codanova.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:60:96:04:f1:40:94:5d:10:42:a3:7d:2b:60:60:e4:b0 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=codanova.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:60:96:04:f1:40:94:5d:10:42:a3:7d:2b:60:60:e4:b0
Serial Number (int): 315570138968077699760165594878144086598832
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:62:61:12:24:fb:e1:28:89:00:ed:f0:29:5e:b8:99:d7:83:7e:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:9b:f9:c7:62:58:11:e7:15:7c:eb:64:47:59:5b:35:c3:26:61:7a
Fingerprint (sha256): 18:b9:fe:4f:a5:56:ad:5a:dc:be:16:4d:12:f5:af:f3:60:cf:24:a2:a0:d3:0c:bb:00:97:14:dc:32:1b:88:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate codanova.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for codanova.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.101board.com
*.accessoriesforsuvs.com
*.bear-bicycles.com
*.belolo.com
*.boycottkim.com
*.businessclock.com
*.chambon.com
*.chanclas.com
*.citycollegesofchicago.com
*.cochraneconsumer.com
*.codanova.com
*.connsumercellular.com
*.craigljst.com
*.deco-bord-de-mer.com
*.derepentecalifornia.com
*.doirecttv.com
*.durrant.com
*.edufuturo.com
*.espiadinha.com
*.firtsenergycorp.com
*.fluidizedbed.com
*.fulltilpoker.com
*.hijodedios.com
*.kianwood.com
*.lunivers.com
*.merriottvacationclub.com
*.musicfellas.com
*.myfantasyfootballleague.com
*.myhrhomedepot.com
*.newcourse.com
*.panamericano.com
*.penola.com
*.regalbanquethall.com
*.renacimiento.com
*.safewayselectbank.com
*.shobaki.com
*.smfairview.com
*.vaudrey.com
*.vcnetworks.com
*.walmarjobs.com
*.weslfargo.com
*.zanotto.com
101board.com
accessoriesforsuvs.com
bear-bicycles.com
belolo.com
boycottkim.com
businessclock.com
chambon.com
chanclas.com
citycollegesofchicago.com
cochraneconsumer.com
codanova.com
connsumercellular.com
craigljst.com
deco-bord-de-mer.com
derepentecalifornia.com
doirecttv.com
durrant.com
edufuturo.com
espiadinha.com
firtsenergycorp.com
fluidizedbed.com
fulltilpoker.com
hijodedios.com
kianwood.com
lunivers.com
merriottvacationclub.com
musicfellas.com
myfantasyfootballleague.com
myhrhomedepot.com
newcourse.com
panamericano.com
penola.com
regalbanquethall.com
renacimiento.com
safewayselectbank.com
shobaki.com
smfairview.com
vaudrey.com
vcnetworks.com
walmarjobs.com
weslfargo.com
zanotto.com

Other certificates including the domain name codanova.com

(limited to 100 certificates)
beanbarcafe.com.au
codanova.com
codanova.com
bangladesh3x.com
enactusulaval.com
ggdb.xyz
codanova.com
capverden.com
jcportrait.com
squiers.com
justbelieve.com
xsjunk.com.au
personoftech.com

Certificate

The complete raw certificate details for codanova.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315570138968077699760165594878144086598832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 02:33:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 02:33:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'codanova.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800236468465120966251854470774375729767074299828810030393572319577839192802524374463558573582959386042319283448485552418203397784898171836143039947892088443883035710393435387953952681967697702854186292308055206022839197988112429393277575364877811287760426526098173821634618233328083616236279834477762023073326276925424332456060133676957473645467935912185021135163856051673925089971037160977939647222697103860723884042778555682060586600936830348560667471330579869855517698208509921865393270522188042917552785493275452695509964118000539542701873929953592426703305277128175005466823732008967118782435424962805852879803452981603224741134942838872333904745474056844978803040070834469680738221896661044494229078287718109426704919849869022033031626566655413360927817528311257199483259904879810155870964579216483967946228525533759055082743088617517363620925312186379557087173664536269950036824598986955344854491980967848176777019219817156094232935808675232533642267355370744010554531006485610561005045192138354390002291943436012596288666690224954449764475946508209250475188124353574908074025356178553849834158603043179811828131677152068094504453382793364263791552408524660539140145827167005718125251143254626544373015904531308479466235778517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd62611224fbe1288900edf0295eb899d7837e52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1568 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.101board.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accessoriesforsuvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bear-bicycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boycottkim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chambon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chanclas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citycollegesofchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cochraneconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connsumercellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craigljst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deco-bord-de-mer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derepentecalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doirecttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.durrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edufuturo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espiadinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firtsenergycorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fluidizedbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fulltilpoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hijodedios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kianwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merriottvacationclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicfellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfantasyfootballleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhrhomedepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panamericano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regalbanquethall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renacimiento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safewayselectbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shobaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smfairview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaudrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmarjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weslfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zanotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '101board.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessoriesforsuvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bear-bicycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boycottkim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chambon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chanclas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycollegesofchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cochraneconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connsumercellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigljst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deco-bord-de-mer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derepentecalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doirecttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edufuturo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espiadinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firtsenergycorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidizedbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulltilpoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hijodedios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kianwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merriottvacationclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicfellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfantasyfootballleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhrhomedepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamericano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regalbanquethall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renacimiento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safewayselectbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shobaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smfairview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaudrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmarjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weslfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zanotto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168ef3758310000040300473045022026dce16a72d039eaca768494a9af6e4305c8c9b4bd8fc484fbe474eb55c26d63022100edbb7e931e663e7c356d7112cd12ee7a5ae1d00d0a24160f0ddb86d393cc238900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168ef3758470000040300473045022100e3133858bd8d1a0600114769c0f21543320aaa1f205a15b093a75370eefcad2702207a66eeedd27dccecce9110c8690bf238ca234bf4fad08a44abe5b4641e64493f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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