bnk10barcelona.cat

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:01:a3:20:00:7e:0a:66:cf:38:8a:61:c7:56:bd:bd:96 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bnk10barcelona.cat

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:01:a3:20:00:7e:0a:66:cf:38:8a:61:c7:56:bd:bd:96
Serial Number (int): 288561623370415658112571092023647877840278
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:d5:a4:d4:ef:89:6b:f2:8c:bc:d5:7c:24:b5:a8:0b:c6:da:db:a6
Fingerprint (sha256): 26:a8:11:8d:f4:37:63:54:f5:1c:3a:2f:71:b4:eb:f7:31:1c:30:dd:50:f2:4d:da:49:25:4c:63:9a:a0:c9:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bnk10barcelona.cat

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnk10barcelona.cat

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

12daysofar.orangelv.com
2ww.cemsina.com
admin1.choosebyloxam.com
anatoliyruss.com
antonio-zamudio.com
app.apodly.com
app.getvire.com
app.m-a-promo.com
app.smartidgroup.com
aqua-host.cf
auth.nucamp.co
avenew.tokyo
backonearth.ch
bageltracker.com
bakersandbrothers.com
beta.blocksurvey.org
bnc10barcelona.eu
bnk10.com
bnk10.eu
bnk10barcelona.cat
bnk10barcelona.com
bnk10barcelona.es
bssd.impactwrap.com
calendar.countit.hr
canweseethemoon.com
cao-huisartsenzorg.appdashboard.nl
console.connectsx.com
cryokinesis.co
demo.12inspect.com
dev.colomboycolombo.feriaganadera.com.ar
devprimetools.com
doanyrun.com
dogear.samkuhlmann.com
drafteq.com
dsp.audio
fazendasavenda.com.br
firebase.getlaptracker.com
func.frombrands.com
griff-demo.cogniteapp.com
grupohexagon.com
invoice.payfunnels.co
killer.brunoshiroma.com
kraken-testing.bigsquid.com
lucidfrontier.com
me.cole.la
minutiamobile.com
mitsukeru.work
mystoryteller.co
neolent.com
nextstudios.co
pangeabank.be
parceiro.guiadoop.com.br
planetexpress.dlabs.xyz
portfolio-library.com
porton-bitsion.arielretamar.com
postinspect.userjoy.co
recently.co
scruffy.dlabs.xyz
siteandsee.com
smartlink.despertarsabiendo.com
solitr.com
spotterpowerlifting.com
stage.threshold.co
superduperfonts.apptget.com
tctsl-cis.dev-ltl-xpo.com
techaula.techpark.net.br
tntax.co.uk
tv.astrologytv.co.in
upconf.originalhat.com
vvorld.in
www.88chinapa8088.com
www.antonio-zamudio.com
www.backonearth.ch
www.bitoftrust.be
www.blackearth.in
www.briandchandler.com
www.bukrut.com
www.cameronjfife.com
www.cannawat.ch
www.caresignal.jp
www.cashaji.com
www.consulfinco.com
www.cryokinesis.co
www.doomeet.app
www.drinkersedition.com
www.fazendasavenda.com.br
www.hiranidiamond.com
www.jackpantalena.com
www.kapputo.com
www.ling8.co
www.memorii.jp
www.pangeabank.be
www.prixbit.com
www.pyprestro.com
www.redshepardsoftware.com
www.relllo.com
www.sahinhukuk.org
www.saigon.casa
www.scrumpokertable.com
www.skinseedapp.com

Other certificates including the domain name bnk10barcelona.cat

(limited to 100 certificates)
www.diaryhomework.app
bnk10barcelona.cat
geolocation.rayrok.com
eduardodistribuidoraapp.meuspedidos.online
app.appy.town
42problems.com
bnk10barcelona.cat
www.bnk10barcelona.cat
dev.colomboycolombo.feriaganadera.com.ar
bnk10.com

Certificate

The complete raw certificate details for bnk10barcelona.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINQTCCDCmgAwIBAgISA1ABoyAAfgpmzziKYcdWvb2WMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDcwMTUwNTFaFw0y
MDAzMDYwMTUwNTFaMB0xGzAZBgNVBAMTEmJuazEwYmFyY2Vsb25hLmNhdDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANgh0Zbm0IRcawhJIDdB/PpWUEFE
SjHAxfEEP2ZXQGTWRB6aZLFtd+YoxJvvCJyZ9/A63kLez+UHgzgwDmsE2wsZhp6a
EQicYitOarN3d04aof1D6Sx4RY3o59/nqEaKqQSrHtbX/9ZlqJdTlvdUTemG/2es
G/xJxN2fOE2OKmb2Zf6nkGKi70agvtm4JQTH9LcqKpWpFan+u4J6oMobtcEiGgLs
2ILG7CACcvgAp4sPGfM2QD2E/7/2YYLTsLUM4b4UPOLRvzOufNeEMT9VrPTA6pLj
LgqY3gbk5Kc/ppT+P5Mtfe1xJwPh6cQ+0gGD9WA4apiShIQQftbckjHGwKMCAwEA
AaOCCkwwggpIMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUPyYYfUM2A5M5nbtKn2zc
FW2cW4AwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCB/4GA1UdEQSCB/UwggfxghcxMmRheXNvZmFyLm9yYW5nZWx2LmNv
bYIPMnd3LmNlbXNpbmEuY29tghhhZG1pbjEuY2hvb3NlYnlsb3hhbS5jb22CEGFu
YXRvbGl5cnVzcy5jb22CE2FudG9uaW8temFtdWRpby5jb22CDmFwcC5hcG9kbHku
Y29tgg9hcHAuZ2V0dmlyZS5jb22CEWFwcC5tLWEtcHJvbW8uY29tghRhcHAuc21h
cnRpZGdyb3VwLmNvbYIMYXF1YS1ob3N0LmNmgg5hdXRoLm51Y2FtcC5jb4IMYXZl
bmV3LnRva3lvgg5iYWNrb25lYXJ0aC5jaIIQYmFnZWx0cmFja2VyLmNvbYIVYmFr
ZXJzYW5kYnJvdGhlcnMuY29tghRiZXRhLmJsb2Nrc3VydmV5Lm9yZ4IRYm5jMTBi
YXJjZWxvbmEuZXWCCWJuazEwLmNvbYIIYm5rMTAuZXWCEmJuazEwYmFyY2Vsb25h
LmNhdIISYm5rMTBiYXJjZWxvbmEuY29tghFibmsxMGJhcmNlbG9uYS5lc4ITYnNz
ZC5pbXBhY3R3cmFwLmNvbYITY2FsZW5kYXIuY291bnRpdC5ocoITY2Fud2VzZWV0
aGVtb29uLmNvbYIiY2FvLWh1aXNhcnRzZW56b3JnLmFwcGRhc2hib2FyZC5ubIIV
Y29uc29sZS5jb25uZWN0c3guY29tgg5jcnlva2luZXNpcy5jb4ISZGVtby4xMmlu
c3BlY3QuY29tgihkZXYuY29sb21ib3ljb2xvbWJvLmZlcmlhZ2FuYWRlcmEuY29t
LmFyghFkZXZwcmltZXRvb2xzLmNvbYIMZG9hbnlydW4uY29tghZkb2dlYXIuc2Ft
a3VobG1hbm4uY29tggtkcmFmdGVxLmNvbYIJZHNwLmF1ZGlvghVmYXplbmRhc2F2
ZW5kYS5jb20uYnKCGmZpcmViYXNlLmdldGxhcHRyYWNrZXIuY29tghNmdW5jLmZy
b21icmFuZHMuY29tghlncmlmZi1kZW1vLmNvZ25pdGVhcHAuY29tghBncnVwb2hl
eGFnb24uY29tghVpbnZvaWNlLnBheWZ1bm5lbHMuY2+CF2tpbGxlci5icnVub3No
aXJvbWEuY29tghtrcmFrZW4tdGVzdGluZy5iaWdzcXVpZC5jb22CEWx1Y2lkZnJv
bnRpZXIuY29tggptZS5jb2xlLmxhghFtaW51dGlhbW9iaWxlLmNvbYIObWl0c3Vr
ZXJ1LndvcmuCEG15c3Rvcnl0ZWxsZXIuY2+CC25lb2xlbnQuY29tgg5uZXh0c3R1
ZGlvcy5jb4INcGFuZ2VhYmFuay5iZYIYcGFyY2Vpcm8uZ3VpYWRvb3AuY29tLmJy
ghdwbGFuZXRleHByZXNzLmRsYWJzLnh5eoIVcG9ydGZvbGlvLWxpYnJhcnkuY29t
gh9wb3J0b24tYml0c2lvbi5hcmllbHJldGFtYXIuY29tghZwb3N0aW5zcGVjdC51
c2Vyam95LmNvggtyZWNlbnRseS5jb4IRc2NydWZmeS5kbGFicy54eXqCDnNpdGVh
bmRzZWUuY29tgh9zbWFydGxpbmsuZGVzcGVydGFyc2FiaWVuZG8uY29tggpzb2xp
dHIuY29tghdzcG90dGVycG93ZXJsaWZ0aW5nLmNvbYISc3RhZ2UudGhyZXNob2xk
LmNvghtzdXBlcmR1cGVyZm9udHMuYXBwdGdldC5jb22CGXRjdHNsLWNpcy5kZXYt
bHRsLXhwby5jb22CGHRlY2hhdWxhLnRlY2hwYXJrLm5ldC5icoILdG50YXguY28u
dWuCFHR2LmFzdHJvbG9neXR2LmNvLmlughZ1cGNvbmYub3JpZ2luYWxoYXQuY29t
ggl2dm9ybGQuaW6CFXd3dy44OGNoaW5hcGE4MDg4LmNvbYIXd3d3LmFudG9uaW8t
emFtdWRpby5jb22CEnd3dy5iYWNrb25lYXJ0aC5jaIIRd3d3LmJpdG9mdHJ1c3Qu
YmWCEXd3dy5ibGFja2VhcnRoLmlughZ3d3cuYnJpYW5kY2hhbmRsZXIuY29tgg53
d3cuYnVrcnV0LmNvbYIUd3d3LmNhbWVyb25qZmlmZS5jb22CD3d3dy5jYW5uYXdh
dC5jaIIRd3d3LmNhcmVzaWduYWwuanCCD3d3dy5jYXNoYWppLmNvbYITd3d3LmNv
bnN1bGZpbmNvLmNvbYISd3d3LmNyeW9raW5lc2lzLmNvgg93d3cuZG9vbWVldC5h
cHCCF3d3dy5kcmlua2Vyc2VkaXRpb24uY29tghl3d3cuZmF6ZW5kYXNhdmVuZGEu
Y29tLmJyghV3d3cuaGlyYW5pZGlhbW9uZC5jb22CFXd3dy5qYWNrcGFudGFsZW5h
LmNvbYIPd3d3LmthcHB1dG8uY29tggx3d3cubGluZzguY2+CDnd3dy5tZW1vcmlp
LmpwghF3d3cucGFuZ2VhYmFuay5iZYIPd3d3LnByaXhiaXQuY29tghF3d3cucHlw
cmVzdHJvLmNvbYIad3d3LnJlZHNoZXBhcmRzb2Z0d2FyZS5jb22CDnd3dy5yZWxs
bG8uY29tghJ3d3cuc2FoaW5odWt1ay5vcmeCD3d3dy5zYWlnb24uY2FzYYIXd3d3
LnNjcnVtcG9rZXJ0YWJsZS5jb22CE3d3dy5za2luc2VlZGFwcC5jb20wTAYDVR0g
BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIA
dwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW7eRFg6AAAEAwBI
MEYCIQCkN3j1qCWxZRI9k0cen0TNmNeBQ83zpRxHm69LBLQkSQIhAIXukMI4HRRD
RTNwsK+21nTOnaR/9p+u2kboilpA407MAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeU
t2ruvGE6GmnTohwAAAFu3kRYPAAABAMASDBGAiEAic01L2+YtTdyJb1l4qS/XG3i
DlwPMecAKxCnryk4QOsCIQCgcUp7AZLsDTmMRHRgYyIpy5SIE/Ispig9EZcFSDwB
FzANBgkqhkiG9w0BAQsFAAOCAQEAh4npXyt5ZvGFi6rcB+AMKSZAMORLcHEclygt
cyol5e1DoCcAIXJ/p0FFAJ5o6TJM/+94vf/r842Ek5qSwhrWfkfpWNjB8rgJtmab
xencPuuEfrf2wK6zJBiR2xWH81pGR3BlIGDGr/MK6M6I2pOLnsgrSDKpa1oNvFoq
kAvjyLC7/pISE5wWSfjvz+7P5IEjbV5J0XVi8WOq1fLnEfUJ1NR8pdhQGT/+NK21
YImnACo1rBJSOvpL96WpQsTngGT+aRkajBOlWFANMMRaJsUc4LW/6235smK0V9vh
50XzirrT7FKt8L1AsW7pzczEkreffYtkPFxVbHzAiu38OzbkoQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288561623370415658112571092023647877840278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 01:50:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 01:50:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnk10barcelona.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2037 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12daysofar.orangelv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2ww.cemsina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1.choosebyloxam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anatoliyruss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antonio-zamudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.apodly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getvire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.m-a-promo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.smartidgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua-host.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.nucamp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avenew.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backonearth.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bageltracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersandbrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.blocksurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnc10barcelona.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnk10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnk10.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnk10barcelona.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnk10barcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnk10barcelona.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bssd.impactwrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.countit.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canweseethemoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cao-huisartsenzorg.appdashboard.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.connectsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryokinesis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.12inspect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.colomboycolombo.feriaganadera.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devprimetools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doanyrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogear.samkuhlmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drafteq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsp.audio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fazendasavenda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.getlaptracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'func.frombrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griff-demo.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupohexagon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.payfunnels.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'killer.brunoshiroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraken-testing.bigsquid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucidfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.cole.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minutiamobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitsukeru.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystoryteller.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neolent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextstudios.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pangeabank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceiro.guiadoop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetexpress.dlabs.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-library.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porton-bitsion.arielretamar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postinspect.userjoy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recently.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scruffy.dlabs.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteandsee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartlink.despertarsabiendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotterpowerlifting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.threshold.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superduperfonts.apptget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tctsl-cis.dev-ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techaula.techpark.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntax.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.astrologytv.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upconf.originalhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvorld.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.88chinapa8088.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antonio-zamudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backonearth.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitoftrust.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackearth.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briandchandler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bukrut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cameronjfife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannawat.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caresignal.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashaji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consulfinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryokinesis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doomeet.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drinkersedition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fazendasavenda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiranidiamond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackpantalena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapputo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ling8.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memorii.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pangeabank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prixbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pyprestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redshepardsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.relllo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahinhukuk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saigon.casa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrumpokertable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skinseedapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ede44583a0000040300483046022100a43778f5a825b165123d93471e9f44cd98d78143cdf3a51c479baf4b04b4244902210085ee90c2381d1443453370b0afb6d674ce9da47ff69faeda46e88a5a40e34ecc00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ede44583c000004030048304602210089cd352f6f98b5377225bd65e2a4bf5c6de20e5c0f31e7002b10a7af293840eb022100a0714a7b0192ec0d398c447460632229cb948813f22ca6283d119705483c0117
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008789e95f2b7966f1858baadc07e00c29264030e44b70711c97282d732a25e5ed43a0270021727fa74145009e68e9324cffef78bdffebf38d84939a92c21ad67e47e958d8c1f2b809b6669bc5e9dc3eeb847eb7f6c0aeb3241891db1587f35a464770652060c6aff30ae8ce88da938b9ec82b4832a96b5a0dbc5a2a900be3c8b0bbfe9212139c1649f8efcfeecfe481236d5e49d17562f163aad5f2e711f509d4d47ca5d850193ffe34adb56089a7002a35ac12523afa4bf7a5a942c4e78064fe69191a8c13a558500d30c45a26c51ce0b5bfeb6df9b262b457dbe1e745f38abad3ec52adf0bd40b16ee9cdccc492b79f7d8b643c5c556c7cc08aedfc3b36e4a1