
support-bb-play.digicelgroup.com
helpdesk.fintonhouse.org.uk
pod.digicelgroup.com
qa-bill.aks.dev.digicelgroup.com
qa-bill.aks.dev.digicelgroup.com
imperva.com
incapsula.com
staging-aapprofile.aks.dev.digicelgroup.com
support-bb-play.digicelgroup.com
management.calajm001.azs.digicelgroup.com
staging-aapprofile.aks.dev.digicelgroup.com
support-bb-play.digicelgroup.com
support-bb-play.digicelgroup.com
support-bb-play.digicelgroup.com
incapsula.com
servicedeskpacific.digicelgroup.com
staging-esif.aks.dev.digicelgroup.com
staging-memcached.aks.dev.digicelgroup.com
sif.aks.dev.digicelgroup.com
incapsula.com
staging-web-admin.aks.dev.digicelgroup.com
digicelgroup.com
incapsula.com
qa-reward.aks.dev.digicelgroup.com
online-top-up.digicelgroup.com
management.calajm001.azs.digicelgroup.com
helpdesk.fintonhouse.org.uk
map-publisher.aks.dev.digicelgroup.com
incapsula.com
reg-jm.digicelgroup.com
incapsula.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
support-bb.digicelgroup.com
digicelid.digicelgroup.com
portal.calajm001.azs.digicelgroup.com
bill.aks.dev.digicelgroup.com
incapsula.com
online-top-up.digicelgroup.com
livechat.digicelgroup.com
qa-transaction.aks.dev.digicelgroup.com
webmail.digicelgroup.com
helpdesk.fintonhouse.org.uk
dev-selfcare.aks.dev.digicelgroup.com
moncash.digicelgroup.com
incapsula.com
helpdesk.fintonhouse.org.uk
pgw.aks.dev.digicelgroup.com
incapsula.com
dcportal.digicelgroup.com
incapsula.com
incapsula.com
support-bb-play.digicelgroup.com
dev-selfcare.aks.dev.digicelgroup.com
incapsula.com
incapsula.com
adminportal.calajm001.azs.digicelgroup.com
incapsula.com
incapsula.com
incapsula.com
qa-mybill.aks.dev.digicelgroup.com
moncash.digicelgroup.com
incapsula.com
sim-swap.aks.dev.digicelgroup.com
staging-pgw.aks.dev.digicelgroup.com
online-top-up.digicelgroup.com
support-bb-play.digicelgroup.com
incapsula.com
helpdesk.fintonhouse.org.uk
staging-network.aks.dev.digicelgroup.com
htap000.digicelgroup.com
*.digicelgroup.com
device.aks.dev.digicelgroup.com
service-map-authentication.aks.dev.digicelgroup.com
incapsula.com
management.calajm001.azs.digicelgroup.com
digicelgroup.com
support-bb.digicelgroup.com
incapsula.com
otuccadmin.digicelgroup.com
credit.aks.dev.digicelgroup.com
qa-device.aks.dev.digicelgroup.com
careers.digicelgroup.com
digicelgroup.com
dev-selfcare.aks.dev.digicelgroup.com
ITCMA.digicelgroup.com
mailer.cignafinans.com.tr
incapsula.com

Certificate

The complete raw certificate details for support-bb-play.digicelgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILYjCCCkqgAwIBAgISBPSoultXE6ISw3gKC22SC1f9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MTgxOTEwMDFaFw0x
ODA5MTYxOTEwMDFaMCsxKTAnBgNVBAMTIHN1cHBvcnQtYmItcGxheS5kaWdpY2Vs
Z3JvdXAuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy1uxLD9J
TMRas5tNOwWZGAwz0ZwYeAsv/MTtq64lNQLMr3XvnTt2xdrXc9lHQadGuPPegAIN
5k0E8FJcZsyW+V3cLDRIk5G8No8SW5/HCtB9dHBwJpq8Lp3Qz8S3/5+JQKy1ZtwV
sQRwt1+IMkUU73CSSrGh0qP4hVHYP8kxthoRQz0fCuqBBWBNhah05PJ0vXasBXxZ
mEAs/ukQfVmB0t6YlCTTsHVm3c0DgE7cw/+JWON5MIvQoiGpPQAhu1Rl10LyzT9f
UwKgKGn/ZFDemE9OGwWAK7p88fJJTRyW7gBSdYXwAUPeElX+11sPjV7VOM76ZepE
HuDNpqYBMyIw69t4AzS25Lp9Vp6qjiBcKtx/JgVmv9eQar/KNg8EmAWynrYWnszF
mC3LgqM+FMIpNOOdwIMHN4QY4BDHiJ2Ckr4wLgPz863n2LxwrgP2mzHvk1twY29G
vxvcV/V2OQg9Kaqc9uvyM902btAzpoeHoAKApaOu24VLo/PQRzP3qQd8BGFP3CY2
MVypYJGAZOho4tQcv74VucK5hCodCxziRJ/2c9ZuC+JiA+O1cEd3P85d8o57nPz/
QYC671boRmfMhLTJBeVdfCeCoRrFIUUegE3za93T+7r+ewkqCeoGQp4Rnm3Md1aY
dep/qqO40wdlEgqS36zU7qMvcXt/L6NP/FcCAwEAAaOCB18wggdbMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUhts/15ZV1QdwLIxL777fpNk0z00wHwYDVR0jBBgwFoAU
qEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzAB
hiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAC
hiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCBGEGA1UdEQSC
BFgwggRUghtzdXBwb3J0LWFnLmRpZ2ljZWxncm91cC5jb22CIHN1cHBvcnQtYWkt
cGxheS5kaWdpY2VsZ3JvdXAuY29tghtzdXBwb3J0LWFpLmRpZ2ljZWxncm91cC5j
b22CG3N1cHBvcnQtYXcuZGlnaWNlbGdyb3VwLmNvbYIgc3VwcG9ydC1iYi1wbGF5
LmRpZ2ljZWxncm91cC5jb22CG3N1cHBvcnQtYmIuZGlnaWNlbGdyb3VwLmNvbYIb
c3VwcG9ydC1ibS5kaWdpY2VsZ3JvdXAuY29tghtzdXBwb3J0LWN3LmRpZ2ljZWxn
cm91cC5jb22CIHN1cHBvcnQtZG0tcGxheS5kaWdpY2VsZ3JvdXAuY29tghtzdXBw
b3J0LWRtLmRpZ2ljZWxncm91cC5jb22CG3N1cHBvcnQtZmouZGlnaWNlbGdyb3Vw
LmNvbYIbc3VwcG9ydC1nZC5kaWdpY2VsZ3JvdXAuY29tghtzdXBwb3J0LWdmLmRp
Z2ljZWxncm91cC5jb22CG3N1cHBvcnQtZ3AuZGlnaWNlbGdyb3VwLmNvbYIbc3Vw
cG9ydC1neS5kaWdpY2VsZ3JvdXAuY29tghtzdXBwb3J0LWh0LmRpZ2ljZWxncm91
cC5jb22CIHN1cHBvcnQtam0tcGxheS5kaWdpY2VsZ3JvdXAuY29tghtzdXBwb3J0
LWptLmRpZ2ljZWxncm91cC5jb22CG3N1cHBvcnQta24uZGlnaWNlbGdyb3VwLmNv
bYIbc3VwcG9ydC1reS5kaWdpY2VsZ3JvdXAuY29tghtzdXBwb3J0LWxjLmRpZ2lj
ZWxncm91cC5jb22CG3N1cHBvcnQtbWYuZGlnaWNlbGdyb3VwLmNvbYIbc3VwcG9y
dC1tcS5kaWdpY2VsZ3JvdXAuY29tgiBzdXBwb3J0LW1zLXBsYXkuZGlnaWNlbGdy
b3VwLmNvbYIbc3VwcG9ydC1uci5kaWdpY2VsZ3JvdXAuY29tghtzdXBwb3J0LXBh
LmRpZ2ljZWxncm91cC5jb22CG3N1cHBvcnQtcGcuZGlnaWNlbGdyb3VwLmNvbYIb
c3VwcG9ydC1zci5kaWdpY2VsZ3JvdXAuY29tghtzdXBwb3J0LXN2LmRpZ2ljZWxn
cm91cC5jb22CIHN1cHBvcnQtdGMtcGxheS5kaWdpY2VsZ3JvdXAuY29tghtzdXBw
b3J0LXRjLmRpZ2ljZWxncm91cC5jb22CG3N1cHBvcnQtdG8uZGlnaWNlbGdyb3Vw
LmNvbYIgc3VwcG9ydC10dC1wbGF5LmRpZ2ljZWxncm91cC5jb22CG3N1cHBvcnQt
dHQuZGlnaWNlbGdyb3VwLmNvbYIbc3VwcG9ydC12Yy5kaWdpY2VsZ3JvdXAuY29t
ghtzdXBwb3J0LXZ1LmRpZ2ljZWxncm91cC5jb22CG3N1cHBvcnQtd3MuZGlnaWNl
bGdyb3VwLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMB
AQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGr
BggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVs
aWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFu
Y2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8v
bGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB
8QDvAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFkFIS/7QAA
BAMARzBFAiEAvPkNYB4GuVuGU+3CyIK0wUIS8H71/FuXtiZLKQ6g8ewCIGs2rs0u
Z5NNIKaad7hsCxPLKoguaZVNR+7jYjUkKYg/AHUAKTxRllTIOWW6qlD8WAfUt2+/
WHopctykwwz05UVH9HgAAAFkFIS/vAAABAMARjBEAiAcZCYq3cP9pHMry9b1MoxF
TbT+p48Md573O9JVz6ErZwIgSY76ZuhLNvRMQFZcYnV0RlBVezDnOSd6pCfjYnC5
xj0wDQYJKoZIhvcNAQELBQADggEBACzKfTvGyih8KqcFYn8jN8rdTykYKVcsyfip
VitX6h+jwYrXHAjNixmoUGHCy6jpdaR+7cJs56DT5lpRQtUAw5o1GNi4zzbcZWZj
YStgRGX4GIhQHnmAckCThkvA121bzL+TYqxVqfTNeqggdPfxMMzagkaIgZFYRjdw
OKbN/WSnXO2GMrtPpClcc21UkL9n2UDur7yJ84/Nz4CPjcWwy3Xmj5BsKpA+MEms
B+ZuQvM9xL+ZHPj9fTd1CwbWf8g3owRC+Q67x2P4JdKiz+nYla0JEN5I46X47frH
s9gM4ZEIGRQM2VYO8nF/JlJ7vaWkfwA8zPuqL0FyIYFNdbAAezA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431702319178855725236966499082623213328381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 19:10:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 19:10:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support-bb-play.digicelgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829628960870601975986732209197924473557314534194780184731718457403928010814843972055398755403911373902480948625318333700319207893338179872572804434986696792657016015692732361984384386921354751839038828041206895352189476885393364028535969162433082882723812934507202217426212234450624050528165560832329167803417264205810106052098917671866494168092454818561691221374810057629466832839241312734724490441671504895113130549293733415154091126846916688720925644802415161039257009285327999756144129919498703577146775995399783213372609793836235349165600989802729784315587050263339212829036722143844360058680096856203705706979028488599987706292282847980335234337399171582110746302981760070603177596999532760112142470349943137409982931177818196646884681395483562041579710422663187877975621658680459286640937722289158929574959911375034098098303874555121973627121567503352446103053096898627746578897377795460000094700676858099898844547199972805330286149729737278359192306662385045350022739807372260746422931370599170406686384729128361189778337108165710757324208876986204009518063195882909067618873517503960273696890533056908848488922155567064661072086861623239588157852120582617295648749217211983161217017825352599028134410496148102057739768822871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86db3fd79655d507702c8c4befbedfa4d934cf4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-ag.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-ai-play.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-ai.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-aw.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-bb-play.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-bb.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-bm.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-cw.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-dm-play.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-dm.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-fj.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-gd.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-gf.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-gp.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-gy.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-ht.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-jm-play.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-jm.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-kn.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-ky.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-lc.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-mf.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-mq.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-ms-play.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-nr.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-pa.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-pg.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-sr.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-sv.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-tc-play.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-tc.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-to.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-tt-play.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-tt.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-vc.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-vu.digicelgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-ws.digicelgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001641484bfed0000040300473045022100bcf90d601e06b95b8653edc2c882b4c14212f07ef5fc5b97b6264b290ea0f1ec02206b36aecd2e67934d20a69a77b86c0b13cb2a882e69954d47eee362352429883f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001641484bfbc000004030046304402201c64262addc3fda4732bcbd6f5328c454db4fea78f0c779ef73bd255cfa12b670220498efa66e84b36f44c40565c6275744650557b30e739277aa427e36270b9c63d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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