www.shopbrandroots.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d9:a3:e3:85:21:77:98:f2:78:0d:c3:76:e2:8f:99:25:86 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.shopbrandroots.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:a3:e3:85:21:77:98:f2:78:0d:c3:76:e2:8f:99:25:86
Serial Number (int): 335395976932036235471142486216525976511878
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:c9:45:ff:5d:58:60:97:64:8c:fa:35:3a:5e:34:89:70:3c:f0:34
Fingerprint (sha256): 31:32:1f:6e:a2:88:85:02:14:a5:9a:c4:a2:f8:e4:12:f6:7a:31:42:c1:11:2c:82:d2:5d:a1:17:a8:0d:4e:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.shopbrandroots.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shopbrandroots.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.www.higashifukami-high.school
aftabfarooq.tech
aiegfeedback.online
api.azsco.com
api.staging.onyxandrose.com
app.always.fit
app.rmherramientas.com.ar
app.wisemaintenance.pt
auth.fleato.com
auth.mercamio.com
auth.saucycollective.com
auth.transcribekit.com
auth1.rereceipt.cc
authrgseeddev.revyrie.co
bhushanjoshi.site
brettspill.xn--nrd-yla.no
calcula.girosv.com
card-ar.fr
caseoheist.modelclubbit.com
cdn.chatfully.io
cloud.mineiros.go.gov.br
codaptive.io
console.barbeacon.co.uk
consultaira.tech
convert.routenote.com
demo-app.qonic.com
dev.adamshealthnetwork.org
eatswap.in
eldrly.ch
erika.clevelandmetroschools.org
europe.visenze.com
fidoo.me
gatekeeper.nickradford.dev
gspdua.com
jdsz.idappstudio.com
josemariavivas.com
joum.com.co
link.offsuit.app
link.rituals.com
linkedinclass.obumnwabude.com
lokalimoveis.com.br
mahakoshalsetu.com
mdaqqa.com
mesomission.fieldmuseum.org
mezbanresturant.com
modules.davidsepulveda.xyz
nashvillesites.org
panarastudio.com
paulanails.com
powerbridgepk.com
profipromo.pl
raqamshase.com
rektwife.xyz
reputation.optiscorer.com
s.emed.com
seketikaproject.com
sipcalculatorr.com
solarix.mx
status.leisureking.eu
tlp.anvarat.com
vep.businessriver.tv
viverdefotovoltaico.com.br
weather.app.5ls.de
wish.kempf.dev
www.aiegfeedback.online
www.alienpunkmfers.com
www.bhushanjoshi.site
www.cursoreact.es
www.dave-becker.com
www.deusdemissoes.com
www.dorachan.com
www.elecbuytn.com
www.erika.clevelandmetroschools.org
www.get-credit.link
www.ipsapl.com
www.joum.com.co
www.mahakoshalsetu.com
www.mapicon.jp
www.miranasolutions.com
www.nashvillesites.org
www.qriositynet.xyz
www.sahyogherbals.com
www.sailcourier.com
www.shopbrandroots.com
www.todo-odonto.com.ar
www.tryecommysteryshoppers.com
www.webled.online
www.xn--bagedikli-12b.com
www.xn--hlsapanderberg-5hbu.se
www.xn--perckenwerkstatt-lzb.de
xn----8sbb4ajr0aig.xn--p1acf
xn--bagedikli-12b.com
xn--bj4bl1ah1efdb23w62s46a.com
xn--btvakten-9za.no
xn--dengladehvel-3jb.no
xn--hjrntorget-r5a.se
xn--pernillashlsa-kfb.se
xn--smgodtappen-y8a.no
xn--tdk.xn--0dk.co
yustit.galaxyben.com

Other certificates including the domain name shopbrandroots.com

(limited to 100 certificates)
www.drawgazer.com
actnow.cheerity.com
www.shopbrandroots.com
www.zambina.org
easetrac.blackflux.in
dl.darwin.work
jellyjam.io
caid.nissul.com
powergita.com
shopbrandroots.com
caid.nissul.com

Certificate

The complete raw certificate details for www.shopbrandroots.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINXjCCDEagAwIBAgISA9mj44Uhd5jyeA3DduKPmSWGMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDkxMTI5MjFaFw0yNDA0MDgxMTI5MjBaMCExHzAdBgNVBAMT
Fnd3dy5zaG9wYnJhbmRyb290cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCq2zTJ4uANYulcbyxEHaJDwiPfPMQt2foPoTEJAiRQcYK/oe7CX1Dw
8gheyJnJq36JJC9CEFn3BIdhi5gVa9cO3UrGPUA04oVYORZa+IL3NZ2F1oo92VjO
0Il5w36cCusY+fokeimM8aumgLI2rk4dc3KcUYG1+/Rod8+bfvVj95StpQ50QEMy
Vfe2g5zKEguVmeNCHoaV0RX02wZ3PkA9D8XPCfCO+m3ho8kdU9oIX0AaQDSXhg76
qrvsny2+r538Ncux0PO7/MeHJmsXIgNrwLnH5zCHw/aiG0Nzli8uDgmGcbKkiNj+
/Ezjpk6WGrUF0QiQXj0tBslZYPleVVRVAgMBAAGjggp9MIIKeTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFCFFwjusTCzra0+158niw2rRvbPCMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIIIhAYDVR0RBIIIezCCCHeCI2FkbWluLnd3dy5oaWdhc2hpZnVr
YW1pLWhpZ2guc2Nob29sghBhZnRhYmZhcm9vcS50ZWNoghNhaWVnZmVlZGJhY2su
b25saW5lgg1hcGkuYXpzY28uY29tghthcGkuc3RhZ2luZy5vbnl4YW5kcm9zZS5j
b22CDmFwcC5hbHdheXMuZml0ghlhcHAucm1oZXJyYW1pZW50YXMuY29tLmFyghZh
cHAud2lzZW1haW50ZW5hbmNlLnB0gg9hdXRoLmZsZWF0by5jb22CEWF1dGgubWVy
Y2FtaW8uY29tghhhdXRoLnNhdWN5Y29sbGVjdGl2ZS5jb22CFmF1dGgudHJhbnNj
cmliZWtpdC5jb22CEmF1dGgxLnJlcmVjZWlwdC5jY4IYYXV0aHJnc2VlZGRldi5y
ZXZ5cmllLmNvghFiaHVzaGFuam9zaGkuc2l0ZYIZYnJldHRzcGlsbC54bi0tbnJk
LXlsYS5ub4ISY2FsY3VsYS5naXJvc3YuY29tggpjYXJkLWFyLmZyghtjYXNlb2hl
aXN0Lm1vZGVsY2x1YmJpdC5jb22CEGNkbi5jaGF0ZnVsbHkuaW+CGGNsb3VkLm1p
bmVpcm9zLmdvLmdvdi5icoIMY29kYXB0aXZlLmlvghdjb25zb2xlLmJhcmJlYWNv
bi5jby51a4IQY29uc3VsdGFpcmEudGVjaIIVY29udmVydC5yb3V0ZW5vdGUuY29t
ghJkZW1vLWFwcC5xb25pYy5jb22CGmRldi5hZGFtc2hlYWx0aG5ldHdvcmsub3Jn
ggplYXRzd2FwLmluggllbGRybHkuY2iCH2VyaWthLmNsZXZlbGFuZG1ldHJvc2No
b29scy5vcmeCEmV1cm9wZS52aXNlbnplLmNvbYIIZmlkb28ubWWCGmdhdGVrZWVw
ZXIubmlja3JhZGZvcmQuZGV2ggpnc3BkdWEuY29tghRqZHN6LmlkYXBwc3R1ZGlv
LmNvbYISam9zZW1hcmlhdml2YXMuY29tggtqb3VtLmNvbS5jb4IQbGluay5vZmZz
dWl0LmFwcIIQbGluay5yaXR1YWxzLmNvbYIdbGlua2VkaW5jbGFzcy5vYnVtbndh
YnVkZS5jb22CE2xva2FsaW1vdmVpcy5jb20uYnKCEm1haGFrb3NoYWxzZXR1LmNv
bYIKbWRhcXFhLmNvbYIbbWVzb21pc3Npb24uZmllbGRtdXNldW0ub3JnghNtZXpi
YW5yZXN0dXJhbnQuY29tghptb2R1bGVzLmRhdmlkc2VwdWx2ZWRhLnh5eoISbmFz
aHZpbGxlc2l0ZXMub3JnghBwYW5hcmFzdHVkaW8uY29tgg5wYXVsYW5haWxzLmNv
bYIRcG93ZXJicmlkZ2Vway5jb22CDXByb2ZpcHJvbW8ucGyCDnJhcWFtc2hhc2Uu
Y29tggxyZWt0d2lmZS54eXqCGXJlcHV0YXRpb24ub3B0aXNjb3Jlci5jb22CCnMu
ZW1lZC5jb22CE3Nla2V0aWthcHJvamVjdC5jb22CEnNpcGNhbGN1bGF0b3JyLmNv
bYIKc29sYXJpeC5teIIVc3RhdHVzLmxlaXN1cmVraW5nLmV1gg90bHAuYW52YXJh
dC5jb22CFHZlcC5idXNpbmVzc3JpdmVyLnR2ghp2aXZlcmRlZm90b3ZvbHRhaWNv
LmNvbS5icoISd2VhdGhlci5hcHAuNWxzLmRlgg53aXNoLmtlbXBmLmRldoIXd3d3
LmFpZWdmZWVkYmFjay5vbmxpbmWCFnd3dy5hbGllbnB1bmttZmVycy5jb22CFXd3
dy5iaHVzaGFuam9zaGkuc2l0ZYIRd3d3LmN1cnNvcmVhY3QuZXOCE3d3dy5kYXZl
LWJlY2tlci5jb22CFXd3dy5kZXVzZGVtaXNzb2VzLmNvbYIQd3d3LmRvcmFjaGFu
LmNvbYIRd3d3LmVsZWNidXl0bi5jb22CI3d3dy5lcmlrYS5jbGV2ZWxhbmRtZXRy
b3NjaG9vbHMub3JnghN3d3cuZ2V0LWNyZWRpdC5saW5rgg53d3cuaXBzYXBsLmNv
bYIPd3d3LmpvdW0uY29tLmNvghZ3d3cubWFoYWtvc2hhbHNldHUuY29tgg53d3cu
bWFwaWNvbi5qcIIXd3d3Lm1pcmFuYXNvbHV0aW9ucy5jb22CFnd3dy5uYXNodmls
bGVzaXRlcy5vcmeCE3d3dy5xcmlvc2l0eW5ldC54eXqCFXd3dy5zYWh5b2doZXJi
YWxzLmNvbYITd3d3LnNhaWxjb3VyaWVyLmNvbYIWd3d3LnNob3BicmFuZHJvb3Rz
LmNvbYIWd3d3LnRvZG8tb2RvbnRvLmNvbS5hcoIed3d3LnRyeWVjb21teXN0ZXJ5
c2hvcHBlcnMuY29tghF3d3cud2VibGVkLm9ubGluZYIZd3d3LnhuLS1iYWdlZGlr
bGktMTJiLmNvbYIed3d3LnhuLS1obHNhcGFuZGVyYmVyZy01aGJ1LnNlgh93d3cu
eG4tLXBlcmNrZW53ZXJrc3RhdHQtbHpiLmRlghx4bi0tLS04c2JiNGFqcjBhaWcu
eG4tLXAxYWNmghV4bi0tYmFnZWRpa2xpLTEyYi5jb22CHnhuLS1iajRibDFhaDFl
ZmRiMjN3NjJzNDZhLmNvbYITeG4tLWJ0dmFrdGVuLTl6YS5ub4IXeG4tLWRlbmds
YWRlaHZlbC0zamIubm+CFXhuLS1oanJudG9yZ2V0LXI1YS5zZYIYeG4tLXBlcm5p
bGxhc2hsc2Eta2ZiLnNlghZ4bi0tc21nb2R0YXBwZW4teThhLm5vghJ4bi0tdGRr
LnhuLS0wZGsuY2+CFHl1c3RpdC5nYWxheHliZW4uY29tMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAO1N3dT4tuYBOizBbBv5A
O2fYT8P0x70ADS1yb+H61BcAAAGM7jLicAAABAMARzBFAiBpB2HeopojPmJGSavC
KXDRrOUbS84huvzlZCHxfuo08gIhAMVc30P526BquwQLLsR6giMBoUJOQrCDLHR2
KIOtNXsqAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGM7jLi
sQAABAMARzBFAiAvKmwx91dlhHZtw52zrVT3zVKGJTd1YCHzv+3db+0yMQIhAKKx
WLvH6Kkkn9mmwdQpTq/AAupxf7DfDxkbR7LJM6eWMA0GCSqGSIb3DQEBCwUAA4IB
AQB+h+LfUHrpHfaeAIpQuLuHi6bkJonQc0FpbOG1//FdGwXmyMabSe+RVR1sQC0/
tV/34syILPzrsJ8fAa/eBWDEESJYkbwo6scpnLtSYEy5yBn+QDMFBkXJcn7mvs3m
V0C8/SszwieL4qiBYJ2N4A0SqF6ppMX8l/cwt60WZ2q1QiLai2yQTSGoOQWrT8Xm
3TC981P+1Ak24dniKkWfcpMGoK57lzvvAfTM2s4rj9BBGU8fBv+QYZT8BgvMLGTl
aEEhnCyJ8VFnQUqQIC2xqUoZJVCjsiH71umBslblm0W1rY+YLZOxYbrhsGxYL/Bn
7NgoGhsAbraMyAB69mX/m3rZ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335395976932036235471142486216525976511878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 11:29:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 11:29:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shopbrandroots.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.www.higashifukami-high.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aftabfarooq.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiegfeedback.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.azsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.onyxandrose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.always.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rmherramientas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.wisemaintenance.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.fleato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mercamio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.saucycollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.transcribekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth1.rereceipt.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authrgseeddev.revyrie.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhushanjoshi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brettspill.xn--nrd-yla.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcula.girosv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card-ar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caseoheist.modelclubbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.chatfully.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.mineiros.go.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codaptive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.barbeacon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultaira.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convert.routenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-app.qonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.adamshealthnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatswap.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldrly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erika.clevelandmetroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.visenze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidoo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatekeeper.nickradford.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gspdua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdsz.idappstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josemariavivas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joum.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.offsuit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkedinclass.obumnwabude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lokalimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahakoshalsetu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdaqqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesomission.fieldmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mezbanresturant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modules.davidsepulveda.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashvillesites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panarastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulanails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbridgepk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profipromo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raqamshase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rektwife.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reputation.optiscorer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.emed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seketikaproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipcalculatorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarix.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.leisureking.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlp.anvarat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vep.businessriver.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viverdefotovoltaico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.app.5ls.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wish.kempf.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiegfeedback.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alienpunkmfers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhushanjoshi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cursoreact.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dave-becker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deusdemissoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dorachan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elecbuytn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erika.clevelandmetroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.get-credit.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipsapl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joum.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahakoshalsetu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapicon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miranasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nashvillesites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qriositynet.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahyogherbals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopbrandroots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todo-odonto.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tryecommysteryshoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webled.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bagedikli-12b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--hlsapanderberg-5hbu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--perckenwerkstatt-lzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----8sbb4ajr0aig.xn--p1acf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bagedikli-12b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bj4bl1ah1efdb23w62s46a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--btvakten-9za.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dengladehvel-3jb.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hjrntorget-r5a.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pernillashlsa-kfb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--smgodtappen-y8a.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tdk.xn--0dk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yustit.galaxyben.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cee32e27000000403004730450220690761dea29a233e624649abc22970d1ace51b4bce21bafce56421f17eea34f2022100c55cdf43f9dba06abb040b2ec47a822301a1424e42b0832c74762883ad357b2a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cee32e2b1000004030047304502202f2a6c31f7576584766dc39db3ad54f7cd52862537756021f3bfeddd6fed3231022100a2b158bbc7e8a9249fd9a6c1d4294eafc002ea717fb0df0f191b47b2c933a796
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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