d-card.co.il

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e7:75:4a:c9:7e:e9:49:cc:0d:a6:b9:67:e8:ec:00:a2:21 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=d-card.co.il

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:75:4a:c9:7e:e9:49:cc:0d:a6:b9:67:e8:ec:00:a2:21
Serial Number (int): 340097992546311169767556340452341204427297
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:79:7b:1f:b1:f0:08:b2:ed:15:b5:6f:b6:e1:9d:5f:bb:b9:22:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:db:a7:73:47:79:df:d5:cc:95:0d:e6:68:ab:c3:4a:e6:0b:4f:91
Fingerprint (sha256): 3b:fc:89:69:54:4c:98:d5:bc:33:65:24:be:a3:c7:cf:4a:44:d8:97:ca:9a:13:f9:70:39:3f:3f:4c:3b:f7:76

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate d-card.co.il

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for d-card.co.il

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agrodeal.pegasusdigitalstu.com
comfort1.pegasusdigitalstu.com
d-card-co-il.pegasusdigitalstu.com
d-card.co.il
flora-fresh-kenya.pegasusdigitalstu.com
kaskad-co-il.pegasusdigitalstu.com
kaskad.co.il
mail.kaskad.co.il
mail.usavisas.co.il
newdataonline.pegasusdigitalstu.com
usavisas-co-il.pegasusdigitalstu.com
usavisas.co.il
visa.pegasusdigitalstu.com
www.agrodeal.pegasusdigitalstu.com
www.comfort1.pegasusdigitalstu.com
www.d-card-co-il.pegasusdigitalstu.com
www.d-card.co.il
www.flora-fresh-kenya.pegasusdigitalstu.com
www.kaskad-co-il.pegasusdigitalstu.com
www.kaskad.co.il
www.newdataonline.pegasusdigitalstu.com
www.usavisas-co-il.pegasusdigitalstu.com
www.usavisas.co.il
www.visa.pegasusdigitalstu.com

Other certificates including the domain name d-card.co.il

(limited to 100 certificates)

Certificate

The complete raw certificate details for d-card.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII1zCCB7+gAwIBAgISA+d1Ssl+6UnMDaa5Z+jsAKIhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MjkxMTQ1NDlaFw0x
ODA5MjcxMTQ1NDlaMBcxFTATBgNVBAMTDGQtY2FyZC5jby5pbDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAOr01DmenAfbxRQ6Je1By0mNNHl7aF+JM63/
JD2sRu1hYhs3h1c6Tbj8e9/dacZpDaRs+TG8aTUneIUN1o/GduwHA28wIFBLxqod
MNADtFACQy1S/fcsM5BJMrUnrpyF6tcVcl3LVKelstn4hUvEsKmCQ9zulqlbkDZW
KDkomNbrGuorYkSenDGO/htZ28at0rIVHe5QmQnwXFngRJXkMLtD7HX4EJESpFfv
RYho5hO9kuY9HB7C0i/pKDFsXYrg2T9d9Jp0ymhNMCjvu11mXlJaHJvTm2vNgss7
H3n9Vc2wGKHPxsY7mTEnur6jP2SYRnewOCNfHCFGjvea9HHxCKsCAwEAAaOCBegw
ggXkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUPnl7H7HwCLLtFbVvtuGdX7u5IvQw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCCAukGA1UdEQSCAuAwggLcgh5hZ3JvZGVhbC5wZWdhc3VzZGlnaXRhbHN0dS5j
b22CHmNvbWZvcnQxLnBlZ2FzdXNkaWdpdGFsc3R1LmNvbYIiZC1jYXJkLWNvLWls
LnBlZ2FzdXNkaWdpdGFsc3R1LmNvbYIMZC1jYXJkLmNvLmlsgidmbG9yYS1mcmVz
aC1rZW55YS5wZWdhc3VzZGlnaXRhbHN0dS5jb22CImthc2thZC1jby1pbC5wZWdh
c3VzZGlnaXRhbHN0dS5jb22CDGthc2thZC5jby5pbIIRbWFpbC5rYXNrYWQuY28u
aWyCE21haWwudXNhdmlzYXMuY28uaWyCI25ld2RhdGFvbmxpbmUucGVnYXN1c2Rp
Z2l0YWxzdHUuY29tgiR1c2F2aXNhcy1jby1pbC5wZWdhc3VzZGlnaXRhbHN0dS5j
b22CDnVzYXZpc2FzLmNvLmlsghp2aXNhLnBlZ2FzdXNkaWdpdGFsc3R1LmNvbYIi
d3d3LmFncm9kZWFsLnBlZ2FzdXNkaWdpdGFsc3R1LmNvbYIid3d3LmNvbWZvcnQx
LnBlZ2FzdXNkaWdpdGFsc3R1LmNvbYImd3d3LmQtY2FyZC1jby1pbC5wZWdhc3Vz
ZGlnaXRhbHN0dS5jb22CEHd3dy5kLWNhcmQuY28uaWyCK3d3dy5mbG9yYS1mcmVz
aC1rZW55YS5wZWdhc3VzZGlnaXRhbHN0dS5jb22CJnd3dy5rYXNrYWQtY28taWwu
cGVnYXN1c2RpZ2l0YWxzdHUuY29tghB3d3cua2Fza2FkLmNvLmlsgid3d3cubmV3
ZGF0YW9ubGluZS5wZWdhc3VzZGlnaXRhbHN0dS5jb22CKHd3dy51c2F2aXNhcy1j
by1pbC5wZWdhc3VzZGlnaXRhbHN0dS5jb22CEnd3dy51c2F2aXNhcy5jby5pbIIe
d3d3LnZpc2EucGVnYXN1c2RpZ2l0YWxzdHUuY29tMIH+BgNVHSAEgfYwgfMwCAYG
Z4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZp
Y2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMg
YW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xp
Y3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8w
ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDbdK/uyynssf7KPnFtLOW5qrs294Rx
g8ddnU83th+/ZAAAAWRLlAgZAAAEAwBHMEUCIQDv0zx0eUO2JKbkClJNv/d0kbwL
vX7ZupyHaQFGrFJtlwIgU19vKSMmcaBfFgHZv1sG7b3vHtVn38cOX6Iqbja/6zgA
dgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWRLlAglAAAEAwBH
MEUCIQCInDD7cKDJEJ0RYOiQWK0JRPe1sfVLnHVcH1usH42TrwIgA4lUCDJFOMyD
ZrCjPmrsqtpYTT0Qk7k3Pb0pZ+QVe7EwDQYJKoZIhvcNAQELBQADggEBADHFsa9u
XcrBcdcW3yv1pSAMpB0X31ah9BLmDt4ikU7jOjxfMI1nfaDWbGPS+d2q0y4ByvHH
UhwsGqzQnbLa9Zj5Fu1iPCRGxRLzkqj+C7PywXTriY3gbVa/xDrAvVRWzuc9pns/
uc5rM3jXrlXpvSA4qi43zgBYe13RBYsaju9meQQ/a4gMiHvb8Rh4fasBr+bXYwLL
A75zdG84vh8fTETbceK+ucwzFswQjb0WvJTx060boMWcugZIQJ/lshIrcIVK/sTM
gMacwvNS+j9r1BUFnSwAOlwrlwERAFBOMZWKDO4gxWs4PliaX6MPdYHNdrSXiGfn
NL54bmcFcc0DCsc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vTUOZ6cB9vFFDol7UHL
SY00eXtoX4kzrf8kPaxG7WFiGzeHVzpNuPx7391pxmkNpGz5MbxpNSd4hQ3Wj8Z2
7AcDbzAgUEvGqh0w0AO0UAJDLVL99ywzkEkytSeunIXq1xVyXctUp6Wy2fiFS8Sw
qYJD3O6WqVuQNlYoOSiY1usa6itiRJ6cMY7+G1nbxq3SshUd7lCZCfBcWeBEleQw
u0PsdfgQkRKkV+9FiGjmE72S5j0cHsLSL+koMWxdiuDZP130mnTKaE0wKO+7XWZe
Ulocm9Oba82Cyzsfef1VzbAYoc/GxjuZMSe6vqM/ZJhGd7A4I18cIUaO95r0cfEI
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340097992546311169767556340452341204427297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-29 11:45:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 11:45:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'd-card.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29660493043687979076565275738207527270175762910377344932749777312788939232551845874072375195242782394416187135415625521594836974915343523524942739159396001006608052581811603746361814743149087608589911151176112974601319984308476955077658422082896112834805208466069893533905468595390025306579808846324187774498262439430964029118489206666132814552302733166460090223687660167660077586470185579172039599556353316665622006616491626235638883174073423846982984717207325757125110074211004806306978661440686767743055063254640926835811310953332642617816622466947706783671153481426542425544693731938777506069367497426042251970731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e797b1fb1f008b2ed15b56fb6e19d5fbbb922f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrodeal.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfort1.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-card-co-il.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-card.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flora-fresh-kenya.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaskad-co-il.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaskad.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kaskad.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.usavisas.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newdataonline.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usavisas-co-il.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usavisas.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visa.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrodeal.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comfort1.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.d-card-co-il.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.d-card.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flora-fresh-kenya.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaskad-co-il.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaskad.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newdataonline.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usavisas-co-il.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usavisas.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visa.pegasusdigitalstu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001644b9408190000040300473045022100efd33c747943b624a6e40a524dbff77491bc0bbd7ed9ba9c87690146ac526d970220535f6f29232671a05f1601d9bf5b06edbdef1ed567dfc70e5fa22a6e36bfeb38007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001644b9408250000040300473045022100889c30fb70a0c9109d1160e89058ad0944f7b5b1f54b9c755c1f5bac1f8d93af022003895408324538cc8366b0a33e6aecaada584d3d1093b9373dbd2967e4157bb1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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