pharmacy.stopandshop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:dc:46:d3:6c:4a:dd:9a:c3:bb:c4:5d:e1:84:5e:74:f1:e7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pharmacy.stopandshop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:46:d3:6c:4a:dd:9a:c3:bb:c4:5d:e1:84:5e:74:f1:e7
Serial Number (int): 423405408180421248014678757770298624635367
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:8a:57:23:9b:3a:6a:7b:c1:22:5e:0f:37:5f:04:ef:4c:2d:5c:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:38:b8:1a:5f:63:28:46:8c:85:cc:62:11:a3:70:ae:d4:82:4e:1d
Fingerprint (sha256): 38:2e:c2:6d:e3:ef:ae:5c:d8:5c:64:1a:1c:70:60:a9:53:2d:1d:62:38:09:ec:ff:da:e1:8c:42:1c:eb:f8:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pharmacy.stopandshop.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pharmacy.stopandshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

answers.bytefederal.com
answers.campbells.com.yext-cdn.com
answers.healthcareassociates.com
atms.bytefederal.com
beratersuche.devk.de
branches.bankerslife.com
branches.burkeandherbertbank.com
butiker.audionova.se
distributors.mightyautoparts.com
events.primark.com
events.tmxfinancefamily.com
experts.yext.com
eyedoctors.pearlevision.ca
eyedoctors.pearlevision.com
ja-stores.iqos.com.yext-cdn.com
loans.bankwithsouthern.com
local.biglots.com
local.fuel.acmemarkets.com
local.fuel.albertsons.com
local.fuel.randalls.com
local.jewelosco.com
local.lendnation.com
local.pharmacy.amigosunited.com
location.viaero.com
locations.1ffc.com
locations.alexandani.com
locations.attexperience.com
locations.bertuccis.com
locations.bishwm.me
locations.blackhorsenj.com
locations.boscovs.com
locations.bostonmarket.com
locations.bucadibeppo.com
locations.cafevillanj.com
locations.cariboucoffee.com
locations.crews.bank
locations.customink.com
locations.dennys.com
locations.desertfinancial.com
locations.dressbarn.com
locations.fazolis.com
locations.filling-stations.co.uk
locations.firstinterstatebank.com
locations.gomongo.com
locations.huddlehouse.com
locations.joeskitchen.co.uk
locations.piattinonj.com
locations.plazatireservice.com
locations.speedycafe.com
locations.statravel.com.au
locations.tccrocks.com
locations.thewordonthest.com
locations.tirediscounters.com
locations.zumepizza.com
pharmacy.stopandshop.com
providers.ihacares.com.yext-cdn.com
restaurants.fiveguys.de
restaurants.wagamama.us
retailers.jaguar.co.nz
retailers.jaguarkorea.co.kr
retailers.landroverkorea.co.kr
schools.childcarenetwork.com
silver.yext-cdn.com
standorte.vitakustik.de
stores-list.scotch-soda.com
stores.apeainthepod.com
stores.bedbathandbeyond.com
stores.burton.co.uk
stores.buybuybaby.com
stores.cabelas.com
stores.casper.com
stores.charlottetilbury.com
stores.dengana.jp
stores.dsw.com
stores.footlocker.co.uk
stores.footlocker.com
stores.footlocker.dk
stores.footlocker.eu
stores.footlocker.lu
stores.jared.com
stores.maccosmetics.com
stores.macysbackstage.com
stores.maxit-pawn.com
stores.motherhood.com
stores.nyxcosmetics.ca
stores.nyxcosmetics.co.uk
stores.nyxcosmetics.gr
stores.outfitfashion.com
stores.peoplesjewellers.com
stores.petit-bateau.com
stores.primark.com
stores.sleepnumber.com
stores.sportsmans.com
stores.suddenlink.com.yext-cdn.com
stores.yoshinoya.com
stores.zalesoutlet.com
team.merrillcorp.com
www.farmersasian.com
www.farmersatlanta.com
www.farmersbaltimore.com

Other certificates including the domain name stopandshop.com

(limited to 100 certificates)
pharmacy.stopandshop.com
coupons.stopandshop.com
answers-autozone.pagescdn.com
staging.stopandshop.com
circular.stopandshop.com
nonprd-api.pdl.stopandshop.com
recipecenter.stopandshop.com
san3.yext-cdn.com
images.stopandshop.com
pharmacy.stopandshop.com
stores.maxit-pawn.com
pharmacy.stopandshop.com
beta-preprod.stopandshop.com
recipecenter.stopandshop.com
ssl418162.cloudflaressl.com
locations.bannerbank.com
answers-autozone.pagescdn.com
circular.stopandshop.com
stopandshop.com
stopandshop.com
circular.stopandshop.com
mortgage.wf.com
locations.bannerbank.com
pharmacy.stopandshop.com
pharmacy.stopandshop.com
ssl418161.cloudflaressl.com
recipecenter.stopandshop.com
recipecenter.stopandshop.com
krispy-new-maps.krispy.com.pagescdn.com
stores.stopandshop.com
locations.seniorbridge.com
san3.yext-cdn.com
stopandshop.com
synergichealthcareers.yext-cdn.com
stores.stopandshop.com
images.stopandshop.com
www.stopandshop.com
ssl418161.cloudflaressl.com
staging.stopandshop.com
pharmacy.stopandshop.com
dd.stopandshop.com
locations.seniorbridge.com
recipecenter.stopandshop.com
dealers.poolguardusa.com
ssl418162.cloudflaressl.com
answers.ihacares.com.yext-cdn.com
circular.stopandshop.com
refer.stopandshop.com
stores.stopandshop.com
sni.cloudflaressl.com
synergichealthcareers.yext-cdn.com
circular.stopandshop.com
ssl418161.cloudflaressl.com
stores.torafuku.jp
stopandshop.com
stores.stopandshop.com
sit.peapod.com
images.stopandshop.com
store-events.louandgrey.com
api.pdl.stopandshop.com
san3.yext-cdn.com
www.farmersatlanta.com
beta.stopandshop.com
smartlabel.stopandshop.com
pharmacy.stopandshop.com
san3.yext-cdn.com
express.stopandshop.com
stores.stopandshop.com
pharmacy.stopandshop.com
ssl418163.cloudflaressl.com
ssl418163.cloudflaressl.com
circular.stopandshop.com
sni.cloudflaressl.com
stores.torafuku.jp
sni.cloudflaressl.com
stores.tenpura-tensei.jp
www.stopandshop.com
ssl418163.cloudflaressl.com
ssl418162.cloudflaressl.com
standorte.hansaton.at
san3.yext-cdn.com
stores.stopandshop.com
san3.yext-cdn.com
beta.stopandshop.com
ssl418162.cloudflaressl.com
san3.yext-cdn.com
sni.cloudflaressl.com
www.stopandshop.com
stores.stopandshop.com
events.lifelinescreening.com
krispy-new-maps.krispy.com.pagescdn.com
sni.cloudflaressl.com
ssl418161.cloudflaressl.com
ssl418163.cloudflaressl.com
stores.stopandshop.com
ssl418163.cloudflaressl.com
www.farmersatlanta.com
answers.ihacares.com.yext-cdn.com
san3.yext-cdn.com
san3.yext-cdn.com

Certificate

The complete raw certificate details for pharmacy.stopandshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOajCCDVKgAwIBAgISBNxG02xK3ZrDu8Rd4YRedPHnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDIxNjEyNTlaFw0y
MDAzMDExNjEyNTlaMCMxITAfBgNVBAMTGHBoYXJtYWN5LnN0b3BhbmRzaG9wLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANo2J+ojb+yyYINn1kct
lzg+7WQw9yFFdPTMqvZjrSGOyyQEESAui8Nxc3tt315U93cG4jty0vJnypYANgb6
riRsasQ3H+jUU3Dhu9AilLFuODacZ2/5MDdrJypT3gZN6lwMyH0KtLcF2guPOV6i
8mZpYKbR7J0Z2uGRlgms+vef26UnLPBkLMRSayVj4E6uLKz76esTX9z6x0HhN3Uv
yZ5zpcGk7Ofp7QSCiR51yxetEq9ZlitfFGBCpyWBhzQ2xuuSD56yYybIy7bDsRa1
VeUNvzeOQr+nUKggFVfZTc2NSQJt7D9eO5/xO2xnK51SppbQoWq9F5fAjlmcB0x6
U8UCAwEAAaOCC28wggtrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUQ4pXI5s6anvB
Il4PN18E70wtXFUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCChYGA1UdEQSCCg0wggoJghdhbnN3ZXJzLmJ5dGVmZWRl
cmFsLmNvbYIiYW5zd2Vycy5jYW1wYmVsbHMuY29tLnlleHQtY2RuLmNvbYIgYW5z
d2Vycy5oZWFsdGhjYXJlYXNzb2NpYXRlcy5jb22CFGF0bXMuYnl0ZWZlZGVyYWwu
Y29tghRiZXJhdGVyc3VjaGUuZGV2ay5kZYIYYnJhbmNoZXMuYmFua2Vyc2xpZmUu
Y29tgiBicmFuY2hlcy5idXJrZWFuZGhlcmJlcnRiYW5rLmNvbYIUYnV0aWtlci5h
dWRpb25vdmEuc2WCIGRpc3RyaWJ1dG9ycy5taWdodHlhdXRvcGFydHMuY29tghJl
dmVudHMucHJpbWFyay5jb22CG2V2ZW50cy50bXhmaW5hbmNlZmFtaWx5LmNvbYIQ
ZXhwZXJ0cy55ZXh0LmNvbYIaZXllZG9jdG9ycy5wZWFybGV2aXNpb24uY2GCG2V5
ZWRvY3RvcnMucGVhcmxldmlzaW9uLmNvbYIfamEtc3RvcmVzLmlxb3MuY29tLnll
eHQtY2RuLmNvbYIabG9hbnMuYmFua3dpdGhzb3V0aGVybi5jb22CEWxvY2FsLmJp
Z2xvdHMuY29tghpsb2NhbC5mdWVsLmFjbWVtYXJrZXRzLmNvbYIZbG9jYWwuZnVl
bC5hbGJlcnRzb25zLmNvbYIXbG9jYWwuZnVlbC5yYW5kYWxscy5jb22CE2xvY2Fs
Lmpld2Vsb3Njby5jb22CFGxvY2FsLmxlbmRuYXRpb24uY29tgh9sb2NhbC5waGFy
bWFjeS5hbWlnb3N1bml0ZWQuY29tghNsb2NhdGlvbi52aWFlcm8uY29tghJsb2Nh
dGlvbnMuMWZmYy5jb22CGGxvY2F0aW9ucy5hbGV4YW5kYW5pLmNvbYIbbG9jYXRp
b25zLmF0dGV4cGVyaWVuY2UuY29tghdsb2NhdGlvbnMuYmVydHVjY2lzLmNvbYIT
bG9jYXRpb25zLmJpc2h3bS5tZYIabG9jYXRpb25zLmJsYWNraG9yc2Vuai5jb22C
FWxvY2F0aW9ucy5ib3Njb3ZzLmNvbYIabG9jYXRpb25zLmJvc3Rvbm1hcmtldC5j
b22CGWxvY2F0aW9ucy5idWNhZGliZXBwby5jb22CGWxvY2F0aW9ucy5jYWZldmls
bGFuai5jb22CG2xvY2F0aW9ucy5jYXJpYm91Y29mZmVlLmNvbYIUbG9jYXRpb25z
LmNyZXdzLmJhbmuCF2xvY2F0aW9ucy5jdXN0b21pbmsuY29tghRsb2NhdGlvbnMu
ZGVubnlzLmNvbYIdbG9jYXRpb25zLmRlc2VydGZpbmFuY2lhbC5jb22CF2xvY2F0
aW9ucy5kcmVzc2Jhcm4uY29tghVsb2NhdGlvbnMuZmF6b2xpcy5jb22CIGxvY2F0
aW9ucy5maWxsaW5nLXN0YXRpb25zLmNvLnVrgiFsb2NhdGlvbnMuZmlyc3RpbnRl
cnN0YXRlYmFuay5jb22CFWxvY2F0aW9ucy5nb21vbmdvLmNvbYIZbG9jYXRpb25z
Lmh1ZGRsZWhvdXNlLmNvbYIbbG9jYXRpb25zLmpvZXNraXRjaGVuLmNvLnVrghhs
b2NhdGlvbnMucGlhdHRpbm9uai5jb22CHmxvY2F0aW9ucy5wbGF6YXRpcmVzZXJ2
aWNlLmNvbYIYbG9jYXRpb25zLnNwZWVkeWNhZmUuY29tghpsb2NhdGlvbnMuc3Rh
dHJhdmVsLmNvbS5hdYIWbG9jYXRpb25zLnRjY3JvY2tzLmNvbYIcbG9jYXRpb25z
LnRoZXdvcmRvbnRoZXN0LmNvbYIdbG9jYXRpb25zLnRpcmVkaXNjb3VudGVycy5j
b22CF2xvY2F0aW9ucy56dW1lcGl6emEuY29tghhwaGFybWFjeS5zdG9wYW5kc2hv
cC5jb22CI3Byb3ZpZGVycy5paGFjYXJlcy5jb20ueWV4dC1jZG4uY29tghdyZXN0
YXVyYW50cy5maXZlZ3V5cy5kZYIXcmVzdGF1cmFudHMud2FnYW1hbWEudXOCFnJl
dGFpbGVycy5qYWd1YXIuY28ubnqCG3JldGFpbGVycy5qYWd1YXJrb3JlYS5jby5r
coIecmV0YWlsZXJzLmxhbmRyb3ZlcmtvcmVhLmNvLmtyghxzY2hvb2xzLmNoaWxk
Y2FyZW5ldHdvcmsuY29tghNzaWx2ZXIueWV4dC1jZG4uY29tghdzdGFuZG9ydGUu
dml0YWt1c3Rpay5kZYIbc3RvcmVzLWxpc3Quc2NvdGNoLXNvZGEuY29tghdzdG9y
ZXMuYXBlYWludGhlcG9kLmNvbYIbc3RvcmVzLmJlZGJhdGhhbmRiZXlvbmQuY29t
ghNzdG9yZXMuYnVydG9uLmNvLnVrghVzdG9yZXMuYnV5YnV5YmFieS5jb22CEnN0
b3Jlcy5jYWJlbGFzLmNvbYIRc3RvcmVzLmNhc3Blci5jb22CG3N0b3Jlcy5jaGFy
bG90dGV0aWxidXJ5LmNvbYIRc3RvcmVzLmRlbmdhbmEuanCCDnN0b3Jlcy5kc3cu
Y29tghdzdG9yZXMuZm9vdGxvY2tlci5jby51a4IVc3RvcmVzLmZvb3Rsb2NrZXIu
Y29tghRzdG9yZXMuZm9vdGxvY2tlci5ka4IUc3RvcmVzLmZvb3Rsb2NrZXIuZXWC
FHN0b3Jlcy5mb290bG9ja2VyLmx1ghBzdG9yZXMuamFyZWQuY29tghdzdG9yZXMu
bWFjY29zbWV0aWNzLmNvbYIZc3RvcmVzLm1hY3lzYmFja3N0YWdlLmNvbYIVc3Rv
cmVzLm1heGl0LXBhd24uY29tghVzdG9yZXMubW90aGVyaG9vZC5jb22CFnN0b3Jl
cy5ueXhjb3NtZXRpY3MuY2GCGXN0b3Jlcy5ueXhjb3NtZXRpY3MuY28udWuCFnN0
b3Jlcy5ueXhjb3NtZXRpY3MuZ3KCGHN0b3Jlcy5vdXRmaXRmYXNoaW9uLmNvbYIb
c3RvcmVzLnBlb3BsZXNqZXdlbGxlcnMuY29tghdzdG9yZXMucGV0aXQtYmF0ZWF1
LmNvbYISc3RvcmVzLnByaW1hcmsuY29tghZzdG9yZXMuc2xlZXBudW1iZXIuY29t
ghVzdG9yZXMuc3BvcnRzbWFucy5jb22CInN0b3Jlcy5zdWRkZW5saW5rLmNvbS55
ZXh0LWNkbi5jb22CFHN0b3Jlcy55b3NoaW5veWEuY29tghZzdG9yZXMuemFsZXNv
dXRsZXQuY29tghR0ZWFtLm1lcnJpbGxjb3JwLmNvbYIUd3d3LmZhcm1lcnNhc2lh
bi5jb22CFnd3dy5mYXJtZXJzYXRsYW50YS5jb22CGHd3dy5mYXJtZXJzYmFsdGlt
b3JlLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5
AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaLi5txeHHt7gb1KcN9AqQMy
tXuafWmZrlO0630W2sCqov+eRjunV0LYtOzhIL3RwCItGPDynEjp54fDcbdRlp0R
O51JvMLs0Wvp31nVARX8GcTt4gIKQ1qRm2acYakzeo0yNASI6TLMxkEx8NcY3isl
OxHta1UEfVWO1o8ZZ/r0ulC8V0LxcMYjuuLO58oqcN9RBPsHEh7x6mksdbf6Xj2v
9LiUkCYftNHsDd+10zOK7fk8Yo91RMJPmzw1rKvKTJ8uVVFry9qPiDS1oHkcI724
Zgd3bxzyj9Hqoc9ZdYdfpK8ucc441VNEc+MFfTtV1f9h1hHI8j/NaFXEACrxWg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jYn6iNv7LJgg2fWRy2X
OD7tZDD3IUV09Myq9mOtIY7LJAQRIC6Lw3Fze23fXlT3dwbiO3LS8mfKlgA2Bvqu
JGxqxDcf6NRTcOG70CKUsW44Npxnb/kwN2snKlPeBk3qXAzIfQq0twXaC485XqLy
ZmlgptHsnRna4ZGWCaz695/bpScs8GQsxFJrJWPgTq4srPvp6xNf3PrHQeE3dS/J
nnOlwaTs5+ntBIKJHnXLF60Sr1mWK18UYEKnJYGHNDbG65IPnrJjJsjLtsOxFrVV
5Q2/N45Cv6dQqCAVV9lNzY1JAm3sP147n/E7bGcrnVKmltChar0Xl8COWZwHTHpT
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423405408180421248014678757770298624635367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 16:12:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 16:12:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pharmacy.stopandshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27546655760306251399935448879938890580166901248167393866794490073287916162717024154009706791882898769561497035540616800018456328425536961979395660519855579937742756276823555529387812555518246589368962264717090417884010115640898985909120848773122254788866474072095399254785861295336737205208374760154023246558523080089262820079031211718819767066990020412827511879092010658714910381950234504496837330758618127568587132580131447825560416470050162408818300691567848016006665373865430979618684224540551900777434976056721703059696441624770870795365615182461175060259142727203694729917029977811613682893077498054901008847813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							438a57239b3a6a7bc1225e0f375f04ef4c2d5c55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2573 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.bytefederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.campbells.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.healthcareassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atms.bytefederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beratersuche.devk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branches.bankerslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branches.burkeandherbertbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butiker.audionova.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributors.mightyautoparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.primark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.tmxfinancefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.yext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyedoctors.pearlevision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyedoctors.pearlevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ja-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.bankwithsouthern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.biglots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fuel.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fuel.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fuel.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lendnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pharmacy.amigosunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.viaero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.1ffc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.alexandani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.attexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bertuccis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bishwm.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.blackhorsenj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.boscovs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bostonmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bucadibeppo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cafevillanj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cariboucoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.crews.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.customink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.dennys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.desertfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.dressbarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.fazolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.filling-stations.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.firstinterstatebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.gomongo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.huddlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.joeskitchen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.piattinonj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.plazatireservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.speedycafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.statravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tccrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.thewordonthest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tirediscounters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.zumepizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.stopandshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.ihacares.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.fiveguys.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.wagamama.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.jaguar.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.jaguarkorea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landroverkorea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schools.childcarenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silver.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standorte.vitakustik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores-list.scotch-soda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.apeainthepod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bedbathandbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.burton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.buybuybaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.cabelas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.casper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.charlottetilbury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.dengana.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.dsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.maccosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.macysbackstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.maxit-pawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.motherhood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.nyxcosmetics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.nyxcosmetics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.nyxcosmetics.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.outfitfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.peoplesjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.petit-bateau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.primark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.sleepnumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.sportsmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.suddenlink.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.yoshinoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.merrillcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersasian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersatlanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersbaltimore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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