alphalion.goprimer.com

Issued by R3

About this certificate

This digital certificate with serial number 04:da:4f:a3:39:30:10:19:b9:f4:74:60:02:cc:7f:d3:32:10 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alphalion.goprimer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:da:4f:a3:39:30:10:19:b9:f4:74:60:02:cc:7f:d3:32:10
Serial Number (int): 422736556231765803222653838505685325918736
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8d:44:f3:07:45:f6:8e:23:92:4f:89:ea:1f:84:94:b7:74:91:1b:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:4b:8d:f4:6a:da:d9:fd:65:5c:01:60:50:5d:77:ff:2b:e2:fe:2c
Fingerprint (sha256): 4f:e3:e8:cb:65:13:66:80:f2:4c:5f:37:51:bc:ca:e3:50:66:cf:fe:71:05:d1:64:67:6c:fa:a2:76:ff:f3:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alphalion.goprimer.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alphalion.goprimer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alphalion.goprimer.com
apostrophe.goprimer.com
atolla.goprimer.com
billcom.goprimer.com
buy.letsbld.com
cameo.goprimer.com
cuemath.goprimer.com
curalife.goprimer.com
cushion.goprimer.com
cutbackcoach.goprimer.com
dario.goprimer.com
discover.fieldtriphealth.com
diversyfund.goprimer.com
evernow.goprimer.com
evernow2.goprimer.com
explore.wineaccess.com
felixforyou.goprimer.com
fieldtriphealth.goprimer.com
fiton.goprimer.com
forhims.goprimer.com
gainful.goprimer.com
get.fitonapp.com
get.forhims.com
get.metabolicrenewal.com
get.monarchmoney.com
get.montikids.com
get.noom.com
getresults.iloveskininc.us
go.gainful.com
hawthorne.goprimer.com
invest.diversyfund.com
katkin.goprimer.com
ladder.goprimer.com
langehair.goprimer.com
lifeprofitness.goprimer.com
liveclass.cuemath.com
metabolicrenewal.goprimer.com
modernfertility.goprimer.com
monarchmoney.goprimer.com
montikids.goprimer.com
mysteryscience.goprimer.com
offer.mydario.com
otter.goprimer.com
peachystudio.goprimer.com
picsart.goprimer.com
prowritingaid.goprimer.com
radfordbeauty.goprimer.com
rb.victoriaradford.com
rocksbox.goprimer.com
sans.goprimer.com
savvy.goprimer.com
secure.goprimer.com
shop.alphalion.com
signup.bill.com
skininc.goprimer.com
start.farmsteadapp.com
start.getsunday.com
subscribe.rocksbox.com
sunday.goprimer.com
thefeed.goprimer.com
therapynotebooks.goprimer.com
triplebyte.goprimer.com
trufora.goprimer.com
try-app.go.insure
try.apostrophe.com
try.atolla.co
try.breathesans.com
try.cameo.com
try.curalife.com
try.cushion.ai
try.cutbackcoach.com
try.evernow.co
try.evernow.com
try.felixforyou.ca
try.forhers.com
try.hawthorne.co
try.joinladder.com
try.katkin.club
try.langehair.com
try.lifeprofitness.com
try.madison-reed.com
try.modernfertility.com
try.mysteryscience.com
try.otter.ai
try.peachystudio.com
try.picsart.com
try.prowritingaid.com
try.savvy.insure
try.thefeed.com
try.therapynotebooks.com
try.triplebyte.com
try.trufora.com
try.upstep.com
try.wildfang.com
upstep.goprimer.com
wildfang.goprimer.com
wineaccess.goprimer.com

Other certificates including the domain name goprimer.com

(limited to 100 certificates)
apostrophe.goprimer.com
tls.automattic.com
academia.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
getapp.in
getapp.in
5000772504.goprimer.co
allwellbeauty.goprimer.com
alphalion.goprimer.com
apostrophe.goprimer.com
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
alphalion.goprimer.com
allwellbeauty.goprimer.com
5000772504.goprimer.co
agirlnamedotis.goprimer.com
aj1.goprimer.co
getapp.in
goprimer.com
buy.letsbld.com
apostrophe.goprimer.com
tls.automattic.com
getapp.in
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
agirlnamedotis.goprimer.com
aj1.goprimer.co
goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
alphalion.goprimer.com
alphalion.goprimer.com
buy.letsbld.com
tls.automattic.com
agirlnamedotis.goprimer.com
getapp.in
apostrophe.goprimer.com
getapp.in
ios.goprimer.com
allwellbeauty.goprimer.com
*.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
help.goprimer.com
apostrophe.goprimer.com
apostrophe.goprimer.com
academia.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
agirlnamedotis.goprimer.com
getapp.in
getapp.in
ios.goprimer.com
android.goprimer.com
getapp.in
allwellbeauty.goprimer.com
agirlnamedotis.goprimer.com
getapp.in
tls.automattic.com
allwellbeauty.goprimer.com
getapp.in
alphalion.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
agirlnamedotis.goprimer.com
buy.letsbld.com
agirlnamedotis.goprimer.com
tls.automattic.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
allwellbeauty.goprimer.com
alphalion.goprimer.com
agirlnamedotis.goprimer.com
allwellbeauty.goprimer.com
aj.goprimer.co
getapp.in
apostrophe.goprimer.com
alphalion.goprimer.com
getapp.in
apostrophe.goprimer.com
help.goprimer.com
5000772504.goprimer.co
alphalion.goprimer.com
tls.automattic.com
getapp.in
getapp.in
allwellbeauty.goprimer.com
getapp.in
getapp.in

Certificate

The complete raw certificate details for alphalion.goprimer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINZDCCDEygAwIBAgISBNpPozkwEBm59HRgAsx/0zIQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA3MjkxNDA1MDFaFw0yMTEwMjcxNDA0NTlaMCExHzAdBgNVBAMT
FmFscGhhbGlvbi5nb3ByaW1lci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDoR9OwQ1kRGksy83h9xitkz5IoUhzUfWvneo/ekn+HVay/Y3duujet
zK3WH/U571py1cwfY+hhINmlTM5BE8v2W9w5hS05DU3KwwodYn8L2MTpR4YbMLOS
aAGV/s+yo9nmDNl4CwkBTKcjt7YO7qA1ea7z2/EUYxlCTXWI8SfB6jO1VzLlOthK
xMB0swI43NwoV6rWdM+4jH9VxGdCo60xNkG9cTyZ0weNgDW5CPzWtlNY+cRwxKOD
BYZJ+pnTNJgYwMnNOtfsGjXS4ltJSpRgsYMQgPb8D0dSZmXjPZ6bCox1B8CcNAw/
zDv9yg9GUlY820QDVR1p26mTcNiT++FDAgMBAAGjggqDMIIKfzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFI1E8wdF9o4jkk+J6h+ElLd0kRtXMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIIIUgYDVR0RBIIISTCCCEWCFmFscGhhbGlvbi5nb3ByaW1lci5j
b22CF2Fwb3N0cm9waGUuZ29wcmltZXIuY29tghNhdG9sbGEuZ29wcmltZXIuY29t
ghRiaWxsY29tLmdvcHJpbWVyLmNvbYIPYnV5LmxldHNibGQuY29tghJjYW1lby5n
b3ByaW1lci5jb22CFGN1ZW1hdGguZ29wcmltZXIuY29tghVjdXJhbGlmZS5nb3By
aW1lci5jb22CFGN1c2hpb24uZ29wcmltZXIuY29tghljdXRiYWNrY29hY2guZ29w
cmltZXIuY29tghJkYXJpby5nb3ByaW1lci5jb22CHGRpc2NvdmVyLmZpZWxkdHJp
cGhlYWx0aC5jb22CGGRpdmVyc3lmdW5kLmdvcHJpbWVyLmNvbYIUZXZlcm5vdy5n
b3ByaW1lci5jb22CFWV2ZXJub3cyLmdvcHJpbWVyLmNvbYIWZXhwbG9yZS53aW5l
YWNjZXNzLmNvbYIYZmVsaXhmb3J5b3UuZ29wcmltZXIuY29tghxmaWVsZHRyaXBo
ZWFsdGguZ29wcmltZXIuY29tghJmaXRvbi5nb3ByaW1lci5jb22CFGZvcmhpbXMu
Z29wcmltZXIuY29tghRnYWluZnVsLmdvcHJpbWVyLmNvbYIQZ2V0LmZpdG9uYXBw
LmNvbYIPZ2V0LmZvcmhpbXMuY29tghhnZXQubWV0YWJvbGljcmVuZXdhbC5jb22C
FGdldC5tb25hcmNobW9uZXkuY29tghFnZXQubW9udGlraWRzLmNvbYIMZ2V0Lm5v
b20uY29tghpnZXRyZXN1bHRzLmlsb3Zlc2tpbmluYy51c4IOZ28uZ2FpbmZ1bC5j
b22CFmhhd3Rob3JuZS5nb3ByaW1lci5jb22CFmludmVzdC5kaXZlcnN5ZnVuZC5j
b22CE2thdGtpbi5nb3ByaW1lci5jb22CE2xhZGRlci5nb3ByaW1lci5jb22CFmxh
bmdlaGFpci5nb3ByaW1lci5jb22CG2xpZmVwcm9maXRuZXNzLmdvcHJpbWVyLmNv
bYIVbGl2ZWNsYXNzLmN1ZW1hdGguY29tgh1tZXRhYm9saWNyZW5ld2FsLmdvcHJp
bWVyLmNvbYIcbW9kZXJuZmVydGlsaXR5LmdvcHJpbWVyLmNvbYIZbW9uYXJjaG1v
bmV5LmdvcHJpbWVyLmNvbYIWbW9udGlraWRzLmdvcHJpbWVyLmNvbYIbbXlzdGVy
eXNjaWVuY2UuZ29wcmltZXIuY29tghFvZmZlci5teWRhcmlvLmNvbYISb3R0ZXIu
Z29wcmltZXIuY29tghlwZWFjaHlzdHVkaW8uZ29wcmltZXIuY29tghRwaWNzYXJ0
LmdvcHJpbWVyLmNvbYIacHJvd3JpdGluZ2FpZC5nb3ByaW1lci5jb22CGnJhZGZv
cmRiZWF1dHkuZ29wcmltZXIuY29tghZyYi52aWN0b3JpYXJhZGZvcmQuY29tghVy
b2Nrc2JveC5nb3ByaW1lci5jb22CEXNhbnMuZ29wcmltZXIuY29tghJzYXZ2eS5n
b3ByaW1lci5jb22CE3NlY3VyZS5nb3ByaW1lci5jb22CEnNob3AuYWxwaGFsaW9u
LmNvbYIPc2lnbnVwLmJpbGwuY29tghRza2luaW5jLmdvcHJpbWVyLmNvbYIWc3Rh
cnQuZmFybXN0ZWFkYXBwLmNvbYITc3RhcnQuZ2V0c3VuZGF5LmNvbYIWc3Vic2Ny
aWJlLnJvY2tzYm94LmNvbYITc3VuZGF5LmdvcHJpbWVyLmNvbYIUdGhlZmVlZC5n
b3ByaW1lci5jb22CHXRoZXJhcHlub3RlYm9va3MuZ29wcmltZXIuY29tghd0cmlw
bGVieXRlLmdvcHJpbWVyLmNvbYIUdHJ1Zm9yYS5nb3ByaW1lci5jb22CEXRyeS1h
cHAuZ28uaW5zdXJlghJ0cnkuYXBvc3Ryb3BoZS5jb22CDXRyeS5hdG9sbGEuY2+C
E3RyeS5icmVhdGhlc2Fucy5jb22CDXRyeS5jYW1lby5jb22CEHRyeS5jdXJhbGlm
ZS5jb22CDnRyeS5jdXNoaW9uLmFpghR0cnkuY3V0YmFja2NvYWNoLmNvbYIOdHJ5
LmV2ZXJub3cuY2+CD3RyeS5ldmVybm93LmNvbYISdHJ5LmZlbGl4Zm9yeW91LmNh
gg90cnkuZm9yaGVycy5jb22CEHRyeS5oYXd0aG9ybmUuY2+CEnRyeS5qb2lubGFk
ZGVyLmNvbYIPdHJ5LmthdGtpbi5jbHVighF0cnkubGFuZ2VoYWlyLmNvbYIWdHJ5
LmxpZmVwcm9maXRuZXNzLmNvbYIUdHJ5Lm1hZGlzb24tcmVlZC5jb22CF3RyeS5t
b2Rlcm5mZXJ0aWxpdHkuY29tghZ0cnkubXlzdGVyeXNjaWVuY2UuY29tggx0cnku
b3R0ZXIuYWmCFHRyeS5wZWFjaHlzdHVkaW8uY29tgg90cnkucGljc2FydC5jb22C
FXRyeS5wcm93cml0aW5nYWlkLmNvbYIQdHJ5LnNhdnZ5Lmluc3VyZYIPdHJ5LnRo
ZWZlZWQuY29tghh0cnkudGhlcmFweW5vdGVib29rcy5jb22CEnRyeS50cmlwbGVi
eXRlLmNvbYIPdHJ5LnRydWZvcmEuY29tgg50cnkudXBzdGVwLmNvbYIQdHJ5Lndp
bGRmYW5nLmNvbYITdXBzdGVwLmdvcHJpbWVyLmNvbYIVd2lsZGZhbmcuZ29wcmlt
ZXIuY29tghd3aW5lYWNjZXNzLmdvcHJpbWVyLmNvbTBMBgNVHSAERTBDMAgGBmeB
DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AFzcQ5L+5qtF
RLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABevLMHokAAAQDAEcwRQIgJxcah2l3
0jqtqXf4Vr52tUQ9juEmiK+mKdoWjG/j9oMCIQDSJkTBF/fy7d8OfEe5fP49X6BH
n6N3/Wu6/cVhw3brWAB1APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTj
AAABevLMHnUAAAQDAEYwRAIgX5e5I4Ncg6bH4o3c+JWoadWIQE0V1hEUhNHR5QpR
CyYCIDB9Bm2Xeen5kpIclaUCvVJLus8/IcuhcPPpNikd9EY/MA0GCSqGSIb3DQEB
CwUAA4IBAQCD14OxRmycg5OexXRhPDT9soVSRVXPG2Q08SIQktZOLVMRkQ8HONzx
BetPzBWgLjVf3xa8wyaXySrYIKw9ke57HZ+4QmBRr4ykBTKQUEeTT2H8/wTwrdDZ
7qtOisavnXGoumM1WNBuqf0kCwrJ/yIkXfjjiFqDUuF91qANYgP/IOoma2tbYDSQ
ZvB/WmpFlzoYOvLS2/znCHSee+0BO5XekItmQYImsE6WE79KThopE1iJ+07f7i6I
pJ4StZuJboxns3708d1acU5qoGsMReupGaMZNO2QDLhuYO12DoH0hZobj59e+lU9
m+Qj7HgGz/dRG+k/HCmJcI9s2jx7/gXf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EfTsENZERpLMvN4fcYr
ZM+SKFIc1H1r53qP3pJ/h1Wsv2N3bro3rcyt1h/1Oe9actXMH2PoYSDZpUzOQRPL
9lvcOYUtOQ1NysMKHWJ/C9jE6UeGGzCzkmgBlf7PsqPZ5gzZeAsJAUynI7e2Du6g
NXmu89vxFGMZQk11iPEnweoztVcy5TrYSsTAdLMCONzcKFeq1nTPuIx/VcRnQqOt
MTZBvXE8mdMHjYA1uQj81rZTWPnEcMSjgwWGSfqZ0zSYGMDJzTrX7Bo10uJbSUqU
YLGDEID2/A9HUmZl4z2emwqMdQfAnDQMP8w7/coPRlJWPNtEA1Udadupk3DYk/vh
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422736556231765803222653838505685325918736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 14:05:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-27 14:04:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alphalion.goprimer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29322705920704306468000944097218951715439881521284512538824130048640045861825438482612065469536596905461808451104707150960989681920776537282423360452839449478458569525211078065605217157430716532951684544054385773032531738804181632980473489939024244874582899721121380708955678641992185778031533996104726710088089959634316916626641375059173124558000414854586422051289519689731574370284025314304013339143198455726349226272950750580622241013043736893348005285553906509458750294683204421163483301152889245445231901741469720943225624543839430267240955898311291672016018829202687561773455895142693917558558235332937141444931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d44f30745f68e23924f89ea1f8494b774911b57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphalion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostrophe.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atolla.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billcom.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.letsbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameo.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuemath.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curalife.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cushion.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutbackcoach.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dario.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.fieldtriphealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversyfund.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernow2.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felixforyou.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldtriphealth.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiton.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forhims.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainful.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fitonapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.forhims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.metabolicrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.monarchmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.montikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.noom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getresults.iloveskininc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gainful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthorne.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.diversyfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katkin.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladder.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langehair.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeprofitness.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveclass.cuemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolicrenewal.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernfertility.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchmoney.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montikids.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteryscience.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offer.mydario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otter.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachystudio.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picsart.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowritingaid.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radfordbeauty.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rb.victoriaradford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocksbox.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sans.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savvy.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.alphalion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.bill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skininc.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.farmsteadapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.getsunday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.rocksbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunday.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefeed.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapynotebooks.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplebyte.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trufora.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-app.go.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.apostrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.atolla.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.breathesans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cameo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.curalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cushion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.cutbackcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.evernow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.felixforyou.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.forhers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.hawthorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.joinladder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.katkin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.langehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifeprofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.madison-reed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.modernfertility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.mysteryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.otter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.peachystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.prowritingaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.savvy.insure'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.thefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.therapynotebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.triplebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.trufora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.upstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.wildfang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstep.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfang.goprimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineaccess.goprimer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017af2cc1e890000040300473045022027171a876977d23aada977f856be76b5443d8ee12688afa629da168c6fe3f683022100d22644c117f7f2eddf0e7c47b97cfe3d5fa0479fa377fd6bbafdc561c376eb58007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017af2cc1e75000004030046304402205f97b923835c83a6c7e28ddcf895a869d588404d15d6111484d1d1e50a510b260220307d066d9779e9f992921c95a502bd524bbacf3f21cba170f3e936291df4463f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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