pbfa.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:12:60:2e:34:6a:e4:36:96:75:96:b1:bc:60:6c:f6:50 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pbfa.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:12:60:2e:34:6a:e4:36:96:75:96:b1:bc:60:6c:f6:50
Serial Number (int): 268847495369107721487860341936192890926672
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:bf:7e:8c:0e:3c:23:d9:03:c7:27:ed:bd:1b:3d:7e:f4:23:44:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:fb:55:09:eb:13:6d:07:a2:0c:d1:b2:c1:25:78:a3:6a:52:57:df
Fingerprint (sha256): 82:b3:64:75:7a:b0:c8:df:fe:49:9f:2f:07:3b:a2:e0:4e:06:53:88:4c:d2:d7:b7:e8:92:39:6e:58:4e:72:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pbfa.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pbfa.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

34417.com
40725.com
40785.com
42145.com
45847.com
46027.com
46749.com
47156.com
69071.com
69314.com
70230.com
71574.com
89476.com
anbeta.com
assicurativa.com
bedlogic.com
bugrepellent.organic
caprera.org
cornella.com
corteolona.com
cosmeticstemcells.org
dallasprp.org
esportsosaka.com
execuweb.com
farmagic.com
fiocina.com
fruttafresca.com
inmueble.click
kmua.com
lacassandra.com
laosmma.com
lastminutetropea.com
liverpoolrealestate.co.uk
marsciano.org
nextbra.com
nutriscientific.com
padernodugnano.org
patientsprotocol.org
pbfa.ca
personalinjury.melbourne
plasticsurgerystemcell.org
raquila.com
sellogic.com
siderno.org
speedmatic.com
ssn6.com
stemcellgraft.org
stopmatic.com
thermastic.com
www.34417.com
www.40725.com
www.40785.com
www.42145.com
www.45847.com
www.46027.com
www.46749.com
www.47156.com
www.69071.com
www.69314.com
www.70230.com
www.71574.com
www.89476.com
www.anbeta.com
www.assicurativa.com
www.bedlogic.com
www.bugrepellent.organic
www.caprera.org
www.cornella.com
www.corteolona.com
www.cosmeticstemcells.org
www.dallasprp.org
www.esportsosaka.com
www.execuweb.com
www.farmagic.com
www.fiocina.com
www.fruttafresca.com
www.inmueble.click
www.kmua.com
www.lacassandra.com
www.laosmma.com
www.lastminutetropea.com
www.liverpoolrealestate.co.uk
www.marsciano.org
www.nextbra.com
www.nutriscientific.com
www.padernodugnano.org
www.patientsprotocol.org
www.pbfa.ca
www.personalinjury.melbourne
www.plasticsurgerystemcell.org
www.raquila.com
www.sellogic.com
www.siderno.org
www.speedmatic.com
www.ssn6.com
www.stemcellgraft.org
www.stopmatic.com
www.thermastic.com
www.zamblera.com
zamblera.com

Other certificates including the domain name pbfa.ca

(limited to 100 certificates)
www.ultralure.com
amyhernandez.com
www.denverstemcelltreatments.com
www.everydaycounts.club
mswdegrees.com
www.thermachef.com
woodside.bible
www.nurseportal.com
pbfa.ca
www.stuffedanimals.world
www.predator-cases.com
pbfa.ca
pbfa.ca
pbfa.ca
www.pjik.com
biginohio.com
pbfa.ca
www.couturecrush.com
wenart.world
www.fontanelles.com
www.payor.world
www.supralube.com
www.prpsurgeons.com
www.doorseattle.com

Certificate

The complete raw certificate details for pbfa.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL8zCCCtugAwIBAgISAxYSYC40auQ2lnWWsbxgbPZQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTMwMTI2MTdaFw0x
OTA3MTIwMTI2MTdaMBIxEDAOBgNVBAMTB3BiZmEuY2EwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCqkkvijLQMNMgZ0OAnaDjckZyhQuWdMlP+EGbe2Vos
cBDPgSIONAMfh+51maNA+JI5oKdsEQZF1j6BRggBYPO5LLWqadXHArwynCDZ3DmI
mj8grv1MuhmM4IjRmBTb+79DfLKebhZwHWNsole972dyrqkWIt4AeFL241C1SJCg
qI9qeajYaQH0rbfuWHrOXYFCmkKPW4v0uOeNS7/QM0dYWmFlE/rGvcEAZu4XAQ+e
8VaCWOVrgx/nHUZp1RANPuCECEvQOrcXH00DEsi4bLb7xYfymCTRZvV80DCohKIB
7wlz1iuibsaEvGxMksSYhGKRU6fgqurw193YWIkfb92/AgMBAAGjggkJMIIJBTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFD6/fowOPCPZA8cn7b0bPX70I0T9MB8GA1Ud
IwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggr
BgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggr
BgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wgga9
BgNVHREEgga0MIIGsIIJMzQ0MTcuY29tggk0MDcyNS5jb22CCTQwNzg1LmNvbYIJ
NDIxNDUuY29tggk0NTg0Ny5jb22CCTQ2MDI3LmNvbYIJNDY3NDkuY29tggk0NzE1
Ni5jb22CCTY5MDcxLmNvbYIJNjkzMTQuY29tggk3MDIzMC5jb22CCTcxNTc0LmNv
bYIJODk0NzYuY29tggphbmJldGEuY29tghBhc3NpY3VyYXRpdmEuY29tggxiZWRs
b2dpYy5jb22CFGJ1Z3JlcGVsbGVudC5vcmdhbmljggtjYXByZXJhLm9yZ4IMY29y
bmVsbGEuY29tgg5jb3J0ZW9sb25hLmNvbYIVY29zbWV0aWNzdGVtY2VsbHMub3Jn
gg1kYWxsYXNwcnAub3JnghBlc3BvcnRzb3Nha2EuY29tggxleGVjdXdlYi5jb22C
DGZhcm1hZ2ljLmNvbYILZmlvY2luYS5jb22CEGZydXR0YWZyZXNjYS5jb22CDmlu
bXVlYmxlLmNsaWNrgghrbXVhLmNvbYIPbGFjYXNzYW5kcmEuY29tggtsYW9zbW1h
LmNvbYIUbGFzdG1pbnV0ZXRyb3BlYS5jb22CGWxpdmVycG9vbHJlYWxlc3RhdGUu
Y28udWuCDW1hcnNjaWFuby5vcmeCC25leHRicmEuY29tghNudXRyaXNjaWVudGlm
aWMuY29tghJwYWRlcm5vZHVnbmFuby5vcmeCFHBhdGllbnRzcHJvdG9jb2wub3Jn
ggdwYmZhLmNhghhwZXJzb25hbGluanVyeS5tZWxib3VybmWCGnBsYXN0aWNzdXJn
ZXJ5c3RlbWNlbGwub3JnggtyYXF1aWxhLmNvbYIMc2VsbG9naWMuY29tggtzaWRl
cm5vLm9yZ4IOc3BlZWRtYXRpYy5jb22CCHNzbjYuY29tghFzdGVtY2VsbGdyYWZ0
Lm9yZ4INc3RvcG1hdGljLmNvbYIOdGhlcm1hc3RpYy5jb22CDXd3dy4zNDQxNy5j
b22CDXd3dy40MDcyNS5jb22CDXd3dy40MDc4NS5jb22CDXd3dy40MjE0NS5jb22C
DXd3dy40NTg0Ny5jb22CDXd3dy40NjAyNy5jb22CDXd3dy40Njc0OS5jb22CDXd3
dy40NzE1Ni5jb22CDXd3dy42OTA3MS5jb22CDXd3dy42OTMxNC5jb22CDXd3dy43
MDIzMC5jb22CDXd3dy43MTU3NC5jb22CDXd3dy44OTQ3Ni5jb22CDnd3dy5hbmJl
dGEuY29tghR3d3cuYXNzaWN1cmF0aXZhLmNvbYIQd3d3LmJlZGxvZ2ljLmNvbYIY
d3d3LmJ1Z3JlcGVsbGVudC5vcmdhbmljgg93d3cuY2FwcmVyYS5vcmeCEHd3dy5j
b3JuZWxsYS5jb22CEnd3dy5jb3J0ZW9sb25hLmNvbYIZd3d3LmNvc21ldGljc3Rl
bWNlbGxzLm9yZ4IRd3d3LmRhbGxhc3BycC5vcmeCFHd3dy5lc3BvcnRzb3Nha2Eu
Y29tghB3d3cuZXhlY3V3ZWIuY29tghB3d3cuZmFybWFnaWMuY29tgg93d3cuZmlv
Y2luYS5jb22CFHd3dy5mcnV0dGFmcmVzY2EuY29tghJ3d3cuaW5tdWVibGUuY2xp
Y2uCDHd3dy5rbXVhLmNvbYITd3d3LmxhY2Fzc2FuZHJhLmNvbYIPd3d3Lmxhb3Nt
bWEuY29tghh3d3cubGFzdG1pbnV0ZXRyb3BlYS5jb22CHXd3dy5saXZlcnBvb2xy
ZWFsZXN0YXRlLmNvLnVrghF3d3cubWFyc2NpYW5vLm9yZ4IPd3d3Lm5leHRicmEu
Y29tghd3d3cubnV0cmlzY2llbnRpZmljLmNvbYIWd3d3LnBhZGVybm9kdWduYW5v
Lm9yZ4IYd3d3LnBhdGllbnRzcHJvdG9jb2wub3Jnggt3d3cucGJmYS5jYYIcd3d3
LnBlcnNvbmFsaW5qdXJ5Lm1lbGJvdXJuZYIed3d3LnBsYXN0aWNzdXJnZXJ5c3Rl
bWNlbGwub3Jngg93d3cucmFxdWlsYS5jb22CEHd3dy5zZWxsb2dpYy5jb22CD3d3
dy5zaWRlcm5vLm9yZ4ISd3d3LnNwZWVkbWF0aWMuY29tggx3d3cuc3NuNi5jb22C
FXd3dy5zdGVtY2VsbGdyYWZ0Lm9yZ4IRd3d3LnN0b3BtYXRpYy5jb22CEnd3dy50
aGVybWFzdGljLmNvbYIQd3d3LnphbWJsZXJhLmNvbYIMemFtYmxlcmEuY29tMEwG
A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW
Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFqFIRTFwAA
BAMARzBFAiEAkSGRyOlb8oieFC9fn1QBTLcruBA0d1qa2mQBUt/R5icCIFMy2yxL
JPQHmwqKRTC4Cz+XHInfW6seEm0jAvWn+zo7AHYAKTxRllTIOWW6qlD8WAfUt2+/
WHopctykwwz05UVH9HgAAAFqFIRTHQAABAMARzBFAiArN5L6uAB8T5vy64mQ0gcg
v0l4glNMdHpCQDoaTq6C2AIhAL9/K2UHriWdy+gGRSB06zaasvfKoqJQMaf5y3+v
YaVeMA0GCSqGSIb3DQEBCwUAA4IBAQB8oCWo+ZwS6q2Afglj2LbuZCqpT1vH/t9Q
Jip6Khsc+ksVcfENENhPs1DTvf0BzxsnkaVepfoV1HS2o2si0w382RT/pCH62fW+
/t4i5+cI7i0EqEYuUJuhjyFP4AH1RuawLVZnvDm+aFRe66zaHlBpf9FHz174ibAM
Tud2psgswUkp1nB4TR7kvW1laPmVAnuV3b/nowqafZLXEnVEmOFgMMluXPMhFwl0
4ZkXgd31M8DYsEjFqdFarY0VA7sioLM5an00x1+LSkr1iGzEOcVoMcowb2ZWyGQZ
DzDzBrT5NWIV/a7CJVZmcE0s8xz2xyPRhvwrtvaicMk8bdW/25LK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpJL4oy0DDTIGdDgJ2g4
3JGcoULlnTJT/hBm3tlaLHAQz4EiDjQDH4fudZmjQPiSOaCnbBEGRdY+gUYIAWDz
uSy1qmnVxwK8Mpwg2dw5iJo/IK79TLoZjOCI0ZgU2/u/Q3yynm4WcB1jbKJXve9n
cq6pFiLeAHhS9uNQtUiQoKiPanmo2GkB9K237lh6zl2BQppCj1uL9LjnjUu/0DNH
WFphZRP6xr3BAGbuFwEPnvFWgljla4Mf5x1GadUQDT7ghAhL0Dq3Fx9NAxLIuGy2
+8WH8pgk0Wb1fNAwqISiAe8Jc9Yrom7GhLxsTJLEmIRikVOn4Krq8Nfd2FiJH2/d
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268847495369107721487860341936192890926672
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 01:26:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 01:26:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pbfa.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21532653300453512028112080334458412778401621056531188243149804031893825318231851422373332883644426649371188212403386130067370843597386338922994672629337629909287609693201824018547985713875485293829200827587589211001830200836058186616847210882961201380782283563140445124826937078578583648504284662107883047483028766621267530779977500987229494985452963549352920918692552824081324930079925556846960290242670978642504497142221379053747498073757912646087392447336490143742401911911531241433282696356343363910939787804845556355621562778349853642391560092166295795090938688674071927831741109740415809976608563726869769215423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ebf7e8c0e3c23d903c727edbd1b3d7ef42344fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1716 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34417.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40725.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40785.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '42145.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '45847.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '46027.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '46749.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '47156.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69071.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '69314.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '70230.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '71574.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '89476.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assicurativa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugrepellent.organic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caprera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corteolona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmeticstemcells.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportsosaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'execuweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiocina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruttafresca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmueble.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacassandra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laosmma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastminutetropea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpoolrealestate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsciano.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextbra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutriscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padernodugnano.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patientsprotocol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbfa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalinjury.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasticsurgerystemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raquila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siderno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssn6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellgraft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.34417.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.40725.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.40785.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.42145.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.45847.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.46027.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.46749.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.47156.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69071.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.69314.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.70230.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.71574.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.89476.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assicurativa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugrepellent.organic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caprera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corteolona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmeticstemcells.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallasprp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportsosaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.execuweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiocina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fruttafresca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inmueble.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kmua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacassandra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laosmma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastminutetropea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liverpoolrealestate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsciano.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextbra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutriscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.padernodugnano.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patientsprotocol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pbfa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalinjury.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plasticsurgerystemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raquila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sellogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siderno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssn6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellgraft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zamblera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zamblera.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a148453170000040300473045022100912191c8e95bf2889e142f5f9f54014cb72bb81034775a9ada640152dfd1e62702205332db2c4b24f4079b0a8a4530b80b3f971c89df5bab1e126d2302f5a7fb3a3b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a1484531d000004030047304502202b3792fab8007c4f9bf2eb8990d20720bf497882534c747a42403a1a4eae82d8022100bf7f2b6507ae259dcbe806452074eb369ab2f7caa2a25031a7f9cb7faf61a55e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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