lumicom.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:81:df:53:c1:03:a1:d0:bc:04:5a:86:4c:5e:2b:fd:af was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lumicom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:81:df:53:c1:03:a1:d0:bc:04:5a:86:4c:5e:2b:fd:af
Serial Number (int): 286350100572897111733012412628783998959023
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:14:9d:00:cf:15:f4:c8:11:8f:f7:fc:2b:df:c3:5f:ce:7b:ea:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:4a:85:ca:d6:07:63:42:cf:e9:37:24:4a:1c:05:ae:7f:67:2b:6b
Fingerprint (sha256): 1f:cc:05:ac:22:b8:bb:7d:19:ef:0a:8e:47:23:b3:d1:54:9a:46:e1:d9:7e:d5:04:dc:e2:bd:d0:35:ff:df:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lumicom.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lumicom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aircraftdonation.com
american-travel.com
applethink.com
articlebin.com
azonam.com
brokeask.com
cl-k.com
clarinetesadlibitum.com
cleangel.com
crankpro.com
debttrapeducation.com
desisti.com
epbco.com
fjdco.com
hellion.com
homessocal.com
hotelzi.com
hrmon.com
inigojovenfilm.com
jetskiscabo.com
jointpainwisconsin.com
josephfinancial.com
kinderball.com
kitocoin.com
lockoftheweek.com
lumicom.com
malignantmesotheliomapleural.com
mcalesterdental.com
mesainn.com
moneybath.com
moneystreak.com
neomel.com
net-learn.com
ngkco.com
nrcco.com
pierredental.com
pilotnavigation.com
polytask.com
radcliffdental.com
septoclean.com
softdock.com
solarval.com
stocksecuredloan.com
streetturn.com
supfilm.com
suzannehall.com
thespanishdoll.com
vofco.com
whlco.com
wldco.com
www.aircraftdonation.com
www.american-travel.com
www.applethink.com
www.articlebin.com
www.azonam.com
www.brokeask.com
www.cl-k.com
www.clarinetesadlibitum.com
www.cleangel.com
www.crankpro.com
www.debttrapeducation.com
www.desisti.com
www.epbco.com
www.fjdco.com
www.hellion.com
www.homessocal.com
www.hotelzi.com
www.hrmon.com
www.inigojovenfilm.com
www.jetskiscabo.com
www.jointpainwisconsin.com
www.josephfinancial.com
www.kinderball.com
www.kitocoin.com
www.lockoftheweek.com
www.lumicom.com
www.malignantmesotheliomapleural.com
www.mcalesterdental.com
www.mesainn.com
www.moneybath.com
www.moneystreak.com
www.neomel.com
www.net-learn.com
www.ngkco.com
www.nrcco.com
www.pierredental.com
www.pilotnavigation.com
www.polytask.com
www.radcliffdental.com
www.septoclean.com
www.softdock.com
www.solarval.com
www.stocksecuredloan.com
www.streetturn.com
www.supfilm.com
www.suzannehall.com
www.thespanishdoll.com
www.vofco.com
www.whlco.com
www.wldco.com

Other certificates including the domain name lumicom.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lumicom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMWzCCC0OgAwIBAgISA0mB31PBA6HQvARahkxeK/2vMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDQxNDI0MTNaFw0x
OTExMDIxNDI0MTNaMBYxFDASBgNVBAMTC2x1bWljb20uY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1eAeIolSg+dDNI2CJpltYrvOxYqHvq6KBzG
avGueo4jDu9MHze7urBcnxmiGVGj2edb8W878Qrb7I5D+Ev0wDXmdfTNZH/fvLhb
53WgeBQgy8Hxp6mzvaIcgkpxkIDmjdb71g7Ojf3f9ekx9z2VZNW5Hbg3nlvKlAE3
98Taud20CEnY13RDnSm6Jljx+bKeOfPRG5/oo7uRLYEBZdNlqu4zIohM/4XyVbco
J0qDv1jweRnGitUqDB5p1iqb80355pq0+sbvQY6FyAa6+TsEuWDN74iiUVG0RAgl
G5O0nz6bq2IIwSQw4BOb0YT29AAfs697EkdN7fbTWenBeDAjZQIDAQABo4IJbTCC
CWkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQaFJ0AzxX0yBGP9/wr38Nfznvq2zAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIHIQYDVR0RBIIHGDCCBxSCFGFpcmNyYWZ0ZG9uYXRpb24uY29tghNhbWVyaWNh
bi10cmF2ZWwuY29tgg5hcHBsZXRoaW5rLmNvbYIOYXJ0aWNsZWJpbi5jb22CCmF6
b25hbS5jb22CDGJyb2tlYXNrLmNvbYIIY2wtay5jb22CF2NsYXJpbmV0ZXNhZGxp
Yml0dW0uY29tggxjbGVhbmdlbC5jb22CDGNyYW5rcHJvLmNvbYIVZGVidHRyYXBl
ZHVjYXRpb24uY29tggtkZXNpc3RpLmNvbYIJZXBiY28uY29tgglmamRjby5jb22C
C2hlbGxpb24uY29tgg5ob21lc3NvY2FsLmNvbYILaG90ZWx6aS5jb22CCWhybW9u
LmNvbYISaW5pZ29qb3ZlbmZpbG0uY29tgg9qZXRza2lzY2Fiby5jb22CFmpvaW50
cGFpbndpc2NvbnNpbi5jb22CE2pvc2VwaGZpbmFuY2lhbC5jb22CDmtpbmRlcmJh
bGwuY29tggxraXRvY29pbi5jb22CEWxvY2tvZnRoZXdlZWsuY29tggtsdW1pY29t
LmNvbYIgbWFsaWduYW50bWVzb3RoZWxpb21hcGxldXJhbC5jb22CE21jYWxlc3Rl
cmRlbnRhbC5jb22CC21lc2Fpbm4uY29tgg1tb25leWJhdGguY29tgg9tb25leXN0
cmVhay5jb22CCm5lb21lbC5jb22CDW5ldC1sZWFybi5jb22CCW5na2NvLmNvbYIJ
bnJjY28uY29tghBwaWVycmVkZW50YWwuY29tghNwaWxvdG5hdmlnYXRpb24uY29t
ggxwb2x5dGFzay5jb22CEnJhZGNsaWZmZGVudGFsLmNvbYIOc2VwdG9jbGVhbi5j
b22CDHNvZnRkb2NrLmNvbYIMc29sYXJ2YWwuY29tghRzdG9ja3NlY3VyZWRsb2Fu
LmNvbYIOc3RyZWV0dHVybi5jb22CC3N1cGZpbG0uY29tgg9zdXphbm5laGFsbC5j
b22CEnRoZXNwYW5pc2hkb2xsLmNvbYIJdm9mY28uY29tggl3aGxjby5jb22CCXds
ZGNvLmNvbYIYd3d3LmFpcmNyYWZ0ZG9uYXRpb24uY29tghd3d3cuYW1lcmljYW4t
dHJhdmVsLmNvbYISd3d3LmFwcGxldGhpbmsuY29tghJ3d3cuYXJ0aWNsZWJpbi5j
b22CDnd3dy5hem9uYW0uY29tghB3d3cuYnJva2Vhc2suY29tggx3d3cuY2wtay5j
b22CG3d3dy5jbGFyaW5ldGVzYWRsaWJpdHVtLmNvbYIQd3d3LmNsZWFuZ2VsLmNv
bYIQd3d3LmNyYW5rcHJvLmNvbYIZd3d3LmRlYnR0cmFwZWR1Y2F0aW9uLmNvbYIP
d3d3LmRlc2lzdGkuY29tgg13d3cuZXBiY28uY29tgg13d3cuZmpkY28uY29tgg93
d3cuaGVsbGlvbi5jb22CEnd3dy5ob21lc3NvY2FsLmNvbYIPd3d3LmhvdGVsemku
Y29tgg13d3cuaHJtb24uY29tghZ3d3cuaW5pZ29qb3ZlbmZpbG0uY29tghN3d3cu
amV0c2tpc2NhYm8uY29tghp3d3cuam9pbnRwYWlud2lzY29uc2luLmNvbYIXd3d3
Lmpvc2VwaGZpbmFuY2lhbC5jb22CEnd3dy5raW5kZXJiYWxsLmNvbYIQd3d3Lmtp
dG9jb2luLmNvbYIVd3d3LmxvY2tvZnRoZXdlZWsuY29tgg93d3cubHVtaWNvbS5j
b22CJHd3dy5tYWxpZ25hbnRtZXNvdGhlbGlvbWFwbGV1cmFsLmNvbYIXd3d3Lm1j
YWxlc3RlcmRlbnRhbC5jb22CD3d3dy5tZXNhaW5uLmNvbYIRd3d3Lm1vbmV5YmF0
aC5jb22CE3d3dy5tb25leXN0cmVhay5jb22CDnd3dy5uZW9tZWwuY29tghF3d3cu
bmV0LWxlYXJuLmNvbYINd3d3Lm5na2NvLmNvbYINd3d3Lm5yY2NvLmNvbYIUd3d3
LnBpZXJyZWRlbnRhbC5jb22CF3d3dy5waWxvdG5hdmlnYXRpb24uY29tghB3d3cu
cG9seXRhc2suY29tghZ3d3cucmFkY2xpZmZkZW50YWwuY29tghJ3d3cuc2VwdG9j
bGVhbi5jb22CEHd3dy5zb2Z0ZG9jay5jb22CEHd3dy5zb2xhcnZhbC5jb22CGHd3
dy5zdG9ja3NlY3VyZWRsb2FuLmNvbYISd3d3LnN0cmVldHR1cm4uY29tgg93d3cu
c3VwZmlsbS5jb22CE3d3dy5zdXphbm5laGFsbC5jb22CFnd3dy50aGVzcGFuaXNo
ZG9sbC5jb22CDXd3dy52b2Zjby5jb22CDXd3dy53aGxjby5jb22CDXd3dy53bGRj
by5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAA
AWxdOyc5AAAEAwBHMEUCIQCGQ6V81/TuLKt0DyAUBqkxvKWFK+8mzFi8XOLoASxY
mAIgbqGLulwogyb21twKiLL0FcF1qXmCMEgm66Tln4vB2fwAdgBj8tvN6DvMLM8L
coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWxdOylKAAAEAwBHMEUCIAUFvoG7Z3W+
PJABgKRaiy7iqKVye+tV4nHxg38zjoPBAiEAy71vnQSn9PTYt1F8P9nn/Swxvf1F
xZWAa8TQmfucN4gwDQYJKoZIhvcNAQELBQADggEBAAkT0HOQmIgKP3MjUuZZfAT2
ENL7u0eNbzmkUmmvn6L1I1n9D++g27pAwBTniyJpoqh4SuE6eNkIJ/uuBxCpxPi/
RltqUTu+U58tblVtspox4ch04737QaI5qquMoqZjoPqq2SWeGiYhBEsPZyPyNd17
L3SLTx8KxCb1j+dWYtNl75SJbrXcx0FFN3Ed6QdPuscygcY548bifERVqyO4k92K
TmkKuN5CBrlRaPoM8Y3y7OyWWTv5FMv6qy8z3ysp1P5HvofZE2SlNWXxGL+7OB5D
FRtk47MzPwD+N3XiJQbUstvmh8UU4zASGEOKvprThqNvSRgKC2eOhPDzLDs07Ik=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1eAeIolSg+dDNI2CJpl
tYrvOxYqHvq6KBzGavGueo4jDu9MHze7urBcnxmiGVGj2edb8W878Qrb7I5D+Ev0
wDXmdfTNZH/fvLhb53WgeBQgy8Hxp6mzvaIcgkpxkIDmjdb71g7Ojf3f9ekx9z2V
ZNW5Hbg3nlvKlAE398Taud20CEnY13RDnSm6Jljx+bKeOfPRG5/oo7uRLYEBZdNl
qu4zIohM/4XyVbcoJ0qDv1jweRnGitUqDB5p1iqb80355pq0+sbvQY6FyAa6+TsE
uWDN74iiUVG0RAglG5O0nz6bq2IIwSQw4BOb0YT29AAfs697EkdN7fbTWenBeDAj
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286350100572897111733012412628783998959023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 14:24:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 14:24:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lumicom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23144758573918540058544777496023977002643120840616440283299440826204099831181216820589048188611210811983669636951969425412203102422103362904553719601609865457643049725477361627491146939142645104205487662557661340789415627084986919722634237400405639285106917822186810861632034532251215412518359490954217746125105947711987644148666077672725986798930321051152493725938790309865128976018680108900879098092915287102763359364373579059601683883769294788142359605428633625149302566360171653217327000547408420207907687765278799645949379727566490924800427994511417975524837314318724651944327844213504441724266731439018973602661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a149d00cf15f4c8118ff7fc2bdfc35fce7beadb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1816 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircraftdonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'american-travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applethink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articlebin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azonam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokeask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl-k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarinetesadlibitum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crankpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debttrapeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desisti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epbco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fjdco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homessocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inigojovenfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetskiscabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainwisconsin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinderball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitocoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockoftheweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malignantmesotheliomapleural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcalesterdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesainn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneybath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneystreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neomel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net-learn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrcco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pierredental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotnavigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polytask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radcliffdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'septoclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softdock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocksecuredloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetturn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suzannehall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespanishdoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vofco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wldco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aircraftdonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.american-travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applethink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.articlebin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azonam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokeask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cl-k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarinetesadlibitum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crankpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.debttrapeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desisti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epbco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fjdco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homessocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inigojovenfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetskiscabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainwisconsin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josephfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinderball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitocoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockoftheweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malignantmesotheliomapleural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcalesterdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesainn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneybath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneystreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neomel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.net-learn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nrcco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pierredental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilotnavigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polytask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radcliffdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.septoclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softdock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stocksecuredloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streetturn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suzannehall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespanishdoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vofco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whlco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wldco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c5d3b273900000403004730450221008643a57cd7f4ee2cab740f201406a931bca5852bef26cc58bc5ce2e8012c589802206ea18bba5c288326f6d6dc0a88b2f415c175a97982304826eba4e59f8bc1d9fc00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c5d3b294a000004030047304502200505be81bb6775be3c900180a45a8b2ee2a8a5727beb55e271f1837f338e83c1022100cbbd6f9d04a7f4f4d8b7517c3fd9e7fd2c31bdfd45c595806bc4d099fb9c3788
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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