aw.landing.ba.rshft.com

Issued by R3

About this certificate

This digital certificate with serial number 03:95:92:25:ac:81:46:da:24:ac:45:d3:d3:77:ea:70:cf:9d was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aw.landing.ba.rshft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:92:25:ac:81:46:da:24:ac:45:d3:d3:77:ea:70:cf:9d
Serial Number (int): 312233193367685746964107374048267734142877
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:c9:c4:bd:bb:94:16:d2:12:fd:55:55:20:02:ee:4c:f5:35:8d:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:6f:01:0a:b4:3a:85:55:85:69:e6:9f:63:7d:ca:ec:4f:c5:47:6f
Fingerprint (sha256): 11:20:e8:81:ea:2e:17:27:bb:3d:37:d8:a2:c1:1f:11:1b:40:34:3a:1c:e2:0a:64:00:b4:1e:8d:2a:c6:c6:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aw.landing.ba.rshft.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aw.landing.ba.rshft.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aw.landing.ba.rshft.com
ba-sba.landing.ba.rshft.com
bhrcenter.landing.ba.rshft.com
camps.omacworldclassmartialarts.com
canada.stagecoachfranchise.com
canfitpro.landing.ba.rshft.com
capitaltaxmanagement.landing.ba.rshft.com
certify-your-passion.canfitpro.com
chefsdoor.landing.ba.rshft.com
coachingzone.landing.ba.rshft.com
communities.wycliffehomes.com
cruiseplus.landing.ba.rshft.com
crunch-fitness.landing.ba.rshft.com
dogtopia-franchising-ca.landing.ba.rshft.com
dogtopia-us-franchising.landing.ba.rshft.com
eliteservice.elitetradepainting.com
elitetradepainting.landing.ba.rshft.com
ewynstudios.landing.ba.rshft.com
fountaintire.landing.ba.rshft.com
franchise.cdfgi.ca
franchise.crunchfitness.ca
franchise.laserclinics.ca
franchise.lemonheaven.com
franchise.massageaddict.ca
franchise.patriceandassociatesfranchising.com
franchiseoffer.landing.ba.rshft.com
franchising-ca.dogtopia.com
franchising-us.dogtopia.com
franchising.gabrielpizza.com
franchising.instantimprints.com
franchising.oxfordlearning.com
franchising.petvalu.com
franchising.taxassist.ca
fullypromoted.landing.ba.rshft.com
gabrielpizza.landing.ba.rshft.com
greatexpressions.landing.ba.rshft.com
helpinghandsdaycare.landing.ba.rshft.com
horancares.landing.ba.rshft.com
ifa.landing.ba.rshft.com
instantimprints.landing.ba.rshft.com
janiking.landing.ba.rshft.com
landing.ba.rshft.com
landing.bhrcsocal.com
landing.fullypromoted.ca
landing.laurier-optical.com
landing.libertytaxcanada.ca
landing.massageexperts.ca
landing.propertyguys.com
landing.purebarre.com
landing.topperlinen.com
laserclinics.landing.ba.rshft.com
laurier-optical.landing.ba.rshft.com
ledgers.landing.ba.rshft.com
lemon-heaven.landing.ba.rshft.com
libertytax.landing.ba.rshft.com
livewellclinic.landing.ba.rshft.com
local.prepnsell.com
mainsqueeze.landing.ba.rshft.com
makerkids.landing.ba.rshft.com
marketing.landing.ba.rshft.com
marketing.ledgers.com
massageaddict.landing.ba.rshft.com
massageexperts.landing.ba.rshft.com
mobiledumps.landing.ba.rshft.com
nanaimo.janiking.ca
omac.landing.ba.rshft.com
oxfordlearning.landing.ba.rshft.com
patriceandassociates.landing.ba.rshft.com
pauldavis.landing.ba.rshft.com
petvalu.landing.ba.rshft.com
phatburn.landing.ba.rshft.com
prepnsell.landing.ba.rshft.com
promo.helpinghandsdaycare.ca
promo.theupsstore.ca
propertyguys.landing.ba.rshft.com
puddlepools.landing.ba.rshft.com
pure-barre.landing.ba.rshft.com
rcc19.reshiftmedia.com
reshift.landing.ba.rshft.com
reshift.pauldavisbusiness.ca
reshiftpizza.landing.ba.rshft.com
servicemaster.landing.ba.rshft.com
smalltown.awfranchise.ca
south-beach.landing.ba.rshft.com
speedpro.landing.ba.rshft.com
stagecoach.landing.ba.rshft.com
steamoji.landing.ba.rshft.com
suttonrivertrading.landing.ba.rshft.com
taxassist.landing.ba.rshft.com
theupsstore.landing.ba.rshft.com
topperlinen.landing.ba.rshft.com
waterdepot.landing.ba.rshft.com
weewatch.landing.ba.rshft.com
world-toughest-race.landing.ba.rshft.com
wycliffehomes.landing.ba.rshft.com
zoomroom.landing.ba.rshft.com

Other certificates including the domain name rshft.com

(limited to 100 certificates)
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
landing.ba.rshft.com
aw.landing.ba.rshft.com
bentosushi.com
rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
rshft.com
sni95828.cloudflaressl.com
miraclemethod.rshft.com
staging.canfitpro.rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
miraclemethod.rshft.com
capitaltaxmanagement.landing.ba.rshft.com
rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
landing.ba.rshft.com
sni95828.cloudflaressl.com
staging.dogtopia.rshft.com
sni95828.cloudflaressl.com
aw.landing.ba.rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
miraclemethod.rshft.com
landing.ba.rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
staging.lmaconference.host.rshft.com
miraclemethod.rshft.com
sni95828.cloudflaressl.com
benefitsalliance.rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
landing.ba.rshft.com
benefitsalliance.ca
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
rshft.com
retailcouncil.rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
bentosushi.com
landing.vivecrop.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
landing.ba.rshft.com
rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
staging.dogtopia.rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
rshft.com
landing.vivecrop.com
staging.aci.host.rshft.com
sni95828.cloudflaressl.com
staging.c5online.host.rshft.com
bentosushi.com
landing.ba.rshft.com
sni95828.cloudflaressl.com
retailcouncil.rshft.com
rshft.com
landing.vivecrop.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
rshft.com
staging.canfitpro.rshft.com
sni95828.cloudflaressl.com
landing.ba.rshft.com
sni95828.cloudflaressl.com
sni.cloudflaressl.com
sni95828.cloudflaressl.com
benefitsalliance.ca
sni95828.cloudflaressl.com
staging.dogtopia.rshft.com
landing.ba.rshft.com
sni95828.cloudflaressl.com
sni95828.cloudflaressl.com
landing.ba.rshft.com
retailcouncil.rshft.com

Certificate

The complete raw certificate details for aw.landing.ba.rshft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQ+jCCD+KgAwIBAgISA5WSJayBRtokrEXT03fqcM+dMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTMxNTU3MzRaFw0yNDAzMTIxNTU3MzNaMCIxIDAeBgNVBAMT
F2F3LmxhbmRpbmcuYmEucnNoZnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyTn0Hc/YY9dxaLjCFfOBzyygD5FK6ECPwDzxKaOB1jwyKyeImkGR
jigNUSCApyC3qDKOAdrDhO6NcGNe0RHfn8GsjO0kxHcv5tKpQhQCCJXZb1ZCd3h+
a9RGj6nCLNmLgi7DtmAEJ1z+YuZivCwgjmRnnE/gGTzW4CEUTz89oBocjZJ5H/M+
+Ym4jS4tSNvsha6RSzQaYT9VwPNiN7HFVwE9RP/tIMcfcNLnIBehQmktSu5q1Vmi
FRiOHOtE/QKsJvxjzlHbEJZ4Ipfscp4gArjeUspMOwfDwRJWvhTVG+r39+VmlaAY
52MER5A8Eina/barC7KOZ3XaIDnthF/r+QIDAQABo4IOGDCCDhQwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBR4ycS9u5QW0hL9VVUgAu5M9TWNaDAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCDB4GA1UdEQSCDBUwggwRghdhdy5sYW5kaW5nLmJhLnJzaGZ0
LmNvbYIbYmEtc2JhLmxhbmRpbmcuYmEucnNoZnQuY29tgh5iaHJjZW50ZXIubGFu
ZGluZy5iYS5yc2hmdC5jb22CI2NhbXBzLm9tYWN3b3JsZGNsYXNzbWFydGlhbGFy
dHMuY29tgh5jYW5hZGEuc3RhZ2Vjb2FjaGZyYW5jaGlzZS5jb22CHmNhbmZpdHBy
by5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIpY2FwaXRhbHRheG1hbmFnZW1lbnQubGFu
ZGluZy5iYS5yc2hmdC5jb22CImNlcnRpZnkteW91ci1wYXNzaW9uLmNhbmZpdHBy
by5jb22CHmNoZWZzZG9vci5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIhY29hY2hpbmd6
b25lLmxhbmRpbmcuYmEucnNoZnQuY29tgh1jb21tdW5pdGllcy53eWNsaWZmZWhv
bWVzLmNvbYIfY3J1aXNlcGx1cy5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIjY3J1bmNo
LWZpdG5lc3MubGFuZGluZy5iYS5yc2hmdC5jb22CLGRvZ3RvcGlhLWZyYW5jaGlz
aW5nLWNhLmxhbmRpbmcuYmEucnNoZnQuY29tgixkb2d0b3BpYS11cy1mcmFuY2hp
c2luZy5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIjZWxpdGVzZXJ2aWNlLmVsaXRldHJh
ZGVwYWludGluZy5jb22CJ2VsaXRldHJhZGVwYWludGluZy5sYW5kaW5nLmJhLnJz
aGZ0LmNvbYIgZXd5bnN0dWRpb3MubGFuZGluZy5iYS5yc2hmdC5jb22CIWZvdW50
YWludGlyZS5sYW5kaW5nLmJhLnJzaGZ0LmNvbYISZnJhbmNoaXNlLmNkZmdpLmNh
ghpmcmFuY2hpc2UuY3J1bmNoZml0bmVzcy5jYYIZZnJhbmNoaXNlLmxhc2VyY2xp
bmljcy5jYYIZZnJhbmNoaXNlLmxlbW9uaGVhdmVuLmNvbYIaZnJhbmNoaXNlLm1h
c3NhZ2VhZGRpY3QuY2GCLWZyYW5jaGlzZS5wYXRyaWNlYW5kYXNzb2NpYXRlc2Zy
YW5jaGlzaW5nLmNvbYIjZnJhbmNoaXNlb2ZmZXIubGFuZGluZy5iYS5yc2hmdC5j
b22CG2ZyYW5jaGlzaW5nLWNhLmRvZ3RvcGlhLmNvbYIbZnJhbmNoaXNpbmctdXMu
ZG9ndG9waWEuY29tghxmcmFuY2hpc2luZy5nYWJyaWVscGl6emEuY29tgh9mcmFu
Y2hpc2luZy5pbnN0YW50aW1wcmludHMuY29tgh5mcmFuY2hpc2luZy5veGZvcmRs
ZWFybmluZy5jb22CF2ZyYW5jaGlzaW5nLnBldHZhbHUuY29tghhmcmFuY2hpc2lu
Zy50YXhhc3Npc3QuY2GCImZ1bGx5cHJvbW90ZWQubGFuZGluZy5iYS5yc2hmdC5j
b22CIWdhYnJpZWxwaXp6YS5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIlZ3JlYXRleHBy
ZXNzaW9ucy5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIoaGVscGluZ2hhbmRzZGF5Y2Fy
ZS5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIfaG9yYW5jYXJlcy5sYW5kaW5nLmJhLnJz
aGZ0LmNvbYIYaWZhLmxhbmRpbmcuYmEucnNoZnQuY29tgiRpbnN0YW50aW1wcmlu
dHMubGFuZGluZy5iYS5yc2hmdC5jb22CHWphbmlraW5nLmxhbmRpbmcuYmEucnNo
ZnQuY29tghRsYW5kaW5nLmJhLnJzaGZ0LmNvbYIVbGFuZGluZy5iaHJjc29jYWwu
Y29tghhsYW5kaW5nLmZ1bGx5cHJvbW90ZWQuY2GCG2xhbmRpbmcubGF1cmllci1v
cHRpY2FsLmNvbYIbbGFuZGluZy5saWJlcnR5dGF4Y2FuYWRhLmNhghlsYW5kaW5n
Lm1hc3NhZ2VleHBlcnRzLmNhghhsYW5kaW5nLnByb3BlcnR5Z3V5cy5jb22CFWxh
bmRpbmcucHVyZWJhcnJlLmNvbYIXbGFuZGluZy50b3BwZXJsaW5lbi5jb22CIWxh
c2VyY2xpbmljcy5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIkbGF1cmllci1vcHRpY2Fs
LmxhbmRpbmcuYmEucnNoZnQuY29tghxsZWRnZXJzLmxhbmRpbmcuYmEucnNoZnQu
Y29tgiFsZW1vbi1oZWF2ZW4ubGFuZGluZy5iYS5yc2hmdC5jb22CH2xpYmVydHl0
YXgubGFuZGluZy5iYS5yc2hmdC5jb22CI2xpdmV3ZWxsY2xpbmljLmxhbmRpbmcu
YmEucnNoZnQuY29tghNsb2NhbC5wcmVwbnNlbGwuY29tgiBtYWluc3F1ZWV6ZS5s
YW5kaW5nLmJhLnJzaGZ0LmNvbYIebWFrZXJraWRzLmxhbmRpbmcuYmEucnNoZnQu
Y29tgh5tYXJrZXRpbmcubGFuZGluZy5iYS5yc2hmdC5jb22CFW1hcmtldGluZy5s
ZWRnZXJzLmNvbYIibWFzc2FnZWFkZGljdC5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIj
bWFzc2FnZWV4cGVydHMubGFuZGluZy5iYS5yc2hmdC5jb22CIG1vYmlsZWR1bXBz
LmxhbmRpbmcuYmEucnNoZnQuY29tghNuYW5haW1vLmphbmlraW5nLmNhghlvbWFj
LmxhbmRpbmcuYmEucnNoZnQuY29tgiNveGZvcmRsZWFybmluZy5sYW5kaW5nLmJh
LnJzaGZ0LmNvbYIpcGF0cmljZWFuZGFzc29jaWF0ZXMubGFuZGluZy5iYS5yc2hm
dC5jb22CHnBhdWxkYXZpcy5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIccGV0dmFsdS5s
YW5kaW5nLmJhLnJzaGZ0LmNvbYIdcGhhdGJ1cm4ubGFuZGluZy5iYS5yc2hmdC5j
b22CHnByZXBuc2VsbC5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIccHJvbW8uaGVscGlu
Z2hhbmRzZGF5Y2FyZS5jYYIUcHJvbW8udGhldXBzc3RvcmUuY2GCIXByb3BlcnR5
Z3V5cy5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIgcHVkZGxlcG9vbHMubGFuZGluZy5i
YS5yc2hmdC5jb22CH3B1cmUtYmFycmUubGFuZGluZy5iYS5yc2hmdC5jb22CFnJj
YzE5LnJlc2hpZnRtZWRpYS5jb22CHHJlc2hpZnQubGFuZGluZy5iYS5yc2hmdC5j
b22CHHJlc2hpZnQucGF1bGRhdmlzYnVzaW5lc3MuY2GCIXJlc2hpZnRwaXp6YS5s
YW5kaW5nLmJhLnJzaGZ0LmNvbYIic2VydmljZW1hc3Rlci5sYW5kaW5nLmJhLnJz
aGZ0LmNvbYIYc21hbGx0b3duLmF3ZnJhbmNoaXNlLmNhgiBzb3V0aC1iZWFjaC5s
YW5kaW5nLmJhLnJzaGZ0LmNvbYIdc3BlZWRwcm8ubGFuZGluZy5iYS5yc2hmdC5j
b22CH3N0YWdlY29hY2gubGFuZGluZy5iYS5yc2hmdC5jb22CHXN0ZWFtb2ppLmxh
bmRpbmcuYmEucnNoZnQuY29tgidzdXR0b25yaXZlcnRyYWRpbmcubGFuZGluZy5i
YS5yc2hmdC5jb22CHnRheGFzc2lzdC5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIgdGhl
dXBzc3RvcmUubGFuZGluZy5iYS5yc2hmdC5jb22CIHRvcHBlcmxpbmVuLmxhbmRp
bmcuYmEucnNoZnQuY29tgh93YXRlcmRlcG90LmxhbmRpbmcuYmEucnNoZnQuY29t
gh13ZWV3YXRjaC5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIod29ybGQtdG91Z2hlc3Qt
cmFjZS5sYW5kaW5nLmJhLnJzaGZ0LmNvbYIid3ljbGlmZmVob21lcy5sYW5kaW5n
LmJhLnJzaGZ0LmNvbYIdem9vbXJvb20ubGFuZGluZy5iYS5yc2hmdC5jb20wEwYD
VR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBIsONr
2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYxkHMBAAAAEAwBHMEUCIQCV
dSvpe5wzhY9nL1Di7UjNfE1ayBBPDRaMPdarkCCojgIgN60ytdaObG6UY5sa2pCe
xAOFYXRapvQMoW2IVZbhr4MAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG
cR+1mwAAAYxkHMApAAAEAwBIMEYCIQDwlFMaj6LVZrFsCJKJqul7z/+opnhZE8Rp
X6svf3Wd7gIhAPF2pV4H3k5PFUhwqnOdoFoXV/8nl2P/Po/AWzh+JEWMMA0GCSqG
SIb3DQEBCwUAA4IBAQBmEdmi2rKUM12NlnAdXjkzzddFWW2Hft6OGqMc2ZgmZ4PU
67H2akW2hAcf5aNORHF+/55Q8QISuXxarmfGhItSfQE0lG2G+7YDPNbjdGtqLyJt
4MOt9i/hIQOfJt2IY6P+vqjLsJOe773uSERMGlFONBsq5CE2e1jpztio91Rapbzh
dW3eIeVn4OskR/fS3BLsEtcJ+FKxEUSU2g+SmFuA7w//+qKhl/reZngEOCpcsffi
B6IpBOXd3ySc+v0xckPmpcL99V7c/RCzLUEHWVNWzeh7NCgL9A9T04ViC6D487tq
WpMD0MxOYp9BJXXHatjYfq310wNA+w5QhoJeTpEj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTn0Hc/YY9dxaLjCFfOB
zyygD5FK6ECPwDzxKaOB1jwyKyeImkGRjigNUSCApyC3qDKOAdrDhO6NcGNe0RHf
n8GsjO0kxHcv5tKpQhQCCJXZb1ZCd3h+a9RGj6nCLNmLgi7DtmAEJ1z+YuZivCwg
jmRnnE/gGTzW4CEUTz89oBocjZJ5H/M++Ym4jS4tSNvsha6RSzQaYT9VwPNiN7HF
VwE9RP/tIMcfcNLnIBehQmktSu5q1VmiFRiOHOtE/QKsJvxjzlHbEJZ4Ipfscp4g
ArjeUspMOwfDwRJWvhTVG+r39+VmlaAY52MER5A8Eina/barC7KOZ3XaIDnthF/r
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312233193367685746964107374048267734142877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 15:57:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 15:57:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aw.landing.ba.rshft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25402477273538959710092407423950378546900929611133410284234136920275414459607626615745006201772406258614392885160833491928164723780279833417709927187324973894509405524602348211487572035721303168604861766798802670400530836262413364564660286101447780711720736035451835075649070584445384950468190230582993853284913172399652488602333423902621401721568736387211917525251224119640484005706251576898416034045165856750406605297200740466497996626427408950129159734109510303538144902423960004328781018790929120829426248876825101383871935154573324933370804014376368323881915970301901951665704161330821498584775845726005340662777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78c9c4bdbb9416d212fd55552002ee4cf5358d68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3093 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aw.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba-sba.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhrcenter.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camps.omacworldclassmartialarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada.stagecoachfranchise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canfitpro.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaltaxmanagement.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certify-your-passion.canfitpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefsdoor.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachingzone.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communities.wycliffehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruiseplus.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crunch-fitness.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogtopia-franchising-ca.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogtopia-us-franchising.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliteservice.elitetradepainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitetradepainting.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewynstudios.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fountaintire.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.cdfgi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.crunchfitness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.laserclinics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.lemonheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.massageaddict.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.patriceandassociatesfranchising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchiseoffer.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchising-ca.dogtopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchising-us.dogtopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchising.gabrielpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchising.instantimprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchising.oxfordlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchising.petvalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchising.taxassist.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullypromoted.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielpizza.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatexpressions.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpinghandsdaycare.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horancares.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifa.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantimprints.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janiking.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.bhrcsocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.fullypromoted.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.laurier-optical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.libertytaxcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.massageexperts.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.propertyguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.purebarre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.topperlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserclinics.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurier-optical.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledgers.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemon-heaven.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytax.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livewellclinic.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prepnsell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainsqueeze.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makerkids.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.ledgers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massageaddict.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massageexperts.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiledumps.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanaimo.janiking.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omac.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordlearning.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriceandassociates.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauldavis.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petvalu.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phatburn.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepnsell.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.helpinghandsdaycare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.theupsstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyguys.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puddlepools.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pure-barre.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcc19.reshiftmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshift.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshift.pauldavisbusiness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshiftpizza.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicemaster.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smalltown.awfranchise.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south-beach.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedpro.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagecoach.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steamoji.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suttonrivertrading.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxassist.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theupsstore.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topperlinen.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterdepot.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weewatch.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world-toughest-race.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wycliffehomes.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoomroom.landing.ba.rshft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c641cc040000004030047304502210095752be97b9c33858f672f50e2ed48cd7c4d5ac8104f0d168c3dd6ab9020a88e022037ad32b5d68e6c6e94639b1ada909ec4038561745aa6f40ca16d885596e1af83007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c641cc0290000040300483046022100f094531a8fa2d566b16c089289aae97bcfffa8a6785913c4695fab2f7f759dee022100f176a55e07de4e4f154870aa739da05a1757ff279763ff3e8fc05b387e24458c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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