*.newsong.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fb:d7:b0:a7:bb:8f:77:ca:9f:ca:2a:df:4c:3b:e1:f4:f5 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.newsong.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fb:d7:b0:a7:bb:8f:77:ca:9f:ca:2a:df:4c:3b:e1:f4:f5
Serial Number (int): 434146719089559871333578572324553153967349
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0d:ff:5e:a7:ed:fb:c4:3d:05:da:e6:cb:31:57:8e:8d:dd:32:4a:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:6e:2d:3f:da:d9:2a:df:2c:f7:c2:db:2b:3a:54:15:d0:a2:47:6d
Fingerprint (sha256): 61:1b:ca:7b:f6:01:46:07:79:0b:45:2d:85:e3:12:e7:d2:7b:6b:46:18:18:a0:60:03:b4:76:34:7e:3c:0e:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.newsong.co.za

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.newsong.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.angelgold7.com
*.angelgoldcoin.com
*.angelgoldshop.com
*.beckerdesign.net
*.bibtoken.net
*.bitexdream.com
*.centraldirect.com
*.cindylocher.com
*.claytonrestorations.com
*.davidbly.com
*.fakaza.me
*.foundationsofhope.us
*.hopalong.org
*.hwsdoor.com
*.icepond.com
*.interconsultglobal.com
*.interconsultglobal.us
*.jarretthouse.com
*.jbphoto.us
*.kansascityjugglingassociation.org
*.kyliessweetshop.com
*.lawrencebaker.net
*.melodyfaire.com
*.moccowrestling.com
*.mojowebhosting.net
*.newsong.co.za
*.noveltiesnstuff.com
*.originalhotyogacenter.com
*.painsolutionswi.com
*.pilotrush.com
*.precisiontacticaltraining.com
*.resort-diving.com
*.ripian.net
*.searchenginelandawards.com
*.technicstech.com
*.teruclavel.com
*.thehalfmarathoner.com
*.themaestroofmagic.com
*.twocarry.com
*.vistaeyecentretoronto.ca
*.vistaeyecentretoronto.com
*.wam2020.com
*.willwoodstudios.com
angelgold7.com
angelgoldcoin.com
angelgoldshop.com
beckerdesign.net
bibtoken.net
bitexdream.com
centraldirect.com
cindylocher.com
claytonrestorations.com
davidbly.com
fakaza.me
foundationsofhope.us
hopalong.org
hwsdoor.com
icepond.com
interconsultglobal.com
interconsultglobal.us
jarretthouse.com
jbphoto.us
kansascityjugglingassociation.org
kyliessweetshop.com
lawrencebaker.net
melodyfaire.com
moccowrestling.com
mojowebhosting.net
newsong.co.za
noveltiesnstuff.com
originalhotyogacenter.com
painsolutionswi.com
pilotrush.com
precisiontacticaltraining.com
resort-diving.com
ripian.net
searchenginelandawards.com
technicstech.com
teruclavel.com
thehalfmarathoner.com
themaestroofmagic.com
twocarry.com
vistaeyecentretoronto.ca
vistaeyecentretoronto.com
wam2020.com
willwoodstudios.com

Other certificates including the domain name newsong.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.newsong.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMGjCCCwKgAwIBAgISBPvXsKe7j3fKn8oq30w74fT1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTkwOTQxMTNaFw0y
MDA1MTkwOTQxMTNaMBoxGDAWBgNVBAMMDyoubmV3c29uZy5jby56YTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALIPK3GL+zbl9TXbvhMeIpPv7NoyDBgC
55+WbZ7czfndI+h0HJCrsIDo4cdiJ5Cz07vRjPu+hF4+gziYRIJAIwtXAXfD9nFo
7hF6CtM5lx32DoXUhIE3YWgd55bDacvtcv/7dPbOszNpgckiULCuyVU+GE5WlfpJ
BU9caIO433aRC6TpgqG1xI6IIi1FNgiXv9hLAQIKDhPNBoB+x7XyMvhnjd5OjZkP
Cxr2R3yb4rLVjom47jJscqdZ77x2T4FOzf0IagYCrDVjzFHtk4TVTrWevYAVV4mn
jeRaJXArEA8nrUWqut/c+3CcRGLbarnb3jmQ/2xj+unFkED69ZB4y/0CAwEAAaOC
CSgwggkkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUDf9ep+37xD0F2ubLMVeOjd0y
Sn8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCBt0GA1UdEQSCBtQwggbQghAqLmFuZ2VsZ29sZDcuY29tghMqLmFuZ2Vs
Z29sZGNvaW4uY29tghMqLmFuZ2VsZ29sZHNob3AuY29tghIqLmJlY2tlcmRlc2ln
bi5uZXSCDiouYmlidG9rZW4ubmV0ghAqLmJpdGV4ZHJlYW0uY29tghMqLmNlbnRy
YWxkaXJlY3QuY29tghEqLmNpbmR5bG9jaGVyLmNvbYIZKi5jbGF5dG9ucmVzdG9y
YXRpb25zLmNvbYIOKi5kYXZpZGJseS5jb22CCyouZmFrYXphLm1lghYqLmZvdW5k
YXRpb25zb2Zob3BlLnVzgg4qLmhvcGFsb25nLm9yZ4INKi5od3Nkb29yLmNvbYIN
Ki5pY2Vwb25kLmNvbYIYKi5pbnRlcmNvbnN1bHRnbG9iYWwuY29tghcqLmludGVy
Y29uc3VsdGdsb2JhbC51c4ISKi5qYXJyZXR0aG91c2UuY29tggwqLmpicGhvdG8u
dXOCIyoua2Fuc2FzY2l0eWp1Z2dsaW5nYXNzb2NpYXRpb24ub3JnghUqLmt5bGll
c3N3ZWV0c2hvcC5jb22CEyoubGF3cmVuY2ViYWtlci5uZXSCESoubWVsb2R5ZmFp
cmUuY29tghQqLm1vY2Nvd3Jlc3RsaW5nLmNvbYIUKi5tb2pvd2ViaG9zdGluZy5u
ZXSCDyoubmV3c29uZy5jby56YYIVKi5ub3ZlbHRpZXNuc3R1ZmYuY29tghsqLm9y
aWdpbmFsaG90eW9nYWNlbnRlci5jb22CFSoucGFpbnNvbHV0aW9uc3dpLmNvbYIP
Ki5waWxvdHJ1c2guY29tgh8qLnByZWNpc2lvbnRhY3RpY2FsdHJhaW5pbmcuY29t
ghMqLnJlc29ydC1kaXZpbmcuY29tggwqLnJpcGlhbi5uZXSCHCouc2VhcmNoZW5n
aW5lbGFuZGF3YXJkcy5jb22CEioudGVjaG5pY3N0ZWNoLmNvbYIQKi50ZXJ1Y2xh
dmVsLmNvbYIXKi50aGVoYWxmbWFyYXRob25lci5jb22CFyoudGhlbWFlc3Ryb29m
bWFnaWMuY29tgg4qLnR3b2NhcnJ5LmNvbYIaKi52aXN0YWV5ZWNlbnRyZXRvcm9u
dG8uY2GCGyoudmlzdGFleWVjZW50cmV0b3JvbnRvLmNvbYINKi53YW0yMDIwLmNv
bYIVKi53aWxsd29vZHN0dWRpb3MuY29tgg5hbmdlbGdvbGQ3LmNvbYIRYW5nZWxn
b2xkY29pbi5jb22CEWFuZ2VsZ29sZHNob3AuY29tghBiZWNrZXJkZXNpZ24ubmV0
ggxiaWJ0b2tlbi5uZXSCDmJpdGV4ZHJlYW0uY29tghFjZW50cmFsZGlyZWN0LmNv
bYIPY2luZHlsb2NoZXIuY29tghdjbGF5dG9ucmVzdG9yYXRpb25zLmNvbYIMZGF2
aWRibHkuY29tgglmYWthemEubWWCFGZvdW5kYXRpb25zb2Zob3BlLnVzggxob3Bh
bG9uZy5vcmeCC2h3c2Rvb3IuY29tggtpY2Vwb25kLmNvbYIWaW50ZXJjb25zdWx0
Z2xvYmFsLmNvbYIVaW50ZXJjb25zdWx0Z2xvYmFsLnVzghBqYXJyZXR0aG91c2Uu
Y29tggpqYnBob3RvLnVzgiFrYW5zYXNjaXR5anVnZ2xpbmdhc3NvY2lhdGlvbi5v
cmeCE2t5bGllc3N3ZWV0c2hvcC5jb22CEWxhd3JlbmNlYmFrZXIubmV0gg9tZWxv
ZHlmYWlyZS5jb22CEm1vY2Nvd3Jlc3RsaW5nLmNvbYISbW9qb3dlYmhvc3Rpbmcu
bmV0gg1uZXdzb25nLmNvLnphghNub3ZlbHRpZXNuc3R1ZmYuY29tghlvcmlnaW5h
bGhvdHlvZ2FjZW50ZXIuY29tghNwYWluc29sdXRpb25zd2kuY29tgg1waWxvdHJ1
c2guY29tgh1wcmVjaXNpb250YWN0aWNhbHRyYWluaW5nLmNvbYIRcmVzb3J0LWRp
dmluZy5jb22CCnJpcGlhbi5uZXSCGnNlYXJjaGVuZ2luZWxhbmRhd2FyZHMuY29t
ghB0ZWNobmljc3RlY2guY29tgg50ZXJ1Y2xhdmVsLmNvbYIVdGhlaGFsZm1hcmF0
aG9uZXIuY29tghV0aGVtYWVzdHJvb2ZtYWdpYy5jb22CDHR3b2NhcnJ5LmNvbYIY
dmlzdGFleWVjZW50cmV0b3JvbnRvLmNhghl2aXN0YWV5ZWNlbnRyZXRvcm9udG8u
Y29tggt3YW0yMDIwLmNvbYITd2lsbHdvb2RzdHVkaW9zLmNvbTBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AF6n
c/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcF0Jk4gAAAQDAEYwRAIg
ES2GPyYQhjFhOmZ5cnrPHZ3xUo5EsIMp3QWdcN8M0tcCIEg7a03PajqqWmWcAz4L
/uaO1neT2B1sbhRzP5xfIKnmAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6
GmnTohwAAAFwXQmTuAAABAMARzBFAiEAtSlZAqACKHvND9Ovoy0kxCEeQIY1sj3Y
46XvBWJ8KU0CID3kfYU43gfCB3qzBQHSBCSBx5WQPLmYGLajUpdMxbIrMA0GCSqG
SIb3DQEBCwUAA4IBAQBamknEB4gF/I8qb8NrMO2GetO5iLtnPCGKKedck5TZ5zVK
vykZocdZU0tvNbjNxJR7UQ3Xeu/iVxSCfZmxqAgmResWMP+c4ki1O1nSjx+C7/s1
YqjUb0nHM5MxuczZTxMRDNUVVCs6g7t8++frq+8OeWa8/1dn+Dok9IhXkAYFqSNd
59MrBqM72VTuMuSyYquWGcXPduuNu83aYPsF6A9pQAaudS9Hkm+dz5drvbI41yap
Zz/g0e53fssUabjTQVj+MRraPUBYBxrfx0h6y8yanfHOyYMau2XV2KIMLE8Khrql
gRyGiE3U0kFE6ZDB5d+9qHh2w0hSQXIZtQ2+x0K2
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg8rcYv7NuX1Ndu+Ex4i
k+/s2jIMGALnn5ZtntzN+d0j6HQckKuwgOjhx2InkLPTu9GM+76EXj6DOJhEgkAj
C1cBd8P2cWjuEXoK0zmXHfYOhdSEgTdhaB3nlsNpy+1y//t09s6zM2mBySJQsK7J
VT4YTlaV+kkFT1xog7jfdpELpOmCobXEjogiLUU2CJe/2EsBAgoOE80GgH7HtfIy
+GeN3k6NmQ8LGvZHfJvistWOibjuMmxyp1nvvHZPgU7N/QhqBgKsNWPMUe2ThNVO
tZ69gBVXiaeN5FolcCsQDyetRaq639z7cJxEYttqudveOZD/bGP66cWQQPr1kHjL
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434146719089559871333578572324553153967349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 09:41:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 09:41:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.newsong.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22477898742488069042309932521395327658909639138074277344139636646400471564351707893313550733821465969337818421369361366374020835552926314635832197314618058022731336940913793547747300839380455331112514252565809452166709719912011429971540361102622626002663216269456419797318503191736974951052144308168278016095263073410359863170184939996814968448917593844025238265286078302933075134253475186103436409623630402321091844160783427305013080655832560701885841829707853310059343616725596442065502730847486809131207739373786840901333327644084602452081861319241707320789225038749897342448208083593572663871288447963311772322813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0dff5ea7edfbc43d05dae6cb31578e8ddd324a7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1748 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelgold7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelgoldcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelgoldshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beckerdesign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bibtoken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitexdream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centraldirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cindylocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claytonrestorations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davidbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fakaza.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foundationsofhope.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopalong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hwsdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icepond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interconsultglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interconsultglobal.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jarretthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbphoto.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kansascityjugglingassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyliessweetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawrencebaker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melodyfaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moccowrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mojowebhosting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsong.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noveltiesnstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.originalhotyogacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.painsolutionswi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilotrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precisiontacticaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resort-diving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ripian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchenginelandawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technicstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teruclavel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehalfmarathoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themaestroofmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twocarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistaeyecentretoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistaeyecentretoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wam2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willwoodstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelgold7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelgoldcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelgoldshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckerdesign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibtoken.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitexdream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centraldirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cindylocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claytonrestorations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakaza.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationsofhope.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopalong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwsdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icepond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interconsultglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interconsultglobal.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarretthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbphoto.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansascityjugglingassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyliessweetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawrencebaker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melodyfaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moccowrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojowebhosting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsong.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noveltiesnstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originalhotyogacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painsolutionswi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisiontacticaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resort-diving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchenginelandawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teruclavel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehalfmarathoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themaestroofmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twocarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistaeyecentretoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistaeyecentretoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wam2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willwoodstudios.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001705d09938800000403004630440220112d863f26108631613a6679727acf1d9df1528e44b08329dd059d70df0cd2d70220483b6b4dcf6a3aaa5a659c033e0bfee68ed67793d81d6c6e14733f9c5f20a9e600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705d0993b80000040300473045022100b5295902a002287bcd0fd3afa32d24c4211e408635b23dd8e3a5ef05627c294d02203de47d8538de07c2077ab30501d2042481c795903cb99818b6a352974cc5b22b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a9a49c4078805fc8f2a6fc36b30ed867ad3b988bb673c218a29e75c9394d9e7354abf2919a1c759534b6f35b8cdc4947b510dd77aefe25714827d99b1a8082645eb1630ff9ce248b53b59d28f1f82effb3562a8d46f49c7339331b9ccd94f13110cd515542b3a83bb7cfbe7ebabef0e7966bcff5767f83a24f48857900605a9235de7d32b06a33bd954ee32e4b262ab9619c5cf76eb8dbbcdda60fb05e80f694006ae752f47926f9dcf976bbdb238d726a9673fe0d1ee777ecb1469b8d34158fe311ada3d4058071adfc7487acbcc9a9df1cec9831abb65d5d8a20c2c4f0a86baa5811c86884dd4d24144e990c1e5dfbda87876c34852417219b50dbec742b6