*.wernerfamilyfoundation.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a5:c2:b2:5b:19:43:3e:3d:88:73:a1:4e:0f:30:73:78:17 was issued on by Let's Encrypt.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.wernerfamilyfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:c2:b2:5b:19:43:3e:3d:88:73:a1:4e:0f:30:73:78:17
Serial Number (int): 404854530576719714671412533155750862878743
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1a:c1:dd:a4:9f:61:a2:b4:0e:15:1e:64:e9:61:71:88:14:6f:e3:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:1d:45:07:a4:2c:74:37:4e:c7:68:1f:3a:b8:9b:5e:ba:b6:b4:9e
Fingerprint (sha256): 4e:3b:5c:f9:8c:a5:f4:8b:67:ba:d4:2e:71:32:78:a2:b0:5f:5d:18:c9:90:30:cb:94:bf:fa:5d:c9:85:4e:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.wernerfamilyfoundation.org

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wernerfamilyfoundation.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airandapres.com
*.amandasbakery.com
*.arturelia.com
*.backtothecryptofuture.com
*.bluestarapothecary.com
*.drhoppenfeld.com
*.ecoteatables.com
*.footycosmos.com
*.forthegoodofthecause.com
*.giveandtakeresale.com
*.gvfirerelief.org
*.holidaymagicfestivaloflights.net
*.huntcache.com
*.ingenieriasustentable.mx
*.jcky.us
*.jdburchdesign.com
*.jeeb.us
*.jukeboxheroes.us
*.jukeboxheroesmiami.com
*.lensabojonegoro.com
*.llamitanyc.com
*.mild-nine.com
*.noodleandscribble.com
*.orionzouterlimits.com
*.oscfoundation.org
*.plusey.com
*.rgcommercial.build
*.robertasrules.com
*.sallyandchica.com
*.scriptonomicon.org
*.sleephavenbedding.com
*.spacemoa.com
*.thebaconnews.com
*.tramcobuilders.com
*.travelswithmk.com
*.tsostaff.com
*.tsostaff.net
*.valleyoakwealthmanagement.com
*.wanderingrandi.com
*.wernerfamilyfoundation.org
*.wmmconference.org
airandapres.com
amandasbakery.com
arturelia.com
backtothecryptofuture.com
bluestarapothecary.com
drhoppenfeld.com
ecoteatables.com
footycosmos.com
forthegoodofthecause.com
giveandtakeresale.com
gvfirerelief.org
holidaymagicfestivaloflights.net
huntcache.com
ingenieriasustentable.mx
jcky.us
jdburchdesign.com
jeeb.us
jukeboxheroes.us
jukeboxheroesmiami.com
lensabojonegoro.com
llamitanyc.com
mild-nine.com
noodleandscribble.com
orionzouterlimits.com
oscfoundation.org
plusey.com
rgcommercial.build
robertasrules.com
sallyandchica.com
scriptonomicon.org
sleephavenbedding.com
spacemoa.com
thebaconnews.com
tramcobuilders.com
travelswithmk.com
tsostaff.com
tsostaff.net
valleyoakwealthmanagement.com
wanderingrandi.com
wernerfamilyfoundation.org
wmmconference.org

Other certificates including the domain name wernerfamilyfoundation.org

(limited to 100 certificates)
wernerfamilyfoundation.org
*.windsorcarpetcleaners.co.uk
wernerfamilyfoundation.org
customers.tigertech.net
*.1800uadoptus.com
customers.tigertech.net
customers.tigertech.net
www.wernerfamilyfoundation.org
www.wernerfamilyfoundation.org
wernerfamilyfoundation.org
*.sixprizes.com
customers.tigertech.net
*.midaminsurance.com
*.wernerfamilyfoundation.org
*.apextables.com
customers.tigertech.net
www.wernerfamilyfoundation.org
customers.tigertech.net
*.botzilla.com
customers.tigertech.net
www.wernerfamilyfoundation.org
*.kriqit.com
*.led.social
customers.tigertech.net
*.midaminsurance.com
*.kinderbrand.com
customers.tigertech.net
*.mcabeeshouseofskill.com
wernerfamilyfoundation.org
www.wernerfamilyfoundation.org
www.wernerfamilyfoundation.org
*.tophatcleaning.net
wernerfamilyfoundation.org
customers.tigertech.net
customers.tigertech.net
*.raybonpeds.com
wernerfamilyfoundation.org
wernerfamilyfoundation.org
wernerfamilyfoundation.org
customers.tigertech.net

Certificate

The complete raw certificate details for *.wernerfamilyfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL8DCCCtigAwIBAgISBKXCslsZQz49iHOhTg8wc3gXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTEwODI2MzFaFw0x
OTA5MDkwODI2MzFaMCcxJTAjBgNVBAMMHCoud2VybmVyZmFtaWx5Zm91bmRhdGlv
bi5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbCUXoqW7R2Mbx
z7lJ5Skvs356MdT99PbKK+eU5ZFfecWo+AKvY9Ch+Bc9I0rpcxswtlQBRHUzDHRc
j1ynfmFCSojIr96Sic1jVgGEf9fROEjjVfxRh2sICx2sW93QXgJBmcXDeTsHrhYZ
2VhVTLGyBKPgnBoW1Rmipzy4+65jsljyparVN0oC5P0RbmCKT3IrWwPyrcYof45/
HoT+enOOY1m4JH1Ce0CKdEtseZb6txsqTaJnpBFQCwhh1cHJG3f0moAwVPCYJmvU
J3dIfonUeIgSE+im0PRBrvjEGGsCoO3MxQpQNZDhvtyJsnitJAIycf8jYoPLLJDI
9izPnKLvAgMBAAGjggjxMIII7TAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBrB3aSf
YaK0DhUeZOlhcYgUb+NSMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wggalBgNVHREEggacMIIGmIIRKi5haXJhbmRhcHJl
cy5jb22CEyouYW1hbmRhc2Jha2VyeS5jb22CDyouYXJ0dXJlbGlhLmNvbYIbKi5i
YWNrdG90aGVjcnlwdG9mdXR1cmUuY29tghgqLmJsdWVzdGFyYXBvdGhlY2FyeS5j
b22CEiouZHJob3BwZW5mZWxkLmNvbYISKi5lY290ZWF0YWJsZXMuY29tghEqLmZv
b3R5Y29zbW9zLmNvbYIaKi5mb3J0aGVnb29kb2Z0aGVjYXVzZS5jb22CFyouZ2l2
ZWFuZHRha2VyZXNhbGUuY29tghIqLmd2ZmlyZXJlbGllZi5vcmeCIiouaG9saWRh
eW1hZ2ljZmVzdGl2YWxvZmxpZ2h0cy5uZXSCDyouaHVudGNhY2hlLmNvbYIaKi5p
bmdlbmllcmlhc3VzdGVudGFibGUubXiCCSouamNreS51c4ITKi5qZGJ1cmNoZGVz
aWduLmNvbYIJKi5qZWViLnVzghIqLmp1a2Vib3hoZXJvZXMudXOCGCouanVrZWJv
eGhlcm9lc21pYW1pLmNvbYIVKi5sZW5zYWJvam9uZWdvcm8uY29tghAqLmxsYW1p
dGFueWMuY29tgg8qLm1pbGQtbmluZS5jb22CFyoubm9vZGxlYW5kc2NyaWJibGUu
Y29tghcqLm9yaW9uem91dGVybGltaXRzLmNvbYITKi5vc2Nmb3VuZGF0aW9uLm9y
Z4IMKi5wbHVzZXkuY29tghQqLnJnY29tbWVyY2lhbC5idWlsZIITKi5yb2JlcnRh
c3J1bGVzLmNvbYITKi5zYWxseWFuZGNoaWNhLmNvbYIUKi5zY3JpcHRvbm9taWNv
bi5vcmeCFyouc2xlZXBoYXZlbmJlZGRpbmcuY29tgg4qLnNwYWNlbW9hLmNvbYIS
Ki50aGViYWNvbm5ld3MuY29tghQqLnRyYW1jb2J1aWxkZXJzLmNvbYITKi50cmF2
ZWxzd2l0aG1rLmNvbYIOKi50c29zdGFmZi5jb22CDioudHNvc3RhZmYubmV0gh8q
LnZhbGxleW9ha3dlYWx0aG1hbmFnZW1lbnQuY29tghQqLndhbmRlcmluZ3JhbmRp
LmNvbYIcKi53ZXJuZXJmYW1pbHlmb3VuZGF0aW9uLm9yZ4ITKi53bW1jb25mZXJl
bmNlLm9yZ4IPYWlyYW5kYXByZXMuY29tghFhbWFuZGFzYmFrZXJ5LmNvbYINYXJ0
dXJlbGlhLmNvbYIZYmFja3RvdGhlY3J5cHRvZnV0dXJlLmNvbYIWYmx1ZXN0YXJh
cG90aGVjYXJ5LmNvbYIQZHJob3BwZW5mZWxkLmNvbYIQZWNvdGVhdGFibGVzLmNv
bYIPZm9vdHljb3Ntb3MuY29tghhmb3J0aGVnb29kb2Z0aGVjYXVzZS5jb22CFWdp
dmVhbmR0YWtlcmVzYWxlLmNvbYIQZ3ZmaXJlcmVsaWVmLm9yZ4IgaG9saWRheW1h
Z2ljZmVzdGl2YWxvZmxpZ2h0cy5uZXSCDWh1bnRjYWNoZS5jb22CGGluZ2VuaWVy
aWFzdXN0ZW50YWJsZS5teIIHamNreS51c4IRamRidXJjaGRlc2lnbi5jb22CB2pl
ZWIudXOCEGp1a2Vib3hoZXJvZXMudXOCFmp1a2Vib3hoZXJvZXNtaWFtaS5jb22C
E2xlbnNhYm9qb25lZ29yby5jb22CDmxsYW1pdGFueWMuY29tgg1taWxkLW5pbmUu
Y29tghVub29kbGVhbmRzY3JpYmJsZS5jb22CFW9yaW9uem91dGVybGltaXRzLmNv
bYIRb3NjZm91bmRhdGlvbi5vcmeCCnBsdXNleS5jb22CEnJnY29tbWVyY2lhbC5i
dWlsZIIRcm9iZXJ0YXNydWxlcy5jb22CEXNhbGx5YW5kY2hpY2EuY29tghJzY3Jp
cHRvbm9taWNvbi5vcmeCFXNsZWVwaGF2ZW5iZWRkaW5nLmNvbYIMc3BhY2Vtb2Eu
Y29tghB0aGViYWNvbm5ld3MuY29tghJ0cmFtY29idWlsZGVycy5jb22CEXRyYXZl
bHN3aXRobWsuY29tggx0c29zdGFmZi5jb22CDHRzb3N0YWZmLm5ldIIddmFsbGV5
b2Frd2VhbHRobWFuYWdlbWVudC5jb22CEndhbmRlcmluZ3JhbmRpLmNvbYIad2Vy
bmVyZmFtaWx5Zm91bmRhdGlvbi5vcmeCEXdtbWNvbmZlcmVuY2Uub3JnMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFrRdxD6QAABAMA
RzBFAiEA0YSDBZdDIJkoxHDQ+pZ6rXCLKh3e6Z1p7kKg9yWadSoCIEo4ZyTm4W95
j5bXkTWuqXPRjgWz+bauDDtp/E/V79g4AHYAKTxRllTIOWW6qlD8WAfUt2+/WHop
ctykwwz05UVH9HgAAAFrRdxD0AAABAMARzBFAiAl8L3cxg5cahTi7NxFUErAZMn1
dyGftCurCBHuI0/PvwIhAN064+0y8tCAg4xA9jW5yt9weTMm4kJqy1tTmr181N/Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBi7sUvXZOY+yRDCGOQ/RlzvoaLWN8Cj/uIZkbK
IFNrarbMKfZrCVV5pWaFagJLosCVC7SmWmnXpmKqk2itRX2szda8NXpzBzRxIuNO
7MFR15DHaNIQs81vxrmrtOD6rtoIqzRZYVY9+bj8NSBW7vdjxpu/Oi0bfQ/1sZ5f
kdIE3e5nSf6Y29wrDrsXUG+NPG5mamfePhH4RDMd7fCpvNbQUcKb6eLeImHNbpbt
UtnROdBHf1zGayuta7LhY40bq79XUZkfNb8I8fLj0mPYnuRL7N7TQpiDoKf3Tx+Y
q92eLXtKfwbZct8Z/NhDCKTP3Y7XVuKcjBdIVQZn0Ud2hDqb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wlF6Klu0djG8c+5SeUp
L7N+ejHU/fT2yivnlOWRX3nFqPgCr2PQofgXPSNK6XMbMLZUAUR1Mwx0XI9cp35h
QkqIyK/ekonNY1YBhH/X0ThI41X8UYdrCAsdrFvd0F4CQZnFw3k7B64WGdlYVUyx
sgSj4JwaFtUZoqc8uPuuY7JY8qWq1TdKAuT9EW5gik9yK1sD8q3GKH+Ofx6E/npz
jmNZuCR9QntAinRLbHmW+rcbKk2iZ6QRUAsIYdXByRt39JqAMFTwmCZr1Cd3SH6J
1HiIEhPoptD0Qa74xBhrAqDtzMUKUDWQ4b7cibJ4rSQCMnH/I2KDyyyQyPYsz5yi
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404854530576719714671412533155750862878743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 08:26:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 08:26:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wernerfamilyfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27650761514427149602033558811317846423207531556153438554187510783830505669673197512410116943173028157684872969702828790075113033339834758379576366116634491429824057950069752812888773121015244804462686950096095981115547671260512974887432280576810073398469123666507412683513098342118399040218130758183196571946608721694064927579899192393114819393786474948947108760406597093406235713436093498623941738664624220023524878123301456118276278304701546529991055038316670777107709752291633363287118960082885591993765727588309300066845799677100049170165435207833019534795880921481308954969360249412381206461707265996179963159279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ac1dda49f61a2b40e151e64e9617188146fe352
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1692 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airandapres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amandasbakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arturelia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backtothecryptofuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluestarapothecary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drhoppenfeld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecoteatables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footycosmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forthegoodofthecause.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giveandtakeresale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gvfirerelief.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holidaymagicfestivaloflights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huntcache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingenieriasustentable.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jdburchdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeeb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jukeboxheroes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jukeboxheroesmiami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lensabojonegoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llamitanyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mild-nine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noodleandscribble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orionzouterlimits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oscfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plusey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rgcommercial.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robertasrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sallyandchica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scriptonomicon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleephavenbedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spacemoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebaconnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tramcobuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelswithmk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsostaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsostaff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valleyoakwealthmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wanderingrandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wernerfamilyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmmconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airandapres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amandasbakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arturelia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backtothecryptofuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluestarapothecary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drhoppenfeld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecoteatables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footycosmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forthegoodofthecause.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveandtakeresale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gvfirerelief.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidaymagicfestivaloflights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntcache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingenieriasustentable.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdburchdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeeb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jukeboxheroes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jukeboxheroesmiami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lensabojonegoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llamitanyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mild-nine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noodleandscribble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orionzouterlimits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plusey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgcommercial.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertasrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sallyandchica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptonomicon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleephavenbedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacemoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebaconnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tramcobuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelswithmk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsostaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsostaff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyoakwealthmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanderingrandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wernerfamilyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmmconference.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b45dc43e90000040300473045022100d18483059743209928c470d0fa967aad708b2a1ddee99d69ee42a0f7259a752a02204a386724e6e16f798f96d79135aea973d18e05b3f9b6ae0c3b69fc4fd5efd838007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b45dc43d00000040300473045022025f0bddcc60e5c6a14e2ecdc45504ac064c9f577219fb42bab0811ee234fcfbf022100dd3ae3ed32f2d080838c40f635b9cadf70793326e2426acb5b539abd7cd4dfd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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