f02.chtah.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c3:d9:80:4d:16:7d:c9:83:36:90:f9:e2:df:28:87:22:6d was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=f02.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:d9:80:4d:16:7d:c9:83:36:90:f9:e2:df:28:87:22:6d
Serial Number (int): 327981027997474447814032753803617378968173
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:09:70:e0:52:d1:b2:86:87:e3:2f:e5:98:3b:a8:83:15:07:0e:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:bd:f5:0e:c9:b3:81:3b:3a:15:3a:ff:a9:a5:69:9c:29:36:7b:36
Fingerprint (sha256): 5d:5e:98:e8:16:75:f5:c5:fe:89:b1:96:08:34:da:e6:42:fc:40:5b:0e:4a:b2:b8:13:59:50:3e:7e:d6:c8:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f02.chtah.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f02.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.comunicaciones-libertyseguros.es
f.e.bobbibrown.ch
f.e.bobbibrown.co.za
f.e.bobbibrown.com.hk
f.e.clinique.com.my
f.e.clinique.dk
f.e.clinique.no
f.e.clinique.se
f.e.esteelauder.ch
f.e.esteelauder.dk
f.e.esteelauder.no
f.e.esteelauder.se
f.e.footlocker.com
f.e.jomalone-me.com
f.e.jomalone.ch
f.e.maccosmetics.co.za
f.e.maccosmetics.dk
f.e.maccosmetics.no
f.e.maccosmetics.se
f.e.origins.dk
f.e.smashbox.dk
f.e.smashbox.it
f.ecrm.wynninsidermacau.com
f.email.account.sony.com
f.email.aerie.ae.com
f.email.brighthouseonline.co.uk
f.email.darphin.es
f.email.origins.es
f.email.sonyentertainmentnetwork.com
f.ib.searchbite.com
f.info.e-redbus.in
f.information.hindugroup.in
f.informe.digitalmedia-comunicacion.es
f.intl.ncl.com
f.knowledge.onlinecompliancepanel.net
f.l.soma.com
f.lastcallemail.com
f.mail.anntaylor.com
f.mail.anntaylorfactory.com
f.mail.cignattkonline.in
f.mail.loft.com
f.mail.loftoutlet.com
f.mail.louandgrey.com
f.mail.tataunistore.co.in
f.mailer.buzzalive.com
f.mailers.e-redbus.co
f.mailers.e-redbus.in
f.mailers.e-redbus.pe
f.mailers.redbus.id
f.mailers.redbus.my
f.mailers.redbus.sg
f.mailers.seatseller.travel
f.mailing.serpadres.es
f.mails.hindugroup.in
f.messenger.agilesaver.com
f.messenger.tutorialsaver.com
f.neimanmarcuschina.com.cn
f.neimanmarcusemail.com
f.new.bestloansdeal.com
f.news.careerpromedia.com
f.news.classicspecs.com
f.news.inditex.com
f.news.probatcheducate.com
f.news.taraqikiemi.com
f.news.tutorialvidsonline.com
f.newsletter.clarel.es
f.newsletter.dia.es
f.newsletter.laplazadedia.es
f.newsletter.mail-redbus.in
f.northerntoolemail.com
f.northerntoolmail.com
f.nycmail.nyandcompany.com
f.promo.payback.in
f.r.nyandcompany.com
f.r.restorationhardware.com
f.rue21email.com
f.satisfaccioncliente.dia.es
f.smehk.dbs.com
f.solicitud.digitalmedia-comunicacion.es
f.travel.mail-redbus.in
f.update.bestloansdeal.com
f.update.deal4loans.in
f.update.wishfinemailer.com
f.update.wishfinmailer.com
f.updates.tutorialsaver.com
f.utrechtcmail.com
f.welcomerue21.com
f02.chtah.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com

Certificate

The complete raw certificate details for f02.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINTDCCDDSgAwIBAgISA8PZgE0WfcmDNpD54t8ohyJtMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAxMTEyMDQzMTFaFw0yMTA0MTEyMDQzMTFaMBgxFjAUBgNVBAMT
DWYwMi5jaHRhaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw
4aRqma419CKunqZ0nUMjfpzyH6dM42wnU+tzgu9Uk8+x2P6ag2yqUYAZercratQQ
vWbb9eHK46SnSnyOBULwUZ3MdaWAUgwtXvBNDppsthOmdnawGjoeIXYJAUOPWGlD
J5Wf+Valyp3wvF1+NGQOcq2RHraLBsawtYSkCAMk9/LJsuptBmJZ2eVmVrlgMfiV
nj9rxQW+YwoG+ZcjvY6TYUE1an/0snSiJq9ntnckYRa7twqcinarMfVc//Q/XqI8
GjFvapAB0Hb0DFzEXpdYo1YzUA90r1AY6Jw70KYEKdplau6+kddHEUHOs31IadwO
uIfgkyscJbA8jjreuzXVAgMBAAGjggp0MIIKcDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFPgJcOBS0bKGh+Mv5Zg7qIMVBw63MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIIRAYDVR0RBIIIOzCCCDeCImYuY29tdW5pY2FjaW9uZXMtbGliZXJ0eXNlZ3Vy
b3MuZXOCEWYuZS5ib2JiaWJyb3duLmNoghRmLmUuYm9iYmlicm93bi5jby56YYIV
Zi5lLmJvYmJpYnJvd24uY29tLmhrghNmLmUuY2xpbmlxdWUuY29tLm15gg9mLmUu
Y2xpbmlxdWUuZGuCD2YuZS5jbGluaXF1ZS5ub4IPZi5lLmNsaW5pcXVlLnNlghJm
LmUuZXN0ZWVsYXVkZXIuY2iCEmYuZS5lc3RlZWxhdWRlci5ka4ISZi5lLmVzdGVl
bGF1ZGVyLm5vghJmLmUuZXN0ZWVsYXVkZXIuc2WCEmYuZS5mb290bG9ja2VyLmNv
bYITZi5lLmpvbWFsb25lLW1lLmNvbYIPZi5lLmpvbWFsb25lLmNoghZmLmUubWFj
Y29zbWV0aWNzLmNvLnphghNmLmUubWFjY29zbWV0aWNzLmRrghNmLmUubWFjY29z
bWV0aWNzLm5vghNmLmUubWFjY29zbWV0aWNzLnNlgg5mLmUub3JpZ2lucy5ka4IP
Zi5lLnNtYXNoYm94LmRrgg9mLmUuc21hc2hib3guaXSCG2YuZWNybS53eW5uaW5z
aWRlcm1hY2F1LmNvbYIYZi5lbWFpbC5hY2NvdW50LnNvbnkuY29tghRmLmVtYWls
LmFlcmllLmFlLmNvbYIfZi5lbWFpbC5icmlnaHRob3VzZW9ubGluZS5jby51a4IS
Zi5lbWFpbC5kYXJwaGluLmVzghJmLmVtYWlsLm9yaWdpbnMuZXOCJGYuZW1haWwu
c29ueWVudGVydGFpbm1lbnRuZXR3b3JrLmNvbYITZi5pYi5zZWFyY2hiaXRlLmNv
bYISZi5pbmZvLmUtcmVkYnVzLmlughtmLmluZm9ybWF0aW9uLmhpbmR1Z3JvdXAu
aW6CJmYuaW5mb3JtZS5kaWdpdGFsbWVkaWEtY29tdW5pY2FjaW9uLmVzgg5mLmlu
dGwubmNsLmNvbYIlZi5rbm93bGVkZ2Uub25saW5lY29tcGxpYW5jZXBhbmVsLm5l
dIIMZi5sLnNvbWEuY29tghNmLmxhc3RjYWxsZW1haWwuY29tghRmLm1haWwuYW5u
dGF5bG9yLmNvbYIbZi5tYWlsLmFubnRheWxvcmZhY3RvcnkuY29tghhmLm1haWwu
Y2lnbmF0dGtvbmxpbmUuaW6CD2YubWFpbC5sb2Z0LmNvbYIVZi5tYWlsLmxvZnRv
dXRsZXQuY29tghVmLm1haWwubG91YW5kZ3JleS5jb22CGWYubWFpbC50YXRhdW5p
c3RvcmUuY28uaW6CFmYubWFpbGVyLmJ1enphbGl2ZS5jb22CFWYubWFpbGVycy5l
LXJlZGJ1cy5jb4IVZi5tYWlsZXJzLmUtcmVkYnVzLmlughVmLm1haWxlcnMuZS1y
ZWRidXMucGWCE2YubWFpbGVycy5yZWRidXMuaWSCE2YubWFpbGVycy5yZWRidXMu
bXmCE2YubWFpbGVycy5yZWRidXMuc2eCG2YubWFpbGVycy5zZWF0c2VsbGVyLnRy
YXZlbIIWZi5tYWlsaW5nLnNlcnBhZHJlcy5lc4IVZi5tYWlscy5oaW5kdWdyb3Vw
LmlughpmLm1lc3Nlbmdlci5hZ2lsZXNhdmVyLmNvbYIdZi5tZXNzZW5nZXIudHV0
b3JpYWxzYXZlci5jb22CGmYubmVpbWFubWFyY3VzY2hpbmEuY29tLmNughdmLm5l
aW1hbm1hcmN1c2VtYWlsLmNvbYIXZi5uZXcuYmVzdGxvYW5zZGVhbC5jb22CGWYu
bmV3cy5jYXJlZXJwcm9tZWRpYS5jb22CF2YubmV3cy5jbGFzc2ljc3BlY3MuY29t
ghJmLm5ld3MuaW5kaXRleC5jb22CGmYubmV3cy5wcm9iYXRjaGVkdWNhdGUuY29t
ghZmLm5ld3MudGFyYXFpa2llbWkuY29tgh1mLm5ld3MudHV0b3JpYWx2aWRzb25s
aW5lLmNvbYIWZi5uZXdzbGV0dGVyLmNsYXJlbC5lc4ITZi5uZXdzbGV0dGVyLmRp
YS5lc4IcZi5uZXdzbGV0dGVyLmxhcGxhemFkZWRpYS5lc4IbZi5uZXdzbGV0dGVy
Lm1haWwtcmVkYnVzLmlughdmLm5vcnRoZXJudG9vbGVtYWlsLmNvbYIWZi5ub3J0
aGVybnRvb2xtYWlsLmNvbYIaZi5ueWNtYWlsLm55YW5kY29tcGFueS5jb22CEmYu
cHJvbW8ucGF5YmFjay5pboIUZi5yLm55YW5kY29tcGFueS5jb22CG2Yuci5yZXN0
b3JhdGlvbmhhcmR3YXJlLmNvbYIQZi5ydWUyMWVtYWlsLmNvbYIcZi5zYXRpc2Zh
Y2Npb25jbGllbnRlLmRpYS5lc4IPZi5zbWVoay5kYnMuY29tgihmLnNvbGljaXR1
ZC5kaWdpdGFsbWVkaWEtY29tdW5pY2FjaW9uLmVzghdmLnRyYXZlbC5tYWlsLXJl
ZGJ1cy5pboIaZi51cGRhdGUuYmVzdGxvYW5zZGVhbC5jb22CFmYudXBkYXRlLmRl
YWw0bG9hbnMuaW6CG2YudXBkYXRlLndpc2hmaW5lbWFpbGVyLmNvbYIaZi51cGRh
dGUud2lzaGZpbm1haWxlci5jb22CG2YudXBkYXRlcy50dXRvcmlhbHNhdmVyLmNv
bYISZi51dHJlY2h0Y21haWwuY29tghJmLndlbGNvbWVydWUyMS5jb22CDWYwMi5j
aHRhaC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEE
AdZ5AgQCBIHzBIHwAO4AdQBc3EOS/uarRUSxXprUVuYQN/vV+kfcoXOUsl7m9scO
ygAAAXbzZyQcAAAEAwBGMEQCIHA/9lQkTkYSLUlgmSIR6aN9y1cl1MPsU5Twqmly
svEGAiBtf4UuP7to99LwncRqbDjucVo4xwC0f3pJ7ncLmNnANgB1APZclC/RdzAi
FFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABdvNnJB4AAAQDAEYwRAIgdZMEjl+D
oukrlgGNX3Y7m6Xc9QDbMK1rWGnQFbIZRt0CIET3bdSpd+aUqA34E3tUtej0eeia
bvxv7HZO+OyS7OU2MA0GCSqGSIb3DQEBCwUAA4IBAQCA3HGMmgYc2rmwAV469MhK
PpfYFie9zSNc/a9uuqeSfN2vJcAFrqQuc+nKM66gaX8y65qvtHuVLbLOyCjRlALz
qD2e+1oR/xNW0eypUaql6MAPuOx7SqLEDmWAsTPfMg2rDA93CkmSjmhRJwTfLXR5
eLTMspCXHRmkYpb91yBKdv1N10+C40/qCHGUFFmniTLl2ylNBZFp74BrP+k6JFH2
wi6IyxAFdlxiIiBfzmIzWIuC3KKSN0CSd+QwSJ7sFD+WHFI7QmFRjs2JLYRH1LyA
7j3JyBHyUnDBgD5ZyAQCOD2GcTwRWqMjRKS5A10NCgeREmOiXO79TsDraOEtKeZI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOGkapmuNfQirp6mdJ1D
I36c8h+nTONsJ1Prc4LvVJPPsdj+moNsqlGAGXq3K2rUEL1m2/XhyuOkp0p8jgVC
8FGdzHWlgFIMLV7wTQ6abLYTpnZ2sBo6HiF2CQFDj1hpQyeVn/lWpcqd8LxdfjRk
DnKtkR62iwbGsLWEpAgDJPfyybLqbQZiWdnlZla5YDH4lZ4/a8UFvmMKBvmXI72O
k2FBNWp/9LJ0oiavZ7Z3JGEWu7cKnIp2qzH1XP/0P16iPBoxb2qQAdB29AxcxF6X
WKNWM1APdK9QGOicO9CmBCnaZWruvpHXRxFBzrN9SGncDriH4JMrHCWwPI463rs1
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327981027997474447814032753803617378968173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-11 20:43:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-11 20:43:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f02.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22329210015314062741492647994421730253860046269997113867564792576804183033743126348492210077062134846832435453563326019051288154436188016770559954910311156573674973408928332401153951800111614708967747979620122594496430769504019256789106327741419168581293811478362875239468838962639184781914043531301999684254113206549693128299248060111372140201435091117294311832816227240950066380539037602279692148440668121665199557791493621815689411836376120219808325234827163125732413091430998946265325083554657042979099712870601491171952649938379971012370867584439031154216187212723111831335836766705970917172250188223303080687061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f80970e052d1b28687e32fe5983ba88315070eb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.comunicaciones-libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.footlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.jomalone-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.jomalone.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.origins.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.smashbox.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.smashbox.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ecrm.wynninsidermacau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.account.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.aerie.ae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.brighthouseonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.darphin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.origins.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.sonyentertainmentnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ib.searchbite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.info.e-redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.information.hindugroup.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.informe.digitalmedia-comunicacion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.intl.ncl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.knowledge.onlinecompliancepanel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.l.soma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.lastcallemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.anntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.anntaylorfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.cignattkonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.loftoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.louandgrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.tataunistore.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.buzzalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.e-redbus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.e-redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.e-redbus.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.redbus.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.redbus.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.redbus.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.seatseller.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.serpadres.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mails.hindugroup.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.messenger.agilesaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.messenger.tutorialsaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.neimanmarcuschina.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.neimanmarcusemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.new.bestloansdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.careerpromedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.classicspecs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.inditex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.probatcheducate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.taraqikiemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.tutorialvidsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.clarel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.dia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.laplazadedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.mail-redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.northerntoolemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.northerntoolmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.nycmail.nyandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.promo.payback.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.nyandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.restorationhardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.rue21email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.satisfaccioncliente.dia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.smehk.dbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.solicitud.digitalmedia-comunicacion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travel.mail-redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.update.bestloansdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.update.deal4loans.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.update.wishfinemailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.update.wishfinmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.updates.tutorialsaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.utrechtcmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.welcomerue21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f02.chtah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000176f367241c00000403004630440220703ff654244e46122d4960992211e9a37dcb5725d4c3ec5394f0aa6972b2f10602206d7f852e3fbb68f7d2f09dc46a6c38ee715a38c700b47f7a49ee770b98d9c036007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176f367241e000004030046304402207593048e5f83a2e92b96018d5f763b9ba5dcf500db30ad6b5869d015b21946dd022044f76dd4a977e694a80df8137b54b5e8f479e89a6efc6fec764ef8ec92ece536
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0080dc718c9a061cdab9b0015e3af4c84a3e97d81627bdcd235cfdaf6ebaa7927cddaf25c005aea42e73e9ca33aea0697f32eb9aafb47b952db2cec828d19402f3a83d9efb5a11ff1356d1eca951aaa5e8c00fb8ec7b4aa2c40e6580b133df320dab0c0f770a49928e68512704df2d747978b4ccb290971d19a46296fdd7204a76fd4dd74f82e34fea0871941459a78932e5db294d059169ef806b3fe93a2451f6c22e88cb1005765c6222205fce6233588b82dca29237409277e430489eec143f961c523b4261518ecd892d8447d4bc80ee3dc9c811f25270c1803e59c80402383d86713c115aa32344a4b9035d0d0a07911263a25ceefd4ec0eb68e12d29e648