certainty.bgistrategy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:3b:03:c9:8c:51:29:35:fb:82:b1:72:4c:9b:27:4f:f9 was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=certainty.bgistrategy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:3b:03:c9:8c:51:29:35:fb:82:b1:72:4c:9b:27:4f:f9
Serial Number (int): 315179915885312294000730966105280871878649
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:fa:01:b4:f0:58:75:cc:d8:2e:50:02:40:9a:4b:12:63:3c:0c:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:e5:66:ca:90:5e:c1:48:a6:9b:15:89:46:4c:73:c6:b2:97:7f:c1
Fingerprint (sha256): 0e:0d:1f:3c:c0:fc:3b:87:6f:32:f4:e6:b6:af:ec:d4:87:2a:9e:f2:de:61:2d:40:ec:65:ca:94:7c:30:70:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate certainty.bgistrategy.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for certainty.bgistrategy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.scoreapp.com
certainty.bgistrategy.com
collabor-8.pmlgroup.com
healthcheck.lawbite.co.uk
healthcheck.totemcg.org
indicator.prohabperformance.com
leaderdna.mtdtraining.com
ppp.watertightmarketing.com
profile.innovationbeehive.co.uk
quiz.thekonajourney.net
salesdna.mtdsalestraining.com
score.morecommittedclients.com
score.smallfilms.com
scorecard.adigital.agency
scorecard.antoinetteoglethorpe.com
scorecard.bigsmiles.co
scorecard.botulinumtoxinclub.com
scorecard.changeready.global
scorecard.ciaraconlon.com
scorecard.digitalhunters.co.uk
scorecard.innovationbeehive.co.uk
scorecard.insigniacomms.com
scorecard.jefferyandwilkes.co.uk
scorecard.junglediversity.com
scorecard.mindspaceassociates.com
scorecard.mvement.co.uk
scorecard.propdev.fundingtrack.com
scorecard.propertymarketingrevolution.com
scorecard.raconteur.net
scorecard.redington.co.uk
scorecard.specialistretailers.com
scorecard.twentytwo.agency
scorecard.vickiwusche.com
scorecard.welcomegate.com
scorecard.wellnessleadershipacademy.com
scorecard.wholeshiftwellness.com
scorecard.workwell.com.au
scorecard.yulancreative.com
www.impactscorecard.org
www.thebusinessefficiencytest.co.uk
your.scoreapp.net
yulancreative.your.scoreapp.net

Other certificates including the domain name bgistrategy.com

(limited to 100 certificates)
*.bgistrategy.com
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
certainty.bgistrategy.com
*.bgistrategy.com
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
scorecard.bigsmiles.co
adigital.your.scoreapp.net
*.bgistrategy.com
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
*.bgistrategy.com
api.scoreapp.net
bgistrategy.com
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
bgistrategy.com
api.scoreapp.net
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
api.scoreapp.net
pjs.your.scoreapp.net
bgistrategy.com
*.bgistrategy.com
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
*.bgistrategy.com
bgistrategy.com
adigital.your.scoreapp.net
adigital.your.scoreapp.net
aviadev.your.scoreapp.net
salesdna.mtdsalestraining.com
antoinette.your.scoreapp.net
bgistrategy.com
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
sni.cloudflaressl.com
api.scoreapp.com
adigital.your.scoreapp.net
adigital.your.scoreapp.net
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
fyr.your.scoreapp.net
antoinette.your.scoreapp.net
api.scoreapp.net
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
adigital.your.scoreapp.net
adigital.your.scoreapp.net
api.scoreapp.net
bgistrategy.com
scorecard.yulancreative.com
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
adigital.your.scoreapp.net
www.bgistrategy.com
adigital.your.scoreapp.net
www.bgistrategy.com
antoinette.your.scoreapp.net
scorecard.antoinetteoglethorpe.com
www.bgistrategy.com
antoinette.your.scoreapp.net
antoinette.your.scoreapp.net
adigital.your.scoreapp.net
scorecard.ciaraconlon.com
api.scoreapp.net
certainty.bgistrategy.com
antoinette.your.scoreapp.net
adigital.your.scoreapp.net
adigital.your.scoreapp.net
scorecard.specialistretailers.com
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
collabor-8.pmlgroup.com
api.scoreapp.net
antoinette.your.scoreapp.net
bgistrategy.com
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
www.bgistrategy.com
adigital.your.scoreapp.net
adigital.your.scoreapp.net
bgistrategy.com
adigital.your.scoreapp.net
adigital.your.scoreapp.net
adigital.your.scoreapp.net
antoinette.your.scoreapp.net
adigital.your.scoreapp.net
*.bgistrategy.com
scorecard.vickiwusche.com
antoinette.your.scoreapp.net

Certificate

The complete raw certificate details for certainty.bgistrategy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a0dTIPK3OKgNGV33vAS
LCipZFBvILHZRvCnhMFsHkdFSDCxP4PtWgJqNaPWMpGae3wIhhBQ2bG/KbJq7Kgl
g4xHDIjMA15Yp6sebd1/3GnG7tV+TxHCcQXHA0lpxKKlOIGerSUOtc1CE+jDBaXs
XPulLhLR5EoCoM+rZYqjObt6w7ibOE0oGIFUFLHhVoqPlgf/a0x30nq09vl183Tn
DCYdUnUiMZN5Vdy1uegZKpskmGY+8fehAElKwze+kaUYo4CQxTslXMPHeZbI6RJc
1ncUsKUiuuxVIZNYWsOE7OkEqBJz/WU9TgdWGpuhxe2t9gqoc5j0IebJjuGEnRcg
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315179915885312294000730966105280871878649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 13:01:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 13:01:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certainty.bgistrategy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28488984533684630838107687702807346777563237601091074236323526394765479563335522005564531720951719669575932519731710046512492201337997104753457656190946583817317377018072028065107086502276346224705696239254363704842496862380734659125187965117783265565059894704210768345588212189686945118995513316681676005384360736233996025166194673474579044922961534369533070337517680612614307439846890513722109983975991172278076748383382810586577856286039177585245332129350898739249666574422984069597460701599205429744138350762192410568959474231637999885442846919139238434648881599988313631375691352940135289794078290437229256319033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88fa01b4f05875ccd82e5002409a4b12633c0c63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.scoreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certainty.bgistrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collabor-8.pmlgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcheck.lawbite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcheck.totemcg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indicator.prohabperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaderdna.mtdtraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppp.watertightmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.innovationbeehive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiz.thekonajourney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdna.mtdsalestraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'score.morecommittedclients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'score.smallfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.adigital.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.antoinetteoglethorpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.bigsmiles.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.botulinumtoxinclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.changeready.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.ciaraconlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.digitalhunters.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.innovationbeehive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.insigniacomms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.jefferyandwilkes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.junglediversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.mindspaceassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.mvement.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.propdev.fundingtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.propertymarketingrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.raconteur.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.redington.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.specialistretailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.twentytwo.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.vickiwusche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.welcomegate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.wellnessleadershipacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.wholeshiftwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.workwell.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.yulancreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impactscorecard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebusinessefficiencytest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.scoreapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yulancreative.your.scoreapp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5ac500970000040300463044022018abdaf6c75df0bd945f438183384348c42157e515ebe986fc31c2bec791a607022057b7fad2e32d653c0ebf6f919fd97320689b7ea5379d47d3c9d560f2f94cf72a007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e5ac5026000000403004730450221008ed066c070ab6a79dc0e252945e54bd826a37120547374837050066819a029bf02206bd3433e38bea333d6e5862d06bdc5149ea6a23c0ad82eab8f711a0117a444b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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