nfllive-stream.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:04:9b:63:ae:7e:19:3a:b2:48:b1:0d:e2:0b:ee:0a:d6:77 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nfllive-stream.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:9b:63:ae:7e:19:3a:b2:48:b1:0d:e2:0b:ee:0a:d6:77
Serial Number (int): 262904535178829978299013700755587831879287
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:02:fb:93:dd:b5:02:f4:bb:97:46:d5:e2:7d:6a:88:76:93:9d:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:07:d4:99:06:07:19:4e:ad:d0:96:28:1d:c9:bb:37:53:23:a8:5e
Fingerprint (sha256): 7a:93:2e:27:c0:8e:64:b8:61:77:02:7e:a6:5a:7e:b4:37:fd:f8:3d:24:e1:bf:12:90:d5:79:5b:60:a5:38:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nfllive-stream.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfllive-stream.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.0espn.com
*.3movsx.com
*.aztuitionconnection.com
*.bankofkirksville.co
*.bayrockpoodles.com
*.blauer-usa.com
*.chmfineart.com
*.choicehealthinsurance.com
*.citiebreaks.com
*.clubedemilhas.com
*.dallasmetrocare.com
*.denverpostmemberservices.co
*.dicscord.com
*.expressurway.co
*.fragrancexshop.com
*.frysfeedback.com
*.galanailsaz.com
*.glspay.co
*.goprpgram.com
*.gurneyresorts.com
*.gwidtraffic.com
*.hallmarlchannel.com
*.handrblockbudgetchallenge.com
*.hdmovies-online.com
*.kikkomanusa.co
*.lgportablearecall.com
*.ltpuls.com
*.maturesights.com
*.mycapstonelibrary.co
*.myfrhi.co
*.nfllive-stream.com
*.owlintution.com
*.pokemonshwodown.com
*.primetimebaseballcomplex.com
*.prodigiy.com
*.robuxeasy.com
*.sklodome.com
*.sopandshop.com
*.swordandplough.co
*.thefrontroomuk.com
*.theoakfordinn.com
*.thu8mbtack.com
*.trabalhenaaraujo.com
*.twiteraudit.com
*.unicos.co.uk
*.vinelonk.com
*.vueplaystation.com
*.wagyourtag.com
*.wwwmfitbit.com
*.zippys.co
0espn.com
3movsx.com
aztuitionconnection.com
bankofkirksville.co
bayrockpoodles.com
blauer-usa.com
chmfineart.com
choicehealthinsurance.com
citiebreaks.com
clubedemilhas.com
dallasmetrocare.com
denverpostmemberservices.co
dicscord.com
expressurway.co
fragrancexshop.com
frysfeedback.com
galanailsaz.com
glspay.co
goprpgram.com
gurneyresorts.com
gwidtraffic.com
hallmarlchannel.com
handrblockbudgetchallenge.com
hdmovies-online.com
kikkomanusa.co
lgportablearecall.com
ltpuls.com
maturesights.com
mycapstonelibrary.co
myfrhi.co
nfllive-stream.com
owlintution.com
pokemonshwodown.com
primetimebaseballcomplex.com
prodigiy.com
robuxeasy.com
sklodome.com
sopandshop.com
swordandplough.co
thefrontroomuk.com
theoakfordinn.com
thu8mbtack.com
trabalhenaaraujo.com
twiteraudit.com
unicos.co.uk
vinelonk.com
vueplaystation.com
wagyourtag.com
wwwmfitbit.com
zippys.co

Other certificates including the domain name nfllive-stream.com

(limited to 100 certificates)
southernkia.com
bv-sd.info
exportsolution.com
hjcrew.com
nfllive-stream.com
halloweendelivery.com

Certificate

The complete raw certificate details for nfllive-stream.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINyDCCDLCgAwIBAgISAwSbY65+GTqySLEN4gvuCtZ3MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjAxODA1MDFaFw0x
OTA4MTgxODA1MDFaMB0xGzAZBgNVBAMTEm5mbGxpdmUtc3RyZWFtLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOrhMjCzB8IuuNjWHVCXQb24Pgnz
zSU/6pvDpicutOADhvqt5/fduGwSsD/GR7IzuJqLRxoKH/XfjiHu9JjIq8y0sls2
BXgq/+u3faT3UW17NQz9GWyEyF8Whb0LfnwXkL5dhoQinogjvJE2HgC+0YmNw3Lz
hJDZ3D917AN5kHIJwdO44Oj1ZuxfGHSn/fH5IIcM2n5FxkhhYHoiwVU3P1wr5U/A
F42H0/gkgWcTS0NUe1EbeCTW2R/RKLn2WXppscAolyfLlE9aVkBaEeHcPg/SubiN
Ce4O0l1I2mvxX2unVEjCMmdiZTyBlYJ24Gy0JeLBkXoitII5P98SigPy7nXunnk5
oChqStMU3D4b4qQaq+RSSIYyQfo2SKPcOpDWApmiIfz6iD24oEoBjPasL7y/PQ08
4j7LdyY4v4CxQnCLORDM0GXD1fWO2Y4Mxv3MqF0IuXUgx/73o97h2qP7iN4ylnW5
tnV+aN2uO8ga90rXWkeByk1t74n1QAZdTYsFYVtjJ6CKAOV1rlySY6xqrtrNtAF8
Ck8/Jy69Y8WwuGSLxaNjL2IMP6XHN7nGpVk5vbwknOJAPCxH1k/w66NwsFODD5a7
SSvKgMriRHzqy7euJ3aZT3JSVy26RbHujm+KJ49e2dSdKlqQtQOuwvFshXtg5FJK
KmDGpgGVXooZaURrAgMBAAGjggnTMIIJzzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FBMC+5PdtQL0u5dG1eJ9aoh2k52CMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggeJBgNVHREEggeAMIIHfIILKi4wZXNw
bi5jb22CDCouM21vdnN4LmNvbYIZKi5henR1aXRpb25jb25uZWN0aW9uLmNvbYIV
Ki5iYW5rb2ZraXJrc3ZpbGxlLmNvghQqLmJheXJvY2twb29kbGVzLmNvbYIQKi5i
bGF1ZXItdXNhLmNvbYIQKi5jaG1maW5lYXJ0LmNvbYIbKi5jaG9pY2VoZWFsdGhp
bnN1cmFuY2UuY29tghEqLmNpdGllYnJlYWtzLmNvbYITKi5jbHViZWRlbWlsaGFz
LmNvbYIVKi5kYWxsYXNtZXRyb2NhcmUuY29tgh0qLmRlbnZlcnBvc3RtZW1iZXJz
ZXJ2aWNlcy5jb4IOKi5kaWNzY29yZC5jb22CESouZXhwcmVzc3Vyd2F5LmNvghQq
LmZyYWdyYW5jZXhzaG9wLmNvbYISKi5mcnlzZmVlZGJhY2suY29tghEqLmdhbGFu
YWlsc2F6LmNvbYILKi5nbHNwYXkuY2+CDyouZ29wcnBncmFtLmNvbYITKi5ndXJu
ZXlyZXNvcnRzLmNvbYIRKi5nd2lkdHJhZmZpYy5jb22CFSouaGFsbG1hcmxjaGFu
bmVsLmNvbYIfKi5oYW5kcmJsb2NrYnVkZ2V0Y2hhbGxlbmdlLmNvbYIVKi5oZG1v
dmllcy1vbmxpbmUuY29tghAqLmtpa2tvbWFudXNhLmNvghcqLmxncG9ydGFibGVh
cmVjYWxsLmNvbYIMKi5sdHB1bHMuY29tghIqLm1hdHVyZXNpZ2h0cy5jb22CFiou
bXljYXBzdG9uZWxpYnJhcnkuY2+CCyoubXlmcmhpLmNvghQqLm5mbGxpdmUtc3Ry
ZWFtLmNvbYIRKi5vd2xpbnR1dGlvbi5jb22CFSoucG9rZW1vbnNod29kb3duLmNv
bYIeKi5wcmltZXRpbWViYXNlYmFsbGNvbXBsZXguY29tgg4qLnByb2RpZ2l5LmNv
bYIPKi5yb2J1eGVhc3kuY29tgg4qLnNrbG9kb21lLmNvbYIQKi5zb3BhbmRzaG9w
LmNvbYITKi5zd29yZGFuZHBsb3VnaC5jb4IUKi50aGVmcm9udHJvb211ay5jb22C
EyoudGhlb2FrZm9yZGlubi5jb22CECoudGh1OG1idGFjay5jb22CFioudHJhYmFs
aGVuYWFyYXVqby5jb22CESoudHdpdGVyYXVkaXQuY29tgg4qLnVuaWNvcy5jby51
a4IOKi52aW5lbG9uay5jb22CFCoudnVlcGxheXN0YXRpb24uY29tghAqLndhZ3lv
dXJ0YWcuY29tghAqLnd3d21maXRiaXQuY29tggsqLnppcHB5cy5jb4IJMGVzcG4u
Y29tggozbW92c3guY29tghdhenR1aXRpb25jb25uZWN0aW9uLmNvbYITYmFua29m
a2lya3N2aWxsZS5jb4ISYmF5cm9ja3Bvb2RsZXMuY29tgg5ibGF1ZXItdXNhLmNv
bYIOY2htZmluZWFydC5jb22CGWNob2ljZWhlYWx0aGluc3VyYW5jZS5jb22CD2Np
dGllYnJlYWtzLmNvbYIRY2x1YmVkZW1pbGhhcy5jb22CE2RhbGxhc21ldHJvY2Fy
ZS5jb22CG2RlbnZlcnBvc3RtZW1iZXJzZXJ2aWNlcy5jb4IMZGljc2NvcmQuY29t
gg9leHByZXNzdXJ3YXkuY2+CEmZyYWdyYW5jZXhzaG9wLmNvbYIQZnJ5c2ZlZWRi
YWNrLmNvbYIPZ2FsYW5haWxzYXouY29tgglnbHNwYXkuY2+CDWdvcHJwZ3JhbS5j
b22CEWd1cm5leXJlc29ydHMuY29tgg9nd2lkdHJhZmZpYy5jb22CE2hhbGxtYXJs
Y2hhbm5lbC5jb22CHWhhbmRyYmxvY2tidWRnZXRjaGFsbGVuZ2UuY29tghNoZG1v
dmllcy1vbmxpbmUuY29tgg5raWtrb21hbnVzYS5jb4IVbGdwb3J0YWJsZWFyZWNh
bGwuY29tggpsdHB1bHMuY29tghBtYXR1cmVzaWdodHMuY29tghRteWNhcHN0b25l
bGlicmFyeS5jb4IJbXlmcmhpLmNvghJuZmxsaXZlLXN0cmVhbS5jb22CD293bGlu
dHV0aW9uLmNvbYITcG9rZW1vbnNod29kb3duLmNvbYIccHJpbWV0aW1lYmFzZWJh
bGxjb21wbGV4LmNvbYIMcHJvZGlnaXkuY29tgg1yb2J1eGVhc3kuY29tggxza2xv
ZG9tZS5jb22CDnNvcGFuZHNob3AuY29tghFzd29yZGFuZHBsb3VnaC5jb4ISdGhl
ZnJvbnRyb29tdWsuY29tghF0aGVvYWtmb3JkaW5uLmNvbYIOdGh1OG1idGFjay5j
b22CFHRyYWJhbGhlbmFhcmF1am8uY29tgg90d2l0ZXJhdWRpdC5jb22CDHVuaWNv
cy5jby51a4IMdmluZWxvbmsuY29tghJ2dWVwbGF5c3RhdGlvbi5jb22CDndhZ3lv
dXJ0YWcuY29tgg53d3dtZml0Yml0LmNvbYIJemlwcHlzLmNvMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA4mlL
ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFq1qH9OQAABAMARjBEAiAW
P1NfHzLu/z4zUW8cUIxSO2ZGt1SLjqogWE0PV3KINQIgWYKaaEZ/LvgVKSGVREnS
O9EZSrNiJAorTqFWmF6MolcAdQBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdo
VEvYjQAAAWrWof0qAAAEAwBGMEQCIH1PoybOPF27FMI/DGabTyLaA5Avt0Hy1jnw
dmWM6LvVAiBsTt9iwfJ5o6sexYd0Yscm1K7Eq/HIY2PKwj5gbg5UIjANBgkqhkiG
9w0BAQsFAAOCAQEAg7VB+hwjwg1Zzb9CT+eslwXx2OiYaGSEDOCiV8tE3rECQlXZ
ECaPsqXDpPeMstq5NX4t01VlUyK3cQZVPwSW8Ydo8S10eJgVHCJs3FqLwqqgSBe7
O8yAtxatGOLgSqkoqKcGX1bGj0s/c6q4RWqXS40qNFU7QSYBrYbfK1kw/ONiJktS
ZtRPeuVK+Xr0Kh0J0XhIsZBZJAaZTskB6Yr2x4qCrIUvTMkFdpoFzOiNOeHn+01O
h3cCN8DHmxKuXL8avbC5g0tzolVWZMn76oRQwBAwzHesthbWxv7dtyBMic2r9M0N
hlV2lgpylOLYjpPRMkqT3Uq3nG2f/64rjVY3uw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262904535178829978299013700755587831879287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 18:05:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 18:05:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfllive-stream.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958225460949292360006216881691904138040555977359074838630267699754732274170672655659187013185191501031773858973893069877891552554375389047034821482458390985655995094249559610647813945588019908334349356504706788505296137698733276952654243912505522878775058210217697764275859079171338016385210078758151415483497629497783030711916164238720475807031333711398602540904061417665821917329756770313541973388711264896472767883376845925558186464011582713404599464278492332792729976547341509323659826207480305450202156733581380758354265874513353106555925368147073502187857125340221188378493898554018426638026930135505971975503487596721573877228692393392332530370602297827003975529749890697829425222404188588480558185026434663927168857095198042158634243370460367355484208784626642723467926255191092098145907842109061193891877169824433466954648584460895070635015812856769511992686653716418462534885274764977539776935686965632860222405767320605124867989259551341412537158519792018690207812202116572530429796885087833229370161011489404514628849743649871035175839222857497799970893105589216451532783704595047497952983902506790385707174790193205760702712539552902546086089491136405017147128807204137722596584375051830381022856682055723011644328592491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1302fb93ddb502f4bb9746d5e27d6a8876939d82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1920 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.0espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3movsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aztuitionconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankofkirksville.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayrockpoodles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blauer-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chmfineart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choicehealthinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citiebreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubedemilhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dallasmetrocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denverpostmemberservices.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dicscord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressurway.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fragrancexshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frysfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galanailsaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glspay.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goprpgram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurneyresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwidtraffic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hallmarlchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handrblockbudgetchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmovies-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kikkomanusa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lgportablearecall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltpuls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maturesights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycapstonelibrary.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfrhi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfllive-stream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.owlintution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokemonshwodown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primetimebaseballcomplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prodigiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robuxeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sklodome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sopandshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swordandplough.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefrontroomuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoakfordinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thu8mbtack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trabalhenaaraujo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twiteraudit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unicos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinelonk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vueplaystation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wagyourtag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmfitbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zippys.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3movsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aztuitionconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofkirksville.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayrockpoodles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blauer-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chmfineart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choicehealthinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citiebreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubedemilhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasmetrocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverpostmemberservices.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicscord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressurway.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fragrancexshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frysfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galanailsaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glspay.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goprpgram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurneyresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwidtraffic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallmarlchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handrblockbudgetchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmovies-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikkomanusa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgportablearecall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltpuls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maturesights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycapstonelibrary.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfrhi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfllive-stream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owlintution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemonshwodown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primetimebaseballcomplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodigiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robuxeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sklodome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sopandshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swordandplough.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefrontroomuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoakfordinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thu8mbtack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trabalhenaaraujo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twiteraudit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicos.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinelonk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vueplaystation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagyourtag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmfitbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zippys.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ad6a1fd3900000403004630440220163f535f1f32eeff3e33516f1c508c523b6646b7548b8eaa20584d0f57728835022059829a68467f2ef8152921954449d23bd1194ab362240a2b4ea156985e8ca25700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ad6a1fd2a000004030046304402207d4fa326ce3c5dbb14c23f0c669b4f22da03902fb741f2d639f076658ce8bbd502206c4edf62c1f279a3ab1ec5877462c726d4aec4abf1c86363cac23e606e0e5422
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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