twitch.tf
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9a:0d:06:39:3e:2f:a2:53:73:37:e0:c3:8c:b7:f1:e7:57 was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=twitch.tf
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9a:0d:06:39:3e:2f:a2:53:73:37:e0:c3:8c:b7:f1:e7:57Serial Number (int): 313757654579855853948100712690534495414103
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: db:95:ab:59:54:77:db:a9:92:a5:60:4f:b8:ad:ff:39:64:a2:49:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 93:bf:37:09:c5:df:fd:61:0e:4b:49:79:1d:d0:05:17:bd:70:7c:45
Fingerprint (sha256): 7d:c2:45:33:2e:e6:74:a6:5d:30:21:b9:03:85:7f:01:ea:66:f9:49:b7:8f:71:c8:82:17:cd:e6:da:c0:56:ba
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate twitch.tf
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for twitch.tf
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.agrandaelpene.com
*.alcoholabuse.co.za
*.apartment-mitte.de
*.arrival.icu
*.babbel.co
*.bastelmessen.de
*.beginner.com.br
*.boilligfluege.de
*.buubl.us
*.choosesimplpath.com
*.ckj.us
*.crisis.ir
*.danji.net
*.deinfahrrad.de
*.designersunglasses.com.au
*.e-cigarette.co.za
*.energia.ir
*.enhance.ir
*.flyfrontire.com
*.fmalsource.com
*.funonclick.com
*.garmion.de
*.hms.ir
*.karlairportparking.co.uk
*.kingscross.com.au
*.kressesamen.de
*.leatherbriefcases.com.au
*.mercurt.com
*.orlando.de
*.potenzregeln.de
*.poweriser.nl
*.presupuestosdeobras.net
*.sainaburysbank.co.uk
*.skiclothing.com.au
*.tension.com.au
*.torahcalender.com
*.tplinkxtender.net
*.trs123.cn
*.turbia.net
*.twitch.tf
*.verdict.de
*.visalia.ca
*.witchhats.com.au
*.wollongonglocksmith.com.au
*.xn--dekupiersgebltter-yqbe.de
*.xn--geschftshaftpflichtversicherung-uvc.de
*.xn--markenunterwsche-6nb.de
*.xn--rckenheizkissen-zvb.de
*.xn--staplerfahrerfhrerschein-8sc.de
*.zstream.eu
agrandaelpene.com
alcoholabuse.co.za
apartment-mitte.de
arrival.icu
babbel.co
bastelmessen.de
beginner.com.br
boilligfluege.de
buubl.us
choosesimplpath.com
ckj.us
crisis.ir
danji.net
deinfahrrad.de
designersunglasses.com.au
e-cigarette.co.za
energia.ir
enhance.ir
flyfrontire.com
fmalsource.com
funonclick.com
garmion.de
hms.ir
karlairportparking.co.uk
kingscross.com.au
kressesamen.de
leatherbriefcases.com.au
mercurt.com
orlando.de
potenzregeln.de
poweriser.nl
presupuestosdeobras.net
sainaburysbank.co.uk
skiclothing.com.au
tension.com.au
torahcalender.com
tplinkxtender.net
trs123.cn
turbia.net
twitch.tf
verdict.de
visalia.ca
witchhats.com.au
wollongonglocksmith.com.au
xn--dekupiersgebltter-yqbe.de
xn--geschftshaftpflichtversicherung-uvc.de
xn--markenunterwsche-6nb.de
xn--rckenheizkissen-zvb.de
xn--staplerfahrerfhrerschein-8sc.de
zstream.eu
*.alcoholabuse.co.za
*.apartment-mitte.de
*.arrival.icu
*.babbel.co
*.bastelmessen.de
*.beginner.com.br
*.boilligfluege.de
*.buubl.us
*.choosesimplpath.com
*.ckj.us
*.crisis.ir
*.danji.net
*.deinfahrrad.de
*.designersunglasses.com.au
*.e-cigarette.co.za
*.energia.ir
*.enhance.ir
*.flyfrontire.com
*.fmalsource.com
*.funonclick.com
*.garmion.de
*.hms.ir
*.karlairportparking.co.uk
*.kingscross.com.au
*.kressesamen.de
*.leatherbriefcases.com.au
*.mercurt.com
*.orlando.de
*.potenzregeln.de
*.poweriser.nl
*.presupuestosdeobras.net
*.sainaburysbank.co.uk
*.skiclothing.com.au
*.tension.com.au
*.torahcalender.com
*.tplinkxtender.net
*.trs123.cn
*.turbia.net
*.twitch.tf
*.verdict.de
*.visalia.ca
*.witchhats.com.au
*.wollongonglocksmith.com.au
*.xn--dekupiersgebltter-yqbe.de
*.xn--geschftshaftpflichtversicherung-uvc.de
*.xn--markenunterwsche-6nb.de
*.xn--rckenheizkissen-zvb.de
*.xn--staplerfahrerfhrerschein-8sc.de
*.zstream.eu
agrandaelpene.com
alcoholabuse.co.za
apartment-mitte.de
arrival.icu
babbel.co
bastelmessen.de
beginner.com.br
boilligfluege.de
buubl.us
choosesimplpath.com
ckj.us
crisis.ir
danji.net
deinfahrrad.de
designersunglasses.com.au
e-cigarette.co.za
energia.ir
enhance.ir
flyfrontire.com
fmalsource.com
funonclick.com
garmion.de
hms.ir
karlairportparking.co.uk
kingscross.com.au
kressesamen.de
leatherbriefcases.com.au
mercurt.com
orlando.de
potenzregeln.de
poweriser.nl
presupuestosdeobras.net
sainaburysbank.co.uk
skiclothing.com.au
tension.com.au
torahcalender.com
tplinkxtender.net
trs123.cn
turbia.net
twitch.tf
verdict.de
visalia.ca
witchhats.com.au
wollongonglocksmith.com.au
xn--dekupiersgebltter-yqbe.de
xn--geschftshaftpflichtversicherung-uvc.de
xn--markenunterwsche-6nb.de
xn--rckenheizkissen-zvb.de
xn--staplerfahrerfhrerschein-8sc.de
zstream.eu
Other certificates including the domain name twitch.tf
(limited to 100 certificates)
Certificate
The complete raw certificate details for twitch.tf in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINsTCCDJmgAwIBAgISA5oNBjk+L6JTczfgw4y38edXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDIxMTU4MjFaFw0y MDA1MzExMTU4MjFaMBQxEjAQBgNVBAMTCXR3aXRjaC50ZjCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBALmZ6fKFAW5OSPstGMqDcKtjCERCyqwVu0kmvMRy pfj94fgKnJeE2y/V4rKIqEjSuy5YQJO+k5fxF+Fy7jmw69SKDr75iO/AQNpSOS3T PS2JDpocUuxtpaGb4Ud4Q5ug31gYukesNQl8BZhOaelq1gGk7W7KPJElDAJ5/f4Z OgdbtzybdyCNzttS9LywoA+GhDm1kXy3ssjWXHj8C485gnw3eEphNy5tzVgTCoGI gcUSectKSQztX9LZamD1bPtUoD5k71oaH2gnY7KJudzJpIb5UmtrNjeo0d1ypOTj dwN9TSgaG4MFhMhfPibJUISo+8n+BAjY/C4xYHkN0RCA2+Gves/lY6jk5hqdcGtX XpH4EAJS/qETHfvdfelLZEd8zqKiqFFQiGIvGc+iEwT9GAs7cqdlOmOfOmWXM4z8 mUNUxPF9Rd+mN8wv5tfxKldFnHYbU7ArTnSvPS3Iwe5XGdNbKUXxb3bnHoeCpDqV 6H4afB46PjTzxq/nDoueUyk+fTiNDzLR8rFlgu0tagcf+Ygn+wQdm0T/FM+ttgrN OtH+eFXZ++EPi6PM90bKJlx02i18u6wASHk6coj0juwTnj/uP5K166fHRjmsS9No ZLXQ8GW3HoNqIvEyMBt91mn7FQi9XsA4OGIXOR+7FNf+mBzeXkg3PUa/AHonKQzk YYzxAgMBAAGjggnFMIIJwTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNuVq1lUd9up kqVgT7it/zlkoklaMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wggd5BgNVHREEggdwMIIHbIITKi5hZ3JhbmRhZWxwZW5l LmNvbYIUKi5hbGNvaG9sYWJ1c2UuY28uemGCFCouYXBhcnRtZW50LW1pdHRlLmRl gg0qLmFycml2YWwuaWN1ggsqLmJhYmJlbC5jb4IRKi5iYXN0ZWxtZXNzZW4uZGWC ESouYmVnaW5uZXIuY29tLmJyghIqLmJvaWxsaWdmbHVlZ2UuZGWCCiouYnV1Ymwu dXOCFSouY2hvb3Nlc2ltcGxwYXRoLmNvbYIIKi5ja2oudXOCCyouY3Jpc2lzLmly ggsqLmRhbmppLm5ldIIQKi5kZWluZmFocnJhZC5kZYIbKi5kZXNpZ25lcnN1bmds YXNzZXMuY29tLmF1ghMqLmUtY2lnYXJldHRlLmNvLnphggwqLmVuZXJnaWEuaXKC DCouZW5oYW5jZS5pcoIRKi5mbHlmcm9udGlyZS5jb22CECouZm1hbHNvdXJjZS5j b22CECouZnVub25jbGljay5jb22CDCouZ2FybWlvbi5kZYIIKi5obXMuaXKCGiou a2FybGFpcnBvcnRwYXJraW5nLmNvLnVrghMqLmtpbmdzY3Jvc3MuY29tLmF1ghAq LmtyZXNzZXNhbWVuLmRlghoqLmxlYXRoZXJicmllZmNhc2VzLmNvbS5hdYINKi5t ZXJjdXJ0LmNvbYIMKi5vcmxhbmRvLmRlghEqLnBvdGVuenJlZ2Vsbi5kZYIOKi5w b3dlcmlzZXIubmyCGSoucHJlc3VwdWVzdG9zZGVvYnJhcy5uZXSCFiouc2FpbmFi dXJ5c2JhbmsuY28udWuCFCouc2tpY2xvdGhpbmcuY29tLmF1ghAqLnRlbnNpb24u Y29tLmF1ghMqLnRvcmFoY2FsZW5kZXIuY29tghMqLnRwbGlua3h0ZW5kZXIubmV0 ggsqLnRyczEyMy5jboIMKi50dXJiaWEubmV0ggsqLnR3aXRjaC50ZoIMKi52ZXJk aWN0LmRlggwqLnZpc2FsaWEuY2GCEioud2l0Y2hoYXRzLmNvbS5hdYIcKi53b2xs b25nb25nbG9ja3NtaXRoLmNvbS5hdYIfKi54bi0tZGVrdXBpZXJzZ2VibHR0ZXIt eXFiZS5kZYIsKi54bi0tZ2VzY2hmdHNoYWZ0cGZsaWNodHZlcnNpY2hlcnVuZy11 dmMuZGWCHSoueG4tLW1hcmtlbnVudGVyd3NjaGUtNm5iLmRlghwqLnhuLS1yY2tl bmhlaXpraXNzZW4tenZiLmRlgiUqLnhuLS1zdGFwbGVyZmFocmVyZmhyZXJzY2hl aW4tOHNjLmRlggwqLnpzdHJlYW0uZXWCEWFncmFuZGFlbHBlbmUuY29tghJhbGNv aG9sYWJ1c2UuY28uemGCEmFwYXJ0bWVudC1taXR0ZS5kZYILYXJyaXZhbC5pY3WC CWJhYmJlbC5jb4IPYmFzdGVsbWVzc2VuLmRlgg9iZWdpbm5lci5jb20uYnKCEGJv aWxsaWdmbHVlZ2UuZGWCCGJ1dWJsLnVzghNjaG9vc2VzaW1wbHBhdGguY29tggZj a2oudXOCCWNyaXNpcy5pcoIJZGFuamkubmV0gg5kZWluZmFocnJhZC5kZYIZZGVz aWduZXJzdW5nbGFzc2VzLmNvbS5hdYIRZS1jaWdhcmV0dGUuY28uemGCCmVuZXJn aWEuaXKCCmVuaGFuY2UuaXKCD2ZseWZyb250aXJlLmNvbYIOZm1hbHNvdXJjZS5j b22CDmZ1bm9uY2xpY2suY29tggpnYXJtaW9uLmRlggZobXMuaXKCGGthcmxhaXJw b3J0cGFya2luZy5jby51a4IRa2luZ3Njcm9zcy5jb20uYXWCDmtyZXNzZXNhbWVu LmRlghhsZWF0aGVyYnJpZWZjYXNlcy5jb20uYXWCC21lcmN1cnQuY29tggpvcmxh bmRvLmRlgg9wb3RlbnpyZWdlbG4uZGWCDHBvd2VyaXNlci5ubIIXcHJlc3VwdWVz dG9zZGVvYnJhcy5uZXSCFHNhaW5hYnVyeXNiYW5rLmNvLnVrghJza2ljbG90aGlu Zy5jb20uYXWCDnRlbnNpb24uY29tLmF1ghF0b3JhaGNhbGVuZGVyLmNvbYIRdHBs aW5reHRlbmRlci5uZXSCCXRyczEyMy5jboIKdHVyYmlhLm5ldIIJdHdpdGNoLnRm ggp2ZXJkaWN0LmRlggp2aXNhbGlhLmNhghB3aXRjaGhhdHMuY29tLmF1ghp3b2xs b25nb25nbG9ja3NtaXRoLmNvbS5hdYIdeG4tLWRla3VwaWVyc2dlYmx0dGVyLXlx YmUuZGWCKnhuLS1nZXNjaGZ0c2hhZnRwZmxpY2h0dmVyc2ljaGVydW5nLXV2Yy5k ZYIbeG4tLW1hcmtlbnVudGVyd3NjaGUtNm5iLmRlghp4bi0tcmNrZW5oZWl6a2lz c2VuLXp2Yi5kZYIjeG4tLXN0YXBsZXJmYWhyZXJmaHJlcnNjaGVpbi04c2MuZGWC CnpzdHJlYW0uZXUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdgDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL 8kFUbgAAAXCbU29MAAAEAwBHMEUCIBWNI6njcBg/4gtG3/HX1Yet0oreovVYPNxY 8T4LWFgYAiEA2UjBLvWd+N7qkthhenSc/hki8M3OKaTeqqxoAyIXKAEAdgCyHgXM i6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXCbU29CAAAEAwBHMEUCIDZk bPfLvgCUrneyAKGLVhhSFEZhVoBEpMz9GWGvsB5wAiEA0t0xlwHDGFh//baJaLA4 Z84lUBF18vWCwXbBP78SX2wwDQYJKoZIhvcNAQELBQADggEBAHzK/HALWc7anVMg PDDtaa07n2I5mO2L65CNmtzq+KWnkB39du59rdnSp28yMf6Xv15SLbOHFvTRe3IB YPiz3mMDyrP2Xjx0shEl+oCvZcr4RIO6XgPI2zvVHwcPAPNmAV2lKr+PWMbpOpwB GbCBuH/M6O9BmVxxDikD7r8DPTp5vVS4UU5yu+IL+VjXMMDrwNC3w1aG+Hyo+0Mg R/qwvZXlRMfvEhZW1B01q14Gtatu+x/NsQa73FCRRvf3FAaBfz/Vq7QtAexmclYl nAE6Bb47SOX8QrbnCErGOxF9y1Ai+PJwoRdzZ2raJft9/RTcEtAEi18TdWlutSc2 NwAnM5Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuZnp8oUBbk5I+y0YyoNw q2MIRELKrBW7SSa8xHKl+P3h+Aqcl4TbL9XisoioSNK7LlhAk76Tl/EX4XLuObDr 1IoOvvmI78BA2lI5LdM9LYkOmhxS7G2loZvhR3hDm6DfWBi6R6w1CXwFmE5p6WrW AaTtbso8kSUMAnn9/hk6B1u3PJt3II3O21L0vLCgD4aEObWRfLeyyNZcePwLjzmC fDd4SmE3Lm3NWBMKgYiBxRJ5y0pJDO1f0tlqYPVs+1SgPmTvWhofaCdjsom53Mmk hvlSa2s2N6jR3XKk5ON3A31NKBobgwWEyF8+JslQhKj7yf4ECNj8LjFgeQ3REIDb 4a96z+VjqOTmGp1wa1dekfgQAlL+oRMd+9196UtkR3zOoqKoUVCIYi8Zz6ITBP0Y Cztyp2U6Y586ZZczjPyZQ1TE8X1F36Y3zC/m1/EqV0WcdhtTsCtOdK89LcjB7lcZ 01spRfFvduceh4KkOpXofhp8Hjo+NPPGr+cOi55TKT59OI0PMtHysWWC7S1qBx/5 iCf7BB2bRP8Uz622Cs060f54Vdn74Q+Lo8z3RsomXHTaLXy7rABIeTpyiPSO7BOe P+4/krXrp8dGOaxL02hktdDwZbceg2oi8TIwG33WafsVCL1ewDg4Yhc5H7sU1/6Y HN5eSDc9Rr8AeicpDORhjPECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313757654579855853948100712690534495414103 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 11:58:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 11:58:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twitch.tf' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757186940680986811730378302020876759781215721706570310796341652385218034461565172291781846339853181447432057522008061049375959686937937877349638875306260882342933313988713209194904768524321516430950874792944419792354777149296712474236099740679938588321293436610713880769421897781412435818647366749018916699008987787410847196743402589098550439245907447907112357571093854846025955027750574772563705398362965626136290109949061880572874173497342423279068709869298183158472780101901156005347720395378257350386858977598343905327319040024398054838785765027421906859742581633627778842690831930388984684517283010884568592965541108686734927486343310397281662698199088755071980400176799620723823458435005222555258125233379087170281526299295906281675999462249393269077357214465199561002099572990806095855481796903375546186831157812748441470463525564806516608176923011525880701286026771399637908317565052410849888548137025408553277924108218330648908176782925049217811466332961029106225510487095063786182875569561400632718395387148779256733068380210887955860846614846979036143058017327064254428720284183642315356567073858498567896096732779305718758750301412349068242799674593401840035707232734337599389988779476098317236134685388875188857869536497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) db95ab595477dba992a5604fb8adff3964a2495a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1904 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agrandaelpene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alcoholabuse.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apartment-mitte.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arrival.icu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babbel.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bastelmessen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beginner.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boilligfluege.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buubl.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choosesimplpath.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ckj.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crisis.ir' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danji.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deinfahrrad.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designersunglasses.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-cigarette.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.energia.ir' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enhance.ir' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyfrontire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmalsource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funonclick.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garmion.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hms.ir' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karlairportparking.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingscross.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kressesamen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leatherbriefcases.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercurt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orlando.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potenzregeln.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poweriser.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.presupuestosdeobras.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sainaburysbank.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skiclothing.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tension.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torahcalender.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tplinkxtender.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trs123.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turbia.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twitch.tf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verdict.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visalia.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.witchhats.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wollongonglocksmith.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dekupiersgebltter-yqbe.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--geschftshaftpflichtversicherung-uvc.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--markenunterwsche-6nb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rckenheizkissen-zvb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--staplerfahrerfhrerschein-8sc.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zstream.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrandaelpene.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcoholabuse.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apartment-mitte.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrival.icu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babbel.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bastelmessen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beginner.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boilligfluege.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buubl.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choosesimplpath.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckj.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisis.ir' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danji.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deinfahrrad.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designersunglasses.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-cigarette.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energia.ir' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhance.ir' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyfrontire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmalsource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funonclick.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garmion.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.ir' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karlairportparking.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingscross.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kressesamen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leatherbriefcases.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercurt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potenzregeln.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poweriser.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presupuestosdeobras.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainaburysbank.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiclothing.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tension.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torahcalender.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tplinkxtender.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trs123.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbia.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.tf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdict.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visalia.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witchhats.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wollongonglocksmith.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dekupiersgebltter-yqbe.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--geschftshaftpflichtversicherung-uvc.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--markenunterwsche-6nb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rckenheizkissen-zvb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--staplerfahrerfhrerschein-8sc.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zstream.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001709b536f4c00000403004730450220158d23a9e370183fe20b46dff1d7d587add28adea2f5583cdc58f13e0b585818022100d948c12ef59df8deea92d8617a749cfe1922f0cdce29a4deaaac680322172801007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001709b536f420000040300473045022036646cf7cbbe0094ae77b200a18b561852144661568044a4ccfd1961afb01e70022100d2dd319701c318587ffdb68968b03867ce25501175f2f582c176c13fbf125f6c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007ccafc700b59ceda9d53203c30ed69ad3b9f623998ed8beb908d9adceaf8a5a7901dfd76ee7dadd9d2a76f3231fe97bf5e522db38716f4d17b720160f8b3de6303cab3f65e3c74b21125fa80af65caf84483ba5e03c8db3bd51f070f00f366015da52abf8f58c6e93a9c0119b081b87fcce8ef41995c710e2903eebf033d3a79bd54b8514e72bbe20bf958d730c0ebc0d0b7c35686f87ca8fb432047fab0bd95e544c7ef121656d41d35ab5e06b5ab6efb1fcdb106bbdc509146f7f71406817f3fd5abb42d01ec667256259c013a05be3b48e5fc42b6e7084ac63b117dcb5022f8f270a11773676ada25fb7dfd14dc12d0048b5f1375696eb527363700273396