wpm.ccmp.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:8f:10:69:48:fc:f1:96:48:42:16:ef:92:89:47:54:82:8c was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wpm.ccmp.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:10:69:48:fc:f1:96:48:42:16:ef:92:89:47:54:82:8c
Serial Number (int): 397131336516211647656609918017852461580940
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:10:ac:73:d4:a6:bb:91:eb:29:c0:80:a5:ff:0e:dd:9a:50:84:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:bd:78:15:bb:9f:24:d4:93:27:94:4a:d3:f6:e4:cd:d3:25:95:da
Fingerprint (sha256): 7d:36:95:dd:b9:6d:e2:45:22:85:fc:3a:20:4b:50:e9:28:76:26:2f:8c:8c:5f:69:72:3e:72:ca:c7:9c:b3:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wpm.ccmp.eu

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wpm.ccmp.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awswpm.ccmp.eu
deals.teesnap.com
flight.deals.allegiant.com
i.a.starbucks.com
i.anniescatalog-news.com
i.arkbluecross.info
i.armyemail.ollies.us
i.athletics.belmont.edu
i.athletics.duq.edu
i.athletics.uconn.edu
i.athletics.usfdons.com
i.basspronews.com
i.boleto.tenda.com
i.c.auntieannes.com
i.c.carvel.com
i.c.cinnabon.com
i.c.jamba.com
i.c.mcalistersdeli.com
i.c.moes.com
i.c.schlotzskys.com
i.cadastropontosmultiplus.com.br
i.campanhas.bradescoseguros.com.br
i.ccmp.persadolabs.com
i.cd.thelumery.net.au
i.cheetahdemo.com
i.club.lacoste.com.br
i.cm.ixigo.co
i.comunicacaounisociesc.com.br
i.e.aeropostale.com
i.e.allegiant.com
i.e.anthropologie.com
i.e.flemingssteakhouse.com
i.e.neimanmarcusemail.com
i.e.pchfrontpage.com
i.e.talbots.com
i.e.teesnap.com
i.edm.sgx.com
i.edm.thehindu.com
i.em.advantagememberservices.com
i.em.amica.com
i.em.answerfinancial.com
i.em.beautybrands.com
i.em.bestofbobspremium.com
i.em.collectionsetcpremiersavings.com
i.em.disneyemailexpress.com
i.em.disneyrewards.com
i.em.fieldandstreambuyersedge.com
i.em.freeshipping.com
i.email.allrecipes.com
i.email.bakersdelight.com.au
i.email.eviteideas.com
i.email.ncl.com
i.email.pens.com
i.email.perfectpen.ca
i.email.sunseekerresorts.com
i.email.watchabc.com
i.email1.roku.com
i.eml.hearstmags.com
i.h1.hilton.com
i.m.seaworld.com
i.mail.anntaylor.com
i.mail.express-scripts.com
i.mail.loft.com
i.mail.loftoutlet.com
i.mail.markandgraham.com
i.mail.pbteen.com
i.mail.potterybarn.com
i.mail.potterybarnkids.com
i.mail.rejuvenation.com
i.mail.shape.com
i.mail.thekeyrewards.com
i.mail.westelm.com
i.mail.williams-sonoma.com
i.marketing01.email-allstate.com
i.northerntoolemail.com
i.promo-flash.newegg.com
i.promo.global.newegg.com
i.promo.newegg.ca
i.promo.newegg.com
i.promo.neweggbusiness.com
i.specialoffers.meredith.com
i.t.e.urbanoutfitters.com
i.t.horchowemail.com
namwpm.eccmp.com
snamwpm.eccmp.com
sta.wpm.ccmp.eu
sts.eccmp.com
stscdn.eccmp.com
wpm.c01.marketingsuite.jp
wpm.ccmp.eu
wpm.marketingsuite.jp

Other certificates including the domain name ccmp.eu

(limited to 100 certificates)
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wts.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
returnpath.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
ats.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
rts.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
r.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
sts.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
login.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
datascience1.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
returnpath.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu

Certificate

The complete raw certificate details for wpm.ccmp.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsao7AxyJg0ecg0Ibhz1E
1kHZjOtJW0YmMq5Ujz2mLdCZIj0Mg+vyw0HyBylljJh132vqLcctkmYzZfc5UJ9v
q4E0DKEtpyFC0OtZJUZKljnpi0JhyFtMWEXwNvCsMaypAS8oop3Fw2b/GdkJO56j
Y4xfWwptvHUsev//tvySHmSvl6HKs8i9+eiOVn9k46Z8PNzSjB8T63Z1KWlHm8Yq
AKSzkTAb9HRohVtvUGc0OQ7T0WeS+At7+7jea0va1iBiYdj6x6vy1+B915MthVLt
SYE/Os7IJa5ofajg657vGCKO/NYIj9UnQekdaU+K5HQkM0/ojl41IbwTI36dZZx2
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397131336516211647656609918017852461580940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-27 17:35:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-25 17:35:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wpm.ccmp.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22428123775172193762812532760361594917102169944012980583706512491935062615744041134795531166827344791863088778658732275463023341458853635315356860844015944333838265685079595535613218914271786746680585666469520944724525620718093875844479946710817059249616589555088856935956373938071996608450867996901375204941843997586581394152540894095574553752682970661289359537991726482902132986775839719911565497457880594684384437256095800313784157906623159093148231184514563357323599643230856018391961150251469750745919744106566430404142878829815603417314806688769352373533228340536907484858133166102453594112001323984367174579859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e10ac73d4a6bb91eb29c080a5ff0edd9a5084b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2086 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awswpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals.teesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight.deals.allegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.a.starbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.anniescatalog-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.arkbluecross.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.armyemail.ollies.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.belmont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.duq.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.uconn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.usfdons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.basspronews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.boleto.tenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.auntieannes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.carvel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.cinnabon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.jamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.mcalistersdeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.moes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.schlotzskys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cadastropontosmultiplus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.campanhas.bradescoseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.ccmp.persadolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cd.thelumery.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cheetahdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.club.lacoste.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cm.ixigo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.comunicacaounisociesc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.aeropostale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.allegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.anthropologie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.flemingssteakhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.neimanmarcusemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.pchfrontpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.talbots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.teesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.edm.sgx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.edm.thehindu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.advantagememberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.amica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.answerfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.beautybrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.bestofbobspremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.collectionsetcpremiersavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.disneyemailexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.disneyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.fieldandstreambuyersedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.freeshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.bakersdelight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.eviteideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.ncl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.pens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.perfectpen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.sunseekerresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.watchabc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email1.roku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.eml.hearstmags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.h1.hilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.m.seaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.anntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.express-scripts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.loftoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.markandgraham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.pbteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.potterybarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.potterybarnkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.rejuvenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.thekeyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.westelm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.williams-sonoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.marketing01.email-allstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.northerntoolemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo-flash.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.global.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.newegg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.neweggbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.specialoffers.meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.t.e.urbanoutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.t.horchowemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namwpm.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snamwpm.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta.wpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stscdn.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.c01.marketingsuite.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.marketingsuite.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179af1c1b0e0000040300483046022100e2567b6fa5f4d8f77fbb2388ef2deee0ecfa8eb8223672cca75f537ec93825c4022100ca59047c7ca48146170b0665df939eefc6273cf0b84b3eed23d716aafcd7561a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000179af1c1b4600000403004730450221009b7ad463c0ab6b4aae1db961ad3221e8f70350af4611576cca175967c2d1063b0220454e3a65e603d23af84f0d09902587cc14b362a9144f91b68c8cac15146de9d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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