www.sovereignspa.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:6c:8c:9f:94:20:35:0e:8a:3c:09:e8:42:32:90:b2:8d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sovereignspa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:6c:8c:9f:94:20:35:0e:8a:3c:09:e8:42:32:90:b2:8d
Serial Number (int): 261481144577024568424785853615232296989325
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:94:6f:a7:fa:eb:d6:b5:9e:9d:97:02:be:fe:4a:96:1c:f0:d8:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:3f:1b:ad:08:80:e2:13:94:e8:85:c2:61:44:31:71:38:df:fc:ae
Fingerprint (sha256): 5e:07:d9:c6:9c:a0:db:68:f0:de:a3:8a:2a:16:c3:8c:7e:47:b2:51:40:a6:90:7d:96:56:c7:fa:9d:82:da:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sovereignspa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sovereignspa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asiaoceanstock.com
beijingkaraoke.com
bpresse.com
chinakaraokeclub.com
cineassets.com
cotedazurland.com
cotedazurrent.com
demandstories.com
explorationemployment.com
foodprogramme.net
intershipacademy.net
moneylanguage.org
newoffshorerealty.com
newoffshoresafety.com
onlinelearningprorgam.com
pushinnovation.org
pushintuition.org
quizf1.com
quizfood.com
quizfurniture.com
quizpicture.com
quizsale.com
quizstage.com
quizteenage.com
recordingstudioworld.com
remotewellness.net
runcurrency.org
sovereignarea.com
sovereigncafe.com
sovereigncleaningservice.com
sovereignfree.com
sovereigngrand.com
sovereignimage.com
sovereigninfrastructure.com
sovereignmobile.com
sovereignplaza.com
sovereignsale.com
sovereignspa.com
theaterdirect.com
transsovereignpipeline.com
transuzbekistanpipeline.com
uzbekistanculture.com
uzbekistanfood.com
uzbekistanhd.com
www.africabusinesscommunity.com
www.africabusinessleader.com
www.asiaoceanstock.com
www.beijingkaraoke.com
www.bpresse.com
www.cabletvsingapore.com
www.cineassets.com
www.consumerindustrials.com
www.cotedazurland.com
www.cotedazurrent.com
www.demandstories.com
www.explorationemployment.com
www.farmsaloevera.com
www.filmhonour.com
www.foodprogramme.net
www.indokaraokeclub.com
www.intershipacademy.net
www.learningaidprogram.com
www.mediafinancier.com
www.moneylanguage.org
www.newoffshorerealty.com
www.newoffshoresafety.com
www.onlinelearningprorgam.com
www.privatefundsbank.com
www.pushinnovation.org
www.pushintuition.org
www.quizf1.com
www.quizfood.com
www.quizfurniture.com
www.quizpicture.com
www.quizsale.com
www.quizstage.com
www.quizteenage.com
www.recordingstudioworld.com
www.remotewellness.net
www.runcurrency.org
www.shanghai-karaoke.com
www.shippingsector.com
www.sovereignarea.com
www.sovereigncafe.com
www.sovereigncleaningservice.com
www.sovereignfree.com
www.sovereigngrand.com
www.sovereignimage.com
www.sovereigninfrastructure.com
www.sovereignmobile.com
www.sovereignplaza.com
www.sovereignsale.com
www.sovereignspa.com
www.theaterdirect.com
www.transsovereignpipeline.com
www.transuzbekistanpipeline.com
www.uzbekistanfood.com
www.uzbekistanhd.com
www.yangonglobe.com
yangonglobe.com

Other certificates including the domain name sovereignspa.com

(limited to 100 certificates)
www.cryptomaid.com
www.jointinterview.net
mindcontrolledinterface.com
www.businessfundingshow.net
abafree.com
jointinterview.net
www.sovereignspa.com
offshoreanguilla.com
www.cubistartshow.net
www.legalmalaysia.com
sovereignspa.com
www.offshorecryptoltd.org
oceantelephone.com
www.offshorecryptoltd.org
www.exchangearmenia.com
offshoreanguilla.com
www.offshorecryptoltd.org
www.sovereignspa.com
www.offshorecryptoltd.org
whoisyellow.net
arabgeographic.com
westafriocacoffee.com
offshoreelectronic.com
www.musictonga.com
pricesbelow.net
www.sovereignspa.com
offshoreanguilla.com
www.sovereignspa.com
www.sovereignspa.com
romanticvirginiabeach.com
www.berlinboerse.com
www.futurespacestation.com
cablemilan.com
www.offshorecryptoltd.org
www.worldbankcorruption.net
romanticvirginiabeach.com
offshoreelectronic.com
offshoreanguilla.com
netluxembourg.com
stuttgartboerse.com
offshorefinanceindustry.com
recruitingnigeria.com
offshoreanguilla.com
www.rocketfueling.org
www.sovereignspa.com
www.sovereignspa.com
environmentsecretary.com
bestorganicrice.com
www.offshorecryptoltd.org
www.cutandweld.com
nightvisionengineering.com
www.joanmiroshow.net
www.berlinboerse.com
propagandafilmshow.net
offshorefinanceindustry.com
www.offshorecryptoltd.org
enabletransactions.com
www.jointinterview.net
www.prelusion.org
www.publishingfund.com
offshoreanguilla.com
bestorganicrice.com
bestorganicrice.com
talentedpoverty.com
www.universityofpanama.com
www.offshoreelectronic.com
organicsprouted.com
westafriocacoffee.com
www.offshorecryptoltd.org
www.thefutureofsolarenergy.com
nightvisionengineering.com
www.literaturejamesjoyce.com
westafriocacoffee.com
www.panamajob.com
picassoshow.net
armsshow.net
arabgeographic.com
www.offshorecryptoltd.org
critiquefullshow.net
www.berlinboerse.com
www.monsterscreated.com

Certificate

The complete raw certificate details for www.sovereignspa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINyDCCDLCgAwIBAgISAwBsjJ+UIDUOijwJ6EIykLKNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMjUxMTQyNDZaFw0x
ODA1MjYxMTQyNDZaMB8xHTAbBgNVBAMTFHd3dy5zb3ZlcmVpZ25zcGEuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vfgbnUDRHsBS/foKdUTGtcm
t/3UCj8tT3pDy0iZO0xUdVmyhj+B0ZAbG9uq6BEWp5jVRCqUcW81+lVdbsVC6hJ5
/1Lo0hF9Cx22C23VgExddwg7dRyYGPEUSHWP61esAUsXRdoZsvSRjk2dz6OfF/Dd
lAp+6Sn5b5GBot292NNjRTuN6l8x2q3Z2hHytet0FUC1nKcH9sSqz5GU4zBkeSlI
2rl+JJv08P0UIU8AGvIZhWOdl41Ofx6DAzyFe1ZP/NNcARRcQN0m9oVKcGGHuC2w
O5LlR7M1WrVNSxVSl9ADCRRObKNyV8RyT69QEhKQ+Ld7MgzGS2ky615xI2B85QID
AQABo4IK0TCCCs0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSklG+n+uvWtZ6dlwK+
/kqWHPDY6jAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIII2gYDVR0RBIII0TCCCM2CEmFzaWFvY2VhbnN0b2NrLmNvbYIS
YmVpamluZ2thcmFva2UuY29tggticHJlc3NlLmNvbYIUY2hpbmFrYXJhb2tlY2x1
Yi5jb22CDmNpbmVhc3NldHMuY29tghFjb3RlZGF6dXJsYW5kLmNvbYIRY290ZWRh
enVycmVudC5jb22CEWRlbWFuZHN0b3JpZXMuY29tghlleHBsb3JhdGlvbmVtcGxv
eW1lbnQuY29tghFmb29kcHJvZ3JhbW1lLm5ldIIUaW50ZXJzaGlwYWNhZGVteS5u
ZXSCEW1vbmV5bGFuZ3VhZ2Uub3JnghVuZXdvZmZzaG9yZXJlYWx0eS5jb22CFW5l
d29mZnNob3Jlc2FmZXR5LmNvbYIZb25saW5lbGVhcm5pbmdwcm9yZ2FtLmNvbYIS
cHVzaGlubm92YXRpb24ub3JnghFwdXNoaW50dWl0aW9uLm9yZ4IKcXVpemYxLmNv
bYIMcXVpemZvb2QuY29tghFxdWl6ZnVybml0dXJlLmNvbYIPcXVpenBpY3R1cmUu
Y29tggxxdWl6c2FsZS5jb22CDXF1aXpzdGFnZS5jb22CD3F1aXp0ZWVuYWdlLmNv
bYIYcmVjb3JkaW5nc3R1ZGlvd29ybGQuY29tghJyZW1vdGV3ZWxsbmVzcy5uZXSC
D3J1bmN1cnJlbmN5Lm9yZ4IRc292ZXJlaWduYXJlYS5jb22CEXNvdmVyZWlnbmNh
ZmUuY29tghxzb3ZlcmVpZ25jbGVhbmluZ3NlcnZpY2UuY29tghFzb3ZlcmVpZ25m
cmVlLmNvbYISc292ZXJlaWduZ3JhbmQuY29tghJzb3ZlcmVpZ25pbWFnZS5jb22C
G3NvdmVyZWlnbmluZnJhc3RydWN0dXJlLmNvbYITc292ZXJlaWdubW9iaWxlLmNv
bYISc292ZXJlaWducGxhemEuY29tghFzb3ZlcmVpZ25zYWxlLmNvbYIQc292ZXJl
aWduc3BhLmNvbYIRdGhlYXRlcmRpcmVjdC5jb22CGnRyYW5zc292ZXJlaWducGlw
ZWxpbmUuY29tght0cmFuc3V6YmVraXN0YW5waXBlbGluZS5jb22CFXV6YmVraXN0
YW5jdWx0dXJlLmNvbYISdXpiZWtpc3RhbmZvb2QuY29tghB1emJla2lzdGFuaGQu
Y29tgh93d3cuYWZyaWNhYnVzaW5lc3Njb21tdW5pdHkuY29tghx3d3cuYWZyaWNh
YnVzaW5lc3NsZWFkZXIuY29tghZ3d3cuYXNpYW9jZWFuc3RvY2suY29tghZ3d3cu
YmVpamluZ2thcmFva2UuY29tgg93d3cuYnByZXNzZS5jb22CGHd3dy5jYWJsZXR2
c2luZ2Fwb3JlLmNvbYISd3d3LmNpbmVhc3NldHMuY29tght3d3cuY29uc3VtZXJp
bmR1c3RyaWFscy5jb22CFXd3dy5jb3RlZGF6dXJsYW5kLmNvbYIVd3d3LmNvdGVk
YXp1cnJlbnQuY29tghV3d3cuZGVtYW5kc3Rvcmllcy5jb22CHXd3dy5leHBsb3Jh
dGlvbmVtcGxveW1lbnQuY29tghV3d3cuZmFybXNhbG9ldmVyYS5jb22CEnd3dy5m
aWxtaG9ub3VyLmNvbYIVd3d3LmZvb2Rwcm9ncmFtbWUubmV0ghd3d3cuaW5kb2th
cmFva2VjbHViLmNvbYIYd3d3LmludGVyc2hpcGFjYWRlbXkubmV0ghp3d3cubGVh
cm5pbmdhaWRwcm9ncmFtLmNvbYIWd3d3Lm1lZGlhZmluYW5jaWVyLmNvbYIVd3d3
Lm1vbmV5bGFuZ3VhZ2Uub3Jnghl3d3cubmV3b2Zmc2hvcmVyZWFsdHkuY29tghl3
d3cubmV3b2Zmc2hvcmVzYWZldHkuY29tgh13d3cub25saW5lbGVhcm5pbmdwcm9y
Z2FtLmNvbYIYd3d3LnByaXZhdGVmdW5kc2JhbmsuY29tghZ3d3cucHVzaGlubm92
YXRpb24ub3JnghV3d3cucHVzaGludHVpdGlvbi5vcmeCDnd3dy5xdWl6ZjEuY29t
ghB3d3cucXVpemZvb2QuY29tghV3d3cucXVpemZ1cm5pdHVyZS5jb22CE3d3dy5x
dWl6cGljdHVyZS5jb22CEHd3dy5xdWl6c2FsZS5jb22CEXd3dy5xdWl6c3RhZ2Uu
Y29tghN3d3cucXVpenRlZW5hZ2UuY29tghx3d3cucmVjb3JkaW5nc3R1ZGlvd29y
bGQuY29tghZ3d3cucmVtb3Rld2VsbG5lc3MubmV0ghN3d3cucnVuY3VycmVuY3ku
b3Jnghh3d3cuc2hhbmdoYWkta2FyYW9rZS5jb22CFnd3dy5zaGlwcGluZ3NlY3Rv
ci5jb22CFXd3dy5zb3ZlcmVpZ25hcmVhLmNvbYIVd3d3LnNvdmVyZWlnbmNhZmUu
Y29tgiB3d3cuc292ZXJlaWduY2xlYW5pbmdzZXJ2aWNlLmNvbYIVd3d3LnNvdmVy
ZWlnbmZyZWUuY29tghZ3d3cuc292ZXJlaWduZ3JhbmQuY29tghZ3d3cuc292ZXJl
aWduaW1hZ2UuY29tgh93d3cuc292ZXJlaWduaW5mcmFzdHJ1Y3R1cmUuY29tghd3
d3cuc292ZXJlaWdubW9iaWxlLmNvbYIWd3d3LnNvdmVyZWlnbnBsYXphLmNvbYIV
d3d3LnNvdmVyZWlnbnNhbGUuY29tghR3d3cuc292ZXJlaWduc3BhLmNvbYIVd3d3
LnRoZWF0ZXJkaXJlY3QuY29tgh53d3cudHJhbnNzb3ZlcmVpZ25waXBlbGluZS5j
b22CH3d3dy50cmFuc3V6YmVraXN0YW5waXBlbGluZS5jb22CFnd3dy51emJla2lz
dGFuZm9vZC5jb22CFHd3dy51emJla2lzdGFuaGQuY29tghN3d3cueWFuZ29uZ2xv
YmUuY29tgg95YW5nb25nbG9iZS5jb20wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEw
geYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1h
eSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25s
eSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3Vu
ZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG
9w0BAQsFAAOCAQEAnHjhFTAouwW/CpBl6LxjLsaWcwcNVpDh+apCuwQOaASjrbxJ
Uax3Hgob1XRmuXbdeyrIVp6ui4daWvic287jt57mZ1D0ofHgjmb9qH4mI4mxHkIk
/CEK0M6TUu0OqBSVBF6RCpy2ghH8YveiBAwdPYeOr7X6ifGGv+vVKpiddaBPkT0p
8woEr+fEWw2EOk+Sh37yY9lcDV3CgP4bbbHw5HFy/7IBnA9OrXlQlWydbGxrgS1F
TtW/+0DkS73JO369/rrCfRYEuMumE1d68mopPL3ym1xtuLoRG+9yz2E+uoZppC8M
A1oNbWB92mJOalHxJs3k9Zq64IM/wIg1ydK8VQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vfgbnUDRHsBS/foKdUT
Gtcmt/3UCj8tT3pDy0iZO0xUdVmyhj+B0ZAbG9uq6BEWp5jVRCqUcW81+lVdbsVC
6hJ5/1Lo0hF9Cx22C23VgExddwg7dRyYGPEUSHWP61esAUsXRdoZsvSRjk2dz6Of
F/DdlAp+6Sn5b5GBot292NNjRTuN6l8x2q3Z2hHytet0FUC1nKcH9sSqz5GU4zBk
eSlI2rl+JJv08P0UIU8AGvIZhWOdl41Ofx6DAzyFe1ZP/NNcARRcQN0m9oVKcGGH
uC2wO5LlR7M1WrVNSxVSl9ADCRRObKNyV8RyT69QEhKQ+Ld7MgzGS2ky615xI2B8
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261481144577024568424785853615232296989325
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-25 11:42:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-26 11:42:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sovereignspa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31176855570911025570879797461225515745151257315705209106299572102152626731723988960377196909429032897997299892359000593114864862171213585410382167071788744801458841099551289342106660671346644290621987550897892779884236928321869880502830534364641896850634668322817046226129293953759222979927563826640264133635216619861804885240582843978808356548986704112981816074773475770503160773336434890220850082197621636719356887389024706647976678896972169767527365660280476416627756300089909764521470114131217243969310335713100346340063448744235781073524517513316393158949057710997666068541006959779334196891060583548321781546213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4946fa7faebd6b59e9d9702befe4a961cf0d8ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiaoceanstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beijingkaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpresse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinakaraokeclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cineassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotedazurland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotedazurrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandstories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorationemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodprogramme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intershipacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneylanguage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newoffshorerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newoffshoresafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinelearningprorgam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushintuition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizf1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizteenage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordingstudioworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotewellness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runcurrency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereigncafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereigncleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereigngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereigninfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovereignspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theaterdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transsovereignpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transuzbekistanpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekistanculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekistanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekistanhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africabusinesscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africabusinessleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiaoceanstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beijingkaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpresse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabletvsingapore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cineassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumerindustrials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotedazurland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotedazurrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demandstories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorationemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmsaloevera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmhonour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodprogramme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indokaraokeclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intershipacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningaidprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediafinancier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneylanguage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshorerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshoresafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinelearningprorgam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatefundsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pushinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pushintuition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizf1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizteenage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordingstudioworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remotewellness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runcurrency.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanghai-karaoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shippingsector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigncafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigncleaningservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigngrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigninfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereignspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theaterdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transsovereignpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transuzbekistanpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzbekistanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzbekistanhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yangonglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yangonglobe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c78e1153028bb05bf0a9065e8bc632ec69673070d5690e1f9aa42bb040e6804a3adbc4951ac771e0a1bd57466b976dd7b2ac8569eae8b875a5af89cdbcee3b79ee66750f4a1f1e08e66fda87e262389b11e4224fc210ad0ce9352ed0ea81495045e910a9cb68211fc62f7a2040c1d3d878eafb5fa89f186bfebd52a989d75a04f913d29f30a04afe7c45b0d843a4f92877ef263d95c0d5dc280fe1b6db1f0e47172ffb2019c0f4ead7950956c9d6c6c6b812d454ed5bffb40e44bbdc93b7ebdfebac27d1604b8cba613577af26a293cbdf29b5c6db8ba111bef72cf613eba8669a42f0c035a0d6d607dda624e6a51f126cde4f59abae0833fc08835c9d2bc55