f04.chtah.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3e:70:89:59:a2:13:4f:3b:3e:79:d0:c7:bf:37:4b:53:76 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=f04.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3e:70:89:59:a2:13:4f:3b:3e:79:d0:c7:bf:37:4b:53:76
Serial Number (int): 369696237174312094222783102630295721694070
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:da:f5:0d:c8:43:1f:8e:91:35:45:ee:16:38:27:0b:2c:4f:20:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:74:68:33:14:4e:48:5f:79:9f:62:70:62:f6:9a:8c:82:fe:1f:61
Fingerprint (sha256): 4c:90:79:3b:52:53:c5:4d:ed:32:9d:18:43:88:25:70:77:f7:af:8a:e0:5a:d9:4e:37:3a:a9:6c:72:03:97:f5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f04.chtah.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f04.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.accionistasiberdrola.es
f.alerts.rogersbank.com
f.betmotion-news.com
f.bookings.traveltool.com.br
f.bookings.traveltool.es
f.bookings.traveltool.pt
f.cm.carwale.com
f.content.hdfcrealty.in
f.content.hdfcrealty.net
f.courriel.chatelaine.com
f.courriel.chocolatmagazine.ca
f.courriel.louloumagazine.com
f.crm.businesscasewritingmails.com
f.crm.hungama.com
f.crm.projectmgmtemails.com
f.crm.veromoda.in
f.crobin1.cheetahmail.com
f.ctm.ralphlauren.co.kr
f.deals.traveltool.com.br
f.deals.traveltool.es
f.deals.traveltool.pt
f.dvc-mail.com
f.e.bobbibrown.co.th
f.e.clinique.co.th
f.e.disneymoms.com
f.e.disneyparksblog.com
f.e.edressit-mail.com
f.e.esteelauder.co.th
f.e.esteelauder.com.cn
f.e.infinityspeakers.com
f.e.livpure.in
f.e.llbean.co.jp
f.e.maccosmetics.co.th
f.e.mycpanewsletter.com
f.e.rag-bone.com
f.e.starbucks.com.br
f.e.tatatelebroadband.com
f.e.tous.com
f.e.tutc.com
f.e.veromoda.in
f.e.volumerate.com
f.e2-dresslink.com
f.edm.fashionmia.net
f.edm.goldenvillage.com.sg
f.edm.luvyle.com
f.edm.stylewe.com
f.elite-updates.remit2india.com
f.email.canadianbusiness.com
f.email.canadianparents.com
f.email.chatelaine.com
f.email.chatrmobile.com
f.email.chocolatmagazine.ca
f.email.citynews.ca
f.email.ellisisland.org
f.email.hellomagazine.ca
f.email.iksula.com
f.email.louloumagazine.com
f.email.macleans.ca
f.email.rogersmagazines.com
f.email.wolterskluwer.es
f.email.wolterskluwer.pt
f.emailers.thomascook.in
f.enews.ofertatvs.com
f.enews.parkroyalhotels.com
f04.chtah.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com

Certificate

The complete raw certificate details for f04.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BXLnwa4JX4JQVxKfYvK
s4sZ9CDwN7rr0mA+HHkd9D7aR+PznpDwOfc3bceBowGPidpqgV8xXf+Xuol5cxOj
tYYdGtgNvOfMuDh0vpKwyyKruiPcDaNFsE2xRI4fkTd7sP1hShXxNT9HI033TXYU
CQrq0mSLiSAki8nI+yxKGzORdFCQN+mPb7DXA5hlloWR19XJxUVoTKncTjrqr+3s
REwBBKgAr0w/FLxTxzsvJAXXJgQFP41KHb2yR81t1CcME86JlFJl+mvSdPpVN+DE
HemUpO8R2dxLpnlCzdRL61pey8MlUDOXEKDsbQ1TLu60lqYY95PsCMEzYWYnnGTV
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369696237174312094222783102630295721694070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 21:15:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 21:15:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f04.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27278221582662725485002973381821030090319466103412417889910676090846693352681183855475402250930434151281891416245872052805627046151733913673627567542271628652603082194585642285917782101293759558973263382952998885589254996591957421813696726237192067303222089620621608704115334154073011272079011708352421274963234834522904726208817773318652986767895962626121827170879747291856416046311604806013605810778325615969856445466991305000272914610957745510176095684641828784826272551733027980686795202684166927001168565219725121507502263549857657919823620497302530929052776409196041436147860987091502499849674836722022577657289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fdaf50dc8431f8e913545ee1638270b2c4f2038
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1553 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.accionistasiberdrola.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.alerts.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.betmotion-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.bookings.traveltool.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.bookings.traveltool.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.bookings.traveltool.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cm.carwale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.content.hdfcrealty.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.content.hdfcrealty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.courriel.chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.courriel.chocolatmagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.courriel.louloumagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.crm.businesscasewritingmails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.crm.hungama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.crm.projectmgmtemails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.crm.veromoda.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.crobin1.cheetahmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ctm.ralphlauren.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.deals.traveltool.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.deals.traveltool.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.deals.traveltool.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.dvc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.disneymoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.disneyparksblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.edressit-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.infinityspeakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.livpure.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.llbean.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.mycpanewsletter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.rag-bone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.starbucks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.tatatelebroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.tous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.tutc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.veromoda.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.volumerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e2-dresslink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.edm.fashionmia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.edm.goldenvillage.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.edm.luvyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.edm.stylewe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.elite-updates.remit2india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.canadianbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.canadianparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.chatrmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.chocolatmagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.citynews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.ellisisland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.hellomagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.iksula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.louloumagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.rogersmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.wolterskluwer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.wolterskluwer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.emailers.thomascook.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.ofertatvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.parkroyalhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f04.chtah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001884fd4cc070000040300483046022100a20a320386a5f679661ed3503036978f7f0a8f42ff7f1fa1b5a91536f021b11b022100ab6407e07840ed4c61366d1e6c95193720f73efbd3b38c71ebb5c9e489319aca007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001884fd4cc310000040300473045022100feb7e4307b2462901711c047bda085e3df03f42df4ee43c012a9106ef091aec902204a55944e05529b5541c709c5ffc84ca4c724bfcc2c9a54f1cbf3ffc45e13aebb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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