www.t20sport.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f1:06:ba:7d:ab:8f:d3:55:f5:01:ba:5e:91:a0:89:51:91 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.t20sport.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:06:ba:7d:ab:8f:d3:55:f5:01:ba:5e:91:a0:89:51:91
Serial Number (int): 343353851907311034699792432024716921360785
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:5d:e8:10:a5:03:f1:eb:71:d5:fc:85:fb:9e:b4:52:4f:7d:13:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:e4:92:d1:24:b8:aa:c7:6b:0c:7e:3e:ef:5f:b1:50:3f:82:e7:78
Fingerprint (sha256): 69:64:a7:45:a8:bb:f8:5c:0b:7b:c8:d2:09:b9:f2:13:34:00:ba:d6:2e:ed:c0:4b:c0:4c:3b:36:2c:f0:47:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.t20sport.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.t20sport.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a1sport.net
absport.net
ammanaccommodation.com
businessdiversification.com
cambodiafiduciary.com
colombiashipping.com
cubafiduciary.com
cypruspalace.com
deutschepress.org
ethicalquestions.org
everytimewesaygoodbyeidiealittle.com
fisheriesprotectionvessel.com
francesport.net
guadalajaraschool.com
historyoftransport.net
ibadanlawyer.com
interactiveengine.org
internationalesport.net
istanbulsport.net
kanoclinic.com
kingstownfinance.com
logisticslegal.com
maisondesport.net
malaysiasport.net
mauritiusacademy.com
milansport.net
miningsupport.net
offshoreqatar.com
opencharityservice.com
padalarang.org
peacesupport.net
phnompenhaccommodation.com
preforceconcrete.com
reachoutdesign.com
republicsport.net
riskmanagement.io
royalexchangebitcoin.com
saudiarabiafiduciary.com
searchandrescuevessel.com
skopjeaccommodation.com
southafricafiduciary.com
southkoreafiduciary.com
stuttgartacademy.com
t20sport.net
talesofnarnaia.com
theartistband.com
unitedstatespalace.com
uzbekcompany.com
www.a1sport.net
www.absport.net
www.ammanaccommodation.com
www.apiaaccommodation.com
www.businessdiversification.com
www.cambodiafiduciary.com
www.capetownfinance.com
www.comeontome.org
www.cubafiduciary.com
www.cypruspalace.com
www.deutschepress.org
www.ethicaldecisions.org
www.fabricstrapping.com
www.firstbecomeeducated.com
www.francesport.net
www.guadalajaraschool.com
www.historyoftransport.net
www.ibadanlawyer.com
www.interactiveengine.org
www.internationalesport.net
www.istanbulsport.net
www.lacrossedesign.com
www.logisticslegal.com
www.maisondesport.net
www.malaysiasport.net
www.mauritiusacademy.com
www.milansport.net
www.miningsupport.net
www.nairobiaccommodation.com
www.opencharityservice.com
www.panamagarden.com
www.peacesupport.net
www.phnompenhaccommodation.com
www.polarresearchvessel.com
www.preforceconcrete.com
www.reachoutdesign.com
www.republicsport.net
www.riskmanagement.io
www.royalexchangebitcoin.com
www.saudiarabiafiduciary.com
www.searchandrescuevessel.com
www.skopjeaccommodation.com
www.southafricafiduciary.com
www.southkoreafiduciary.com
www.stuttgartacademy.com
www.stylenightlife.com
www.t20sport.net
www.talesofnarnaia.com
www.togoclinic.com
www.tradefinancehelp.com
www.unitedstatespalace.com
www.uzbekcompany.com

Other certificates including the domain name t20sport.net

(limited to 100 certificates)
unitedstatespalace.com
v12sport.net
brazilsport.net
www.pipelinetransport.net
palaisdesport.net
rovsupport.net
www.southkoreafiduciary.com
reliancesport.net
brazilsport.net
www.spacetransport.net
offshoreqatar.com
www.portofdouala.com
internationalesport.net
www.spacetransport.net
reachoutdesign.com
www.saudiarabiafiduciary.com
maisondesport.net
www.stuttgartacademy.com
www.istanbulsport.net
maisondesport.net
www.t20sport.net
www.mauritiusacademy.com
www.miningsupport.net
www.rovsupport.net
www.preforceconcrete.com
republicsport.net
www.maisondesport.net
www.peacesupport.net
internationalesport.net
www.furnituretransport.net
saudiarabiafiduciary.com
blockchainbankingsystem.org
reliancesport.net
www.maisondesport.net
offshoreqatar.com
maisondesport.net
www.historyoftransport.net
www.reliancesport.net
a1sport.net
www.historyoftransport.net
www.cypruspalace.com
www.absport.net
www.maisondesport.net
www.togoclinic.com

Certificate

The complete raw certificate details for www.t20sport.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIObjCCDVagAwIBAgISA/EGun2rj9NV9QG6XpGgiVGRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTIxMTM4MzNaFw0x
OTA2MTAxMTM4MzNaMBsxGTAXBgNVBAMTEHd3dy50MjBzcG9ydC5uZXQwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TG1XOnNrjx1unEOMImG5KVqndsFy
BSPskVuwYUxLB8ukdJ402vW6st+TvZ+7VH2DK2Ja5+YdQHgtsDZDD33Nsj9yBLhO
OoIJ8rO/OlrP+oiveiOGE1Dlf2Eh+k62eJuCYDF5dwsWZV11YDCHS2DPRTfatJU5
cb6zOLeI+ApVxusfmU2SSaz5y7oA/DBLhm+t/M8cx1ZaW2hBwDVkxGXTH0PpYwpe
H5RlxgWiV1wF+XYK+avxghYHiiqVnaQLKweadn7K3XUwbMPzNE0ODrk9xX1N32pM
WPr0f4RwyC3Ye+phoNLClT4lOocBPbY9djPeKdlDAmNS/6hWUjLB1czhAgMBAAGj
ggt7MIILdzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGBd6BClA/HrcdX8hfuetFJP
fRMrMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggkvBgNVHREEggkmMIIJIoILYTFzcG9ydC5uZXSCC2Fic3BvcnQubmV0
ghZhbW1hbmFjY29tbW9kYXRpb24uY29tghtidXNpbmVzc2RpdmVyc2lmaWNhdGlv
bi5jb22CFWNhbWJvZGlhZmlkdWNpYXJ5LmNvbYIUY29sb21iaWFzaGlwcGluZy5j
b22CEWN1YmFmaWR1Y2lhcnkuY29tghBjeXBydXNwYWxhY2UuY29tghFkZXV0c2No
ZXByZXNzLm9yZ4IUZXRoaWNhbHF1ZXN0aW9ucy5vcmeCJGV2ZXJ5dGltZXdlc2F5
Z29vZGJ5ZWlkaWVhbGl0dGxlLmNvbYIdZmlzaGVyaWVzcHJvdGVjdGlvbnZlc3Nl
bC5jb22CD2ZyYW5jZXNwb3J0Lm5ldIIVZ3VhZGFsYWphcmFzY2hvb2wuY29tghZo
aXN0b3J5b2Z0cmFuc3BvcnQubmV0ghBpYmFkYW5sYXd5ZXIuY29tghVpbnRlcmFj
dGl2ZWVuZ2luZS5vcmeCF2ludGVybmF0aW9uYWxlc3BvcnQubmV0ghFpc3RhbmJ1
bHNwb3J0Lm5ldIIOa2Fub2NsaW5pYy5jb22CFGtpbmdzdG93bmZpbmFuY2UuY29t
ghJsb2dpc3RpY3NsZWdhbC5jb22CEW1haXNvbmRlc3BvcnQubmV0ghFtYWxheXNp
YXNwb3J0Lm5ldIIUbWF1cml0aXVzYWNhZGVteS5jb22CDm1pbGFuc3BvcnQubmV0
ghFtaW5pbmdzdXBwb3J0Lm5ldIIRb2Zmc2hvcmVxYXRhci5jb22CFm9wZW5jaGFy
aXR5c2VydmljZS5jb22CDnBhZGFsYXJhbmcub3JnghBwZWFjZXN1cHBvcnQubmV0
ghpwaG5vbXBlbmhhY2NvbW1vZGF0aW9uLmNvbYIUcHJlZm9yY2Vjb25jcmV0ZS5j
b22CEnJlYWNob3V0ZGVzaWduLmNvbYIRcmVwdWJsaWNzcG9ydC5uZXSCEXJpc2tt
YW5hZ2VtZW50Lmlvghhyb3lhbGV4Y2hhbmdlYml0Y29pbi5jb22CGHNhdWRpYXJh
YmlhZmlkdWNpYXJ5LmNvbYIZc2VhcmNoYW5kcmVzY3VldmVzc2VsLmNvbYIXc2tv
cGplYWNjb21tb2RhdGlvbi5jb22CGHNvdXRoYWZyaWNhZmlkdWNpYXJ5LmNvbYIX
c291dGhrb3JlYWZpZHVjaWFyeS5jb22CFHN0dXR0Z2FydGFjYWRlbXkuY29tggx0
MjBzcG9ydC5uZXSCEnRhbGVzb2ZuYXJuYWlhLmNvbYIRdGhlYXJ0aXN0YmFuZC5j
b22CFnVuaXRlZHN0YXRlc3BhbGFjZS5jb22CEHV6YmVrY29tcGFueS5jb22CD3d3
dy5hMXNwb3J0Lm5ldIIPd3d3LmFic3BvcnQubmV0ghp3d3cuYW1tYW5hY2NvbW1v
ZGF0aW9uLmNvbYIZd3d3LmFwaWFhY2NvbW1vZGF0aW9uLmNvbYIfd3d3LmJ1c2lu
ZXNzZGl2ZXJzaWZpY2F0aW9uLmNvbYIZd3d3LmNhbWJvZGlhZmlkdWNpYXJ5LmNv
bYIXd3d3LmNhcGV0b3duZmluYW5jZS5jb22CEnd3dy5jb21lb250b21lLm9yZ4IV
d3d3LmN1YmFmaWR1Y2lhcnkuY29tghR3d3cuY3lwcnVzcGFsYWNlLmNvbYIVd3d3
LmRldXRzY2hlcHJlc3Mub3Jnghh3d3cuZXRoaWNhbGRlY2lzaW9ucy5vcmeCF3d3
dy5mYWJyaWNzdHJhcHBpbmcuY29tght3d3cuZmlyc3RiZWNvbWVlZHVjYXRlZC5j
b22CE3d3dy5mcmFuY2VzcG9ydC5uZXSCGXd3dy5ndWFkYWxhamFyYXNjaG9vbC5j
b22CGnd3dy5oaXN0b3J5b2Z0cmFuc3BvcnQubmV0ghR3d3cuaWJhZGFubGF3eWVy
LmNvbYIZd3d3LmludGVyYWN0aXZlZW5naW5lLm9yZ4Ibd3d3LmludGVybmF0aW9u
YWxlc3BvcnQubmV0ghV3d3cuaXN0YW5idWxzcG9ydC5uZXSCFnd3dy5sYWNyb3Nz
ZWRlc2lnbi5jb22CFnd3dy5sb2dpc3RpY3NsZWdhbC5jb22CFXd3dy5tYWlzb25k
ZXNwb3J0Lm5ldIIVd3d3Lm1hbGF5c2lhc3BvcnQubmV0ghh3d3cubWF1cml0aXVz
YWNhZGVteS5jb22CEnd3dy5taWxhbnNwb3J0Lm5ldIIVd3d3Lm1pbmluZ3N1cHBv
cnQubmV0ghx3d3cubmFpcm9iaWFjY29tbW9kYXRpb24uY29tghp3d3cub3BlbmNo
YXJpdHlzZXJ2aWNlLmNvbYIUd3d3LnBhbmFtYWdhcmRlbi5jb22CFHd3dy5wZWFj
ZXN1cHBvcnQubmV0gh53d3cucGhub21wZW5oYWNjb21tb2RhdGlvbi5jb22CG3d3
dy5wb2xhcnJlc2VhcmNodmVzc2VsLmNvbYIYd3d3LnByZWZvcmNlY29uY3JldGUu
Y29tghZ3d3cucmVhY2hvdXRkZXNpZ24uY29tghV3d3cucmVwdWJsaWNzcG9ydC5u
ZXSCFXd3dy5yaXNrbWFuYWdlbWVudC5pb4Icd3d3LnJveWFsZXhjaGFuZ2ViaXRj
b2luLmNvbYIcd3d3LnNhdWRpYXJhYmlhZmlkdWNpYXJ5LmNvbYIdd3d3LnNlYXJj
aGFuZHJlc2N1ZXZlc3NlbC5jb22CG3d3dy5za29wamVhY2NvbW1vZGF0aW9uLmNv
bYIcd3d3LnNvdXRoYWZyaWNhZmlkdWNpYXJ5LmNvbYIbd3d3LnNvdXRoa29yZWFm
aWR1Y2lhcnkuY29tghh3d3cuc3R1dHRnYXJ0YWNhZGVteS5jb22CFnd3dy5zdHls
ZW5pZ2h0bGlmZS5jb22CEHd3dy50MjBzcG9ydC5uZXSCFnd3dy50YWxlc29mbmFy
bmFpYS5jb22CEnd3dy50b2dvY2xpbmljLmNvbYIYd3d3LnRyYWRlZmluYW5jZWhl
bHAuY29tghp3d3cudW5pdGVkc3RhdGVzcGFsYWNlLmNvbYIUd3d3LnV6YmVrY29t
cGFueS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb
/gAAAWlx6WADAAAEAwBHMEUCIA6EWaY3SphjvCH2a1z4YewuVvJ/fADrJ3aQ1Zus
3M1sAiEA7wgEsmRYkVuAcbO02rX5tEKdEO4c2Be/6L4wrTNZpMcAdgApPFGWVMg5
ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWlx6V4PAAAEAwBHMEUCIQCDlg3G
GIgKgVENbLX73RPZ8jYbWj9IL3PkTgpPFs06cwIgNRvQDTESmYGflcqJdiRlIKBB
12OUBwH4IR70BoSTT+wwDQYJKoZIhvcNAQELBQADggEBAJSY64fXxibA452FYL8l
BmNNpcG17pv0HpQlKBtiq8vRzlt3HAhc55X5TLvFnFAMnXC76pDZnBrPbKUNV82T
HyqbXlOjzj7c9/FT5528jzb8gbamPT0PP0JONzr33aQTr0mUdcdwLnRNbBKhRoY7
VIhtOxE4srBxsnzhEm6ChgilI9Fmnv+8g5zgTHV6weLqcIaKEBOGmpTvs0N6v9kg
uh4x01w7N4x08eZP2FliZzeoFWZMgbhmmjOys+IGVe7d4qNgMhyqWeNNIqt97tWD
3YKH5SXgioHsrXSSTw9BxNy1DkF9ns+rDkqMNrSuf3r0fZ4BqdIXBaDc3n+u3hz8
EvU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkxtVzpza48dbpxDjCJh
uSlap3bBcgUj7JFbsGFMSwfLpHSeNNr1urLfk72fu1R9gytiWufmHUB4LbA2Qw99
zbI/cgS4TjqCCfKzvzpaz/qIr3ojhhNQ5X9hIfpOtnibgmAxeXcLFmVddWAwh0tg
z0U32rSVOXG+szi3iPgKVcbrH5lNkkms+cu6APwwS4ZvrfzPHMdWWltoQcA1ZMRl
0x9D6WMKXh+UZcYFoldcBfl2Cvmr8YIWB4oqlZ2kCysHmnZ+yt11MGzD8zRNDg65
PcV9Td9qTFj69H+EcMgt2HvqYaDSwpU+JTqHAT22PXYz3inZQwJjUv+oVlIywdXM
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343353851907311034699792432024716921360785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 11:38:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 11:38:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.t20sport.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24022965557237516543804008139519107958232513327030467173022359128506133316604584324920818509088844321767295884337414066974665608626690254856505639600692527988784015553726330415664566063686471502891408341846938403515011825063923152233037458038008021615259369379665826810678907333353170443895951330143820496168938494922273512127228033437546165478869686944736888514772600006364092062976726580837410779385236977591729260292513742459757504278123187463616281374468269557342668072449241602649132747834593527476829532508065009255921292494635138213961146146509810157256959418887978721323071278937946629524252592525957867621601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							605de810a503f1eb71d5fc85fb9eb4524f7d132b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1sport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammanaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdiversification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombiashipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypruspalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschepress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethicalquestions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everytimewesaygoodbyeidiealittle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisheriesprotectionvessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guadalajaraschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historyoftransport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibadanlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactiveengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istanbulsport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingstownfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logisticslegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisondesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysiasport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauritiusacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milansport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningsupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencharityservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padalarang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacesupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnompenhaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preforceconcrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachoutdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicsport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskmanagement.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalexchangebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudiarabiafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchandrescuevessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skopjeaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southafricafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southkoreafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuttgartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't20sport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talesofnarnaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartistband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstatespalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a1sport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ammanaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apiaaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessdiversification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetownfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comeontome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cubafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypruspalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschepress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethicaldecisions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabricstrapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstbecomeeducated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guadalajaraschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historyoftransport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibadanlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interactiveengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationalesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istanbulsport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacrossedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logisticslegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maisondesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaysiasport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mauritiusacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milansport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningsupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nairobiaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opencharityservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panamagarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peacesupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phnompenhaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polarresearchvessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preforceconcrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reachoutdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.republicsport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskmanagement.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalexchangebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudiarabiafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.searchandrescuevessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skopjeaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southafricafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southkoreafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuttgartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stylenightlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t20sport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talesofnarnaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradefinancehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedstatespalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzbekcompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016971e96003000004030047304502200e8459a6374a9863bc21f66b5cf861ec2e56f27f7c00eb277690d59bacdccd6c022100ef0804b26458915b8071b3b4dab5f9b4429d10ee1cd817bfe8be30ad3359a4c7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016971e95e0f000004030047304502210083960dc618880a81510d6cb5fbdd13d9f2361b5a3f482f73e44e0a4f16cd3a730220351bd00d311299819f95ca8976246520a041d763940701f8211ef40684934fec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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