brovig.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:03:be:a9:51:b0:21:28:f3:ab:c7:1e:65:ce:5b:5b:f5 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brovig.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:03:be:a9:51:b0:21:28:f3:ab:c7:1e:65:ce:5b:5b:f5
Serial Number (int): 324294073330244045675922046125200035765237
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:a5:68:79:ad:a0:6f:f5:27:ce:f9:44:96:8f:7d:ea:a3:57:1c:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:85:06:d3:bd:60:2e:9a:18:f6:db:98:01:ad:c0:04:6b:4a:20:c4
Fingerprint (sha256): 7c:bb:92:04:49:22:a6:92:f5:e2:c8:19:90:41:1d:04:4b:4a:ad:d1:11:99:ba:e5:ac:c1:2b:4e:0b:c4:78:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brovig.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brovig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100geburtstag.com
agustipuig.com
anotherfalseflag.com
asteriskconfig.com
asterisktag.com
bogusflag.com
brovig.com
creedblackflag.com
dersonntag.com
dubaimoney.net
durschlag.com
employmentdg.com
fixleg.com
globalrig.com
gravityandswag.com
investrig.com
jackdurschlag.com
literarymag.com
madisonatballstonstationag.com
madisonballstonstationag.com
martonschimcsig.com
morefalseflag.com
newfalseflag.com
privatebankingag.com
radiowinnipeg.com
realsexdrag.com
schimcsig.com
scubasportmag.com
semisubmersibleoilrig.com
semisubmersiblerig.com
thatfalseflag.com
timesbg.com
tourwinnipeg.com
trygg.com
unitedarabemiratesflag.com
untrueflag.com
varig.com
wnhashtag.com
www.100geburtstag.com
www.agustipuig.com
www.anotherfalseflag.com
www.asteriskconfig.com
www.asterisktag.com
www.bogusflag.com
www.brovig.com
www.creedblackflag.com
www.dersonntag.com
www.dubaimoney.net
www.durschlag.com
www.employmentdg.com
www.fixleg.com
www.globalrig.com
www.gravityandswag.com
www.investrig.com
www.jackdurschlag.com
www.literarymag.com
www.madisonatballstonstationag.com
www.madisonballstonstationag.com
www.martonschimcsig.com
www.morefalseflag.com
www.newfalseflag.com
www.privatebankingag.com
www.radiowinnipeg.com
www.realsexdrag.com
www.schimcsig.com
www.scubasportmag.com
www.semisubmersibleoilrig.com
www.semisubmersiblerig.com
www.thatfalseflag.com
www.timesbg.com
www.tourwinnipeg.com
www.trygg.com
www.unitedarabemiratesflag.com
www.untrueflag.com
www.varig.com
www.wnhashtag.com

Other certificates including the domain name brovig.com

(limited to 100 certificates)
schimcsig.com
www.dressag.com
teaminternetag.com
www.dubaimoney.net
dersonntag.com
www.literarymag.com
literarymag.com
teaminternetag.com
investrig.com
brovig.com
fixleg.com
www.martonschimcsig.com
www.literarymag.com
teaminternetag.com
brovig.com
www.shoporganicveg.com
www.creedblackflag.com
madisonballstonstationag.com
brovig.com
brovig.com
fixleg.com
teaminternetag.com
www.asteriskconfig.com
teaminternetag.com
brovig.com
brovig.com
www.timesbg.com
fixleg.com
broevig.no

Certificate

The complete raw certificate details for brovig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur0KbQaXkJxOMxIHQmNr
MIzUdhE5GP6OJD8uo5XYP0d7cPxr95/bidehRKvq18qQzkgetgYB30pwvHJmAGzz
CwLasaggKUXdCQK52qoRT7IXkA+q+SBBSHu2zDwbg8vh6owQOxhzLNUpfEbX0Bq5
VtM3je38ZzrXRrXi/h7FFbcTRrLi9JS3asIeSR41THPny8F1hipZDBOQr3DeGynF
xazxisW3UO81pkIdNgBpqrKJpSRKc5oYdtD9RGlDyXxU7NJABWeSn0D4PK80rYfY
ariCC/LwVX6+vco79sVFg5EbrZyUy4HXxSmkopXyOuRF5MS/COQxwSoA0/Xh3Ndt
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324294073330244045675922046125200035765237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-15 10:41:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 10:41:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brovig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23573544180063988435851522385779275611217475850244675920851006099076121750836471641865517568753966769478484560327741813649175859593555711066332111865421119303350068838911267816435256275372310154093031617424284371537131378504365821879811771947529509955748627094793219165304506724351543800581777120743625318009651070820524660248065107588613290116563541046714311261279419780605391385381887950979933526552112719706385440337838984751208990255428938289130366647729561942255806828796922456230535592194045567181885741586278367055947817480888187079984254946347740831259287898898411281059973617752973781269614358496983857458499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47a56879ada06ff527cef944968f7deaa3571cd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100geburtstag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agustipuig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asteriskconfig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asterisktag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogusflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brovig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creedblackflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dersonntag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaimoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employmentdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravityandswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackdurschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literarymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonatballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martonschimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morefalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiowinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realsexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scubasportmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersiblerig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedarabemiratesflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untrueflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnhashtag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100geburtstag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agustipuig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asteriskconfig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asterisktag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogusflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brovig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creedblackflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dersonntag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaimoney.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employmentdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gravityandswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackdurschlag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literarymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonatballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonballstonstationag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martonschimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morefalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiowinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realsexdrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schimcsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scubasportmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersiblerig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatfalseflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourwinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedarabemiratesflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untrueflag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnhashtag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165dd08ff460000040300473045022100ba5ff080bbafd941b1c79aa65eee8823afb9de5d5ff03180ff260525c6964fb002207e42dcb74c87d66a0ab8935e41d081be13e2585bb739d31b1e17647b510c241c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165dd08ff59000004030048304602210098bb09396f2cfa5f9374c6609801fcf6675ba74c8c8cf5c8ce724b5068378828022100dc1cf6ab04525421de08d8da8bd858ea5071efc4e25c2f003562d852f633e0a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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