abwamz.xjel.annie.ro

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:7e:3a:6a:dc:eb:b7:a7:07:dc:98:f6:4a:32:98:e7:2c was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abwamz.xjel.annie.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:7e:3a:6a:dc:eb:b7:a7:07:dc:98:f6:4a:32:98:e7:2c
Serial Number (int): 320713775687649291742215665009815732152108
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:35:0a:2e:eb:5c:90:72:d8:77:52:6a:c9:26:5e:5a:01:17:03:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:49:a8:10:f1:9f:de:53:cd:31:46:e5:a1:d7:fc:13:56:cc:80:60
Fingerprint (sha256): 1b:97:23:f8:39:f4:ca:91:30:54:64:50:d6:36:5a:25:9f:1a:fc:8a:15:9b:fa:f7:33:0c:8b:73:26:42:ff:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate abwamz.xjel.annie.ro

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abwamz.xjel.annie.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abwamz.xjel.annie.ro
ajkil.pesm.diehl.fi
aqxeeuqa.ymia.monii.ch
asuiukc.yrih.sofat.ro
axjyj.ymia.monii.ch
azpzmn.fnce.vives.cl
bbfez.zwve.laepp.ch
bujbmikoh.yrih.sofat.ro
ctnbtw.pesm.diehl.fi
cyxzwkobh.bpmy.10086.uk
czvpyn.ymia.monii.ch
dozhvuamg.lpcl.taran.ro
dvxvdjz.qwfd.edima.cl
exfvb.zhaw.stpse.ro
fbnvhka.oikr.infer.cl
flghehyf.apbn.stwoo.tk
frvobd.ctxf.tecon.ro
fttshzbz.oikr.infer.cl
gbcgilti.fudp.rread.uk
gglcq.ctxf.tecon.ro
ghsnko.junz.divus.bg
gqdtnyp.ctxf.tecon.ro
gsvfkcg.ymia.monii.ch
hbpbd.pesm.diehl.fi
hgkmwf.cgrc.hi38.org
hklvujmm.xnsy.jemix.sg
hrbxnpt.ymia.monii.ch
ibgzw.xnsy.jemix.sg
ifedkqr.qwfd.edima.cl
ipoegfll.xnsy.jemix.sg
jsreo.bgdc.t-hp.com
juglaoay.jnfr.serav.cl
jvjstjiwh.xfkc.lswce.sg
jwwrhj.ymia.monii.ch
jyg3.eu.org
khfdeynim.bezo.swiss.cl
kzzoqu.oikr.infer.cl
lcfrn.pesm.diehl.fi
ldvyok.zhaw.stpse.ro
liaoq.ymia.monii.ch
llsigtfj.ymia.monii.ch
lovmlxdzk.qrsm.luene.ch
mbfek.krxv.drogu.es
mgrkojg.junz.divus.bg
mzsjni.jnfr.serav.cl
nkcfdqv.cyme.sudol.ca
nnopbmxsy.famf.edisa.cl
nsvlnsro.oikr.infer.cl
odvbdr.ptqe.baerg.ca
ohvslkzj.cyme.sudol.ca
ozcetde.cpxn.ispif.ro
papdwrc.bezo.swiss.cl
pbdovzyy.fudp.rread.uk
pmyoeq.bwjs.araex.ch
ppmler.cyme.sudol.ca
pxuhtav.zhaw.stpse.ro
qcwesnr.bbqd.kasan.se
qhudlxpiz.bwjs.araex.ch
qjzuvr.famf.edisa.cl
qobtozgip.cpxn.ispif.ro
qrivhozhy.zzbw.amiga.ro
rauhcwd.apbn.stwoo.tk
rhmqxp.xjel.annie.ro
rlzdeztn.qwfd.edima.cl
rpbegtyg.fnce.vives.cl
rrghqvl.zwve.laepp.ch
rxopnsz.fudp.rread.uk
rxqpvbi.lpcl.taran.ro
smfegcuaf.lqjp.moadi.ir
swesqidi.ymia.monii.ch
tazqlo.krxv.drogu.es
tckrdl.yshk.elita.si
tfbmwz.pesm.diehl.fi
udxfruug.bgdc.t-hp.com
ueino.qrsm.luene.ch
unogfge.ymia.monii.ch
uwchuhl.oikr.infer.cl
vgsvvyzca.mvfr.devel.ro
vitzqghy.krxv.drogu.es
vrmql.oaok.rupj.net
wbfbi.oaok.rupj.net
wgymstsc.bbqd.kasan.se
wkgxol.qciq.gecko.rs
wvpveb.yshk.elita.si
wvqpzgfcd.bpmy.10086.uk
xfyfiufs.yshk.elita.si
xhypqsng.ymia.monii.ch
xszcnjq.dsnn.lapin.li
xxfmevrd.bwjs.araex.ch
ybqvvr.lqjp.moadi.ir
zaubud.bwjs.araex.ch
zdozlvmss.dsnn.lapin.li
zlzbelbi.cgrc.hi38.org
zveguso.oikr.infer.cl
zwqcdmq.qciq.gecko.rs

Other certificates including the domain name annie.ro

(limited to 100 certificates)

Certificate

The complete raw certificate details for abwamz.xjel.annie.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qb8D+jUStNQcoMVejD9
3t1wr+KiaTl4hE/1ra228YPb4YgkTRNOePYnD9zsxBiIrmahDWCGePAoK4582662
rvuZoGfBZKQd0rKwTSuwFlTwj+1Ey9+0sRW2pkjbT9M7Afn5CXdSsgvAuvM3pDzK
9KXuhOihQL0uNHH6OwNfMgu0Ls9PbuPTVK+/udw0EUSvKBGAfE6/LW8jqQN/KUV/
/NzOp89lp/StmpinlJEHxTeqW2dMw9Yeh0iBLama5A03Bdp4sAO+f2dXZdH3Sy/Y
JUPUTFhF1FA3/8T9vT9ns3mi9K2AqO5bjFS8JmzeQ4PzLF/5HCO/HHlxIVWRq7Zj
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320713775687649291742215665009815732152108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-05 07:00:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-03 07:00:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abwamz.xjel.annie.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26892203201156425492795720587224568821375055990840399467342960165144641023069322082338333206328919208467609372061780150360458964296857439696299777839934671816204526566804751047688007295308509043146855757330670481948919075846891048717235734526116742533991191720432292275617952958810200977932297028703248572777349506197249943589162068140521920521741293881871928556911719622017712170920455303997759233389483568515422712720255073901114852637268183975875766556218809018127419738025317089935060778473099362453261367307065190549706044238399150148785570572888981024272249753425812174171239666560732273094312136968937384862561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80350a2eeb5c9072d877526ac9265e5a011703e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abwamz.xjel.annie.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajkil.pesm.diehl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqxeeuqa.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asuiukc.yrih.sofat.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axjyj.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azpzmn.fnce.vives.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbfez.zwve.laepp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bujbmikoh.yrih.sofat.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctnbtw.pesm.diehl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyxzwkobh.bpmy.10086.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czvpyn.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dozhvuamg.lpcl.taran.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvxvdjz.qwfd.edima.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exfvb.zhaw.stpse.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbnvhka.oikr.infer.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flghehyf.apbn.stwoo.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frvobd.ctxf.tecon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fttshzbz.oikr.infer.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbcgilti.fudp.rread.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gglcq.ctxf.tecon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghsnko.junz.divus.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gqdtnyp.ctxf.tecon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsvfkcg.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbpbd.pesm.diehl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgkmwf.cgrc.hi38.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hklvujmm.xnsy.jemix.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrbxnpt.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibgzw.xnsy.jemix.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifedkqr.qwfd.edima.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipoegfll.xnsy.jemix.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsreo.bgdc.t-hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juglaoay.jnfr.serav.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jvjstjiwh.xfkc.lswce.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwwrhj.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jyg3.eu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khfdeynim.bezo.swiss.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kzzoqu.oikr.infer.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcfrn.pesm.diehl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldvyok.zhaw.stpse.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liaoq.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llsigtfj.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovmlxdzk.qrsm.luene.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbfek.krxv.drogu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgrkojg.junz.divus.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzsjni.jnfr.serav.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkcfdqv.cyme.sudol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnopbmxsy.famf.edisa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsvlnsro.oikr.infer.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odvbdr.ptqe.baerg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohvslkzj.cyme.sudol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozcetde.cpxn.ispif.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papdwrc.bezo.swiss.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbdovzyy.fudp.rread.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmyoeq.bwjs.araex.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmler.cyme.sudol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxuhtav.zhaw.stpse.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcwesnr.bbqd.kasan.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhudlxpiz.bwjs.araex.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qjzuvr.famf.edisa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qobtozgip.cpxn.ispif.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrivhozhy.zzbw.amiga.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauhcwd.apbn.stwoo.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhmqxp.xjel.annie.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlzdeztn.qwfd.edima.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpbegtyg.fnce.vives.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrghqvl.zwve.laepp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxopnsz.fudp.rread.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxqpvbi.lpcl.taran.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smfegcuaf.lqjp.moadi.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swesqidi.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tazqlo.krxv.drogu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tckrdl.yshk.elita.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfbmwz.pesm.diehl.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udxfruug.bgdc.t-hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ueino.qrsm.luene.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unogfge.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uwchuhl.oikr.infer.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vgsvvyzca.mvfr.devel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitzqghy.krxv.drogu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrmql.oaok.rupj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbfbi.oaok.rupj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgymstsc.bbqd.kasan.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wkgxol.qciq.gecko.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvpveb.yshk.elita.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvqpzgfcd.bpmy.10086.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfyfiufs.yshk.elita.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xhypqsng.ymia.monii.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xszcnjq.dsnn.lapin.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxfmevrd.bwjs.araex.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybqvvr.lqjp.moadi.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaubud.bwjs.araex.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdozlvmss.dsnn.lapin.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zlzbelbi.cgrc.hi38.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zveguso.oikr.infer.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwqcdmq.qciq.gecko.rs'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165091a5fce00000403004730450221008dac18b0781d9a67c952869d7ceb09f1388a0a69c09d6f6e26ba1ab250a8e8690220622c46c7881c65ffbb3069e554d6b9d627fccaac97607d658570f3733ebeeabb007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165091a5fdf0000040300483046022100941cf8eac31c3e53a42201b789ec081a568df0777157a04c92dfb8784831cfb702210087793424bc9ef6bee3d155b3602a4b41ea0dfea635a083db788efc9100ffb959
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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