f05.chtah.com

Issued by R3

About this certificate

This digital certificate with serial number 03:41:a1:05:1a:79:97:b2:67:70:4f:e9:d2:c1:c4:f6:65:be was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=f05.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:a1:05:1a:79:97:b2:67:70:4f:e9:d2:c1:c4:f6:65:be
Serial Number (int): 283669243850923609467590575397824764470718
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:17:3a:41:63:a2:3a:db:3a:42:9f:57:81:00:c8:9c:7c:53:3e:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:43:07:ce:93:d5:92:67:24:e6:12:8d:47:67:1a:5e:2a:24:95:55
Fingerprint (sha256): 51:1b:9d:3f:b8:5a:c9:4e:a9:8b:37:ed:ca:3b:f7:37:d3:3e:2f:7a:61:0f:d1:3c:28:93:22:6e:ec:bd:21:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f05.chtah.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f05.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.a.consumersyes.com
f.airtel.oneassist.in
f.alerts.lazypayindia.com
f.alerts.veromoda.in
f.allyou.chtah.net
f.allyou.mag.chtah.net
f.allyou.off.chtah.net
f.bbmail.nowtv.com
f.c.consumerspromos.com
f.c.consumerstape.com
f.c.reviewextras.com
f.care.lazypayindia.com
f.cbb.chtah.net
f.coastalliving.chtah.net
f.coastalliving.mag.chtah.net
f.coastalliving.off.chtah.net
f.completecruisesolution-email.com
f.confirm.rogersmagazines.com
f.content.consumerstape.com
f.content.goibibopromo.com
f.content.goibibopromo.in
f.content.lazypayindia.com
f.content.reviewteams.com
f.content.veromoda.in
f.cookinglight.chtah.net
f.cookinglight.mag.chtah.net
f.cookinglight.off.chtah.net
f.enews.pphg.com
f.everyrentemail.com
f.go.creditonthego.com
f.in.bluegreenpharmacy.vu
f.info.lladro.com
f.inversoresiberdrola.es
f.mail.brp.com
f.mail.dvcmember.com
f.mail.vodafone.co.uk
f.mailer.hdfcrealty.in
f.mailer.hdfcrealty.net
f.mailer.hungama.com
f.mailers.crymail.org
f.mailers.thomascook.in
f.mailing.lefties.com
f.mailing.marie-claire.es
f.mailing.muyinteresante.es
f.mailing.simaexpo.com
f.mailusta.com
f.mkt.clubesorte.com
f.mkt.ofertatvs.com
f.mkt.peticionpublica.es
f.mkt.petpubint.com
f.monsondageetmoi.bp06ntx.com
f.music.hungama.com
f.ncl-university.com
f.nclagents.com
f.newletters.grccompliances.com
f.news.1000tentaciones.com
f.news.net-descontos.com
f.news.traveltool.com.br
f.news.traveltool.es
f.news.traveltool.it
f.news.traveltool.pt
f.news.womenalia.com
f.news2.petitionpublique.fr
f.news2.petizionepubblica.it
f.news3.womenalia.com
f.newsfundacioniberdrola.org
f.newsletter.ckgs.com
f.newsletter.coxandkings.com
f.newsletters.azzaroparis.com
f.newsletters.clarins.com
f.newsletters.complianceeducations.com
f.newsletters.enabletravel.com
f.newsletters.grclearnings.com
f.newsletters.trip360.com
f.nl.carwale.com
f.noreply.iberiacards.com
f.response.mydmails.com
f.updates.propertyedge.in
f.updates.remit2india.com
f.usgamail.org
f05.chtah.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com

Certificate

The complete raw certificate details for f05.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM/jCCC+agAwIBAgISA0GhBRp5l7JncE/p0sHE9mW+MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTExMDgxNjM1MDVaFw0yMjAyMDYxNjM1MDRaMBgxFjAUBgNVBAMT
DWYwNS5jaHRhaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM
4HUnpxeu15SS1MxdoYiHPAf+wghHJQqnI9QEdexIyg/xoum7+W/E3jxr3ngpFBsS
ra0KGeyrC1CmpzzI4e6sjzFuRmiaLiQwI0Q8ny/V7CdfZQ0hCtHcc1YHPceRpgmH
h9Hiwec/AY+nO8XmauGOu31U0zrDLOozliJpSe/t2h/7CjH64tfuI91XyO0OwcX2
SJ0C+pkkJWVX9I67F1x+GFWo8lEWtyrc+g/KPRdSHGA07NM3EVlcpr0Rh3QhnDwa
sH5ts5oBR3hNK9zNY+3b4p3t/jllGEwuMR03OLVg8HZXrDr8biwrZnTDY7JWGPyO
EFLajg/OJ5onfwUA4wX7AgMBAAGjggomMIIKIjAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFBMXOkFjojrbOkKfV4EAyJx8Uz7oMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIH9QYDVR0RBIIH7DCCB+iCFGYuYS5jb25zdW1lcnN5ZXMuY29tghVmLmFpcnRl
bC5vbmVhc3Npc3QuaW6CGWYuYWxlcnRzLmxhenlwYXlpbmRpYS5jb22CFGYuYWxl
cnRzLnZlcm9tb2RhLmlughJmLmFsbHlvdS5jaHRhaC5uZXSCFmYuYWxseW91Lm1h
Zy5jaHRhaC5uZXSCFmYuYWxseW91Lm9mZi5jaHRhaC5uZXSCEmYuYmJtYWlsLm5v
d3R2LmNvbYIXZi5jLmNvbnN1bWVyc3Byb21vcy5jb22CFWYuYy5jb25zdW1lcnN0
YXBlLmNvbYIUZi5jLnJldmlld2V4dHJhcy5jb22CF2YuY2FyZS5sYXp5cGF5aW5k
aWEuY29tgg9mLmNiYi5jaHRhaC5uZXSCGWYuY29hc3RhbGxpdmluZy5jaHRhaC5u
ZXSCHWYuY29hc3RhbGxpdmluZy5tYWcuY2h0YWgubmV0gh1mLmNvYXN0YWxsaXZp
bmcub2ZmLmNodGFoLm5ldIIiZi5jb21wbGV0ZWNydWlzZXNvbHV0aW9uLWVtYWls
LmNvbYIdZi5jb25maXJtLnJvZ2Vyc21hZ2F6aW5lcy5jb22CG2YuY29udGVudC5j
b25zdW1lcnN0YXBlLmNvbYIaZi5jb250ZW50LmdvaWJpYm9wcm9tby5jb22CGWYu
Y29udGVudC5nb2liaWJvcHJvbW8uaW6CGmYuY29udGVudC5sYXp5cGF5aW5kaWEu
Y29tghlmLmNvbnRlbnQucmV2aWV3dGVhbXMuY29tghVmLmNvbnRlbnQudmVyb21v
ZGEuaW6CGGYuY29va2luZ2xpZ2h0LmNodGFoLm5ldIIcZi5jb29raW5nbGlnaHQu
bWFnLmNodGFoLm5ldIIcZi5jb29raW5nbGlnaHQub2ZmLmNodGFoLm5ldIIQZi5l
bmV3cy5wcGhnLmNvbYIUZi5ldmVyeXJlbnRlbWFpbC5jb22CFmYuZ28uY3JlZGl0
b250aGVnby5jb22CGWYuaW4uYmx1ZWdyZWVucGhhcm1hY3kudnWCEWYuaW5mby5s
bGFkcm8uY29tghhmLmludmVyc29yZXNpYmVyZHJvbGEuZXOCDmYubWFpbC5icnAu
Y29tghRmLm1haWwuZHZjbWVtYmVyLmNvbYIVZi5tYWlsLnZvZGFmb25lLmNvLnVr
ghZmLm1haWxlci5oZGZjcmVhbHR5LmlughdmLm1haWxlci5oZGZjcmVhbHR5Lm5l
dIIUZi5tYWlsZXIuaHVuZ2FtYS5jb22CFWYubWFpbGVycy5jcnltYWlsLm9yZ4IX
Zi5tYWlsZXJzLnRob21hc2Nvb2suaW6CFWYubWFpbGluZy5sZWZ0aWVzLmNvbYIZ
Zi5tYWlsaW5nLm1hcmllLWNsYWlyZS5lc4IbZi5tYWlsaW5nLm11eWludGVyZXNh
bnRlLmVzghZmLm1haWxpbmcuc2ltYWV4cG8uY29tgg5mLm1haWx1c3RhLmNvbYIU
Zi5ta3QuY2x1YmVzb3J0ZS5jb22CE2YubWt0Lm9mZXJ0YXR2cy5jb22CGGYubWt0
LnBldGljaW9ucHVibGljYS5lc4ITZi5ta3QucGV0cHViaW50LmNvbYIdZi5tb25z
b25kYWdlZXRtb2kuYnAwNm50eC5jb22CE2YubXVzaWMuaHVuZ2FtYS5jb22CFGYu
bmNsLXVuaXZlcnNpdHkuY29tgg9mLm5jbGFnZW50cy5jb22CH2YubmV3bGV0dGVy
cy5ncmNjb21wbGlhbmNlcy5jb22CGmYubmV3cy4xMDAwdGVudGFjaW9uZXMuY29t
ghhmLm5ld3MubmV0LWRlc2NvbnRvcy5jb22CGGYubmV3cy50cmF2ZWx0b29sLmNv
bS5icoIUZi5uZXdzLnRyYXZlbHRvb2wuZXOCFGYubmV3cy50cmF2ZWx0b29sLml0
ghRmLm5ld3MudHJhdmVsdG9vbC5wdIIUZi5uZXdzLndvbWVuYWxpYS5jb22CG2Yu
bmV3czIucGV0aXRpb25wdWJsaXF1ZS5mcoIcZi5uZXdzMi5wZXRpemlvbmVwdWJi
bGljYS5pdIIVZi5uZXdzMy53b21lbmFsaWEuY29tghxmLm5ld3NmdW5kYWNpb25p
YmVyZHJvbGEub3JnghVmLm5ld3NsZXR0ZXIuY2tncy5jb22CHGYubmV3c2xldHRl
ci5jb3hhbmRraW5ncy5jb22CHWYubmV3c2xldHRlcnMuYXp6YXJvcGFyaXMuY29t
ghlmLm5ld3NsZXR0ZXJzLmNsYXJpbnMuY29tgiZmLm5ld3NsZXR0ZXJzLmNvbXBs
aWFuY2VlZHVjYXRpb25zLmNvbYIeZi5uZXdzbGV0dGVycy5lbmFibGV0cmF2ZWwu
Y29tgh5mLm5ld3NsZXR0ZXJzLmdyY2xlYXJuaW5ncy5jb22CGWYubmV3c2xldHRl
cnMudHJpcDM2MC5jb22CEGYubmwuY2Fyd2FsZS5jb22CGWYubm9yZXBseS5pYmVy
aWFjYXJkcy5jb22CF2YucmVzcG9uc2UubXlkbWFpbHMuY29tghlmLnVwZGF0ZXMu
cHJvcGVydHllZGdlLmlughlmLnVwZGF0ZXMucmVtaXQyaW5kaWEuY29tgg5mLnVz
Z2FtYWlsLm9yZ4INZjA1LmNodGFoLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AN+lXqtogk8fbK3uuF9O
PlrqzaISpGpejjsSwCBEXCpzAAABfQCeLLcAAAQDAEYwRAIgTNVg+0ZMNwOgaFTl
0l+3DWZz2ZKF2mPqtDWV+GLt+X4CICfEXJ1+9J8aEXFKTe316QeD8QdFCvHiHa2W
g8sFsj84AHYAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF9AJ4s
tQAABAMARzBFAiEAgK7oF0xIrqKCNEMGJgNLK260Nj1/14jVpTl55pz6ya8CIAGK
12niOZFzT4XMMPKBfFJwxmCNlrj11aJqhxLP+MXlMA0GCSqGSIb3DQEBCwUAA4IB
AQCAwWaisbeCDYcE9Od1ctFYmbr1i51sfU6FpM9nKzyIMsC0lc7Omkpm64utjA+8
xBr2fBbe9n/1nUOCf0s6TWJE9z/XuTU20fm3vMLhT7vAEddWqfpG2A2HnFles+V6
TprtakWysXLCrWBRE/H8pnFRda+fbgRg9NOondrml9/K7ObpcV417/X2LjhvLhva
TWmJX8iaHDcEGH91ndbIjM9WSZLixUTXqBZqOIFEQsfEKP8kC+g/Txn1PF7H++IY
ld/go2fJM5mEa5dMNJXZKxEH1Iw91OxKM7P/cV9zhrsxtMW6tzCVL66kOOvZnwCJ
Bdh5IH8a7ZXpIMTk5lCrvcGK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOB1J6cXrteUktTMXaGI
hzwH/sIIRyUKpyPUBHXsSMoP8aLpu/lvxN48a954KRQbEq2tChnsqwtQpqc8yOHu
rI8xbkZomi4kMCNEPJ8v1ewnX2UNIQrR3HNWBz3HkaYJh4fR4sHnPwGPpzvF5mrh
jrt9VNM6wyzqM5YiaUnv7dof+wox+uLX7iPdV8jtDsHF9kidAvqZJCVlV/SOuxdc
fhhVqPJRFrcq3PoPyj0XUhxgNOzTNxFZXKa9EYd0IZw8GrB+bbOaAUd4TSvczWPt
2+Kd7f45ZRhMLjEdNzi1YPB2V6w6/G4sK2Z0w2OyVhj8jhBS2o4PzieaJ38FAOMF
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283669243850923609467590575397824764470718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-08 16:35:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-06 16:35:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f05.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25863298398792700260652216323292052868946862446230224218462918495229338690344028655526849587551169029442625737140700818677647704543926797824762714716572193395261326942087391062303850946840657508067579573576940351668503585580732877533580654500044559065311218122766513784812910269426192976102526846428985416464912679526518315372003549119809368091030124281290108216516339486291530545470868573446991582751556912345951399317150098744151870634848673208064122300403606862010773954465113834797442535573040263359142468724356469729291133190987730123177477482508041531677512176729645719445123890590266303336752717153396806845947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13173a4163a23adb3a429f578100c89c7c533ee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2028 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.a.consumersyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.airtel.oneassist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.alerts.lazypayindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.alerts.veromoda.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.allyou.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.allyou.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.allyou.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.bbmail.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.c.consumerspromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.c.consumerstape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.c.reviewextras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.care.lazypayindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cbb.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.coastalliving.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.coastalliving.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.coastalliving.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.completecruisesolution-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.confirm.rogersmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.content.consumerstape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.content.goibibopromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.content.goibibopromo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.content.lazypayindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.content.reviewteams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.content.veromoda.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cookinglight.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cookinglight.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cookinglight.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.pphg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.everyrentemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.go.creditonthego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.in.bluegreenpharmacy.vu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.info.lladro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.inversoresiberdrola.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.brp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.dvcmember.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.vodafone.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.hdfcrealty.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.hdfcrealty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.hungama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.crymail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.thomascook.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.lefties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.marie-claire.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.muyinteresante.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.simaexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailusta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mkt.clubesorte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mkt.ofertatvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mkt.peticionpublica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mkt.petpubint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.monsondageetmoi.bp06ntx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.music.hungama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ncl-university.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.nclagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newletters.grccompliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.1000tentaciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.net-descontos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.traveltool.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.traveltool.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.traveltool.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.traveltool.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.womenalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news2.petitionpublique.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news2.petizionepubblica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news3.womenalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsfundacioniberdrola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.ckgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.coxandkings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.azzaroparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.clarins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.complianceeducations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.enabletravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.grclearnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.trip360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.nl.carwale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.noreply.iberiacards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.response.mydmails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.updates.propertyedge.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.updates.remit2india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.usgamail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f05.chtah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d009e2cb7000004030046304402204cd560fb464c3703a06854e5d25fb70d6673d99285da63eab43595f862edf97e022027c45c9d7ef49f1a11714a4dedf5e90783f107450af1e21dad9683cb05b23f380076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017d009e2cb5000004030047304502210080aee8174c48aea28234430626034b2b6eb4363d7fd788d5a53979e69cfac9af0220018ad769e23991734f85cc30f2817c5270c6608d96b8f5d5a26a8712cff8c5e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0080c166a2b1b7820d8704f4e77572d15899baf58b9d6c7d4e85a4cf672b3c8832c0b495cece9a4a66eb8bad8c0fbcc41af67c16def67ff59d43827f4b3a4d6244f73fd7b93536d1f9b7bcc2e14fbbc011d756a9fa46d80d879c595eb3e57a4e9aed6a45b2b172c2ad605113f1fca6715175af9f6e0460f4d3a89ddae697dfcaece6e9715e35eff5f62e386f2e1bda4d69895fc89a1c3704187f759dd6c88ccf564992e2c544d7a8166a38814442c7c428ff240be83f4f19f53c5ec7fbe21895dfe0a367c93399846b974c3495d92b1107d48c3dd4ec4a33b3ff715f7386bb31b4c5bab730952faea438ebd99f008905d879207f1aed95e920c4e4e650abbdc18a