foko.magson.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:eb:2f:c7:55:e7:e7:95:5a:50:6c:44:d4:4b:5d:e9:71 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foko.magson.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:eb:2f:c7:55:e7:e7:95:5a:50:6c:44:d4:4b:5d:e9:71
Serial Number (int): 299420817183472391696163768272896739109233
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:36:c4:56:f1:56:22:27:78:a5:8f:78:74:b6:c5:d7:e2:8d:ff:de
Fingerprint (sha256): 31:53:de:d3:6b:4e:47:10:aa:f0:f0:a9:01:0a:4b:e7:e0:5c:4f:c8:2a:de:37:61:ae:c0:d7:5c:5b:4e:f3:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate foko.magson.no

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foko.magson.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2018.m1studio.co
admin.cubid.asia
admin.vsaesoft.com
alessandrolioce.com
almgwary.com
ampstory.co.za
api.digitaldiary.app
app-showcase.agos.tech
app.farmart.co
arptowncar.com
auxcordkings.com
ayshacotterill.com
balobanov.com
changelog.tettra.co
console.infranetes.dev
contextlearning.app
coolnews.today
cycleday.trowbridge.tech
dashboard.smartsolutionservice.com
datapuppy.ai
dev.smartlive.dataauchan.fr
dezka.promyka.cz
drovak.smilebots.com
dulik.com.pl
exchange.youngplatform.com
fire.tazpool.com
firebase.invoice.pro
foko.magson.no
gift.trowbridge.tech
gru.io
hallvard.io
heyohana.com
invoicing.wexsel.com
jaundice.app
kyc-cloud.com
leonsarc.si
link-test.chilisoft.org
link.less.today
link.veracityprotocol.org
loggable.stream
lushthecontent.agency
lyrk.co.in
memes.trowbridge.tech
mise.tech
mykeiba.app
newbaby.app
node-atl.org
nrg.infocentre.app
onefan.io
oneteacher.com.br
pascon.app
pnch.xyz
professional.toothpic.com
retepmal.com
rollaball.otherg.com
securitycamera.cz
smartupol.cz
stage.colorcode.io
staging.augurbot.com
staging.leadertrip.at
submarinelabs.com
tgay.trowbridge.tech
tibukapp.com
tick.tushar.work
timeup.trowbridge.tech
tokyo2017.gdgjapan.org
tryapollo.com
web.appbrcomunique.infobrcorp.com.br
web.digitaldiary.app
www.arptowncar.com
www.arturocampos.pe
www.churchsite.in
www.decasa.be
www.dynamicdevs.io
www.emma.ai
www.eventit.com.br
www.jmjbower.com
www.kacamata.tech
www.kingdom.com.sa
www.krad.games
www.kyc-cloud.com
www.mountain-of-dreams.com
www.mrimoveislitoral.com.br
www.nextechnologies.eu
www.node-atl.org
www.novograd.app
www.onefan.io
www.onigiri.ie
www.pascon.app
www.pnch.xyz
www.pvaconsulting.be
www.rost30.space
www.swapmeet.rocks
www.tech-ladder.in
www.tibukapp.com
www.tourstartups.com
www.waitupgame.com
www.xn--arc-zza.si
xn--arc-zza.si
xn--retkell-cxa.fi

Other certificates including the domain name magson.no

(limited to 100 certificates)
app.wmsap.com
gaming.codemortals.com
www.magson.no
www.cafesanclemente.com.co
s.gotovo.kitchen
www.brazilpetrostudies.com.br
www.redyapp.com
www.slingui.com
www.magson.no
scrum.dev.magson.no
mariniere.petit-bateau.fr
wcpl.patelgopal.com
jlincolndennis.com
wygoda.net
www.educateapp.in
foko.magson.no
www.magson.no
foko.magson.no
go.beatme.org
foko.magson.no
foko.magson.no
sishya.kuzhal.in
scrum.magson.no
links.likeappro.com
www.wygoda.net
www.ddtools.app
wygoda.net
zello.page
app.inspirezone.co
staging.blockstack.clients.barefootcoders.com
www.sicc.coffee
a0hl.foodle.su
scrum.magson.no
control.asmbly.app
www.fitfinityai.com
www.brazilpetrostudies.com.br
o-hire.com
myloopinc.com
irabako.bibicoart.com
scrum.magson.no
steph-and-peter.com
chessexpert.io
admin.teetra.com
sengjea.net
preptimeapp.com
www.sysdev.co.za
samspisnad.no
scrum.magson.no
hp.etraderex.com
dev.planeci.com
scrum.magson.no
scrum.magson.no
editor.bitwiser.in
www.magson.no
waiterboard.dinify.app
www.magson.no
app.vaskerum.dk
www.magson.no
auth.fundingfinder.com.au
www.hisabkitab.in
raasbekkie.co.za
napontadolapis.app
www.magson.no
treepto.com
scrum.magson.no
wcpl.patelgopal.com
www.slingui.com
www.lithiumplus.co
www.magson.no
webadmin.kinver.no
app.cciarroyito.com.ar
www.lesspod.com
dev-360s.athum.com
tripposal.com
project-opus.ml
web.augle.me
jlincolndennis.com
webadmin.kinver.no
scrum.magson.no
www.magson.no
miningprogram.com
app.blaze.moxiera.com
danfecreatives.com
www.magson.no
order2.pluginweb.qa3.paymytable.com
villekuhlman.com
magson.no
www.sicc.coffee
dashboard.carson.ca

Certificate

The complete raw certificate details for foko.magson.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMuDCCC6CgAwIBAgISA2/rL8dV5+eVWlBsRNRLXelxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTMxOTM0MjFaFw0y
MDA0MTIxOTM0MjFaMBkxFzAVBgNVBAMTDmZva28ubWFnc29uLm5vMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8+lZQQURKMcDF
8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTbCxmGnpoRCJxi
K05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN6Yb/Z6wb/EnE
3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1wSIaAuzYgsbs
IAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws9MDqkuMuCpje
BuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbAowIDAQABo4IJ
xzCCCcMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ/Jhh9QzYDkzmdu0qfbNwVbZxb
gDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMIIHewYDVR0RBIIHcjCCB26CEDIwMTgubTFzdHVkaW8uY2+CEGFkbWluLmN1
YmlkLmFzaWGCEmFkbWluLnZzYWVzb2Z0LmNvbYITYWxlc3NhbmRyb2xpb2NlLmNv
bYIMYWxtZ3dhcnkuY29tgg5hbXBzdG9yeS5jby56YYIUYXBpLmRpZ2l0YWxkaWFy
eS5hcHCCFmFwcC1zaG93Y2FzZS5hZ29zLnRlY2iCDmFwcC5mYXJtYXJ0LmNvgg5h
cnB0b3duY2FyLmNvbYIQYXV4Y29yZGtpbmdzLmNvbYISYXlzaGFjb3R0ZXJpbGwu
Y29tgg1iYWxvYmFub3YuY29tghNjaGFuZ2Vsb2cudGV0dHJhLmNvghZjb25zb2xl
LmluZnJhbmV0ZXMuZGV2ghNjb250ZXh0bGVhcm5pbmcuYXBwgg5jb29sbmV3cy50
b2RheYIYY3ljbGVkYXkudHJvd2JyaWRnZS50ZWNogiJkYXNoYm9hcmQuc21hcnRz
b2x1dGlvbnNlcnZpY2UuY29tggxkYXRhcHVwcHkuYWmCG2Rldi5zbWFydGxpdmUu
ZGF0YWF1Y2hhbi5mcoIQZGV6a2EucHJvbXlrYS5jeoIUZHJvdmFrLnNtaWxlYm90
cy5jb22CDGR1bGlrLmNvbS5wbIIaZXhjaGFuZ2UueW91bmdwbGF0Zm9ybS5jb22C
EGZpcmUudGF6cG9vbC5jb22CFGZpcmViYXNlLmludm9pY2UucHJvgg5mb2tvLm1h
Z3Nvbi5ub4IUZ2lmdC50cm93YnJpZGdlLnRlY2iCBmdydS5pb4ILaGFsbHZhcmQu
aW+CDGhleW9oYW5hLmNvbYIUaW52b2ljaW5nLndleHNlbC5jb22CDGphdW5kaWNl
LmFwcIINa3ljLWNsb3VkLmNvbYILbGVvbnNhcmMuc2mCF2xpbmstdGVzdC5jaGls
aXNvZnQub3Jngg9saW5rLmxlc3MudG9kYXmCGWxpbmsudmVyYWNpdHlwcm90b2Nv
bC5vcmeCD2xvZ2dhYmxlLnN0cmVhbYIVbHVzaHRoZWNvbnRlbnQuYWdlbmN5ggps
eXJrLmNvLmlughVtZW1lcy50cm93YnJpZGdlLnRlY2iCCW1pc2UudGVjaIILbXlr
ZWliYS5hcHCCC25ld2JhYnkuYXBwggxub2RlLWF0bC5vcmeCEm5yZy5pbmZvY2Vu
dHJlLmFwcIIJb25lZmFuLmlvghFvbmV0ZWFjaGVyLmNvbS5icoIKcGFzY29uLmFw
cIIIcG5jaC54eXqCGXByb2Zlc3Npb25hbC50b290aHBpYy5jb22CDHJldGVwbWFs
LmNvbYIUcm9sbGFiYWxsLm90aGVyZy5jb22CEXNlY3VyaXR5Y2FtZXJhLmN6ggxz
bWFydHVwb2wuY3qCEnN0YWdlLmNvbG9yY29kZS5pb4IUc3RhZ2luZy5hdWd1cmJv
dC5jb22CFXN0YWdpbmcubGVhZGVydHJpcC5hdIIRc3VibWFyaW5lbGFicy5jb22C
FHRnYXkudHJvd2JyaWRnZS50ZWNoggx0aWJ1a2FwcC5jb22CEHRpY2sudHVzaGFy
LndvcmuCFnRpbWV1cC50cm93YnJpZGdlLnRlY2iCFnRva3lvMjAxNy5nZGdqYXBh
bi5vcmeCDXRyeWFwb2xsby5jb22CJHdlYi5hcHBicmNvbXVuaXF1ZS5pbmZvYnJj
b3JwLmNvbS5icoIUd2ViLmRpZ2l0YWxkaWFyeS5hcHCCEnd3dy5hcnB0b3duY2Fy
LmNvbYITd3d3LmFydHVyb2NhbXBvcy5wZYIRd3d3LmNodXJjaHNpdGUuaW6CDXd3
dy5kZWNhc2EuYmWCEnd3dy5keW5hbWljZGV2cy5pb4ILd3d3LmVtbWEuYWmCEnd3
dy5ldmVudGl0LmNvbS5icoIQd3d3LmptamJvd2VyLmNvbYIRd3d3LmthY2FtYXRh
LnRlY2iCEnd3dy5raW5nZG9tLmNvbS5zYYIOd3d3LmtyYWQuZ2FtZXOCEXd3dy5r
eWMtY2xvdWQuY29tghp3d3cubW91bnRhaW4tb2YtZHJlYW1zLmNvbYIbd3d3Lm1y
aW1vdmVpc2xpdG9yYWwuY29tLmJyghZ3d3cubmV4dGVjaG5vbG9naWVzLmV1ghB3
d3cubm9kZS1hdGwub3JnghB3d3cubm92b2dyYWQuYXBwgg13d3cub25lZmFuLmlv
gg53d3cub25pZ2lyaS5pZYIOd3d3LnBhc2Nvbi5hcHCCDHd3dy5wbmNoLnh5eoIU
d3d3LnB2YWNvbnN1bHRpbmcuYmWCEHd3dy5yb3N0MzAuc3BhY2WCEnd3dy5zd2Fw
bWVldC5yb2Nrc4ISd3d3LnRlY2gtbGFkZGVyLmlughB3d3cudGlidWthcHAuY29t
ghR3d3cudG91cnN0YXJ0dXBzLmNvbYISd3d3LndhaXR1cGdhbWUuY29tghJ3d3cu
eG4tLWFyYy16emEuc2mCDnhuLS1hcmMtenphLnNpghJ4bi0tcmV0a2VsbC1jeGEu
ZmkwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW+g
nU1UAAAEAwBGMEQCIG3rfPMqdoklUsu2d13FS/EAR9CdwW2iihCXGRAwvzovAiBc
ird5CX6GW8Ggjo+TcWNGXifKurP/F1CxB7jYQozaewB3AAe3XBvlfWj/8bDGHSMV
x7rmV3xXlLdq7rxhOhpp06IcAAABb6CdTVIAAAQDAEgwRgIhAIOWix6XMtzvQZ1u
4VYw5DLnIM5nB26lK8olQwOKgqnRAiEA2PwBtFjyUYoVaGiYNXNBb55JLLjV+lHQ
TldorpPGQhwwDQYJKoZIhvcNAQELBQADggEBAHbemPwGZqFsFo+x1jnxdQgBXrED
lCYsZ7jgywl6rzOSmSioANquG5Z3gc4FKICruQkp2R7vqlOuiFuFX9p874xW0aza
uRoc7ZwxS9Lq0XwRq+chZq4tq109uR+ps6pV+lulKTZm7Wq/b/UpD1doFGsHHImd
ADoatX5iRoAuTmoAR+IucQQH8ixmqynSjbJ1qiQZmNM+RaFAL3kUChp217ZPOCHb
nXKboCAIHLgZ5EsVtZDFp/EnPGgmj6GKMCP3dOJHgk+pAo9SrkR7oiLQCSBwqI68
PDDNO3nr+/py9cWuOgKXWvAeyZmeO5Xhlhrrj6ObUdH8NbBT5lPy96Zvv5o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299420817183472391696163768272896739109233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 19:34:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 19:34:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foko.magson.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1906 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018.m1studio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cubid.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vsaesoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alessandrolioce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almgwary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampstory.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.digitaldiary.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-showcase.agos.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.farmart.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arptowncar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auxcordkings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayshacotterill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balobanov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changelog.tettra.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.infranetes.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contextlearning.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolnews.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycleday.trowbridge.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.smartsolutionservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datapuppy.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.smartlive.dataauchan.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dezka.promyka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drovak.smilebots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dulik.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.youngplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.tazpool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.invoice.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foko.magson.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift.trowbridge.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gru.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallvard.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyohana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoicing.wexsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaundice.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyc-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonsarc.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-test.chilisoft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.less.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.veracityprotocol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loggable.stream'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lushthecontent.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyrk.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memes.trowbridge.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mise.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykeiba.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbaby.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'node-atl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrg.infocentre.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onefan.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneteacher.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pascon.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnch.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professional.toothpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retepmal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollaball.otherg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitycamera.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartupol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.colorcode.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.augurbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.leadertrip.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'submarinelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgay.trowbridge.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tibukapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tick.tushar.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeup.trowbridge.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyo2017.gdgjapan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryapollo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.appbrcomunique.infobrcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.digitaldiary.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arptowncar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arturocampos.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchsite.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decasa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynamicdevs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emma.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventit.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmjbower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kacamata.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdom.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krad.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyc-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountain-of-dreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrimoveislitoral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextechnologies.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.node-atl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novograd.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onefan.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onigiri.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pascon.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pnch.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvaconsulting.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rost30.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swapmeet.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tech-ladder.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tibukapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourstartups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitupgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--arc-zza.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--arc-zza.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--retkell-cxa.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fa09d4d54000004030046304402206deb7cf32a76892552cbb6775dc54bf10047d09dc16da28a1097191030bf3a2f02205c8ab779097e865bc1a08e8f937163465e27cabab3ff1750b107b8d8428cda7b00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa09d4d52000004030048304602210083968b1e9732dcef419d6ee15630e432e720ce67076ea52bca2543038a82a9d1022100d8fc01b458f2518a156868983573416f9e492cb8d5fa51d04e5768ae93c6421c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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