books.gemcaps.org

Issued by R3

About this certificate

This digital certificate with serial number 04:d9:1f:e0:62:df:45:67:a4:2f:55:a2:18:f2:f7:ca:4f:ae was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=books.gemcaps.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d9:1f:e0:62:df:45:67:a4:2f:55:a2:18:f2:f7:ca:4f:ae
Serial Number (int): 422332788496615778510419709303566151339950
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:86:4f:c7:4b:d6:bb:ab:28:a7:4c:41:fa:a5:c2:b3:fb:d9:0c:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:40:f7:52:1c:be:4e:1a:1f:d7:ef:25:24:ae:b3:23:00:79:09:70
Fingerprint (sha256): 77:17:48:01:84:40:ea:9b:d2:89:4a:83:80:f5:8b:62:6c:91:52:04:44:07:29:a2:c5:fa:84:24:99:69:69:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate books.gemcaps.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for books.gemcaps.org

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acc.mkfbh.org
accg.productsdirect.com
account.amigroups.com
account.cyberco.com
account.harmonyowners.com
accounting.baltimorerentcourtagents.com
accounting.envodrive.com
accounting.mach4design.com
accounting.revenueranch.com
accounting.yarotech.net
accounts.learnquraan.co.uk
accounts.messagenmail.com
accounts.rubieraproductions.com
accounts.ultimac.ca
acct.egmcbh.com
adm.mindco.cl
ar.kdsdentist.com
billing.121consulting.ca
billing.cloudguardians.com
billing.e-commerceaccelerator.com
billing.fastblue.com
billing.nanovo.ca
billing.sourcepointmsp.com
billing.vendelocity.com
billing.whitelabeltracking.com
book.ju-gate.com
books.agrilight.co.za
books.alyam.ly
books.angelaatelier.com
books.autilis.shop
books.avecc.net
books.balthazaryachting.com
books.bariumdigital.com
books.bestvenuesnewyork.com
books.chulavista.mx
books.cloudmetric.ca
books.e3nsecurity.com.sg
books.ebcusa.us
books.ekuantum.com
books.flipsquare.com
books.fwhair.com
books.gemcaps.org
books.geoinstinct.com
books.gigalinetele.in
books.greentekroofing.com
books.kenllewis.com
books.lucianomenardo.com
books.opuatechnologies.com
books.panel7studio.com
books.piece-maitresse.org
books.pilotdigital.com
books.regadvisorscpa.com
books.revopsbuilders.com
books.securityguardpros.com
books.shadowlines.sa
books.simnet.ca
books.singchinaus.com
books.tayotelecom.com
books.ultimamart.in
books.utilityhelpers.com
books.villagepaths.com
books.wheelhouse.pro
books.wincservices.com
books.zabgrs.ca
books.zapelin.com
business.skylark.com.ph
client.adhigunaelaeis.com
cr.ozapato.com
customers.technicalshipsupplies.com
cvt.tradinloop.com
erp.mindeza.com
estimate.tbatsolutions.com
fin.webreka.com.tr
finance.divprocoach.com
finance.karvtec.com
finance.mmcentury.com
finance.serenegroup.ae
go.spiritledcreative.com
invoice.arcfx.pro
my.prorexem.fr
myugl.universalground.com
order.eversun.co
pay.bomballoons.ca
payments.bankofhair.eu
payments.familysourceconsultants.com
sage.plantgeriaphc.nalcometgroup.com
sales.dreamvu.com
tenants.thekalco.com
vendor.brandhousedental.com
vendor.gsgis.com

Other certificates including the domain name gemcaps.org

(limited to 100 certificates)
gemcaps.org
gemcaps.org
gemcaps.org
mail.gemcaps.org
*.gemcaps.org
gemcaps.org
www.gemcaps.org
gemcaps.org
books.gemcaps.org
gemcaps.org
gemcaps.org
www.gemcaps.org
www.gemcaps.org

Certificate

The complete raw certificate details for books.gemcaps.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMdDCCC1ygAwIBAgISBNkf4GLfRWekL1WiGPL3yk+uMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDkxODA4MDVaFw0yNDA0MDgxODA4MDRaMBwxGjAYBgNVBAMT
EWJvb2tzLmdlbWNhcHMub3JnMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2d+1
H1PHuTDI+I2KK2s12CU/4EzB5csFVG2To/JPgS0DiNYGcSrN7JsvYO8GEb1QE8J4
IuIaZq44d5prJtSkCaOCCmMwggpfMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUWYZP
x0vWu6sop0xB+qXCs/vZDBowHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU
wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j
ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgghqBgNV
HREEgghhMIIIXYINYWNjLm1rZmJoLm9yZ4IXYWNjZy5wcm9kdWN0c2RpcmVjdC5j
b22CFWFjY291bnQuYW1pZ3JvdXBzLmNvbYITYWNjb3VudC5jeWJlcmNvLmNvbYIZ
YWNjb3VudC5oYXJtb255b3duZXJzLmNvbYInYWNjb3VudGluZy5iYWx0aW1vcmVy
ZW50Y291cnRhZ2VudHMuY29tghhhY2NvdW50aW5nLmVudm9kcml2ZS5jb22CGmFj
Y291bnRpbmcubWFjaDRkZXNpZ24uY29tghthY2NvdW50aW5nLnJldmVudWVyYW5j
aC5jb22CF2FjY291bnRpbmcueWFyb3RlY2gubmV0ghphY2NvdW50cy5sZWFybnF1
cmFhbi5jby51a4IZYWNjb3VudHMubWVzc2FnZW5tYWlsLmNvbYIfYWNjb3VudHMu
cnViaWVyYXByb2R1Y3Rpb25zLmNvbYITYWNjb3VudHMudWx0aW1hYy5jYYIPYWNj
dC5lZ21jYmguY29tgg1hZG0ubWluZGNvLmNsghFhci5rZHNkZW50aXN0LmNvbYIY
YmlsbGluZy4xMjFjb25zdWx0aW5nLmNhghpiaWxsaW5nLmNsb3VkZ3VhcmRpYW5z
LmNvbYIhYmlsbGluZy5lLWNvbW1lcmNlYWNjZWxlcmF0b3IuY29tghRiaWxsaW5n
LmZhc3RibHVlLmNvbYIRYmlsbGluZy5uYW5vdm8uY2GCGmJpbGxpbmcuc291cmNl
cG9pbnRtc3AuY29tghdiaWxsaW5nLnZlbmRlbG9jaXR5LmNvbYIeYmlsbGluZy53
aGl0ZWxhYmVsdHJhY2tpbmcuY29tghBib29rLmp1LWdhdGUuY29tghVib29rcy5h
Z3JpbGlnaHQuY28uemGCDmJvb2tzLmFseWFtLmx5ghdib29rcy5hbmdlbGFhdGVs
aWVyLmNvbYISYm9va3MuYXV0aWxpcy5zaG9wgg9ib29rcy5hdmVjYy5uZXSCG2Jv
b2tzLmJhbHRoYXphcnlhY2h0aW5nLmNvbYIXYm9va3MuYmFyaXVtZGlnaXRhbC5j
b22CG2Jvb2tzLmJlc3R2ZW51ZXNuZXd5b3JrLmNvbYITYm9va3MuY2h1bGF2aXN0
YS5teIIUYm9va3MuY2xvdWRtZXRyaWMuY2GCGGJvb2tzLmUzbnNlY3VyaXR5LmNv
bS5zZ4IPYm9va3MuZWJjdXNhLnVzghJib29rcy5la3VhbnR1bS5jb22CFGJvb2tz
LmZsaXBzcXVhcmUuY29tghBib29rcy5md2hhaXIuY29tghFib29rcy5nZW1jYXBz
Lm9yZ4IVYm9va3MuZ2VvaW5zdGluY3QuY29tghVib29rcy5naWdhbGluZXRlbGUu
aW6CGWJvb2tzLmdyZWVudGVrcm9vZmluZy5jb22CE2Jvb2tzLmtlbmxsZXdpcy5j
b22CGGJvb2tzLmx1Y2lhbm9tZW5hcmRvLmNvbYIaYm9va3Mub3B1YXRlY2hub2xv
Z2llcy5jb22CFmJvb2tzLnBhbmVsN3N0dWRpby5jb22CGWJvb2tzLnBpZWNlLW1h
aXRyZXNzZS5vcmeCFmJvb2tzLnBpbG90ZGlnaXRhbC5jb22CGGJvb2tzLnJlZ2Fk
dmlzb3JzY3BhLmNvbYIYYm9va3MucmV2b3BzYnVpbGRlcnMuY29tghtib29rcy5z
ZWN1cml0eWd1YXJkcHJvcy5jb22CFGJvb2tzLnNoYWRvd2xpbmVzLnNhgg9ib29r
cy5zaW1uZXQuY2GCFWJvb2tzLnNpbmdjaGluYXVzLmNvbYIVYm9va3MudGF5b3Rl
bGVjb20uY29tghNib29rcy51bHRpbWFtYXJ0Lmlughhib29rcy51dGlsaXR5aGVs
cGVycy5jb22CFmJvb2tzLnZpbGxhZ2VwYXRocy5jb22CFGJvb2tzLndoZWVsaG91
c2UucHJvghZib29rcy53aW5jc2VydmljZXMuY29tgg9ib29rcy56YWJncnMuY2GC
EWJvb2tzLnphcGVsaW4uY29tghdidXNpbmVzcy5za3lsYXJrLmNvbS5waIIZY2xp
ZW50LmFkaGlndW5hZWxhZWlzLmNvbYIOY3Iub3phcGF0by5jb22CI2N1c3RvbWVy
cy50ZWNobmljYWxzaGlwc3VwcGxpZXMuY29tghJjdnQudHJhZGlubG9vcC5jb22C
D2VycC5taW5kZXphLmNvbYIaZXN0aW1hdGUudGJhdHNvbHV0aW9ucy5jb22CEmZp
bi53ZWJyZWthLmNvbS50coIXZmluYW5jZS5kaXZwcm9jb2FjaC5jb22CE2ZpbmFu
Y2Uua2FydnRlYy5jb22CFWZpbmFuY2UubW1jZW50dXJ5LmNvbYIWZmluYW5jZS5z
ZXJlbmVncm91cC5hZYIYZ28uc3Bpcml0bGVkY3JlYXRpdmUuY29tghFpbnZvaWNl
LmFyY2Z4LnByb4IObXkucHJvcmV4ZW0uZnKCGW15dWdsLnVuaXZlcnNhbGdyb3Vu
ZC5jb22CEG9yZGVyLmV2ZXJzdW4uY2+CEnBheS5ib21iYWxsb29ucy5jYYIWcGF5
bWVudHMuYmFua29maGFpci5ldYIkcGF5bWVudHMuZmFtaWx5c291cmNlY29uc3Vs
dGFudHMuY29tgiRzYWdlLnBsYW50Z2VyaWFwaGMubmFsY29tZXRncm91cC5jb22C
EXNhbGVzLmRyZWFtdnUuY29tghR0ZW5hbnRzLnRoZWthbGNvLmNvbYIbdmVuZG9y
LmJyYW5kaG91c2VkZW50YWwuY29tghB2ZW5kb3IuZ3NnaXMuY29tMBMGA1UdIAQM
MAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAO1N3dT4tuYBO
izBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGM75/wLAAABAMARjBEAiA+65qACNcj
DXkumtcmsA4o7leGNOFJMXHmrGwT2C0QTgIgWiErNyoLYI8A5Cd+vWSUDGfWHGg7
KU5yWU260DBl/94AdwAp0DobtnSqcRzTA1tlV8FPiqeLT+g4lEnspFP5RL0kaAAA
AYzvn/G1AAAEAwBIMEYCIQDY8ojqIIjOHjAg3r3ovpCyEpWIZgab+9w2nWep9kRS
9wIhAJ8pXfm0one6XceR1aEGrMjtn7FYZug9KCjB65fmO6b3MA0GCSqGSIb3DQEB
CwUAA4IBAQB5toPTbKlB/5RuVMsN+UC1Komg3U0qZLNNdgNZgWdkL4acQCwQZjuG
U17iZygwNkZPMdqUIA1ZICCoc5KBnPXm+6+gE0L9DKe5QgLLgIbqyaphsGRkqeuH
9r9N+QKTH255aPPehyjjpGaJIaYo1XHIok1kQ3gmMgDWBSfA4xYZ0hEi4b1Zvrsh
zfhR/Itz4gPxXoCYDgwDSFAR55FVE3HdvWZq1dHFt2gEmcXmzQXtF3OztSyAiqUS
mCbGEB2XzEt9XJVO6RIvymHSJ4Iccm/o7ICAKsCmMqCcB0dlTeQ7Xo41tkNHYsc7
/7TJRTVYVP0VGaVQGcW2FrRKAjYLJIE5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2d+1H1PHuTDI+I2KK2s12CU/4EzB
5csFVG2To/JPgS0DiNYGcSrN7JsvYO8GEb1QE8J4IuIaZq44d5prJtSkCQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422332788496615778510419709303566151339950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 18:08:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 18:08:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'books.gemcaps.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d9dfb51f53c7b930c8f88d8a2b6b35d8253fe04cc1e5cb05546d93a3f24f812d0388d606712acdec9b2f60ef0611bd5013c27822e21a66ae38779a6b26d4a409
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59864fc74bd6bbab28a74c41faa5c2b3fbd90c1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.mkfbh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accg.productsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.amigroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.cyberco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.harmonyowners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.baltimorerentcourtagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.envodrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.mach4design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.revenueranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.yarotech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.learnquraan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.messagenmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.rubieraproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.ultimac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acct.egmcbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.mindco.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.kdsdentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.121consulting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.cloudguardians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.e-commerceaccelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.fastblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.nanovo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.sourcepointmsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.vendelocity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.whitelabeltracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.ju-gate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.agrilight.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.alyam.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.angelaatelier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.autilis.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.avecc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.balthazaryachting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.bariumdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.bestvenuesnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.chulavista.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.cloudmetric.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.e3nsecurity.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.ebcusa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.ekuantum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.flipsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.fwhair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.gemcaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.geoinstinct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.gigalinetele.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.greentekroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.kenllewis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.lucianomenardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.opuatechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.panel7studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.piece-maitresse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.pilotdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.regadvisorscpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.revopsbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.securityguardpros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.shadowlines.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.simnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.singchinaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.tayotelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.ultimamart.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.utilityhelpers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.villagepaths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.wheelhouse.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.wincservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.zabgrs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.zapelin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.skylark.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.adhigunaelaeis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr.ozapato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.technicalshipsupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvt.tradinloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.mindeza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estimate.tbatsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fin.webreka.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.divprocoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.karvtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.mmcentury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.serenegroup.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.spiritledcreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.arcfx.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.prorexem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myugl.universalground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.eversun.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.bomballoons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.bankofhair.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.familysourceconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sage.plantgeriaphc.nalcometgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.dreamvu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenants.thekalco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor.brandhousedental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor.gsgis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cef9ff02c000004030046304402203eeb9a8008d7230d792e9ad726b00e28ee578634e1493171e6ac6c13d82d104e02205a212b372a0b608f00e4277ebd64940c67d61c683b294e72594dbad03065ffde00770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cef9ff1b50000040300483046022100d8f288ea2088ce1e3020debde8be90b212958866069bfbdc369d67a9f64452f70221009f295df9b4a277ba5dc791d5a106acc8ed9fb15866e83d2828c1eb97e63ba6f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0079b683d36ca941ff946e54cb0df940b52a89a0dd4d2a64b34d7603598167642f869c402c10663b86535ee267283036464f31da94200d592020a87392819cf5e6fbafa01342fd0ca7b94202cb8086eac9aa61b06464a9eb87f6bf4df902931f6e7968f3de8728e3a4668921a628d571c8a24d644378263200d60527c0e31619d21122e1bd59bebb21cdf851fc8b73e203f15e80980e0c03485011e791551371ddbd666ad5d1c5b7680499c5e6cd05ed1773b3b52c808aa5129826c6101d97cc4b7d5c954ee9122fca61d227821c726fe8ec80802ac0a632a09c0747654de43b5e8e35b6434762c73bffb4c945355854fd1519a55019c5b616b44a02360b248139