magik.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:e3:90:24:c9:91:5c:b0:3b:c9:c3:d1:c6:74:a6:41:ff was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magik.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:e3:90:24:c9:91:5c:b0:3b:c9:c3:d1:c6:74:a6:41:ff
Serial Number (int): 325272143601423631302516586970825028420095
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:6d:29:f6:cf:51:ea:c1:e3:72:99:01:7d:2c:75:f4:b4:c6:95:b2
Fingerprint (sha256): 4f:31:fe:3f:72:7e:3c:9a:97:22:50:ed:2c:2b:81:de:8d:be:99:68:50:54:f8:55:53:2f:c3:1c:c3:f0:63:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magik.app

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magik.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

albawebstudio.com
alpha.nwzer.com
api.mimireader.com
app.arxegoz.com
app.okolea-international.com
app.socialfellows.io
app.trio.li
artcity.cz
beta.teatotal.app
blackstrikes.com
ccdev.care.ly
cdn.alanho.work
chachitech.com
chalkview.com
clickminer.toothpickfactory.net
contrastpharma.com
developer-overview.tk
english.markbratanov.com
events.banjoandfiddle.com
fanjoy.me
finance.thedomestichusband.com
findingeverest.co
ghettosquad.com
glitchfirestudios.com
hariwedsmouni.com
harrisonbrownllc.com
herojackpot.com
ih.hockeytech.com
itybityaesthetic.com
json-editor.tangramjs.com
kifliapp.com
kodrindonesia.com
leaguekit.com
m-pac-re.directrips.com
magik.app
mail.nextleveldeveloper.com
meinkafer.com
milkwala.in
mineogiacomo.com
mox-fit.com
mrc.skylab.bzh
mtstorio.app
njhwang.com
openforge.io
owner.playbaf.com
pac-re-agente.directrips.com
pac-re-backend.directrips.com
pac-re-hotel.directrips.com
playgeomax.com
progressiveweb.news
prontopay.app
pytex.net
rendichicas.akibaa.com
services.sisonkepnetwork.com
shahidkamal.ml
shippy.indiebash.io
stormwaterheatmap.org
takmos.com
test.app.slidesup.com
themastermindsband.com
tkn.fi
www.artcity.cz
www.atheistengineer.com
www.chachitech.com
www.customjournalapp.com
www.evochat.ru
www.fanjoy.me
www.findingeverest.co
www.goodsears.com
www.greenreports.com
www.hellomtb.bike
www.herodj.com
www.hidedomain.com
www.insiteapplications.com
www.ivansifrim.com
www.kevintonb.com
www.lamptt.com
www.laurakominek.com
www.leaguekit.com
www.lonegansnow.com
www.madewithfirebase.com
www.magik.app
www.malgudihut.com
www.meeple.gg
www.mtstorio.app
www.nimamehanian.com
www.ohalloranphotography.com
www.petjatouru.com
www.piazzetta-ilfico.com
www.progressiveweb.news
www.ronarudo.com
www.sandyandterence.com
www.takmos.com
www.taxinube.com
www.themastermindsband.com
www.thewholestoryproject.com
www.tkn.fi
www.toolvendorapp.com
www.wekeo-dias.com
www.ymcaprograms.co.za

Other certificates including the domain name magik.app

(limited to 100 certificates)
crm.diagnostiautos.com
admin.magik.app
beta.magik.app
tusegurosi.com.mx
web.magik.app
admin.magik.app
chidi.in
web.magik.app
sky.magik.app
richmond.magik.app
magik.app
uat.arthcloud.com
magik.app
magik.app
api.magik.app
www.musikalischesfenster.ch
api.magik.app
app.canweconnect.today
itakpoimut.info
licenciaconducir.cl
magik.app
magik.app
vivara.magik.app
www.magik.app
wilmer-ocampo.com
admin.magik.app
swc2018.alihen.xyz
magik.app
alwaseet-poultry.com
app.sundaymorning.co.in
admin.magik.app

Certificate

The complete raw certificate details for magik.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINyjCCDLKgAwIBAgISA7vjkCTJkVywO8nD0cZ0pkH/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MTkyMjQ0MzdaFw0x
ODA5MTcyMjQ0MzdaMBQxEjAQBgNVBAMTCW1hZ2lrLmFwcDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANgh0Zbm0IRcawhJIDdB/PpWUEFESjHAxfEEP2ZX
QGTWRB6aZLFtd+YoxJvvCJyZ9/A63kLez+UHgzgwDmsE2wsZhp6aEQicYitOarN3
d04aof1D6Sx4RY3o59/nqEaKqQSrHtbX/9ZlqJdTlvdUTemG/2esG/xJxN2fOE2O
Kmb2Zf6nkGKi70agvtm4JQTH9LcqKpWpFan+u4J6oMobtcEiGgLs2ILG7CACcvgA
p4sPGfM2QD2E/7/2YYLTsLUM4b4UPOLRvzOufNeEMT9VrPTA6pLjLgqY3gbk5Kc/
ppT+P5Mtfe1xJwPh6cQ+0gGD9WA4apiShIQQftbckjHGwKMCAwEAAaOCCt4wggra
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUPyYYfUM2A5M5nbtKn2zcFW2cW4AwHwYD
VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G
CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G
CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCC
B98GA1UdEQSCB9YwggfSghFhbGJhd2Vic3R1ZGlvLmNvbYIPYWxwaGEubnd6ZXIu
Y29tghJhcGkubWltaXJlYWRlci5jb22CD2FwcC5hcnhlZ296LmNvbYIcYXBwLm9r
b2xlYS1pbnRlcm5hdGlvbmFsLmNvbYIUYXBwLnNvY2lhbGZlbGxvd3MuaW+CC2Fw
cC50cmlvLmxpggphcnRjaXR5LmN6ghFiZXRhLnRlYXRvdGFsLmFwcIIQYmxhY2tz
dHJpa2VzLmNvbYINY2NkZXYuY2FyZS5seYIPY2RuLmFsYW5oby53b3Jrgg5jaGFj
aGl0ZWNoLmNvbYINY2hhbGt2aWV3LmNvbYIfY2xpY2ttaW5lci50b290aHBpY2tm
YWN0b3J5Lm5ldIISY29udHJhc3RwaGFybWEuY29tghVkZXZlbG9wZXItb3ZlcnZp
ZXcudGuCGGVuZ2xpc2gubWFya2JyYXRhbm92LmNvbYIZZXZlbnRzLmJhbmpvYW5k
ZmlkZGxlLmNvbYIJZmFuam95Lm1lgh5maW5hbmNlLnRoZWRvbWVzdGljaHVzYmFu
ZC5jb22CEWZpbmRpbmdldmVyZXN0LmNvgg9naGV0dG9zcXVhZC5jb22CFWdsaXRj
aGZpcmVzdHVkaW9zLmNvbYIRaGFyaXdlZHNtb3VuaS5jb22CFGhhcnJpc29uYnJv
d25sbGMuY29tgg9oZXJvamFja3BvdC5jb22CEWloLmhvY2tleXRlY2guY29tghRp
dHliaXR5YWVzdGhldGljLmNvbYIZanNvbi1lZGl0b3IudGFuZ3JhbWpzLmNvbYIM
a2lmbGlhcHAuY29tghFrb2RyaW5kb25lc2lhLmNvbYINbGVhZ3Vla2l0LmNvbYIX
bS1wYWMtcmUuZGlyZWN0cmlwcy5jb22CCW1hZ2lrLmFwcIIbbWFpbC5uZXh0bGV2
ZWxkZXZlbG9wZXIuY29tgg1tZWlua2FmZXIuY29tggttaWxrd2FsYS5pboIQbWlu
ZW9naWFjb21vLmNvbYILbW94LWZpdC5jb22CDm1yYy5za3lsYWIuYnpoggxtdHN0
b3Jpby5hcHCCC25qaHdhbmcuY29tggxvcGVuZm9yZ2UuaW+CEW93bmVyLnBsYXli
YWYuY29tghxwYWMtcmUtYWdlbnRlLmRpcmVjdHJpcHMuY29tgh1wYWMtcmUtYmFj
a2VuZC5kaXJlY3RyaXBzLmNvbYIbcGFjLXJlLWhvdGVsLmRpcmVjdHJpcHMuY29t
gg5wbGF5Z2VvbWF4LmNvbYITcHJvZ3Jlc3NpdmV3ZWIubmV3c4INcHJvbnRvcGF5
LmFwcIIJcHl0ZXgubmV0ghZyZW5kaWNoaWNhcy5ha2liYWEuY29tghxzZXJ2aWNl
cy5zaXNvbmtlcG5ldHdvcmsuY29tgg5zaGFoaWRrYW1hbC5tbIITc2hpcHB5Lmlu
ZGllYmFzaC5pb4IVc3Rvcm13YXRlcmhlYXRtYXAub3Jnggp0YWttb3MuY29tghV0
ZXN0LmFwcC5zbGlkZXN1cC5jb22CFnRoZW1hc3Rlcm1pbmRzYmFuZC5jb22CBnRr
bi5maYIOd3d3LmFydGNpdHkuY3qCF3d3dy5hdGhlaXN0ZW5naW5lZXIuY29tghJ3
d3cuY2hhY2hpdGVjaC5jb22CGHd3dy5jdXN0b21qb3VybmFsYXBwLmNvbYIOd3d3
LmV2b2NoYXQucnWCDXd3dy5mYW5qb3kubWWCFXd3dy5maW5kaW5nZXZlcmVzdC5j
b4IRd3d3Lmdvb2RzZWFycy5jb22CFHd3dy5ncmVlbnJlcG9ydHMuY29tghF3d3cu
aGVsbG9tdGIuYmlrZYIOd3d3Lmhlcm9kai5jb22CEnd3dy5oaWRlZG9tYWluLmNv
bYIad3d3Lmluc2l0ZWFwcGxpY2F0aW9ucy5jb22CEnd3dy5pdmFuc2lmcmltLmNv
bYIRd3d3LmtldmludG9uYi5jb22CDnd3dy5sYW1wdHQuY29tghR3d3cubGF1cmFr
b21pbmVrLmNvbYIRd3d3LmxlYWd1ZWtpdC5jb22CE3d3dy5sb25lZ2Fuc25vdy5j
b22CGHd3dy5tYWRld2l0aGZpcmViYXNlLmNvbYINd3d3Lm1hZ2lrLmFwcIISd3d3
Lm1hbGd1ZGlodXQuY29tgg13d3cubWVlcGxlLmdnghB3d3cubXRzdG9yaW8uYXBw
ghR3d3cubmltYW1laGFuaWFuLmNvbYIcd3d3Lm9oYWxsb3JhbnBob3RvZ3JhcGh5
LmNvbYISd3d3LnBldGphdG91cnUuY29tghh3d3cucGlhenpldHRhLWlsZmljby5j
b22CF3d3dy5wcm9ncmVzc2l2ZXdlYi5uZXdzghB3d3cucm9uYXJ1ZG8uY29tghd3
d3cuc2FuZHlhbmR0ZXJlbmNlLmNvbYIOd3d3LnRha21vcy5jb22CEHd3dy50YXhp
bnViZS5jb22CGnd3dy50aGVtYXN0ZXJtaW5kc2JhbmQuY29tghx3d3cudGhld2hv
bGVzdG9yeXByb2plY3QuY29tggp3d3cudGtuLmZpghV3d3cudG9vbHZlbmRvcmFw
cC5jb22CEnd3dy53ZWtlby1kaWFzLmNvbYIWd3d3LnltY2Fwcm9ncmFtcy5jby56
YTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC
AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g
YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0
aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5
cHQub3JnL3JlcG9zaXRvcnkvMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAKTxR
llTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFkGm+VzgAABAMARzBFAiEA
s07NW2KQ/EVDZYZuhleMyHadqAE1dmi60cz3d1Trp/4CIH2xOOBr0H4PtmLgkEq2
TwItLjqFscN2lqcrwV8NgFwcAHYA23Sv7ssp7LH+yj5xbSzluaq7NveEcYPHXZ1P
N7Yfv2QAAAFkGm+WqgAABAMARzBFAiEAjjhUdAMWj8oHiEYMQ8FRxdWbPfU/UUc0
yd+s8TK2bnICIBQLzeCVbbNQN2rUYMsNTkNDfKNkCMtkIQDJxZSGN+KhMA0GCSqG
SIb3DQEBCwUAA4IBAQA1Fr+hKpPFdGtndeJ5cx/IdURkJ0hUquS7VZjBmxXuo1Bc
2woVUZRyKX4cMGUmdQ7UslCdtgEQu/PyXzGLg5j73FLrARZenq2ROo80Haq1kmG3
5u2/oUc1eINCwPQO71lXzGMV1oHumWb9KPT0wAilBgr6Hz1+AQ+43eq76cM6Kqjw
BAGe8+Hi7V3NIZDloDGTHOCnQqw3uzTJCl9X6uJ0HkgvD1q1UC5K43SxwA0HMHUi
YsAvj+i1gGzmDgCW4KWC+FoFZL/W7KY1Jd6IG8DllLf83ThROqhiVX5i/Qg+1do+
JIn3fChykCUjz1qHvkWMviaDkdaNCQJJ899q8RlY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325272143601423631302516586970825028420095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-19 22:44:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 22:44:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magik.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2006 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albawebstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.nwzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mimireader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.arxegoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.okolea-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.socialfellows.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.trio.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artcity.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.teatotal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstrikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccdev.care.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.alanho.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chachitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chalkview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickminer.toothpickfactory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrastpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer-overview.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.markbratanov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.banjoandfiddle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanjoy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.thedomestichusband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findingeverest.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghettosquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glitchfirestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hariwedsmouni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisonbrownllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herojackpot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ih.hockeytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itybityaesthetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'json-editor.tangramjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kifliapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodrindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaguekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-pac-re.directrips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magik.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nextleveldeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinkafer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkwala.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineogiacomo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mox-fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.skylab.bzh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtstorio.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njhwang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openforge.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owner.playbaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac-re-agente.directrips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac-re-backend.directrips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac-re-hotel.directrips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playgeomax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressiveweb.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prontopay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pytex.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rendichicas.akibaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.sisonkepnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shahidkamal.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippy.indiebash.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stormwaterheatmap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.app.slidesup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themastermindsband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkn.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artcity.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atheistengineer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chachitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customjournalapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evochat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanjoy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findingeverest.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodsears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellomtb.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herodj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hidedomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insiteapplications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivansifrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevintonb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lamptt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurakominek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leaguekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lonegansnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madewithfirebase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magik.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malgudihut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeple.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtstorio.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nimamehanian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohalloranphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petjatouru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piazzetta-ilfico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progressiveweb.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronarudo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandyandterence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxinube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themastermindsband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewholestoryproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkn.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toolvendorapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wekeo-dias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymcaprograms.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001641a6f95ce0000040300473045022100b34ecd5b6290fc454365866e86578cc8769da801357668bad1ccf77754eba7fe02207db138e06bd07e0fb662e0904ab64f022d2e3a85b1c37696a72bc15f0d805c1c007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001641a6f96aa00000403004730450221008e38547403168fca0788460c43c151c5d59b3df53f514734c9dfacf132b66e720220140bcde0956db350376ad460cb0d4e43437ca36408cb642100c9c5948637e2a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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