ufka.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:3e:66:52:6d:d2:f4:44:58:56:73:fa:42:40:86:5c:cc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ufka.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:3e:66:52:6d:d2:f4:44:58:56:73:fa:42:40:86:5c:cc
Serial Number (int): 318587238859875381504461498611314092039372
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:8f:2e:47:d3:6e:14:89:63:bf:39:6d:35:52:dc:2b:6c:3f:47:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:5e:3e:dc:63:a8:23:c6:f8:03:33:cc:73:df:8f:a0:e5:26:c4:57
Fingerprint (sha256): 4e:be:92:d4:50:f0:ad:ed:fe:5e:b8:96:a3:44:1a:f1:bd:90:33:08:02:ed:bb:d3:21:f5:80:46:70:c4:87:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ufka.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ufka.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1776.store
acemi.click
affordablepamperedpets.com
albuquerquestemcelltherapy.com
arpyx.com
berlinmachine.com
boujeeecosmetics.com
brainsharing.com
cartheory.com
casinoautomaty.com
coloradospringsstemcelltherapy.com
cryptsa.com
dashdart.com
dctitlecompany.com
denversolarenergy.com
detroitsportsmedicine.com
fatcat.wine
fixedassetinventory.com
fullybriefed.com
fulvicfocus.com
guiltfreeindulgence.com
harrisonconstructions.com
hospital-cost.com
indianapolissportstherapy.com
kansassportstherapy.com
lovesavedus.org
makanui.com
mihkel.com
minneapolissportstherapy.com
naboe.com
negozitelefonia.com
neomrecharge.com
newhampshireautoaccidentattorneys.com
nycpotlounge.com
oooreward.com
paleogoody.com
phillyautoaccidentlaw.com
placguard.com
plateletplasma.com
renostemcelltherapy.com
stemcelldoctordirectory.com
stowdentistry.com
techifat.com
thintimatefabric.com
ufka.com
utahsportsphysicians.com
vermontmonthly.com
vox-nyco.com
www.1776.store
www.acemi.click
www.affordablepamperedpets.com
www.albuquerquestemcelltherapy.com
www.arpyx.com
www.berlinmachine.com
www.boujeeecosmetics.com
www.brainsharing.com
www.cartheory.com
www.casinoautomaty.com
www.coloradospringsstemcelltherapy.com
www.cryptsa.com
www.dashdart.com
www.dctitlecompany.com
www.denversolarenergy.com
www.detroitsportsmedicine.com
www.fatcat.wine
www.fixedassetinventory.com
www.fullybriefed.com
www.fulvicfocus.com
www.guiltfreeindulgence.com
www.harrisonconstructions.com
www.hospital-cost.com
www.indianapolissportstherapy.com
www.kansassportstherapy.com
www.lovesavedus.org
www.makanui.com
www.mihkel.com
www.minneapolissportstherapy.com
www.naboe.com
www.negozitelefonia.com
www.neomrecharge.com
www.newhampshireautoaccidentattorneys.com
www.nycpotlounge.com
www.oooreward.com
www.paleogoody.com
www.phillyautoaccidentlaw.com
www.placguard.com
www.plateletplasma.com
www.renostemcelltherapy.com
www.stemcelldoctordirectory.com
www.stowdentistry.com
www.techifat.com
www.thintimatefabric.com
www.ufka.com
www.utahsportsphysicians.com
www.vermontmonthly.com
www.vox-nyco.com
www.yaniriq.com
www.ziptourl.com
yaniriq.com
ziptourl.com

Other certificates including the domain name ufka.com

(limited to 100 certificates)
www.newyorkstemcellclinic.com
statenproperties.com
is58.com
lh.id
eckomanifesto.org
www.argument.id
www.hydrascape.com
www.optisend.com
www.non-geneticallymodifiedfood.com
ufka.com
reviewsu.com
lightningtorch.world
ufka.com
hysontea.com
leg3.com
www.gmohealthhazard.com
shaadilgbtqia.com
indianrealestate.mobi
ufka.com
www.seatingg.com
refurbishedvacuum.com
mountain-house.com
exploredrivegrowth.org
healthhistory.tech

Certificate

The complete raw certificate details for ufka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN3TCCDMWgAwIBAgISA6g+ZlJt0vREWFZz+kJAhlzMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDcwMDQ4NDRaFw0y
MDA0MDYwMDQ4NDRaMBMxETAPBgNVBAMTCHVma2EuY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAn1w1r/J0ShP8hkb5AhxdPZNW8r4OtPM9HeXot+pd
WVWDhXsC+0c6sIzn/VRpbMPmV9GfFaSffPmqjdtYmBAO7WnRJzZiyJqmvC1yxaxB
A/CCIo4jjD1qpebSBly94jZOtY7nhBFYO2N4EBh73dxypKVgn4KbZrRdq6ktfIwY
kTXqj9GKs62r7TBbr69GO0XJj4inqP1+MYpNBstzh3Esq9Hq2p38CTBkPgHR13JJ
lSOzGArlb183/O20ZcZ7qlV7hBf/rfIwC0zVXUQI5Y/ViyHZRL49PC5oXsC8axI9
w16yVxXFTdw3qQc4LUiIzhNCT67EhuoTLE5jh8b0r5KA4wIDAQABo4IK8jCCCu4w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT0jy5H024UiWO/OW01UtwrbD9H/TAfBgNV
HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI
KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI
KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIII
pwYDVR0RBIIInjCCCJqCCjE3NzYuc3RvcmWCC2FjZW1pLmNsaWNrghphZmZvcmRh
YmxlcGFtcGVyZWRwZXRzLmNvbYIeYWxidXF1ZXJxdWVzdGVtY2VsbHRoZXJhcHku
Y29tgglhcnB5eC5jb22CEWJlcmxpbm1hY2hpbmUuY29tghRib3VqZWVlY29zbWV0
aWNzLmNvbYIQYnJhaW5zaGFyaW5nLmNvbYINY2FydGhlb3J5LmNvbYISY2FzaW5v
YXV0b21hdHkuY29tgiJjb2xvcmFkb3NwcmluZ3NzdGVtY2VsbHRoZXJhcHkuY29t
ggtjcnlwdHNhLmNvbYIMZGFzaGRhcnQuY29tghJkY3RpdGxlY29tcGFueS5jb22C
FWRlbnZlcnNvbGFyZW5lcmd5LmNvbYIZZGV0cm9pdHNwb3J0c21lZGljaW5lLmNv
bYILZmF0Y2F0LndpbmWCF2ZpeGVkYXNzZXRpbnZlbnRvcnkuY29tghBmdWxseWJy
aWVmZWQuY29tgg9mdWx2aWNmb2N1cy5jb22CF2d1aWx0ZnJlZWluZHVsZ2VuY2Uu
Y29tghloYXJyaXNvbmNvbnN0cnVjdGlvbnMuY29tghFob3NwaXRhbC1jb3N0LmNv
bYIdaW5kaWFuYXBvbGlzc3BvcnRzdGhlcmFweS5jb22CF2thbnNhc3Nwb3J0c3Ro
ZXJhcHkuY29tgg9sb3Zlc2F2ZWR1cy5vcmeCC21ha2FudWkuY29tggptaWhrZWwu
Y29tghxtaW5uZWFwb2xpc3Nwb3J0c3RoZXJhcHkuY29tggluYWJvZS5jb22CE25l
Z296aXRlbGVmb25pYS5jb22CEG5lb21yZWNoYXJnZS5jb22CJW5ld2hhbXBzaGly
ZWF1dG9hY2NpZGVudGF0dG9ybmV5cy5jb22CEG55Y3BvdGxvdW5nZS5jb22CDW9v
b3Jld2FyZC5jb22CDnBhbGVvZ29vZHkuY29tghlwaGlsbHlhdXRvYWNjaWRlbnRs
YXcuY29tgg1wbGFjZ3VhcmQuY29tghJwbGF0ZWxldHBsYXNtYS5jb22CF3Jlbm9z
dGVtY2VsbHRoZXJhcHkuY29tghtzdGVtY2VsbGRvY3RvcmRpcmVjdG9yeS5jb22C
EXN0b3dkZW50aXN0cnkuY29tggx0ZWNoaWZhdC5jb22CFHRoaW50aW1hdGVmYWJy
aWMuY29tggh1ZmthLmNvbYIYdXRhaHNwb3J0c3BoeXNpY2lhbnMuY29tghJ2ZXJt
b250bW9udGhseS5jb22CDHZveC1ueWNvLmNvbYIOd3d3LjE3NzYuc3RvcmWCD3d3
dy5hY2VtaS5jbGlja4Ied3d3LmFmZm9yZGFibGVwYW1wZXJlZHBldHMuY29tgiJ3
d3cuYWxidXF1ZXJxdWVzdGVtY2VsbHRoZXJhcHkuY29tgg13d3cuYXJweXguY29t
ghV3d3cuYmVybGlubWFjaGluZS5jb22CGHd3dy5ib3VqZWVlY29zbWV0aWNzLmNv
bYIUd3d3LmJyYWluc2hhcmluZy5jb22CEXd3dy5jYXJ0aGVvcnkuY29tghZ3d3cu
Y2FzaW5vYXV0b21hdHkuY29tgiZ3d3cuY29sb3JhZG9zcHJpbmdzc3RlbWNlbGx0
aGVyYXB5LmNvbYIPd3d3LmNyeXB0c2EuY29tghB3d3cuZGFzaGRhcnQuY29tghZ3
d3cuZGN0aXRsZWNvbXBhbnkuY29tghl3d3cuZGVudmVyc29sYXJlbmVyZ3kuY29t
gh13d3cuZGV0cm9pdHNwb3J0c21lZGljaW5lLmNvbYIPd3d3LmZhdGNhdC53aW5l
ght3d3cuZml4ZWRhc3NldGludmVudG9yeS5jb22CFHd3dy5mdWxseWJyaWVmZWQu
Y29tghN3d3cuZnVsdmljZm9jdXMuY29tght3d3cuZ3VpbHRmcmVlaW5kdWxnZW5j
ZS5jb22CHXd3dy5oYXJyaXNvbmNvbnN0cnVjdGlvbnMuY29tghV3d3cuaG9zcGl0
YWwtY29zdC5jb22CIXd3dy5pbmRpYW5hcG9saXNzcG9ydHN0aGVyYXB5LmNvbYIb
d3d3LmthbnNhc3Nwb3J0c3RoZXJhcHkuY29tghN3d3cubG92ZXNhdmVkdXMub3Jn
gg93d3cubWFrYW51aS5jb22CDnd3dy5taWhrZWwuY29tgiB3d3cubWlubmVhcG9s
aXNzcG9ydHN0aGVyYXB5LmNvbYINd3d3Lm5hYm9lLmNvbYIXd3d3Lm5lZ296aXRl
bGVmb25pYS5jb22CFHd3dy5uZW9tcmVjaGFyZ2UuY29tgil3d3cubmV3aGFtcHNo
aXJlYXV0b2FjY2lkZW50YXR0b3JuZXlzLmNvbYIUd3d3Lm55Y3BvdGxvdW5nZS5j
b22CEXd3dy5vb29yZXdhcmQuY29tghJ3d3cucGFsZW9nb29keS5jb22CHXd3dy5w
aGlsbHlhdXRvYWNjaWRlbnRsYXcuY29tghF3d3cucGxhY2d1YXJkLmNvbYIWd3d3
LnBsYXRlbGV0cGxhc21hLmNvbYIbd3d3LnJlbm9zdGVtY2VsbHRoZXJhcHkuY29t
gh93d3cuc3RlbWNlbGxkb2N0b3JkaXJlY3RvcnkuY29tghV3d3cuc3Rvd2RlbnRp
c3RyeS5jb22CEHd3dy50ZWNoaWZhdC5jb22CGHd3dy50aGludGltYXRlZmFicmlj
LmNvbYIMd3d3LnVma2EuY29tghx3d3cudXRhaHNwb3J0c3BoeXNpY2lhbnMuY29t
ghZ3d3cudmVybW9udG1vbnRobHkuY29tghB3d3cudm94LW55Y28uY29tgg93d3cu
eWFuaXJpcS5jb22CEHd3dy56aXB0b3VybC5jb22CC3lhbmlyaXEuY29tggx6aXB0
b3VybC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6y
cwAAAW99sJ95AAAEAwBGMEQCIGd+IulUMkEdVshEwySXKAdewbLuhOwBBB16z95C
eyxyAiA+5SdRYIOlkZ/pMLy+4EM0JcreHGjEx4pkyzbPrG2KdAB2ALIeBcyLos2K
IE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABb32wn2gAAAQDAEcwRQIgQsxeppf0
LYQqM8I0QI1J9JpT8Ce6rlrskkh2uoH2VOcCIQDYY0EyTYDc8W/xGurnbSO2CdJW
iKsJiF1LNVey0kIZ4zANBgkqhkiG9w0BAQsFAAOCAQEAMDsSInpzE7teTWWvjJoW
1oxP5q9uOMj5obhyfdTLCWm4ycgYJcO8Cyy+cvHPBcUpW0IeMfKdIWW9aVY0sTQy
yjWNCygofkKkOPGkL8qyWK42PaV4qRr1zITkpmCJXE1QyafhnKTrTAQbkmyjFOWY
E2qPVGpE/HJ5d7C+oJyVsA0hbi3UHeGXwA79uLvdI6ylgfDn9YvRjk3T8P07Hb2b
mMTsjF1oNOy8oOKn5FxS2oMd/fHxbqJn9GrlwcJzkkYd2CXIObEY11egoYl0wywH
rq9L6coTerQIdH62qkFOP/X31xB8Y3ll0Qsv2MM6biB7AOWcZYbJCGJQjQbpSa5w
uQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1w1r/J0ShP8hkb5Ahxd
PZNW8r4OtPM9HeXot+pdWVWDhXsC+0c6sIzn/VRpbMPmV9GfFaSffPmqjdtYmBAO
7WnRJzZiyJqmvC1yxaxBA/CCIo4jjD1qpebSBly94jZOtY7nhBFYO2N4EBh73dxy
pKVgn4KbZrRdq6ktfIwYkTXqj9GKs62r7TBbr69GO0XJj4inqP1+MYpNBstzh3Es
q9Hq2p38CTBkPgHR13JJlSOzGArlb183/O20ZcZ7qlV7hBf/rfIwC0zVXUQI5Y/V
iyHZRL49PC5oXsC8axI9w16yVxXFTdw3qQc4LUiIzhNCT67EhuoTLE5jh8b0r5KA
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318587238859875381504461498611314092039372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 00:48:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 00:48:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ufka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20117360795259236362429836870237878421522822475442694248821429670446969879893118563236916620066221245791323315377983605866056724088731550699564010409641563909743533718761418856563992080957082118261595871717114380891151256872677874999726820459047495846340117900518005204502247093340877246245109064165948020387641249305996409100212531219490586746008858583049685843332630348142548101500428474374737009296342141312417293080607147824994796132661401271835059671586280929789888262040059776340873597437855448516130595733860588110254036155972831011312290880241014400921292518341747063532985528652762629340583386245329438540003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f48f2e47d36e148963bf396d3552dc2b6c3f47fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1776.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acemi.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordablepamperedpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albuquerquestemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arpyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boujeeecosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainsharing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartheory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoautomaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradospringsstemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashdart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctitlecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denversolarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroitsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatcat.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixedassetinventory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullybriefed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulvicfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiltfreeindulgence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisonconstructions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospital-cost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianapolissportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansassportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovesavedus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makanui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mihkel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneapolissportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negozitelefonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neomrecharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshireautoaccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycpotlounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oooreward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleogoody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillyautoaccidentlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plateletplasma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renostemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcelldoctordirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stowdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techifat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thintimatefabric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahsportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermontmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vox-nyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1776.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acemi.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affordablepamperedpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albuquerquestemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arpyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boujeeecosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainsharing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartheory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinoautomaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradospringsstemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dashdart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dctitlecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denversolarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detroitsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatcat.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixedassetinventory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullybriefed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fulvicfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiltfreeindulgence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrisonconstructions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospital-cost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianapolissportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansassportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovesavedus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makanui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mihkel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minneapolissportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naboe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.negozitelefonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neomrecharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhampshireautoaccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nycpotlounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oooreward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paleogoody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillyautoaccidentlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plateletplasma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renostemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcelldoctordirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stowdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techifat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thintimatefabric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahsportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vox-nyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yaniriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziptourl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaniriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziptourl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f7db09f7900000403004630440220677e22e95432411d56c844c3249728075ec1b2ee84ec01041d7acfde427b2c7202203ee527516083a5919fe930bcbee0433425cade1c68c4c78a64cb36cfac6d8a74007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7db09f680000040300473045022042cc5ea697f42d842a33c234408d49f49a53f027baae5aec924876ba81f654e7022100d86341324d80dcf16ff11aeae76d23b609d25688ab09885d4b3557b2d24219e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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