www.facilitymsg.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a1:96:a5:e6:62:03:4d:ca:61:74:77:ea:d5:d9:1d:dd:f5 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.facilitymsg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:96:a5:e6:62:03:4d:ca:61:74:77:ea:d5:d9:1d:dd:f5
Serial Number (int): 403434850402381066095908621500722412641781
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:28:1d:a1:cc:ed:3f:12:bc:a3:5f:05:06:50:ee:63:94:f4:2d:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:a1:4b:0f:dc:88:ad:db:a7:46:1c:3f:a0:d0:bb:9b:50:72:bb:b1
Fingerprint (sha256): 36:1b:68:8d:a4:48:fe:19:be:db:56:13:5e:30:4c:28:a6:e7:b1:4c:39:9b:88:ee:2c:1d:32:67:ac:04:47:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.facilitymsg.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.facilitymsg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2d.bricscad-deutschland.de
3d.bricscad-deutschland.de
app.bricscad-deutschland.de
architektur.bricscad-deutschland.de
bim.bricscad-deutschland.de
bimworld.bricscad-deutschland.de
blech.bricscad-deutschland.de
bricsys-conference.bricscad-deutschland.de
cad-software.bricscad-deutschland.de
cad.bricscad-deutschland.de
cloud.bricscad-deutschland.de
elektro.bricscad-deutschland.de
fh.bricscad-deutschland.de
gis.bricscad-deutschland.de
intergeo.bricscad-deutschland.de
msr-software.tric.de
msr.tric.de
studenten.bricscad-deutschland.de
www.5616technologies.com
www.aeroofing.ca
www.ajbody.ca
www.ammanagement.ca
www.appadtize.com
www.appleautobody.ca
www.asafootballagent.com
www.autobahnautobody.com
www.beagle14.com
www.bellwoodautobody.com
www.captainawesomereno.com
www.celltexcollision.com
www.christinejamessalon.co.uk
www.closetworld.co
www.cryptosenyal.cat
www.dialinvestors.com
www.donbeck.ca
www.elvispawn.ca
www.extremeautobody.biz
www.eyscleaning.com
www.facilitymsg.com
www.heytheremomma.com
www.horizonpaint.ca
www.innoterra.ca
www.jacksautobodyrestorationinc.com
www.juicylucysburgercompany.co.uk
www.konstipakki.fi
www.kthremovals.co.uk
www.launchpdh.com
www.lifestyleretailservices.co.za
www.liikkua.de
www.livingsenses.co.za
www.macleodsplumbing.ca
www.maletasshop.cl
www.managedmediasolutions.com
www.massagehaveninc.com
www.millenniumcontracting.ca
www.moraycollision.ca
www.nowofill.com
www.omegacoatingshouston.com
www.popowsbodyshop.com
www.popowstowing.com
www.provincialautoregina.com
www.pure-pes.com
www.rbpaintandbody.com
www.scottcogas.com
www.segwayguidedtours.co.za
www.signageworld.co.za
www.skylinetax.ca
www.smittysautopaintsofhemet.com
www.tarapachecobeauty.com
www.tedsautobody.ca
www.treeamigolandscaping.com
www.webuildbrandz.com
www.westernmechanics.com

Other certificates including the domain name facilitymsg.com

(limited to 100 certificates)
facilitymsg.com
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
www.facilitymsg.com
facilitymsg.com
www.treeamigolandscaping.com
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
facilitymsg.com
2d.bricscad-deutschland.de
2d.bricscad-deutschland.de
intergeo.bricscad-deutschland.de
facilitymsg.com
www.captainawesomereno.com

Certificate

The complete raw certificate details for www.facilitymsg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMljCCC36gAwIBAgISBKGWpeZiA03KYXR36tXZHd31MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDIwMDI1MTZaFw0y
MDAxMzEwMDI1MTZaMB4xHDAaBgNVBAMTE3d3dy5mYWNpbGl0eW1zZy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2AviAhiaYJxraMpT8lCsZn2u
g044/2wc38lfiuGL4MXbCxF7FC1EFw1GrAR26BanC3PjsDNpSJWh+zn2H988uwgB
8cyzTdpgMqBmr5CBk4XNWQ+Mio8guop9krShD1oLRt8DGyKjofPsMr4ViQstGomH
Q+MOM3/VSK6Zn8zG82PkCQ1qJv7xQ8NtvUXqPELnCujeO3LC+KzFmO955jfVybJs
LyC1QdXOmw2DkVw6HUqt7IiDtC0ZiP+ghcixVvF2mtZq+/5GSTzOMDrHV9IWSItN
5/ecvGpDewoFVhoXodB/e2+1UZeOorahBKlUl3/Nc3VzKVqSldZlWVV0bzzbAgMB
AAGjggmgMIIJnDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFP0oHaHM7T8SvKNfBQZQ
7mOU9C2aMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggdVBgNVHREEggdMMIIHSIIaMmQuYnJpY3NjYWQtZGV1dHNjaGxh
bmQuZGWCGjNkLmJyaWNzY2FkLWRldXRzY2hsYW5kLmRlghthcHAuYnJpY3NjYWQt
ZGV1dHNjaGxhbmQuZGWCI2FyY2hpdGVrdHVyLmJyaWNzY2FkLWRldXRzY2hsYW5k
LmRlghtiaW0uYnJpY3NjYWQtZGV1dHNjaGxhbmQuZGWCIGJpbXdvcmxkLmJyaWNz
Y2FkLWRldXRzY2hsYW5kLmRlgh1ibGVjaC5icmljc2NhZC1kZXV0c2NobGFuZC5k
ZYIqYnJpY3N5cy1jb25mZXJlbmNlLmJyaWNzY2FkLWRldXRzY2hsYW5kLmRlgiRj
YWQtc29mdHdhcmUuYnJpY3NjYWQtZGV1dHNjaGxhbmQuZGWCG2NhZC5icmljc2Nh
ZC1kZXV0c2NobGFuZC5kZYIdY2xvdWQuYnJpY3NjYWQtZGV1dHNjaGxhbmQuZGWC
H2VsZWt0cm8uYnJpY3NjYWQtZGV1dHNjaGxhbmQuZGWCGmZoLmJyaWNzY2FkLWRl
dXRzY2hsYW5kLmRlghtnaXMuYnJpY3NjYWQtZGV1dHNjaGxhbmQuZGWCIGludGVy
Z2VvLmJyaWNzY2FkLWRldXRzY2hsYW5kLmRlghRtc3Itc29mdHdhcmUudHJpYy5k
ZYILbXNyLnRyaWMuZGWCIXN0dWRlbnRlbi5icmljc2NhZC1kZXV0c2NobGFuZC5k
ZYIYd3d3LjU2MTZ0ZWNobm9sb2dpZXMuY29tghB3d3cuYWVyb29maW5nLmNhgg13
d3cuYWpib2R5LmNhghN3d3cuYW1tYW5hZ2VtZW50LmNhghF3d3cuYXBwYWR0aXpl
LmNvbYIUd3d3LmFwcGxlYXV0b2JvZHkuY2GCGHd3dy5hc2Fmb290YmFsbGFnZW50
LmNvbYIYd3d3LmF1dG9iYWhuYXV0b2JvZHkuY29tghB3d3cuYmVhZ2xlMTQuY29t
ghh3d3cuYmVsbHdvb2RhdXRvYm9keS5jb22CGnd3dy5jYXB0YWluYXdlc29tZXJl
bm8uY29tghh3d3cuY2VsbHRleGNvbGxpc2lvbi5jb22CHXd3dy5jaHJpc3RpbmVq
YW1lc3NhbG9uLmNvLnVrghJ3d3cuY2xvc2V0d29ybGQuY2+CFHd3dy5jcnlwdG9z
ZW55YWwuY2F0ghV3d3cuZGlhbGludmVzdG9ycy5jb22CDnd3dy5kb25iZWNrLmNh
ghB3d3cuZWx2aXNwYXduLmNhghd3d3cuZXh0cmVtZWF1dG9ib2R5LmJpeoITd3d3
LmV5c2NsZWFuaW5nLmNvbYITd3d3LmZhY2lsaXR5bXNnLmNvbYIVd3d3LmhleXRo
ZXJlbW9tbWEuY29tghN3d3cuaG9yaXpvbnBhaW50LmNhghB3d3cuaW5ub3RlcnJh
LmNhgiN3d3cuamFja3NhdXRvYm9keXJlc3RvcmF0aW9uaW5jLmNvbYIhd3d3Lmp1
aWN5bHVjeXNidXJnZXJjb21wYW55LmNvLnVrghJ3d3cua29uc3RpcGFra2kuZmmC
FXd3dy5rdGhyZW1vdmFscy5jby51a4IRd3d3LmxhdW5jaHBkaC5jb22CIXd3dy5s
aWZlc3R5bGVyZXRhaWxzZXJ2aWNlcy5jby56YYIOd3d3LmxpaWtrdWEuZGWCFnd3
dy5saXZpbmdzZW5zZXMuY28uemGCF3d3dy5tYWNsZW9kc3BsdW1iaW5nLmNhghJ3
d3cubWFsZXRhc3Nob3AuY2yCHXd3dy5tYW5hZ2VkbWVkaWFzb2x1dGlvbnMuY29t
ghd3d3cubWFzc2FnZWhhdmVuaW5jLmNvbYIcd3d3Lm1pbGxlbm5pdW1jb250cmFj
dGluZy5jYYIVd3d3Lm1vcmF5Y29sbGlzaW9uLmNhghB3d3cubm93b2ZpbGwuY29t
ghx3d3cub21lZ2Fjb2F0aW5nc2hvdXN0b24uY29tghZ3d3cucG9wb3dzYm9keXNo
b3AuY29tghR3d3cucG9wb3dzdG93aW5nLmNvbYIcd3d3LnByb3ZpbmNpYWxhdXRv
cmVnaW5hLmNvbYIQd3d3LnB1cmUtcGVzLmNvbYIWd3d3LnJicGFpbnRhbmRib2R5
LmNvbYISd3d3LnNjb3R0Y29nYXMuY29tght3d3cuc2Vnd2F5Z3VpZGVkdG91cnMu
Y28uemGCFnd3dy5zaWduYWdld29ybGQuY28uemGCEXd3dy5za3lsaW5ldGF4LmNh
giB3d3cuc21pdHR5c2F1dG9wYWludHNvZmhlbWV0LmNvbYIZd3d3LnRhcmFwYWNo
ZWNvYmVhdXR5LmNvbYITd3d3LnRlZHNhdXRvYm9keS5jYYIcd3d3LnRyZWVhbWln
b2xhbmRzY2FwaW5nLmNvbYIVd3d3LndlYnVpbGRicmFuZHouY29tghh3d3cud2Vz
dGVybm1lY2hhbmljcy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC
3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw
ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBep3P531bA57U2SH3QSeAyepGaDISh
EhKEGHWWgXFFWAAAAW4pt2vzAAAEAwBHMEUCIDEp1rS/lw1sjU7eBbODWLw1k17G
hQZwslWZbGR6g1EeAiEAynUG38o6KaVwWv+KXHJPJKbJd78ATExSXbhlEkqChEgA
dQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW4pt2waAAAEAwBG
MEQCIGNyckIEM/oFwb3PhORyZ/PvG/79OfMIgnDkgesPGXBIAiAr59G42s1wNvso
t0I0i28DwO2zbr/siUa5Lf8q7pulpDANBgkqhkiG9w0BAQsFAAOCAQEAJSs3EQb1
WZcF4EJxuGJykzavXyG/iT0gTnvAzFRzMyExraG0uhoCz5GE3YQq5On3CBUDrAhG
nrHn5mPJ999w7p67xsd6pWVaPVY2jTyyn9fhjHosyOFB2VOWIpnKYwH80pt0arkv
U48Hpa2EVFd5ODFEq6taHBiaSeY/YocnRpv/NEvTvbHOGcMdpWAqV9jEjDw+q87N
gm1c4TiKXBvUS/tBv/qnNvTjmWYl5mQm4Qx1oSCO0moXD3tcpDCugYLK+/SAEYLK
Z/xz40tXOVlDaGe6t8OEvk4TzV09pcb2Am946GS0Q52VA5iHRD5N0s17C2VV9ppH
cuRoeg8Q0GE2Ww==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dgL4gIYmmCca2jKU/JQ
rGZ9roNOOP9sHN/JX4rhi+DF2wsRexQtRBcNRqwEdugWpwtz47AzaUiVofs59h/f
PLsIAfHMs03aYDKgZq+QgZOFzVkPjIqPILqKfZK0oQ9aC0bfAxsio6Hz7DK+FYkL
LRqJh0PjDjN/1UiumZ/MxvNj5AkNaib+8UPDbb1F6jxC5wro3jtywvisxZjveeY3
1cmybC8gtUHVzpsNg5FcOh1KreyIg7QtGYj/oIXIsVbxdprWavv+Rkk8zjA6x1fS
FkiLTef3nLxqQ3sKBVYaF6HQf3tvtVGXjqK2oQSpVJd/zXN1cylakpXWZVlVdG88
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403434850402381066095908621500722412641781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 00:25:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 00:25:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.facilitymsg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26995295416839532826605624340481895300677988253131514701973157371278822995539335620671678670159517443686542273285115381214299106873949748672270235794730808761227786070130153926369014018650355171567024441159722054676290360581091651205236620102124658549024096426596551442645274493286495339243487241639737378240922548980330346619080092887754986838742883903060907585303999056508582803413980112653293192445585756123996233276039074561905132256801651706506497642832714041311792494426297370599305058219344322681073085342529986256102771675331519566167020775447649463755655730678700783622492612489021694395585738824739716021467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd281da1cced3f12bca35f050650ee6394f42d9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1868 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2d.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3d.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architektur.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bim.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bimworld.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blech.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bricsys-conference.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad-software.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cad.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elektro.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intergeo.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msr-software.tric.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msr.tric.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studenten.bricscad-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5616technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeroofing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajbody.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ammanagement.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appadtize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appleautobody.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asafootballagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autobahnautobody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beagle14.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellwoodautobody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.captainawesomereno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celltexcollision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christinejamessalon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.closetworld.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptosenyal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dialinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donbeck.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elvispawn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extremeautobody.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyscleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facilitymsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heytheremomma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonpaint.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innoterra.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksautobodyrestorationinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juicylucysburgercompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konstipakki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kthremovals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.launchpdh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifestyleretailservices.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liikkua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingsenses.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macleodsplumbing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maletasshop.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managedmediasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massagehaveninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millenniumcontracting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moraycollision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nowofill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omegacoatingshouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popowsbodyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popowstowing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provincialautoregina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pure-pes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpaintandbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scottcogas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segwayguidedtours.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.signageworld.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skylinetax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smittysautopaintsofhemet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarapachecobeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tedsautobody.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treeamigolandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webuildbrandz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernmechanics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e29b76bf3000004030047304502203129d6b4bf970d6c8d4ede05b38358bc35935ec6850670b255996c647a83511e022100ca7506dfca3a29a5705aff8a5c724f24a6c977bf004c4c525db865124a82844800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e29b76c1a00000403004630440220637272420433fa05c1bdcf84e47267f3ef1bfefd39f3088270e481eb0f19704802202be7d1b8dacd7036fb28b742348b6f03c0edb36ebfec8946b92dff2aee9ba5a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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