genretirement.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:02:f5:f5:d3:b3:63:87:81:f1:83:08:40:5c:15:19:bd was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=genretirement.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:02:f5:f5:d3:b3:63:87:81:f1:83:08:40:5c:15:19:bd
Serial Number (int): 340966867209465264580315853882625579358653
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:1c:91:72:aa:86:43:c9:68:c1:82:65:e7:70:c1:72:20:8b:99:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:22:2f:c2:3c:99:8b:47:8c:e4:84:66:c7:8c:6d:76:0b:8e:2f:8e
Fingerprint (sha256): 15:f8:f7:0f:d2:77:72:cd:d8:db:58:61:1f:44:42:cc:5f:c7:e6:7c:d0:63:03:59:8a:94:5c:a3:4f:93:14:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate genretirement.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for genretirement.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abandonement.com
agencefrancaisededeveloppement.com
agencefrancaisepourledeveloppement.com
agerequirement.com
argentinaprocurement.com
australiaprocurement.com
baghdadprocurement.com
beijingprocurement.com
belizeretirement.com
berkeleysettlement.com
bigprocurement.com
canadaprocurement.com
chicagosettlement.com
chileprocurement.com
clearwatersettlement.com
coloradosettlement.com
delhiprocurement.com
denversettlement.com
dubaiprocurement.com
equipement.com
europeprocurement.com
freeprocurement.com
genretirement.com
genxretirement.com
greekrefinement.com
hollidayretirement.com
idahosettlement.com
illinoissettlement.com
industriallawyersettlement.com
italianrefinement.com
kansassettlement.com
karachiprocurement.com
kentuckysettlement.com
lightsettlement.com
massachusettssettlement.com
mumbaiprocurement.com
nigeriaprocurement.com
phoenixsettlement.com
rawsettlement.com
realprocurement.com
russiaprocurement.com
seaprocurement.com
shanghaiprocurement.com
singaporeprocurement.com
super-procurement.com
superpublicprocurement.com
trinidadandtobagocoin.com
veriprice.org
www.abandonement.com
www.agencefrancaisededeveloppement.com
www.agencefrancaisepourledeveloppement.com
www.agerequirement.com
www.argentinaprocurement.com
www.australiaprocurement.com
www.baghdadprocurement.com
www.beijingprocurement.com
www.belizeretirement.com
www.berkeleysettlement.com
www.bigprocurement.com
www.canadaprocurement.com
www.chicagosettlement.com
www.chileprocurement.com
www.clearwatersettlement.com
www.coloradosettlement.com
www.delhiprocurement.com
www.denversettlement.com
www.dubaiprocurement.com
www.equipement.com
www.europeanfilmaward.org
www.europeprocurement.com
www.freeprocurement.com
www.genretirement.com
www.genxretirement.com
www.greekrefinement.com
www.hollidayretirement.com
www.idahosettlement.com
www.illinoissettlement.com
www.industriallawyersettlement.com
www.italianrefinement.com
www.kansassettlement.com
www.karachiprocurement.com
www.kentuckysettlement.com
www.lightsettlement.com
www.massachusettssettlement.com
www.mumbaiprocurement.com
www.nigeriaprocurement.com
www.phoenixsettlement.com
www.rawsettlement.com
www.realprocurement.com
www.russiaprocurement.com
www.seaprocurement.com
www.shanghaiprocurement.com
www.singaporeprocurement.com
www.super-procurement.com
www.superpublicprocurement.com
www.trinidadandtobagocoin.com

Other certificates including the domain name genretirement.com

(limited to 100 certificates)
hollidayretirement.com
www.agerequirement.com
www.super-procurement.com
genretirement.com
hollidayretirement.com
www.lightsettlement.com
www.europeanfilmaward.org
hollidayretirement.com
www.massachusettssettlement.com
www.seaprocurement.com
www.seaprocurement.com
hollidayretirement.com
www.belizeretirement.com
equipement.com
www.baghdadprocurement.com
bigprocurement.com
www.baghdadprocurement.com
seaprocurement.com
hollidayretirement.com
italianrefinement.com
fundprocurement.com

Certificate

The complete raw certificate details for genretirement.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPkjCCDnqgAwIBAgISA+oC9fXTs2OHgfGDCEBcFRm9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MjIxMDM4MjJaFw0x
ODEwMjAxMDM4MjJaMBwxGjAYBgNVBAMTEWdlbnJldGlyZW1lbnQuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCapz4kvWI3P54LqlOcklXIKn+27
ikf7d3NLFK3R6nUsPVm8wIzkqK7UFDqAmtmEuZbEsDFMFoC4LFh++R3YdJe8Mwxn
VluTC+YoxyLF0wuU4qH6oFSZz1xYJpuDm+8LKBUomqswulImuptoKHUgzlogn+e4
aqBRkg5MYvQ3USI4LLTkiYieHod610rZKuHBUVv1xTQ1izQSRS+CMWO1feVfrt1u
/bxPu1/MoLjhkgQZasPaLM8a5f92ynY59YpCSP5tUwnw4eG0ia3SzReeB1S/ocgN
pn43U0Hhq3kYq6MmRV7T683GyNIfSkPoIQPTDxAOvEI2O/zl2RxMM72ehwIDAQAB
o4IMnjCCDJowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRpHJFyqoZDyWjBgmXncMFy
IIuZ6TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIIJnwYDVR0RBIIJljCCCZKCEGFiYW5kb25lbWVudC5jb22CImFnZW5j
ZWZyYW5jYWlzZWRlZGV2ZWxvcHBlbWVudC5jb22CJmFnZW5jZWZyYW5jYWlzZXBv
dXJsZWRldmVsb3BwZW1lbnQuY29tghJhZ2VyZXF1aXJlbWVudC5jb22CGGFyZ2Vu
dGluYXByb2N1cmVtZW50LmNvbYIYYXVzdHJhbGlhcHJvY3VyZW1lbnQuY29tghZi
YWdoZGFkcHJvY3VyZW1lbnQuY29tghZiZWlqaW5ncHJvY3VyZW1lbnQuY29tghRi
ZWxpemVyZXRpcmVtZW50LmNvbYIWYmVya2VsZXlzZXR0bGVtZW50LmNvbYISYmln
cHJvY3VyZW1lbnQuY29tghVjYW5hZGFwcm9jdXJlbWVudC5jb22CFWNoaWNhZ29z
ZXR0bGVtZW50LmNvbYIUY2hpbGVwcm9jdXJlbWVudC5jb22CGGNsZWFyd2F0ZXJz
ZXR0bGVtZW50LmNvbYIWY29sb3JhZG9zZXR0bGVtZW50LmNvbYIUZGVsaGlwcm9j
dXJlbWVudC5jb22CFGRlbnZlcnNldHRsZW1lbnQuY29tghRkdWJhaXByb2N1cmVt
ZW50LmNvbYIOZXF1aXBlbWVudC5jb22CFWV1cm9wZXByb2N1cmVtZW50LmNvbYIT
ZnJlZXByb2N1cmVtZW50LmNvbYIRZ2VucmV0aXJlbWVudC5jb22CEmdlbnhyZXRp
cmVtZW50LmNvbYITZ3JlZWtyZWZpbmVtZW50LmNvbYIWaG9sbGlkYXlyZXRpcmVt
ZW50LmNvbYITaWRhaG9zZXR0bGVtZW50LmNvbYIWaWxsaW5vaXNzZXR0bGVtZW50
LmNvbYIeaW5kdXN0cmlhbGxhd3llcnNldHRsZW1lbnQuY29tghVpdGFsaWFucmVm
aW5lbWVudC5jb22CFGthbnNhc3NldHRsZW1lbnQuY29tghZrYXJhY2hpcHJvY3Vy
ZW1lbnQuY29tghZrZW50dWNreXNldHRsZW1lbnQuY29tghNsaWdodHNldHRsZW1l
bnQuY29tghttYXNzYWNodXNldHRzc2V0dGxlbWVudC5jb22CFW11bWJhaXByb2N1
cmVtZW50LmNvbYIWbmlnZXJpYXByb2N1cmVtZW50LmNvbYIVcGhvZW5peHNldHRs
ZW1lbnQuY29tghFyYXdzZXR0bGVtZW50LmNvbYITcmVhbHByb2N1cmVtZW50LmNv
bYIVcnVzc2lhcHJvY3VyZW1lbnQuY29tghJzZWFwcm9jdXJlbWVudC5jb22CF3No
YW5naGFpcHJvY3VyZW1lbnQuY29tghhzaW5nYXBvcmVwcm9jdXJlbWVudC5jb22C
FXN1cGVyLXByb2N1cmVtZW50LmNvbYIac3VwZXJwdWJsaWNwcm9jdXJlbWVudC5j
b22CGXRyaW5pZGFkYW5kdG9iYWdvY29pbi5jb22CDXZlcmlwcmljZS5vcmeCFHd3
dy5hYmFuZG9uZW1lbnQuY29tgiZ3d3cuYWdlbmNlZnJhbmNhaXNlZGVkZXZlbG9w
cGVtZW50LmNvbYIqd3d3LmFnZW5jZWZyYW5jYWlzZXBvdXJsZWRldmVsb3BwZW1l
bnQuY29tghZ3d3cuYWdlcmVxdWlyZW1lbnQuY29tghx3d3cuYXJnZW50aW5hcHJv
Y3VyZW1lbnQuY29tghx3d3cuYXVzdHJhbGlhcHJvY3VyZW1lbnQuY29tghp3d3cu
YmFnaGRhZHByb2N1cmVtZW50LmNvbYIad3d3LmJlaWppbmdwcm9jdXJlbWVudC5j
b22CGHd3dy5iZWxpemVyZXRpcmVtZW50LmNvbYIad3d3LmJlcmtlbGV5c2V0dGxl
bWVudC5jb22CFnd3dy5iaWdwcm9jdXJlbWVudC5jb22CGXd3dy5jYW5hZGFwcm9j
dXJlbWVudC5jb22CGXd3dy5jaGljYWdvc2V0dGxlbWVudC5jb22CGHd3dy5jaGls
ZXByb2N1cmVtZW50LmNvbYIcd3d3LmNsZWFyd2F0ZXJzZXR0bGVtZW50LmNvbYIa
d3d3LmNvbG9yYWRvc2V0dGxlbWVudC5jb22CGHd3dy5kZWxoaXByb2N1cmVtZW50
LmNvbYIYd3d3LmRlbnZlcnNldHRsZW1lbnQuY29tghh3d3cuZHViYWlwcm9jdXJl
bWVudC5jb22CEnd3dy5lcXVpcGVtZW50LmNvbYIZd3d3LmV1cm9wZWFuZmlsbWF3
YXJkLm9yZ4IZd3d3LmV1cm9wZXByb2N1cmVtZW50LmNvbYIXd3d3LmZyZWVwcm9j
dXJlbWVudC5jb22CFXd3dy5nZW5yZXRpcmVtZW50LmNvbYIWd3d3LmdlbnhyZXRp
cmVtZW50LmNvbYIXd3d3LmdyZWVrcmVmaW5lbWVudC5jb22CGnd3dy5ob2xsaWRh
eXJldGlyZW1lbnQuY29tghd3d3cuaWRhaG9zZXR0bGVtZW50LmNvbYIad3d3Lmls
bGlub2lzc2V0dGxlbWVudC5jb22CInd3dy5pbmR1c3RyaWFsbGF3eWVyc2V0dGxl
bWVudC5jb22CGXd3dy5pdGFsaWFucmVmaW5lbWVudC5jb22CGHd3dy5rYW5zYXNz
ZXR0bGVtZW50LmNvbYIad3d3LmthcmFjaGlwcm9jdXJlbWVudC5jb22CGnd3dy5r
ZW50dWNreXNldHRsZW1lbnQuY29tghd3d3cubGlnaHRzZXR0bGVtZW50LmNvbYIf
d3d3Lm1hc3NhY2h1c2V0dHNzZXR0bGVtZW50LmNvbYIZd3d3Lm11bWJhaXByb2N1
cmVtZW50LmNvbYIad3d3Lm5pZ2VyaWFwcm9jdXJlbWVudC5jb22CGXd3dy5waG9l
bml4c2V0dGxlbWVudC5jb22CFXd3dy5yYXdzZXR0bGVtZW50LmNvbYIXd3d3LnJl
YWxwcm9jdXJlbWVudC5jb22CGXd3dy5ydXNzaWFwcm9jdXJlbWVudC5jb22CFnd3
dy5zZWFwcm9jdXJlbWVudC5jb22CG3d3dy5zaGFuZ2hhaXByb2N1cmVtZW50LmNv
bYIcd3d3LnNpbmdhcG9yZXByb2N1cmVtZW50LmNvbYIZd3d3LnN1cGVyLXByb2N1
cmVtZW50LmNvbYIed3d3LnN1cGVycHVibGljcHJvY3VyZW1lbnQuY29tgh13d3cu
dHJpbmlkYWRhbmR0b2JhZ29jb2luLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAEC
ATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUg
bWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBv
bmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZv
dW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHcAwRZK4Kdy0tQ5LcgKwQdw1PDEm96ZGkhAwfoH
UWT2M2AAAAFkwciIZgAABAMASDBGAiEA2xvRaUfSGgCWSKmtCJJcm0NvpsY6UdC+
fDeHG58FcIsCIQD7ah8qt0NK55bmMv3HEtbrjkMZplmr6qEC6nJgyv3cmwB1ACk8
UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZMHIiHoAAAQDAEYwRAIg
QIiQHCvpezTE8Z9jXhtqKdU4fneY0aIt8+iY7DwsA6oCIA+q+KrbshThFzcOSXj+
L6O1g7ID/3G5OdyRF4M99Ij/MA0GCSqGSIb3DQEBCwUAA4IBAQAjjhkzxyC2XQ3O
JAIm8fmeylQ8Dkc0Q4LZRVCdKVBPGUWxATCvAEF+9iJ/wIZismb9bJpxuQEFMBS4
f+oZUlFl03Q+Hvt1UzOf27BYeH1bsWSTSwk8zbxjMS1Pw/8HKrRPrRvH+7ImmTne
3Wny4AlU0iPnTaxyeThngi4XtMROnmLJEVsRCtY3MMnykLTXW7CrCgQqbLREzQMH
AHyA39p9xzo0yEMKqaOsdGkKwqxQEs03tkErRa+SOg3LmTfv0m9jMTR89OdMlKoA
nc+lTyD27HMOvRlze0CA1fRQvHNqiVEFyRuZAT+y2QpWOxrUwpdXwiHje6uOI+ys
9iW8/xjd
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCapz4kvWI3P54LqlOck
lXIKn+27ikf7d3NLFK3R6nUsPVm8wIzkqK7UFDqAmtmEuZbEsDFMFoC4LFh++R3Y
dJe8MwxnVluTC+YoxyLF0wuU4qH6oFSZz1xYJpuDm+8LKBUomqswulImuptoKHUg
zlogn+e4aqBRkg5MYvQ3USI4LLTkiYieHod610rZKuHBUVv1xTQ1izQSRS+CMWO1
feVfrt1u/bxPu1/MoLjhkgQZasPaLM8a5f92ynY59YpCSP5tUwnw4eG0ia3SzRee
B1S/ocgNpn43U0Hhq3kYq6MmRV7T683GyNIfSkPoIQPTDxAOvEI2O/zl2RxMM72e
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340966867209465264580315853882625579358653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-22 10:38:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 10:38:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'genretirement.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25266726588365611169581923332409227384588457290634135470105231693992739288318040697647794273119015871116383924040136629758530801322890408835051864273937776470130629520998351105976169428308410593236111992911168264063884501074703308744253865652459905571127653774585547262863224045595020500293028523267075695629761588879572425726937101296173928209768285509146242003748419753538489713855437159392396826194366811409102236929694938396638137552471277626938451603073531097074771122738967851976718568118637624928983830522377382359135836237627817237258588198283869998998453509459626076474299678959993131696820696346379411103367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							691c9172aa8643c968c18265e770c172208b99e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2454 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abandonement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencefrancaisededeveloppement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencefrancaisepourledeveloppement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agerequirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentinaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baghdadprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beijingprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belizeretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chileprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearwatersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delhiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denversettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equipement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genxretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollidayretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoissettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industriallawyersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italianrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansassettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karachiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massachusettssettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mumbaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russiaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanghaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super-procurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superpublicprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinidadandtobagocoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veriprice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abandonement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agencefrancaisededeveloppement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agencefrancaisepourledeveloppement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agerequirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.argentinaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australiaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baghdadprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beijingprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belizeretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chileprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearwatersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delhiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denversettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equipement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europeanfilmaward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genxretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greekrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollidayretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illinoissettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industriallawyersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansassettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karachiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentuckysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massachusettssettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mumbaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russiaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanghaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singaporeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.super-procurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superpublicprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinidadandtobagocoin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000164c1c888660000040300483046022100db1bd16947d21a009648a9ad08925c9b436fa6c63a51d0be7c37871b9f05708b022100fb6a1f2ab7434ae796e632fdc712d6eb8e4319a659abeaa102ea7260cafddc9b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164c1c8887a000004030046304402204088901c2be97b34c4f19f635e1b6a29d5387e7798d1a22df3e898ec3c2c03aa02200faaf8aadbb214e117370e4978fe2fa3b583b203ff71b939dc9117833df488ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00238e1933c720b65d0dce240226f1f99eca543c0e47344382d945509d29504f1945b10130af00417ef6227fc08662b266fd6c9a71b901053014b87fea19525165d3743e1efb7553339fdbb058787d5bb164934b093ccdbc63312d4fc3ff072ab44fad1bc7fbb2269939dedd69f2e00954d223e74dac72793867822e17b4c44e9e62c9115b110ad63730c9f290b4d75bb0ab0a042a6cb444cd0307007c80dfda7dc73a34c8430aa9a3ac74690ac2ac5012cd37b6412b45af923a0dcb9937efd26f6331347cf4e74c94aa009dcfa54f20f6ec730ebd19737b4080d5f450bc736a895105c91b99013fb2d90a563b1ad4c29757c221e37bab8e23ecacf625bcff18dd