ujfm.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:25:bc:9a:fa:3d:ac:96:cf:0b:45:af:81:2d:8a:dd:e3 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ujfm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:25:bc:9a:fa:3d:ac:96:cf:0b:45:af:81:2d:8a:dd:e3
Serial Number (int): 267512101130828285541041712189564846267875
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:12:a9:9a:66:21:e2:3b:7c:32:e2:4b:8d:8f:4e:71:4c:d1:b7:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:7b:1e:59:5d:31:82:47:d1:e9:0d:3e:b1:37:f8:97:79:92:90:12
Fingerprint (sha256): 14:0d:90:f5:b0:e4:67:1b:99:40:ef:65:f5:53:09:5f:1f:75:ee:81:16:fe:0b:08:e9:f0:a8:84:d4:1d:ca:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ujfm.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ujfm.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accension.com
*.addadis.com
*.assagios.com
*.baboy.com
*.bestsmartprice.com
*.carbencopy.com
*.cinderellahairextensions.com
*.citysimplicity.com
*.eldescuento.com
*.elliotwaves.com
*.fumeiro.com
*.galens.com
*.goadddy.com
*.gobol.com
*.jailbreakiphone.com
*.jogli.com
*.larrondo.com
*.laserhairremovalmachine.com
*.livresdepoches.com
*.lnkyoutube.com
*.militarybanking.com
*.nakar.com
*.newmexicotourist.com
*.partosenagua.com
*.penny-stock-social.com
*.pets-r-us.com
*.picturemania.com
*.pirate9.com
*.poppajohn.com
*.proderecho.com
*.retroglyph.com
*.taxecarbone.com
*.theboardguide.com
*.theonlywebsite.com
*.transnetjobs.com
*.udema.com
*.ujfm.com
*.unitedhealthallied.com
*.viaggia.com
*.wapso1.com
*.wwwjetblueairlines.com
*.yitzi.com
accension.com
addadis.com
assagios.com
baboy.com
bestsmartprice.com
carbencopy.com
cinderellahairextensions.com
citysimplicity.com
eldescuento.com
elliotwaves.com
fumeiro.com
galens.com
goadddy.com
gobol.com
jailbreakiphone.com
jogli.com
larrondo.com
laserhairremovalmachine.com
livresdepoches.com
lnkyoutube.com
militarybanking.com
nakar.com
newmexicotourist.com
partosenagua.com
penny-stock-social.com
pets-r-us.com
picturemania.com
pirate9.com
poppajohn.com
proderecho.com
retroglyph.com
taxecarbone.com
theboardguide.com
theonlywebsite.com
transnetjobs.com
udema.com
ujfm.com
unitedhealthallied.com
viaggia.com
wapso1.com
wwwjetblueairlines.com
yitzi.com

Other certificates including the domain name ujfm.com

(limited to 100 certificates)
ujfm.com
anvelope.com
complimentaryphysician.com
lingvall.com
balcorta.com
pakistanidramas.com
hausmittel-gegen-verdauungsprobleme.de
wwwlititzmutual.com

Certificate

The complete raw certificate details for ujfm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMEzCCCvugAwIBAgISAxIlvJr6PayWzwtFr4Etit3jMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTUwODE3NThaFw0x
OTA1MTYwODE3NThaMBMxETAPBgNVBAMTCHVqZm0uY29tMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA9qIjYyVThDX5wVEU8d/hBMLxktx7TiPEQGvTEs7K
Eg1aUt/74JQzmgIc0w+Pbs0h914M34VDaklT/q8sIi9vO5EdO1qpYnLIGzA1B+Dc
i35YxNjrEHW4rLgBEwrDTKIPsR6RD2E5etwCzgH8bmTxQDXEaJU3DDhpxpMvvphB
IcyzLbfl3ezJTh/W3kv+QyLcnE3NvvnVKnIp27Gku2pwB4azCOY1ySXDQf4OZCoV
8OlUbWNQJgCDgSF5utyBMWta6IkpbkFUknSUvkCOH+WopUt4aU1QteAXzis2sq3A
JcwhI2URFADEPwnJ9ZI18Gn9K6/L/+cO2wU5Xf2+4LteShswfVbVe0W2HepijQKa
of65rMfayYd+VSSetnboifw4RFachQejSq3585CFumCUy4jhufVXYkLCgfTxKUlP
cBXQEFew5fG9tSdNwazbIR2ammGkhFr6TyS33oNblcYtBet0N2pvRnmweUE/sgQ3
O6KNbbmlwYGxm+ORp2FS9iAJTjxhdvScErGhbaX8fjUIOKpfGbxUy6pX2t3ReLEC
pLpeNfcDYb+1gp9tTw5ikUj8+7Ho3NXgsJVWm76PEKWXrOTviqdtS6ERbNZE5Xd5
Ik+tyqAr3cMqd64fjum7SK42P7rQXYLf/p8pkwhxQGLyFVoryAQgnWAweA+VlWgG
lPsCAwEAAaOCCCgwgggkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUtxKpmmYh4jt8
MuJLjY9OcUzRt74wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCBdsGA1UdEQSCBdIwggXOgg8qLmFjY2Vuc2lvbi5jb22C
DSouYWRkYWRpcy5jb22CDiouYXNzYWdpb3MuY29tggsqLmJhYm95LmNvbYIUKi5i
ZXN0c21hcnRwcmljZS5jb22CECouY2FyYmVuY29weS5jb22CHiouY2luZGVyZWxs
YWhhaXJleHRlbnNpb25zLmNvbYIUKi5jaXR5c2ltcGxpY2l0eS5jb22CESouZWxk
ZXNjdWVudG8uY29tghEqLmVsbGlvdHdhdmVzLmNvbYINKi5mdW1laXJvLmNvbYIM
Ki5nYWxlbnMuY29tgg0qLmdvYWRkZHkuY29tggsqLmdvYm9sLmNvbYIVKi5qYWls
YnJlYWtpcGhvbmUuY29tggsqLmpvZ2xpLmNvbYIOKi5sYXJyb25kby5jb22CHSou
bGFzZXJoYWlycmVtb3ZhbG1hY2hpbmUuY29tghQqLmxpdnJlc2RlcG9jaGVzLmNv
bYIQKi5sbmt5b3V0dWJlLmNvbYIVKi5taWxpdGFyeWJhbmtpbmcuY29tggsqLm5h
a2FyLmNvbYIWKi5uZXdtZXhpY290b3VyaXN0LmNvbYISKi5wYXJ0b3NlbmFndWEu
Y29tghgqLnBlbm55LXN0b2NrLXNvY2lhbC5jb22CDyoucGV0cy1yLXVzLmNvbYIS
Ki5waWN0dXJlbWFuaWEuY29tgg0qLnBpcmF0ZTkuY29tgg8qLnBvcHBham9obi5j
b22CECoucHJvZGVyZWNoby5jb22CECoucmV0cm9nbHlwaC5jb22CESoudGF4ZWNh
cmJvbmUuY29tghMqLnRoZWJvYXJkZ3VpZGUuY29tghQqLnRoZW9ubHl3ZWJzaXRl
LmNvbYISKi50cmFuc25ldGpvYnMuY29tggsqLnVkZW1hLmNvbYIKKi51amZtLmNv
bYIYKi51bml0ZWRoZWFsdGhhbGxpZWQuY29tgg0qLnZpYWdnaWEuY29tggwqLndh
cHNvMS5jb22CGCoud3d3amV0Ymx1ZWFpcmxpbmVzLmNvbYILKi55aXR6aS5jb22C
DWFjY2Vuc2lvbi5jb22CC2FkZGFkaXMuY29tggxhc3NhZ2lvcy5jb22CCWJhYm95
LmNvbYISYmVzdHNtYXJ0cHJpY2UuY29tgg5jYXJiZW5jb3B5LmNvbYIcY2luZGVy
ZWxsYWhhaXJleHRlbnNpb25zLmNvbYISY2l0eXNpbXBsaWNpdHkuY29tgg9lbGRl
c2N1ZW50by5jb22CD2VsbGlvdHdhdmVzLmNvbYILZnVtZWlyby5jb22CCmdhbGVu
cy5jb22CC2dvYWRkZHkuY29tgglnb2JvbC5jb22CE2phaWxicmVha2lwaG9uZS5j
b22CCWpvZ2xpLmNvbYIMbGFycm9uZG8uY29tghtsYXNlcmhhaXJyZW1vdmFsbWFj
aGluZS5jb22CEmxpdnJlc2RlcG9jaGVzLmNvbYIObG5reW91dHViZS5jb22CE21p
bGl0YXJ5YmFua2luZy5jb22CCW5ha2FyLmNvbYIUbmV3bWV4aWNvdG91cmlzdC5j
b22CEHBhcnRvc2VuYWd1YS5jb22CFnBlbm55LXN0b2NrLXNvY2lhbC5jb22CDXBl
dHMtci11cy5jb22CEHBpY3R1cmVtYW5pYS5jb22CC3BpcmF0ZTkuY29tgg1wb3Bw
YWpvaG4uY29tgg5wcm9kZXJlY2hvLmNvbYIOcmV0cm9nbHlwaC5jb22CD3RheGVj
YXJib25lLmNvbYIRdGhlYm9hcmRndWlkZS5jb22CEnRoZW9ubHl3ZWJzaXRlLmNv
bYIQdHJhbnNuZXRqb2JzLmNvbYIJdWRlbWEuY29tggh1amZtLmNvbYIWdW5pdGVk
aGVhbHRoYWxsaWVkLmNvbYILdmlhZ2dpYS5jb22CCndhcHNvMS5jb22CFnd3d2pl
dGJsdWVhaXJsaW5lcy5jb22CCXlpdHppLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AOJpS64m6OlACeiG
G7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABaPBywpQAAAQDAEgwRgIhAJhCsk0KBhmL
FM9VFwcPbontyocQvhuY7cwUJHKU0fT8AiEAqzg4k6zjINUrjv1MM3jDzngH331t
O5P8RGaQaBzFsRUAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAA
AWjwcsChAAAEAwBHMEUCIQCQWcuoIYlpATvhnAaqwMPpTwHlPVl7/0AhJH/Rfe4y
YAIgetQ0P2Jxhz7/14SBPka4M1IuZNVooj8QpqMzAppnNccwDQYJKoZIhvcNAQEL
BQADggEBAIF/yit0nYNNRjdgLWw7xadrp6HeWlsK3IofgilJ/0SToQ91gMh0zecR
76jtZh1co+YnC77AHaHxU+xkBcDSqAfKTnV5g0CEDaVUPDT85+d0Z3RTNbU3TRaw
P7f93538RZ+FzHeIBi8FUEtIIN3g7Y4FvebbG56EkOwlBDczSMCAisRK0/JZtSiY
pHjZRT1DF7LwwHiAV23iJOtoFh2b3Nq2om48Nr9SdnpUhzIxwGNRMiXlv/pwOfLN
QreTnCIIVIpwA8AIj8spBOltrnWN7jFL+ue06lJFD1V6NmwE4vvTjd/m6K77fBEJ
q5zaNv+8Q0jwTDVZkWfFjlfuc1iO5oM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9qIjYyVThDX5wVEU8d/h
BMLxktx7TiPEQGvTEs7KEg1aUt/74JQzmgIc0w+Pbs0h914M34VDaklT/q8sIi9v
O5EdO1qpYnLIGzA1B+Dci35YxNjrEHW4rLgBEwrDTKIPsR6RD2E5etwCzgH8bmTx
QDXEaJU3DDhpxpMvvphBIcyzLbfl3ezJTh/W3kv+QyLcnE3NvvnVKnIp27Gku2pw
B4azCOY1ySXDQf4OZCoV8OlUbWNQJgCDgSF5utyBMWta6IkpbkFUknSUvkCOH+Wo
pUt4aU1QteAXzis2sq3AJcwhI2URFADEPwnJ9ZI18Gn9K6/L/+cO2wU5Xf2+4Lte
ShswfVbVe0W2HepijQKaof65rMfayYd+VSSetnboifw4RFachQejSq3585CFumCU
y4jhufVXYkLCgfTxKUlPcBXQEFew5fG9tSdNwazbIR2ammGkhFr6TyS33oNblcYt
Bet0N2pvRnmweUE/sgQ3O6KNbbmlwYGxm+ORp2FS9iAJTjxhdvScErGhbaX8fjUI
OKpfGbxUy6pX2t3ReLECpLpeNfcDYb+1gp9tTw5ikUj8+7Ho3NXgsJVWm76PEKWX
rOTviqdtS6ERbNZE5Xd5Ik+tyqAr3cMqd64fjum7SK42P7rQXYLf/p8pkwhxQGLy
FVoryAQgnWAweA+VlWgGlPsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267512101130828285541041712189564846267875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 08:17:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 08:17:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ujfm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1006176293368597904766296758027694250366983293417009888273186995843257434560712751204274184355014100365119827738697181592057827642200529033305777541387501630483762567879984354447774251716243655775735268311050621474120771974510138976283723848521912468557936826214299852225141283631442852554061341078591427419556432249536989328870855010494331084899469116552568520441477339805910387795898287754791086070809371031028150223534181470905282762066796896729589539083552606635049161725179663294434359835301190020896468459518270472687657825987967519443609047744319869170696255980835329849463091939792668086264598061103411365046563190216016798290782154263039303723507843778867276178617575154937995214594520529768187608408788141646278640791718990782649222780408251255388600673956415807478326698780063080216842918514762977646825168662991546958319971756476912039690181227139389046386845491332746075855376170002632721374377476742274311703947322606869481790877223508408589967121619283244311178638836399195330168461297323933004177580850381918102495213341640426251943647539756591833016442812740881620110065877698203684793962908909610464497656373229572916195843209455855609233225006897651024582262340287354336127891802108069950288596156215678121244267771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b712a99a6621e23b7c32e24b8d8f4e714cd1b7be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1490 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assagios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baboy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsmartprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbencopy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinderellahairextensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citysimplicity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eldescuento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elliotwaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fumeiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goadddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jailbreakiphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jogli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larrondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserhairremovalmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livresdepoches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnkyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.militarybanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newmexicotourist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partosenagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penny-stock-social.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pets-r-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picturemania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pirate9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poppajohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proderecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retroglyph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxecarbone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theboardguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theonlywebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transnetjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ujfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedhealthallied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viaggia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wapso1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwjetblueairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yitzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assagios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baboy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsmartprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbencopy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinderellahairextensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citysimplicity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldescuento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliotwaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fumeiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goadddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jailbreakiphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jogli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larrondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserhairremovalmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livresdepoches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnkyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarybanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmexicotourist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partosenagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penny-stock-social.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pets-r-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picturemania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pirate9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poppajohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proderecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retroglyph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxecarbone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theboardguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theonlywebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transnetjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedhealthallied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaggia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wapso1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwjetblueairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yitzi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168f072c29400000403004830460221009842b24d0a06198b14cf5517070f6e89edca8710be1b98edcc14247294d1f4fc022100ab383893ace320d52b8efd4c3378c3ce7807df7d6d3b93fc446690681cc5b115007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168f072c0a100000403004730450221009059cba8218969013be19c06aac0c3e94f01e53d597bff4021247fd17dee326002207ad4343f6271873effd784813e46b833522e64d568a23f10a6a333029a6735c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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