governmentjakarta.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:21:d7:37:c1:8b:4a:ac:1a:96:94:6e:98:49:58:67:3a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=governmentjakarta.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:21:d7:37:c1:8b:4a:ac:1a:96:94:6e:98:49:58:67:3a
Serial Number (int): 264444381096121345578496239402446422042426
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:ac:16:f3:7a:cb:0b:c3:66:e5:3e:3b:43:67:3f:00:7d:09:32:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:37:3c:d4:3c:c6:9e:d2:48:3b:9b:d0:2c:2a:7b:c8:1d:f9:a9:d5
Fingerprint (sha256): 61:ce:d6:ae:f9:34:13:46:80:ff:bc:f2:d9:20:3e:5e:c0:ec:de:83:a8:62:eb:cd:24:1d:1f:14:f5:ab:c3:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate governmentjakarta.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for governmentjakarta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

africarap.xyz
agedblackgarlic.org
atlantapalace.com
bangalorefinance.com
chinaconstruction.xyz
commodityproducers.org
coping.org
demolitionvessel.org
difficile.org
dnja.com
ecobarge.org
economicforum.xyz
energyproduction.xyz
exposcandinavia.com
freight38.com
globalfinancialrisk.org
governmentjakarta.com
haarp.xyz
hullsurvey.org
jeddahfinance.com
jetflight.org
libyaclinic.com
linendirectory.org
marinehullsurvey.org
marketingbusinessworld.com
mayottefinance.com
mymissamericanpie.org
mytopschool.com
napkins.org
opensourcecable.org
phoenixsettlement.com
plutoniumfuel.com
postvienna.com
publicprivatepartnership.xyz
radiow.org
recallmydata.com
royalfamilyprivate.org
saintpetersburgfinance.com
saudif1.com
singaporegrowing.org
soccerworldcupfinal.com
spacet.org
spacev.org
stpetersburgfinance.com
students123.com
sucrefinance.com
sunwater.xyz
tekno.xyz
thaijoboffshore.com
thechroniclesofnarnia.org
verdi20.com
www.africarap.xyz
www.agedblackgarlic.org
www.atlantapalace.com
www.bangalorefinance.com
www.bernefinance.com
www.bogotaclinic.com
www.chinaconstruction.xyz
www.commodityproducers.org
www.coping.org
www.ecobarge.org
www.economicforum.xyz
www.energyproduction.xyz
www.europeoffshore.org
www.exposcandinavia.com
www.floridasettlement.com
www.freight38.com
www.globeargentina.com
www.governmentjakarta.com
www.guiaoffshore.com
www.haarp.xyz
www.hullsurvey.org
www.internlogistik.com
www.jetflight.org
www.linendirectory.org
www.marinehullsurvey.org
www.marketingbusinessworld.com
www.materiale.org
www.mayottefinance.com
www.mymissamericanpie.org
www.napkins.org
www.oatmealmilk.com
www.publicprivatepartnership.xyz
www.radiow.org
www.recallmydata.com
www.royalfamilyprivate.org
www.saintpetersburgfinance.com
www.singaporegrowing.org
www.soccerworldcupfinal.com
www.solarroofcorp.com
www.spacet.org
www.spacev.org
www.stpetersburgfinance.com
www.students123.com
www.subseaengineering.org
www.sucrefinance.com
www.sunwater.xyz
www.tekno.xyz
www.thechroniclesofnarnia.org
www.verdi20.com

Other certificates including the domain name governmentjakarta.com

(limited to 100 certificates)
www.saintpetersburgfinance.com
opensourcecable.org
www.commodityproducers.org
www.asianjakarta.com
www.cyberjakarta.com
www.oatmealmilk.com
tekno.xyz
commodityproducers.org
jeddahfinance.com
www.cyberjakarta.com
moscowz.com
www.chinaconstruction.xyz
opensourcecable.org
www.asianjakarta.com
www.soccerworldcupfinal.com
www.cyberjakarta.com
www.cyberjakarta.com
privatebankjakarta.com
saintpetersburgfinance.com
www.marketingbusinessworld.com
moscowz.com
www.oatmealmilk.com
oillondon.org
www.bangalorefinance.com
africarap.xyz
governmentjakarta.com
tekno.xyz
www.forumjakarta.com
www.cyberjakarta.com
switzerlandrecruiting.com
saintpetersburgfinance.com
www.parseljakarta.com
www.asianjakarta.com
radiojakarta.com
opensourcecable.org
atlantapalace.com
www.bangalorefinance.com
www.energyproduction.xyz
www.exposcandinavia.com
africarap.xyz
opensourcecable.org
www.chinaconstruction.xyz
www.asianjakarta.com
www.bogotaclinic.com
africarap.xyz
www.dataintrusion.xyz
students123.com
www.asianjakarta.com
www.oatmealmilk.com
www.spacet.org
governmentjakarta.com
www.spacet.org
parseljakarta.com

Certificate

The complete raw certificate details for governmentjakarta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINgjCCDGqgAwIBAgISAwkh1zfBi0qsGpaUbphJWGc6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjcxMTMyNDZaFw0y
MDAxMjUxMTMyNDZaMCAxHjAcBgNVBAMTFWdvdmVybm1lbnRqYWthcnRhLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALECO4vzPPMvXC4buxkyi6by
z9sBPc54xpBT/CBy7wLlRrVs2/cVqWJEK4BN2jVwm4YA+kZ135hyLAGjXzUOZcMC
16ZzV7ehEuLfyw/k+eRwT9/WuIPbO/dqJNL2WgXmssfVjGMJtT87eQu8d5Tm57wF
QoiGElBeu028JukG+62XG4xqSvfjJknWM+BgJHZPOqE0Wl7enh577VrlvFFPt2Jk
vmi0YIRAUS/Wx2sV1Km8Kj+lS5wRPsLWIlUJBnk8Z2Lh/FE2zPO36L/zp1SyNF6T
U1DQZM2mqA2rQxwb3vZSG5knHmODcwscLNCH6Mb+AA+Qt/bNZrzvXfRzR713hnUC
AwEAAaOCCoowggqGMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUk6wW83rLC8Nm5T47
Q2c/AH0JMsswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCCCD4GA1UdEQSCCDUwgggxgg1hZnJpY2FyYXAueHl6ghNhZ2Vk
YmxhY2tnYXJsaWMub3JnghFhdGxhbnRhcGFsYWNlLmNvbYIUYmFuZ2Fsb3JlZmlu
YW5jZS5jb22CFWNoaW5hY29uc3RydWN0aW9uLnh5eoIWY29tbW9kaXR5cHJvZHVj
ZXJzLm9yZ4IKY29waW5nLm9yZ4IUZGVtb2xpdGlvbnZlc3NlbC5vcmeCDWRpZmZp
Y2lsZS5vcmeCCGRuamEuY29tggxlY29iYXJnZS5vcmeCEWVjb25vbWljZm9ydW0u
eHl6ghRlbmVyZ3lwcm9kdWN0aW9uLnh5eoITZXhwb3NjYW5kaW5hdmlhLmNvbYIN
ZnJlaWdodDM4LmNvbYIXZ2xvYmFsZmluYW5jaWFscmlzay5vcmeCFWdvdmVybm1l
bnRqYWthcnRhLmNvbYIJaGFhcnAueHl6gg5odWxsc3VydmV5Lm9yZ4IRamVkZGFo
ZmluYW5jZS5jb22CDWpldGZsaWdodC5vcmeCD2xpYnlhY2xpbmljLmNvbYISbGlu
ZW5kaXJlY3Rvcnkub3JnghRtYXJpbmVodWxsc3VydmV5Lm9yZ4IabWFya2V0aW5n
YnVzaW5lc3N3b3JsZC5jb22CEm1heW90dGVmaW5hbmNlLmNvbYIVbXltaXNzYW1l
cmljYW5waWUub3Jngg9teXRvcHNjaG9vbC5jb22CC25hcGtpbnMub3JnghNvcGVu
c291cmNlY2FibGUub3JnghVwaG9lbml4c2V0dGxlbWVudC5jb22CEXBsdXRvbml1
bWZ1ZWwuY29tgg5wb3N0dmllbm5hLmNvbYIccHVibGljcHJpdmF0ZXBhcnRuZXJz
aGlwLnh5eoIKcmFkaW93Lm9yZ4IQcmVjYWxsbXlkYXRhLmNvbYIWcm95YWxmYW1p
bHlwcml2YXRlLm9yZ4Iac2FpbnRwZXRlcnNidXJnZmluYW5jZS5jb22CC3NhdWRp
ZjEuY29tghRzaW5nYXBvcmVncm93aW5nLm9yZ4IXc29jY2Vyd29ybGRjdXBmaW5h
bC5jb22CCnNwYWNldC5vcmeCCnNwYWNldi5vcmeCF3N0cGV0ZXJzYnVyZ2ZpbmFu
Y2UuY29tgg9zdHVkZW50czEyMy5jb22CEHN1Y3JlZmluYW5jZS5jb22CDHN1bndh
dGVyLnh5eoIJdGVrbm8ueHl6ghN0aGFpam9ib2Zmc2hvcmUuY29tghl0aGVjaHJv
bmljbGVzb2ZuYXJuaWEub3Jnggt2ZXJkaTIwLmNvbYIRd3d3LmFmcmljYXJhcC54
eXqCF3d3dy5hZ2VkYmxhY2tnYXJsaWMub3JnghV3d3cuYXRsYW50YXBhbGFjZS5j
b22CGHd3dy5iYW5nYWxvcmVmaW5hbmNlLmNvbYIUd3d3LmJlcm5lZmluYW5jZS5j
b22CFHd3dy5ib2dvdGFjbGluaWMuY29tghl3d3cuY2hpbmFjb25zdHJ1Y3Rpb24u
eHl6ghp3d3cuY29tbW9kaXR5cHJvZHVjZXJzLm9yZ4IOd3d3LmNvcGluZy5vcmeC
EHd3dy5lY29iYXJnZS5vcmeCFXd3dy5lY29ub21pY2ZvcnVtLnh5eoIYd3d3LmVu
ZXJneXByb2R1Y3Rpb24ueHl6ghZ3d3cuZXVyb3Blb2Zmc2hvcmUub3Jnghd3d3cu
ZXhwb3NjYW5kaW5hdmlhLmNvbYIZd3d3LmZsb3JpZGFzZXR0bGVtZW50LmNvbYIR
d3d3LmZyZWlnaHQzOC5jb22CFnd3dy5nbG9iZWFyZ2VudGluYS5jb22CGXd3dy5n
b3Zlcm5tZW50amFrYXJ0YS5jb22CFHd3dy5ndWlhb2Zmc2hvcmUuY29tgg13d3cu
aGFhcnAueHl6ghJ3d3cuaHVsbHN1cnZleS5vcmeCFnd3dy5pbnRlcm5sb2dpc3Rp
ay5jb22CEXd3dy5qZXRmbGlnaHQub3JnghZ3d3cubGluZW5kaXJlY3Rvcnkub3Jn
ghh3d3cubWFyaW5laHVsbHN1cnZleS5vcmeCHnd3dy5tYXJrZXRpbmdidXNpbmVz
c3dvcmxkLmNvbYIRd3d3Lm1hdGVyaWFsZS5vcmeCFnd3dy5tYXlvdHRlZmluYW5j
ZS5jb22CGXd3dy5teW1pc3NhbWVyaWNhbnBpZS5vcmeCD3d3dy5uYXBraW5zLm9y
Z4ITd3d3Lm9hdG1lYWxtaWxrLmNvbYIgd3d3LnB1YmxpY3ByaXZhdGVwYXJ0bmVy
c2hpcC54eXqCDnd3dy5yYWRpb3cub3JnghR3d3cucmVjYWxsbXlkYXRhLmNvbYIa
d3d3LnJveWFsZmFtaWx5cHJpdmF0ZS5vcmeCHnd3dy5zYWludHBldGVyc2J1cmdm
aW5hbmNlLmNvbYIYd3d3LnNpbmdhcG9yZWdyb3dpbmcub3Jnght3d3cuc29jY2Vy
d29ybGRjdXBmaW5hbC5jb22CFXd3dy5zb2xhcnJvb2Zjb3JwLmNvbYIOd3d3LnNw
YWNldC5vcmeCDnd3dy5zcGFjZXYub3Jnght3d3cuc3RwZXRlcnNidXJnZmluYW5j
ZS5jb22CE3d3dy5zdHVkZW50czEyMy5jb22CGXd3dy5zdWJzZWFlbmdpbmVlcmlu
Zy5vcmeCFHd3dy5zdWNyZWZpbmFuY2UuY29tghB3d3cuc3Vud2F0ZXIueHl6gg13
d3cudGVrbm8ueHl6gh13d3cudGhlY2hyb25pY2xlc29mbmFybmlhLm9yZ4IPd3d3
LnZlcmRpMjAuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKaw
qKqOsnMAAAFuDTRe8gAABAMASDBGAiEAxUUb1ChSwdGukbB9LXiYgFCNTu3OAtPw
6yoQkyCPsYMCIQChOJmdYZ4P/izDxg45f3j/8Z9TQI+1sTR6myIltKriwgB1AAe3
XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbg00XycAAAQDAEYwRAIg
BTmZW9L+a22Yjai1QkW7FnexTvKdympDCoA4S3ntyoICIGxZddJwDauXs4mKws/S
61JQafqrcMtG/506A/AU3OBLMA0GCSqGSIb3DQEBCwUAA4IBAQBkJpj9cH2ZhwA4
aqVlyEfrLb3cOFVonRAdC7I59WIolcsgl9d+L0oRv0z0XswQfccTEeirgA1KtKhV
zZmv6YsRdUtXXlMdan5TXV6U0EQilkmAOfhduUGpICVDKwWPVExAReIlG9TO4XOU
AHwoBrRPzVpfwgiRmnvXk4xj41kt7wP1ZA0Y0Zqbd1KR3zBDsJExA1iTE/+anPc0
dhjW7QBCUCYoCRgZBsq/avYJUJJDOkFuTZwSUy9G8S4PySlMSsZPhDYzoB5ejNri
fVgKr88tmuL8Sg/l6u7PNzuxhurHJkR4X70UfsaUFk3Uy+BmFnElrkWOK5HvNv7Y
Z7Jf5FdE
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQI7i/M88y9cLhu7GTKL
pvLP2wE9znjGkFP8IHLvAuVGtWzb9xWpYkQrgE3aNXCbhgD6RnXfmHIsAaNfNQ5l
wwLXpnNXt6ES4t/LD+T55HBP39a4g9s792ok0vZaBeayx9WMYwm1Pzt5C7x3lObn
vAVCiIYSUF67Tbwm6Qb7rZcbjGpK9+MmSdYz4GAkdk86oTRaXt6eHnvtWuW8UU+3
YmS+aLRghEBRL9bHaxXUqbwqP6VLnBE+wtYiVQkGeTxnYuH8UTbM87fov/OnVLI0
XpNTUNBkzaaoDatDHBve9lIbmSceY4NzCxws0Ifoxv4AD5C39s1mvO9d9HNHvXeG
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264444381096121345578496239402446422042426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 11:32:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 11:32:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'governmentjakarta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22345280917165686859328837217608693542046092939131695204881590458443881031207395955292312939697711221689765496830772806389961473157823057027889792883236831210084206226247444503297728627850435477753278320139145227504213601221802718703583390269183442116944715582412597581285888729989993199069770822738649380729431271861753668824982559390927532987351590621741673399985624381492522948205845276351390068376863443381131180838910413468681421225718141473747973505934471864191573142057668882357813292424083854092426302295335682816471857024599262969688606452608773497267703041497749809894152671470040575850670352238523266336373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93ac16f37acb0bc366e53e3b43673f007d0932cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africarap.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agedblackgarlic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantapalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangalorefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaconstruction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityproducers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coping.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demolitionvessel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'difficile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecobarge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economicforum.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energyproduction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposcandinavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freight38.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalfinancialrisk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governmentjakarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haarp.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeddahfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetflight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libyaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linendirectory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinehullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingbusinessworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayottefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymissamericanpie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytopschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensourcecable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plutoniumfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postvienna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicprivatepartnership.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recallmydata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalfamilyprivate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudif1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporegrowing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerworldcupfinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sucrefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunwater.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekno.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaijoboffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechroniclesofnarnia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdi20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africarap.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agedblackgarlic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantapalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bangalorefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogotaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaconstruction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commodityproducers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coping.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecobarge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economicforum.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyproduction.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europeoffshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exposcandinavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floridasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freight38.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globeargentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governmentjakarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiaoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haarp.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internlogistik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetflight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linendirectory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinehullsurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketingbusinessworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materiale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayottefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymissamericanpie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oatmealmilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicprivatepartnership.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recallmydata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalfamilyprivate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singaporegrowing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soccerworldcupfinal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solarroofcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpetersburgfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.students123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subseaengineering.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sucrefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunwater.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekno.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechroniclesofnarnia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verdi20.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e0d345ef20000040300483046022100c5451bd42852c1d1ae91b07d2d789880508d4eedce02d3f0eb2a1093208fb183022100a138999d619e0ffe2cc3c60e397f78fff19f53408fb5b1347a9b2225b4aae2c200750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e0d345f27000004030046304402200539995bd2fe6b6d988da8b54245bb1677b14ef29dca6a430a80384b79edca8202206c5975d2700dab97b3898ac2cfd2eb525069faab70cb46ff9d3a03f014dce04b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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