advancedroofingservice.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:82:fb:81:74:05:e4:94:1a:56:08:98:04:df:7c:67:dc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=advancedroofingservice.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:82:fb:81:74:05:e4:94:1a:56:08:98:04:df:7c:67:dc
Serial Number (int): 296219764752803124000600345431553106274268
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:17:7b:a8:41:86:4b:54:ba:bd:a6:9c:af:91:6b:24:f4:d5:61:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:82:b7:72:a8:30:5b:5a:da:16:e2:eb:c6:13:bd:39:78:25:7f:b9
Fingerprint (sha256): 15:a8:24:4e:af:e4:46:24:97:7a:ea:32:33:74:29:00:d4:fe:c9:26:07:1b:45:e6:4f:bb:df:63:35:fd:ef:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate advancedroofingservice.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advancedroofingservice.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abitistorici.com
abovethepeak.com
advancedroofingservice.com
affordablelegalinsurance.com
antisettici.com
attorneybloomington.com
banco.org
beachrenting.com
bel-ami.com
biodynamicmedicalmarijuana.com
bloggeranon.com
blogonanon.com
bluemotain.com
borlanduniversal.com
carimate.com
castelbolognese.com
cisao.com
cobbinsurance.com
daytonainternational.com
distractionapparel.com
excitevacation.com
favoritesin.com
freezetherm.com
fristpremierbank.com
gallitzin.com
gambaletti.com
glaseado.com
goodlifefashion.com
grandipromozioni.com
haveacoffee.com
hesonfire.com
iactivated.com
igoca.com
indirizzoemail.com
kitstock.com
lavoratori.com
omnihaul.com
oysterfork.com
patricia.org
penna3d.com
penne3d.com
permabook.com
psicodramma.com
recuperodanni.com
sitimusicali.com
stutsman.com
thermul.com
tuttidirittiriservati.com
videoyourself.com
wheezingcough.com
www.abitistorici.com
www.abovethepeak.com
www.advancedroofingservice.com
www.affordablelegalinsurance.com
www.antisettici.com
www.attorneybloomington.com
www.banco.org
www.beachrenting.com
www.bel-ami.com
www.biodynamicmedicalmarijuana.com
www.bloggeranon.com
www.blogonanon.com
www.bluemotain.com
www.borlanduniversal.com
www.carimate.com
www.castelbolognese.com
www.cisao.com
www.cobbinsurance.com
www.daytonainternational.com
www.distractionapparel.com
www.excitevacation.com
www.favoritesin.com
www.freezetherm.com
www.fristpremierbank.com
www.gallitzin.com
www.gambaletti.com
www.glaseado.com
www.goodlifefashion.com
www.grandipromozioni.com
www.haveacoffee.com
www.hesonfire.com
www.iactivated.com
www.igoca.com
www.indirizzoemail.com
www.kitstock.com
www.lavoratori.com
www.omnihaul.com
www.oysterfork.com
www.patricia.org
www.penna3d.com
www.penne3d.com
www.permabook.com
www.psicodramma.com
www.recuperodanni.com
www.sitimusicali.com
www.stutsman.com
www.thermul.com
www.tuttidirittiriservati.com
www.videoyourself.com
www.wheezingcough.com

Other certificates including the domain name advancedroofingservice.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for advancedroofingservice.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINJTCCDA2gAwIBAgISA2aC+4F0BeSUGlYImATffGfcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDUwODE3NDFaFw0y
MDA2MDMwODE3NDFaMCUxIzAhBgNVBAMTGmFkdmFuY2Vkcm9vZmluZ3NlcnZpY2Uu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryblEyRZRN/xTRMf
ucW6C+CK9MX50rx9uJuAfuL17gLhS0S8wPJYtREtw+9fsxY5svlmPLEQCZtVF1Qq
bOThRc/x492DQNX77ZPoMQWIbc9BjZngR+7FSQ6Y9esbIK2sdbXm+GnVaF5Xt1lc
k6g4GWMzO03Tn8IafswIigijLeX3Sh20M2qXslrEti6uMe1OSsbL9Lkw1odKa74i
72/9aev0TyIf5r3OBM13bBTZF618mEsfD2dS9fv3qtY+l2OB5l3PQgKk5Ouf/V7g
uV2mjy4ZJ5Dcv7o3y/uhw6Zfnnb/2FgYhOo5Pt2JH8QI/rFLgdhx3qS6aKjG6c0m
n+hmAwIDAQABo4IKKDCCCiQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTDF3uoQYZL
VLq9ppyvkWsk9NVhQjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIH3QYDVR0RBIIH1DCCB9CCEGFiaXRpc3RvcmljaS5j
b22CEGFib3ZldGhlcGVhay5jb22CGmFkdmFuY2Vkcm9vZmluZ3NlcnZpY2UuY29t
ghxhZmZvcmRhYmxlbGVnYWxpbnN1cmFuY2UuY29tgg9hbnRpc2V0dGljaS5jb22C
F2F0dG9ybmV5Ymxvb21pbmd0b24uY29tggliYW5jby5vcmeCEGJlYWNocmVudGlu
Zy5jb22CC2JlbC1hbWkuY29tgh5iaW9keW5hbWljbWVkaWNhbG1hcmlqdWFuYS5j
b22CD2Jsb2dnZXJhbm9uLmNvbYIOYmxvZ29uYW5vbi5jb22CDmJsdWVtb3RhaW4u
Y29tghRib3JsYW5kdW5pdmVyc2FsLmNvbYIMY2FyaW1hdGUuY29tghNjYXN0ZWxi
b2xvZ25lc2UuY29tggljaXNhby5jb22CEWNvYmJpbnN1cmFuY2UuY29tghhkYXl0
b25haW50ZXJuYXRpb25hbC5jb22CFmRpc3RyYWN0aW9uYXBwYXJlbC5jb22CEmV4
Y2l0ZXZhY2F0aW9uLmNvbYIPZmF2b3JpdGVzaW4uY29tgg9mcmVlemV0aGVybS5j
b22CFGZyaXN0cHJlbWllcmJhbmsuY29tgg1nYWxsaXR6aW4uY29tgg5nYW1iYWxl
dHRpLmNvbYIMZ2xhc2VhZG8uY29tghNnb29kbGlmZWZhc2hpb24uY29tghRncmFu
ZGlwcm9tb3ppb25pLmNvbYIPaGF2ZWFjb2ZmZWUuY29tgg1oZXNvbmZpcmUuY29t
gg5pYWN0aXZhdGVkLmNvbYIJaWdvY2EuY29tghJpbmRpcml6em9lbWFpbC5jb22C
DGtpdHN0b2NrLmNvbYIObGF2b3JhdG9yaS5jb22CDG9tbmloYXVsLmNvbYIOb3lz
dGVyZm9yay5jb22CDHBhdHJpY2lhLm9yZ4ILcGVubmEzZC5jb22CC3Blbm5lM2Qu
Y29tgg1wZXJtYWJvb2suY29tgg9wc2ljb2RyYW1tYS5jb22CEXJlY3VwZXJvZGFu
bmkuY29tghBzaXRpbXVzaWNhbGkuY29tggxzdHV0c21hbi5jb22CC3RoZXJtdWwu
Y29tghl0dXR0aWRpcml0dGlyaXNlcnZhdGkuY29tghF2aWRlb3lvdXJzZWxmLmNv
bYIRd2hlZXppbmdjb3VnaC5jb22CFHd3dy5hYml0aXN0b3JpY2kuY29tghR3d3cu
YWJvdmV0aGVwZWFrLmNvbYIed3d3LmFkdmFuY2Vkcm9vZmluZ3NlcnZpY2UuY29t
giB3d3cuYWZmb3JkYWJsZWxlZ2FsaW5zdXJhbmNlLmNvbYITd3d3LmFudGlzZXR0
aWNpLmNvbYIbd3d3LmF0dG9ybmV5Ymxvb21pbmd0b24uY29tgg13d3cuYmFuY28u
b3JnghR3d3cuYmVhY2hyZW50aW5nLmNvbYIPd3d3LmJlbC1hbWkuY29tgiJ3d3cu
YmlvZHluYW1pY21lZGljYWxtYXJpanVhbmEuY29tghN3d3cuYmxvZ2dlcmFub24u
Y29tghJ3d3cuYmxvZ29uYW5vbi5jb22CEnd3dy5ibHVlbW90YWluLmNvbYIYd3d3
LmJvcmxhbmR1bml2ZXJzYWwuY29tghB3d3cuY2FyaW1hdGUuY29tghd3d3cuY2Fz
dGVsYm9sb2duZXNlLmNvbYINd3d3LmNpc2FvLmNvbYIVd3d3LmNvYmJpbnN1cmFu
Y2UuY29tghx3d3cuZGF5dG9uYWludGVybmF0aW9uYWwuY29tghp3d3cuZGlzdHJh
Y3Rpb25hcHBhcmVsLmNvbYIWd3d3LmV4Y2l0ZXZhY2F0aW9uLmNvbYITd3d3LmZh
dm9yaXRlc2luLmNvbYITd3d3LmZyZWV6ZXRoZXJtLmNvbYIYd3d3LmZyaXN0cHJl
bWllcmJhbmsuY29tghF3d3cuZ2FsbGl0emluLmNvbYISd3d3LmdhbWJhbGV0dGku
Y29tghB3d3cuZ2xhc2VhZG8uY29tghd3d3cuZ29vZGxpZmVmYXNoaW9uLmNvbYIY
d3d3LmdyYW5kaXByb21vemlvbmkuY29tghN3d3cuaGF2ZWFjb2ZmZWUuY29tghF3
d3cuaGVzb25maXJlLmNvbYISd3d3LmlhY3RpdmF0ZWQuY29tgg13d3cuaWdvY2Eu
Y29tghZ3d3cuaW5kaXJpenpvZW1haWwuY29tghB3d3cua2l0c3RvY2suY29tghJ3
d3cubGF2b3JhdG9yaS5jb22CEHd3dy5vbW5paGF1bC5jb22CEnd3dy5veXN0ZXJm
b3JrLmNvbYIQd3d3LnBhdHJpY2lhLm9yZ4IPd3d3LnBlbm5hM2QuY29tgg93d3cu
cGVubmUzZC5jb22CEXd3dy5wZXJtYWJvb2suY29tghN3d3cucHNpY29kcmFtbWEu
Y29tghV3d3cucmVjdXBlcm9kYW5uaS5jb22CFHd3dy5zaXRpbXVzaWNhbGkuY29t
ghB3d3cuc3R1dHNtYW4uY29tgg93d3cudGhlcm11bC5jb22CHXd3dy50dXR0aWRp
cml0dGlyaXNlcnZhdGkuY29tghV3d3cudmlkZW95b3Vyc2VsZi5jb22CFXd3dy53
aGVlemluZ2NvdWdoLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEA
KQaNsgiaN9kTAAABcKn8e8gAAAQDAEcwRQIhANEF91mGrgaavTNOR1o11bBZJjf+
QBphH/RTtp7Ttr/bAiBzo2kB4J4LZSbNXlKbbkyH6deiJtKRc4Y0zxpbeINarQB1
AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcKn8e/oAAAQDAEYw
RAIgCI0iLME6LWK8uF8/4wzc/RlasYKrxZEE7++AUlx2IcoCIGUbVSWccFQJXf40
ZwOacK/KbjsFLq+i7mFWu9N8YbUkMA0GCSqGSIb3DQEBCwUAA4IBAQACmeTmPiUQ
140+5V9dYCn0e+acII4GuK+ole0jg9V83ESknyzrI35MjwhtgMmEO4EUpCJL8cqo
3TPrQuTsgo3krpm+D2D1KABCAJrc0I28qPlHspLWZ/Wl6JLL4RqfE5c0Q9/yNLWu
lYdjB4M9n3wsNESOkpGkyWz+ty6R2CX7Veo0HEwAGoHxATqaPDphAhCodXqbUheP
YyUaZyTlZlkIDzLwMnjWx4UcGCHd3c7TxhPSeX8Iyc0AKTi30exHhrXLMxAm78AM
83PLRWasSGuab0ryhiFIL1EbZEWwPjfmIHZeHF8aBnRQ/LlWZCWsSbpQo0EAnuYo
oa826QSZ0Njt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryblEyRZRN/xTRMfucW6
C+CK9MX50rx9uJuAfuL17gLhS0S8wPJYtREtw+9fsxY5svlmPLEQCZtVF1QqbOTh
Rc/x492DQNX77ZPoMQWIbc9BjZngR+7FSQ6Y9esbIK2sdbXm+GnVaF5Xt1lck6g4
GWMzO03Tn8IafswIigijLeX3Sh20M2qXslrEti6uMe1OSsbL9Lkw1odKa74i72/9
aev0TyIf5r3OBM13bBTZF618mEsfD2dS9fv3qtY+l2OB5l3PQgKk5Ouf/V7guV2m
jy4ZJ5Dcv7o3y/uhw6Zfnnb/2FgYhOo5Pt2JH8QI/rFLgdhx3qS6aKjG6c0mn+hm
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296219764752803124000600345431553106274268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 08:17:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 08:17:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advancedroofingservice.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22110883121285184273010220799341245969326967700090777203082902218825444442563362929841567625852945800029002198123755865885360293639252571447006466013567083857874074471548438801056013379939219143034910288081910741892014884466168713721980398776945893786184426528241901229226452483581128512404396222030221083347357780234214490463888168748414091045517875212845593771066109478095943246721345983753186146979218666976296177195118308989315688694942296093958498545468884256681548127375692691469075262730948675706336996942847108165095375530836133516209341984623844718228009905341826043181754246170825508015834546856030693254659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3177ba841864b54babda69caf916b24f4d56142
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2004 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abitistorici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abovethepeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedroofingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordablelegalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antisettici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorneybloomington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachrenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel-ami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biodynamicmedicalmarijuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloggeranon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogonanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluemotain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borlanduniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelbolognese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobbinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daytonainternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distractionapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excitevacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'favoritesin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freezetherm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fristpremierbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallitzin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gambaletti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaseado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodlifefashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandipromozioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haveacoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hesonfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iactivated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indirizzoemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavoratori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnihaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oysterfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patricia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penna3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penne3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psicodramma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recuperodanni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitimusicali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stutsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuttidirittiriservati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoyourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheezingcough.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abitistorici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abovethepeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedroofingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affordablelegalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antisettici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attorneybloomington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachrenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bel-ami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biodynamicmedicalmarijuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloggeranon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogonanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluemotain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borlanduniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castelbolognese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobbinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daytonainternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distractionapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excitevacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.favoritesin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freezetherm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fristpremierbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallitzin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gambaletti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glaseado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodlifefashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandipromozioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haveacoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hesonfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iactivated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indirizzoemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavoratori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omnihaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oysterfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patricia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penna3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penne3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.permabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psicodramma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recuperodanni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitimusicali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stutsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuttidirittiriservati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videoyourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheezingcough.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a9fc7bc80000040300473045022100d105f75986ae069abd334e475a35d5b0592637fe401a611ff453b69ed3b6bfdb022073a36901e09e0b6526cd5e529b6e4c87e9d7a226d291738634cf1a5b78835aad00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a9fc7bfa00000403004630440220088d222cc13a2d62bcb85f3fe30cdcfd195ab182abc59104efef80525c7621ca0220651b55259c7054095dfe3467039a70afca6e3b052eafa2ee6156bbd37c61b524
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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