thejigpuzzles.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:a2:67:e5:45:18:da:67:60:29:a4:e2:a0:c6:16:8a:c7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thejigpuzzles.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:a2:67:e5:45:18:da:67:60:29:a4:e2:a0:c6:16:8a:c7
Serial Number (int): 284691933137944375037996117785611563600583
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:89:a7:4a:b6:8d:b5:87:98:2b:84:62:8b:6a:55:42:74:34:86:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:dd:98:94:e9:b7:71:9e:29:83:cc:f9:e4:ad:74:e3:d5:63:b0:fe
Fingerprint (sha256): 2d:8e:f4:59:d5:25:2c:45:65:37:4d:72:50:35:92:bc:f0:f7:c5:f4:73:ff:c7:9e:21:0e:8e:3c:ca:65:2c:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thejigpuzzles.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thejigpuzzles.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adgcustomerfirst.com
*.agronorm.com
*.averatec.com
*.bittorrentsearch.com
*.bookofmormanthemusical.com
*.bristolsink.com
*.crookedest.com
*.crparts.com
*.dawnsflowershop.com
*.daytrading4profit.com
*.eltern-forum.com
*.epharmacyonline.com
*.flymyairnigeria.com
*.gameelle.com
*.goliveweb.com
*.hebrewteachers.com
*.highlandstablesne.com
*.hotel-torgon.com
*.ilets-simon.com
*.inayahotels.com
*.kroogerfeedback.com
*.lazybase.com
*.limeng.com
*.metrospecialtyasc.com
*.mhomeaway.com
*.mobiledvrhost.com
*.myelinicalworks.com
*.myjps.com
*.myscenedolls.com
*.nychadc.com
*.nynyrealestate.com
*.peninsulalight.com
*.perfektedamen.com
*.petsmarrt.com
*.pics4sex.com
*.poppiksi.com
*.prodogy.com
*.reaity.com
*.realworldeducation.com
*.riteaidpharmacies.com
*.seekingsrrangement.com
*.shpwtimeanytime.com
*.thejigpuzzles.com
*.tonyveiculos.com
*.trowepric.com
*.tyelec.com
*.unitedstaespostalservice.com
*.valoratucoche.com
*.witzair.com
*.wwwthaiflix.com
adgcustomerfirst.com
agronorm.com
averatec.com
bittorrentsearch.com
bookofmormanthemusical.com
bristolsink.com
crookedest.com
crparts.com
dawnsflowershop.com
daytrading4profit.com
eltern-forum.com
epharmacyonline.com
flymyairnigeria.com
gameelle.com
goliveweb.com
hebrewteachers.com
highlandstablesne.com
hotel-torgon.com
ilets-simon.com
inayahotels.com
kroogerfeedback.com
lazybase.com
limeng.com
metrospecialtyasc.com
mhomeaway.com
mobiledvrhost.com
myelinicalworks.com
myjps.com
myscenedolls.com
nychadc.com
nynyrealestate.com
peninsulalight.com
perfektedamen.com
petsmarrt.com
pics4sex.com
poppiksi.com
prodogy.com
reaity.com
realworldeducation.com
riteaidpharmacies.com
seekingsrrangement.com
shpwtimeanytime.com
thejigpuzzles.com
tonyveiculos.com
trowepric.com
tyelec.com
unitedstaespostalservice.com
valoratucoche.com
witzair.com
wwwthaiflix.com

Other certificates including the domain name thejigpuzzles.com

(limited to 100 certificates)
daylytrust.com
thejigpuzzles.com
ldstemplepics.com
yunecc.com
wwwmaxbet.com

Certificate

The complete raw certificate details for thejigpuzzles.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINvzCCDKegAwIBAgISA0SiZ+VFGNpnYCmk4qDGForHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDUxMjA5NDJaFw0y
MDAzMDQxMjA5NDJaMBwxGjAYBgNVBAMTEXRoZWppZ3B1enpsZXMuY29tMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyiQGuIRkFBMwTE0EtL70O3xgg3oB
9GuvrzAXXeeU6wywaHiAUf6+Tu9I7L/OIKqr40Vzqqc8nHoHmCB94AX1WfaEM91D
cv28MoWrLEqlbBdXKiHOCJ9mzRvnzrQmIQSfqqH6JulbLpfx0BAt2XFpwmHseiNf
H/tZECtYDEF/sem/wdzINs7XMAWrUjY8E8bIorPta/u0J8BH3ziWlVrzDpIWjjN/
n3jpl9fgk4JtsR4NV0Z4lJ1Pr2WXzeUIO6L+wCOTii7VLMnnM6EzjSOM0ro8UMjU
Ztxx2x1sYQRKLZwnsUforJI1tXSO0zkbXkwoGNc4ZUniqIAa4XOEYxzrb7QgSSj0
zFyWYzZy2SLPx291keSTBgvxRAE6AToGJW3YdWNIf+juOHZlkWohlyuGb1JhzN1N
+o3pZN39ShZlaqYJtklmP29XQt6JhiKkdvyi5SM97OpWiFd6zmfSSxLNLFwbrLuN
5hjBqWFiwVMB8qLxLM80wi4ZqreaD8XxKbq0lHuUy7E9tBS3/WPXg5w4ypXCG6x7
mtWmZsjQTxKnUUHg7BeU73xUBIK24ZsKYPCVQRd+RIeRGmkI6eBdrQqT2VMf937H
05CxYhVMLF2L3TcQ3owUlJxCVvdw0HpgMPNSIQRiwvMn63vC9c5mtDgxO7Db3+qc
MvrvtSRX8PHzPKkCAwEAAaOCCcswggnHMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
OomnSraNtYeYK4Rii2pVQnQ0hiQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzCCB38GA1UdEQSCB3YwggdyghYqLmFkZ2N1
c3RvbWVyZmlyc3QuY29tgg4qLmFncm9ub3JtLmNvbYIOKi5hdmVyYXRlYy5jb22C
FiouYml0dG9ycmVudHNlYXJjaC5jb22CHCouYm9va29mbW9ybWFudGhlbXVzaWNh
bC5jb22CESouYnJpc3RvbHNpbmsuY29tghAqLmNyb29rZWRlc3QuY29tgg0qLmNy
cGFydHMuY29tghUqLmRhd25zZmxvd2Vyc2hvcC5jb22CFyouZGF5dHJhZGluZzRw
cm9maXQuY29tghIqLmVsdGVybi1mb3J1bS5jb22CFSouZXBoYXJtYWN5b25saW5l
LmNvbYIVKi5mbHlteWFpcm5pZ2VyaWEuY29tgg4qLmdhbWVlbGxlLmNvbYIPKi5n
b2xpdmV3ZWIuY29tghQqLmhlYnJld3RlYWNoZXJzLmNvbYIXKi5oaWdobGFuZHN0
YWJsZXNuZS5jb22CEiouaG90ZWwtdG9yZ29uLmNvbYIRKi5pbGV0cy1zaW1vbi5j
b22CESouaW5heWFob3RlbHMuY29tghUqLmtyb29nZXJmZWVkYmFjay5jb22CDiou
bGF6eWJhc2UuY29tggwqLmxpbWVuZy5jb22CFyoubWV0cm9zcGVjaWFsdHlhc2Mu
Y29tgg8qLm1ob21lYXdheS5jb22CEyoubW9iaWxlZHZyaG9zdC5jb22CFSoubXll
bGluaWNhbHdvcmtzLmNvbYILKi5teWpwcy5jb22CEioubXlzY2VuZWRvbGxzLmNv
bYINKi5ueWNoYWRjLmNvbYIUKi5ueW55cmVhbGVzdGF0ZS5jb22CFCoucGVuaW5z
dWxhbGlnaHQuY29tghMqLnBlcmZla3RlZGFtZW4uY29tgg8qLnBldHNtYXJydC5j
b22CDioucGljczRzZXguY29tgg4qLnBvcHBpa3NpLmNvbYINKi5wcm9kb2d5LmNv
bYIMKi5yZWFpdHkuY29tghgqLnJlYWx3b3JsZGVkdWNhdGlvbi5jb22CFyoucml0
ZWFpZHBoYXJtYWNpZXMuY29tghgqLnNlZWtpbmdzcnJhbmdlbWVudC5jb22CFSou
c2hwd3RpbWVhbnl0aW1lLmNvbYITKi50aGVqaWdwdXp6bGVzLmNvbYISKi50b255
dmVpY3Vsb3MuY29tgg8qLnRyb3dlcHJpYy5jb22CDCoudHllbGVjLmNvbYIeKi51
bml0ZWRzdGFlc3Bvc3RhbHNlcnZpY2UuY29tghMqLnZhbG9yYXR1Y29jaGUuY29t
gg0qLndpdHphaXIuY29tghEqLnd3d3RoYWlmbGl4LmNvbYIUYWRnY3VzdG9tZXJm
aXJzdC5jb22CDGFncm9ub3JtLmNvbYIMYXZlcmF0ZWMuY29tghRiaXR0b3JyZW50
c2VhcmNoLmNvbYIaYm9va29mbW9ybWFudGhlbXVzaWNhbC5jb22CD2JyaXN0b2xz
aW5rLmNvbYIOY3Jvb2tlZGVzdC5jb22CC2NycGFydHMuY29tghNkYXduc2Zsb3dl
cnNob3AuY29tghVkYXl0cmFkaW5nNHByb2ZpdC5jb22CEGVsdGVybi1mb3J1bS5j
b22CE2VwaGFybWFjeW9ubGluZS5jb22CE2ZseW15YWlybmlnZXJpYS5jb22CDGdh
bWVlbGxlLmNvbYINZ29saXZld2ViLmNvbYISaGVicmV3dGVhY2hlcnMuY29tghVo
aWdobGFuZHN0YWJsZXNuZS5jb22CEGhvdGVsLXRvcmdvbi5jb22CD2lsZXRzLXNp
bW9uLmNvbYIPaW5heWFob3RlbHMuY29tghNrcm9vZ2VyZmVlZGJhY2suY29tggxs
YXp5YmFzZS5jb22CCmxpbWVuZy5jb22CFW1ldHJvc3BlY2lhbHR5YXNjLmNvbYIN
bWhvbWVhd2F5LmNvbYIRbW9iaWxlZHZyaG9zdC5jb22CE215ZWxpbmljYWx3b3Jr
cy5jb22CCW15anBzLmNvbYIQbXlzY2VuZWRvbGxzLmNvbYILbnljaGFkYy5jb22C
Em55bnlyZWFsZXN0YXRlLmNvbYIScGVuaW5zdWxhbGlnaHQuY29tghFwZXJmZWt0
ZWRhbWVuLmNvbYINcGV0c21hcnJ0LmNvbYIMcGljczRzZXguY29tggxwb3BwaWtz
aS5jb22CC3Byb2RvZ3kuY29tggpyZWFpdHkuY29tghZyZWFsd29ybGRlZHVjYXRp
b24uY29tghVyaXRlYWlkcGhhcm1hY2llcy5jb22CFnNlZWtpbmdzcnJhbmdlbWVu
dC5jb22CE3NocHd0aW1lYW55dGltZS5jb22CEXRoZWppZ3B1enpsZXMuY29tghB0
b255dmVpY3Vsb3MuY29tgg10cm93ZXByaWMuY29tggp0eWVsZWMuY29tghx1bml0
ZWRzdGFlc3Bvc3RhbHNlcnZpY2UuY29tghF2YWxvcmF0dWNvY2hlLmNvbYILd2l0
emFpci5jb22CD3d3d3RoYWlmbGl4LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2APCVpFnyANGCQBAtL5OI
jq1L/h1H45nh0DSmsKiqjrJzAAABbtYuM/AAAAQDAEcwRQIgAngl+jvLAkHNHiMI
cGd8lQ4qbhvVNx1Z6Q6avuH6ij4CIQDfztfl2i/lGPJcLbz7CYi9b43y4N+DyRJq
fzzcOE+i6AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbtYu
NCQAAAQDAEcwRQIgBikx12topf9K8jQNCXpI7eLcpzBiCkrueGZNfRXk+AECIQDg
uJMRq7r2v4sRsPPguZwpbKB4Hsxr8vX/ELnrtA2gADANBgkqhkiG9w0BAQsFAAOC
AQEAYJ01zGdgR7Qh/tuNMu+A2CjyIDZDz/rt6CnKY/WWCJqETk/FvrqezNw79W0u
rTRUih8qmID9siEXmboeoCu9Wy59PhllM4Scv1TQepil/FJOGv6L5bewHWJ1P2W/
uluHlv/FxuPkFpFbWLNJ3yDShDJzZv+kt0SxhF4YNXiu8c1hv0Y+M2wLyCcoxBHY
++f+m3zw1eFdEODfmO09eYqKOUzCY3Y5C58hEky4NnmzxZGNPmN0aL7wvrIHLOcl
L9UHI741E5RwSOZ3R7I7/9SC/C4wdYDYE1q0YC+pGxqO/ENGvIcaPAUwfrpkpH1W
jH9CR66nQS8eryPC+1s3OEKDxQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284691933137944375037996117785611563600583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 12:09:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 12:09:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thejigpuzzles.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824662220057949678071139353912170381631135910306546423842687894240495561600152042431639250416435934349202108778304173998066743974895038475081400836213036113865001546745047670545586296452774963491195302031230144030858518925206925604749903194815939761751713893756478018085346612436291798418861531526841052523889523890307038063873465821745609960427804716658621186779927490512927518256351132883674165718387545638605212206205145307099595897486222115328322134547268784319751439366907314019063728154612978126173319670854968631277555958764784479352564135146822957069656417616019517605736226445274015855320097049151504407176340801372977172585766847045697311755671696436210302351171128119337586363454016600585390100860912866154776070015068551446020750935203683500245463587951570257652693805426452785314565228604526258311306833532805184483781801699564079400699972004212102341828226818978715846128006240111963846763885282167651319900702515169911250301079492503163707717145050142770842526134206318114235787603170033795031592501314685347047049756781518806655176078355537520905002179421349132245718287439942504686063698309231545814309053590968388797695950646389906306891293713088924607144799022144129830898553531852036032243813136782811623616363689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a89a74ab68db587982b84628b6a554274348624
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adgcustomerfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agronorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.averatec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bittorrentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookofmormanthemusical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bristolsink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crookedest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dawnsflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daytrading4profit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eltern-forum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epharmacyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flymyairnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gameelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goliveweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hebrewteachers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highlandstablesne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotel-torgon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilets-simon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inayahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kroogerfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lazybase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.limeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrospecialtyasc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhomeaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobiledvrhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myelinicalworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myjps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myscenedolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nychadc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nynyrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peninsulalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfektedamen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petsmarrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pics4sex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poppiksi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prodogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reaity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realworldeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riteaidpharmacies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seekingsrrangement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shpwtimeanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thejigpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonyveiculos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trowepric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedstaespostalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valoratucoche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.witzair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwthaiflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adgcustomerfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agronorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averatec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bittorrentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookofmormanthemusical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bristolsink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crookedest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawnsflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daytrading4profit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eltern-forum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epharmacyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flymyairnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goliveweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hebrewteachers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandstablesne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-torgon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilets-simon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inayahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kroogerfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazybase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrospecialtyasc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhomeaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiledvrhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myelinicalworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myscenedolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nychadc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nynyrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsulalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfektedamen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petsmarrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pics4sex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poppiksi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reaity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realworldeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riteaidpharmacies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seekingsrrangement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shpwtimeanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thejigpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonyveiculos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trowepric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstaespostalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valoratucoche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witzair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwthaiflix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed62e33f000000403004730450220027825fa3bcb0241cd1e230870677c950e2a6e1bd5371d59e90e9abee1fa8a3e022100dfced7e5da2fe518f25c2dbcfb0988bd6f8df2e0df83c9126a7f3cdc384fa2e800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed62e342400000403004730450220062931d76b68a5ff4af2340d097a48ede2dca730620a4aee78664d7d15e4f801022100e0b89311abbaf6bf8b11b0f3e0b99c296ca0781ecc6bf2f5ff10b9ebb40da000
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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