www.bessenlaw.com
Issued by R3
About this certificate
This digital certificate with serial number 03:fe:a2:03:53:a1:a4:0f:28:54:66:1b:aa:dd:3d:ad:01:d5 was issued on by Let's Encrypt.
With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.bessenlaw.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:fe:a2:03:53:a1:a4:0f:28:54:66:1b:aa:dd:3d:ad:01:d5Serial Number (int): 347983931201653346769296892960673282982357
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a0:7c:d0:a2:05:99:c0:a4:9c:77:15:30:3c:61:04:40:07:c4:42:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d8:93:0e:fc:7d:f9:9f:93:ec:0d:c9:54:2b:82:9d:ad:5c:46:39:31
Fingerprint (sha256): 88:1a:9f:d8:f6:b1:c7:b7:79:78:b3:24:9d:a9:b2:0b:99:96:a5:17:e8:6c:ae:74:e3:08:83:68:4f:52:07:9d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.bessenlaw.com
71
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bessenlaw.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
answertitle.com
arktitletexas.com
bessenlaw.com
bottomlinedashboard.com
cleartitleservices.com
closewithlegacy.com
empiretitleidaho.com
expresstitlecs.com
flaggcreektitle.com
flagshiptitle.com
fotilawfirm.com
goldenabstract.agency
gracechunlaw.com
greenacreabstract.com
haywardtitlegroup.com
heartlandtitlecompany.com
jacksonlawnc.com
larreaandortega.com
legallegacy.com
localtitle.com
localwebdesigncompany.com
mbtitle.com
northporttitle.com
paradisetitleinc.com
paradisetitlestaug.com
paramounttitlenm.com
partnertitle.com
precisetitle.com
rtrtitle.com
titlepremiumcalculator.com
titlesf.com
truelinetitle.com
tstitleflorida.com
valorabstract.com
valortitleagency.com
wilsonhamilton.com
www.answertitle.com
www.arktitletexas.com
www.bessenlaw.com
www.bottomlinedashboard.com
www.cleartitleservices.com
www.closewithlegacy.com
www.empiretitleidaho.com
www.expresstitlecs.com
www.flaggcreektitle.com
www.flagshiptitle.com
www.fotilawfirm.com
www.goldenabstract.agency
www.gracechunlaw.com
www.greenacreabstract.com
www.haywardtitlegroup.com
www.heartlandtitlecompany.com
www.jacksonlawnc.com
www.larreaandortega.com
www.legallegacy.com
www.localtitle.com
www.localwebdesigncompany.com
www.mbtitle.com
www.northporttitle.com
www.paradisetitleinc.com
www.paradisetitlestaug.com
www.paramounttitlenm.com
www.partnertitle.com
www.precisetitle.com
www.titlepremiumcalculator.com
www.titlesf.com
www.truelinetitle.com
www.tstitleflorida.com
www.valorabstract.com
www.valortitleagency.com
www.wilsonhamilton.com
arktitletexas.com
bessenlaw.com
bottomlinedashboard.com
cleartitleservices.com
closewithlegacy.com
empiretitleidaho.com
expresstitlecs.com
flaggcreektitle.com
flagshiptitle.com
fotilawfirm.com
goldenabstract.agency
gracechunlaw.com
greenacreabstract.com
haywardtitlegroup.com
heartlandtitlecompany.com
jacksonlawnc.com
larreaandortega.com
legallegacy.com
localtitle.com
localwebdesigncompany.com
mbtitle.com
northporttitle.com
paradisetitleinc.com
paradisetitlestaug.com
paramounttitlenm.com
partnertitle.com
precisetitle.com
rtrtitle.com
titlepremiumcalculator.com
titlesf.com
truelinetitle.com
tstitleflorida.com
valorabstract.com
valortitleagency.com
wilsonhamilton.com
www.answertitle.com
www.arktitletexas.com
www.bessenlaw.com
www.bottomlinedashboard.com
www.cleartitleservices.com
www.closewithlegacy.com
www.empiretitleidaho.com
www.expresstitlecs.com
www.flaggcreektitle.com
www.flagshiptitle.com
www.fotilawfirm.com
www.goldenabstract.agency
www.gracechunlaw.com
www.greenacreabstract.com
www.haywardtitlegroup.com
www.heartlandtitlecompany.com
www.jacksonlawnc.com
www.larreaandortega.com
www.legallegacy.com
www.localtitle.com
www.localwebdesigncompany.com
www.mbtitle.com
www.northporttitle.com
www.paradisetitleinc.com
www.paradisetitlestaug.com
www.paramounttitlenm.com
www.partnertitle.com
www.precisetitle.com
www.titlepremiumcalculator.com
www.titlesf.com
www.truelinetitle.com
www.tstitleflorida.com
www.valorabstract.com
www.valortitleagency.com
www.wilsonhamilton.com
Other certificates including the domain name bessenlaw.com
(limited to 100 certificates)
www.protitlemi.com
www.rtrtitle.com
www.localwebdesigncompany.com
www.paradisetitleinc.com
www.northporttitle.com
www.bessenlaw.com
www.protitlemi.com
www.localwebdesigncompany.com
www.localwebdesigncompany.com
www.bessenlaw.com
www.jacksonlawnc.com
www.jacksonlawnc.com
www.localtitle.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.protitlemi.com
www.bessenlaw.com
www.jacksonlawnc.com
www.northporttitle.com
www.localwebdesigncompany.com
www.bessenlaw.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.jacksonlawnc.com
www.gracechunlaw.com
www.jacksonlawnc.com
www.protitlemi.com
www.expresstitlecs.com
www.wilsonhamilton.com
www.localwebdesigncompany.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.rtrtitle.com
www.rtrtitle.com
www.localwebdesigncompany.com
www.rtrtitle.com
www.localwebdesigncompany.com
www.rtrtitle.com
www.localwebdesigncompany.com
www.paradisetitleinc.com
www.northporttitle.com
www.bessenlaw.com
www.protitlemi.com
www.localwebdesigncompany.com
www.localwebdesigncompany.com
www.bessenlaw.com
www.jacksonlawnc.com
www.jacksonlawnc.com
www.localtitle.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.protitlemi.com
www.bessenlaw.com
www.jacksonlawnc.com
www.northporttitle.com
www.localwebdesigncompany.com
www.bessenlaw.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.jacksonlawnc.com
www.gracechunlaw.com
www.jacksonlawnc.com
www.protitlemi.com
www.expresstitlecs.com
www.wilsonhamilton.com
www.localwebdesigncompany.com
www.jacksonlawnc.com
www.localwebdesigncompany.com
www.rtrtitle.com
www.rtrtitle.com
www.localwebdesigncompany.com
www.rtrtitle.com
www.localwebdesigncompany.com
Certificate
The complete raw certificate details for www.bessenlaw.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILDDCCCfSgAwIBAgISA/6iA1OhpA8oVGYbqt09rQHVMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDcxMzI0MjdaFw0yNDA0MDYxMzI0MjZaMBwxGjAYBgNVBAMT EXd3dy5iZXNzZW5sYXcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6ywU/j74ndptkCExhSwPJIW3mH/2EGShwZety1IJvBwwZGsqoCSQ9zvTtHe heS9/UKrcM2pbRLP0CegYR485KAtfXXVOCA5TMbQi2sncFYdYghoOkIRkVz4mBbI SohYcVSN1dtutRDi2sJ+9lgnlvO9kxmFIa6h0bvSQYSsD+GTdyQfCguS4dA9dCWm h+j8Ot6eyoEkp7fdlVA8pf5VLRO33pGaj2J9UZxne8Tpyr/XIRm2rBHdLnYy9/Gz yDfN0qjSJOxx/0LY6McGoAkLMELpqjxZtBgWwhvxKffjDE6FjDc6zzdobNhpFhXg z3pzvGt0xwMdL+TvvOjUaiLvXwIDAQABo4IIMDCCCCwwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBSgfNCiBZnApJx3FTA8YQRAB8RCrTAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCBjUGA1UdEQSCBiwwggYogg9hbnN3ZXJ0aXRsZS5jb22CEWFya3RpdGxl dGV4YXMuY29tgg1iZXNzZW5sYXcuY29tghdib3R0b21saW5lZGFzaGJvYXJkLmNv bYIWY2xlYXJ0aXRsZXNlcnZpY2VzLmNvbYITY2xvc2V3aXRobGVnYWN5LmNvbYIU ZW1waXJldGl0bGVpZGFoby5jb22CEmV4cHJlc3N0aXRsZWNzLmNvbYITZmxhZ2dj cmVla3RpdGxlLmNvbYIRZmxhZ3NoaXB0aXRsZS5jb22CD2ZvdGlsYXdmaXJtLmNv bYIVZ29sZGVuYWJzdHJhY3QuYWdlbmN5ghBncmFjZWNodW5sYXcuY29tghVncmVl bmFjcmVhYnN0cmFjdC5jb22CFWhheXdhcmR0aXRsZWdyb3VwLmNvbYIZaGVhcnRs YW5kdGl0bGVjb21wYW55LmNvbYIQamFja3Nvbmxhd25jLmNvbYITbGFycmVhYW5k b3J0ZWdhLmNvbYIPbGVnYWxsZWdhY3kuY29tgg5sb2NhbHRpdGxlLmNvbYIZbG9j YWx3ZWJkZXNpZ25jb21wYW55LmNvbYILbWJ0aXRsZS5jb22CEm5vcnRocG9ydHRp dGxlLmNvbYIUcGFyYWRpc2V0aXRsZWluYy5jb22CFnBhcmFkaXNldGl0bGVzdGF1 Zy5jb22CFHBhcmFtb3VudHRpdGxlbm0uY29tghBwYXJ0bmVydGl0bGUuY29tghBw cmVjaXNldGl0bGUuY29tggxydHJ0aXRsZS5jb22CGnRpdGxlcHJlbWl1bWNhbGN1 bGF0b3IuY29tggt0aXRsZXNmLmNvbYIRdHJ1ZWxpbmV0aXRsZS5jb22CEnRzdGl0 bGVmbG9yaWRhLmNvbYIRdmFsb3JhYnN0cmFjdC5jb22CFHZhbG9ydGl0bGVhZ2Vu Y3kuY29tghJ3aWxzb25oYW1pbHRvbi5jb22CE3d3dy5hbnN3ZXJ0aXRsZS5jb22C FXd3dy5hcmt0aXRsZXRleGFzLmNvbYIRd3d3LmJlc3Nlbmxhdy5jb22CG3d3dy5i b3R0b21saW5lZGFzaGJvYXJkLmNvbYIad3d3LmNsZWFydGl0bGVzZXJ2aWNlcy5j b22CF3d3dy5jbG9zZXdpdGhsZWdhY3kuY29tghh3d3cuZW1waXJldGl0bGVpZGFo by5jb22CFnd3dy5leHByZXNzdGl0bGVjcy5jb22CF3d3dy5mbGFnZ2NyZWVrdGl0 bGUuY29tghV3d3cuZmxhZ3NoaXB0aXRsZS5jb22CE3d3dy5mb3RpbGF3ZmlybS5j b22CGXd3dy5nb2xkZW5hYnN0cmFjdC5hZ2VuY3mCFHd3dy5ncmFjZWNodW5sYXcu Y29tghl3d3cuZ3JlZW5hY3JlYWJzdHJhY3QuY29tghl3d3cuaGF5d2FyZHRpdGxl Z3JvdXAuY29tgh13d3cuaGVhcnRsYW5kdGl0bGVjb21wYW55LmNvbYIUd3d3Lmph Y2tzb25sYXduYy5jb22CF3d3dy5sYXJyZWFhbmRvcnRlZ2EuY29tghN3d3cubGVn YWxsZWdhY3kuY29tghJ3d3cubG9jYWx0aXRsZS5jb22CHXd3dy5sb2NhbHdlYmRl c2lnbmNvbXBhbnkuY29tgg93d3cubWJ0aXRsZS5jb22CFnd3dy5ub3J0aHBvcnR0 aXRsZS5jb22CGHd3dy5wYXJhZGlzZXRpdGxlaW5jLmNvbYIad3d3LnBhcmFkaXNl dGl0bGVzdGF1Zy5jb22CGHd3dy5wYXJhbW91bnR0aXRsZW5tLmNvbYIUd3d3LnBh cnRuZXJ0aXRsZS5jb22CFHd3dy5wcmVjaXNldGl0bGUuY29tgh53d3cudGl0bGVw cmVtaXVtY2FsY3VsYXRvci5jb22CD3d3dy50aXRsZXNmLmNvbYIVd3d3LnRydWVs aW5ldGl0bGUuY29tghZ3d3cudHN0aXRsZWZsb3JpZGEuY29tghV3d3cudmFsb3Jh YnN0cmFjdC5jb22CGHd3dy52YWxvcnRpdGxlYWdlbmN5LmNvbYIWd3d3LndpbHNv bmhhbWlsdG9uLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkC BAIEgfcEgfQA8gB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAAB jORPi2wAAAQDAEgwRgIhAPbJ42rSK5KXLM/vtNdxczEfsOgeiHUcrp6qop0YEcMR AiEAqWaMx1BSATuywBeXTedODqVPnhkJYVGqUodnMeu2WhYAdwCi4r/WHt4vLweg 1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYzkT4t2AAAEAwBIMEYCIQDgoW2JMoHu aN6JRxWSSVFP4tgMPrItx0qMQXJqsz45YQIhAKA1JNQSEGSGhMmIkWbuie2L+e7H qB+tI6EXKFjOtCsZMA0GCSqGSIb3DQEBCwUAA4IBAQApkYHaJUQdu7Gnp4m8MRl1 Iwqi43LsSXeGULViA1zcmXe1BstPxZwMzWfr4iWs16/RCk/RQvW4XoqNFPcFFvI5 nRfwtLYBsDvXe+oHDAy4Zl5jaJFVAYWbquea9UTzWdYlSexATSLZ+WW9Mh/O5eCX pSC1nhH4+yHJvfPfK/Zq/e+cabG4W2J5AzFm6f01K5a/E9CWJ/6OqrQJK5ERtuzi H82FCdjp38aBv0NH0l4grviyfNpYZp9FJHQrKHPXJoKI5jIGHThcfz5rt/73wcII CZDk5EYhXovO3g94JoWwzd4OypmTtFubrzjJFeA4sMVTPVOBdvR4JYZcCRlbk3r6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ywU/j74ndptkCExhSw PJIW3mH/2EGShwZety1IJvBwwZGsqoCSQ9zvTtHeheS9/UKrcM2pbRLP0CegYR48 5KAtfXXVOCA5TMbQi2sncFYdYghoOkIRkVz4mBbISohYcVSN1dtutRDi2sJ+9lgn lvO9kxmFIa6h0bvSQYSsD+GTdyQfCguS4dA9dCWmh+j8Ot6eyoEkp7fdlVA8pf5V LRO33pGaj2J9UZxne8Tpyr/XIRm2rBHdLnYy9/GzyDfN0qjSJOxx/0LY6McGoAkL MELpqjxZtBgWwhvxKffjDE6FjDc6zzdobNhpFhXgz3pzvGt0xwMdL+TvvOjUaiLv XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 347983931201653346769296892960673282982357 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 13:24:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 13:24:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bessenlaw.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22176859380937222173342214312657363166234030738497690429191850911154952134039306787852333307467590206921588604100316812165940086454718228323936778499266657576231504985312375645050420352851049471939867941434160119916767911341580075490322220646854425626814602075137213793462778949383370923412174390605634320315361103382815594878766745440256006156707878506748582031687383197895364119767170703822527799969812851423364953068559396848989404510549462328772753394317453349926151132160448368649057189636115491757170864161686113756102055020350626019302157611494403277981394523381890049695392818438331862895285970497596930846559 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a07cd0a20599c0a49c7715303c61044007c442ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1580 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answertitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arktitletexas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bessenlaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottomlinedashboard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleartitleservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closewithlegacy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empiretitleidaho.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresstitlecs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaggcreektitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagshiptitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotilawfirm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenabstract.agency' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracechunlaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacreabstract.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haywardtitlegroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartlandtitlecompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonlawnc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larreaandortega.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legallegacy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localtitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localwebdesigncompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbtitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northporttitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisetitleinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisetitlestaug.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramounttitlenm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnertitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisetitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtrtitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlepremiumcalculator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlesf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truelinetitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstitleflorida.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valorabstract.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valortitleagency.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilsonhamilton.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.answertitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arktitletexas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bessenlaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bottomlinedashboard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleartitleservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.closewithlegacy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.empiretitleidaho.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expresstitlecs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaggcreektitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flagshiptitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fotilawfirm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenabstract.agency' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gracechunlaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacreabstract.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haywardtitlegroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartlandtitlecompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksonlawnc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.larreaandortega.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legallegacy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localtitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localwebdesigncompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbtitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northporttitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradisetitleinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradisetitlestaug.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramounttitlenm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnertitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precisetitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titlepremiumcalculator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titlesf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truelinetitle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tstitleflorida.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valorabstract.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valortitleagency.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilsonhamilton.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce44f8b6c0000040300483046022100f6c9e36ad22b92972ccfefb4d77173311fb0e81e88751cae9eaaa29d1811c311022100a9668cc75052013bb2c017974de74e0ea54f9e19096151aa52876731ebb65a16007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ce44f8b760000040300483046022100e0a16d893281ee68de8947159249514fe2d80c3eb22dc74a8c41726ab33e3961022100a03524d41210648684c9889166ee89ed8bf9eec7a81fad23a1172858ceb42b19 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00299181da25441dbbb1a7a789bc311975230aa2e372ec49778650b562035cdc9977b506cb4fc59c0ccd67ebe225acd7afd10a4fd142f5b85e8a8d14f70516f2399d17f0b4b601b03bd77bea070c0cb8665e6368915501859baae79af544f359d62549ec404d22d9f965bd321fcee5e097a520b59e11f8fb21c9bdf3df2bf66afdef9c69b1b85b6279033166e9fd352b96bf13d09627fe8eaab4092b9111b6ece21fcd8509d8e9dfc681bf4347d25e20aef8b27cda58669f4524742b2873d7268288e632061d385c7f3e6bb7fef7c1c2080990e4e446215e8bcede0f782685b0cdde0eca9993b45b9baf38c915e038b0c5533d538176f47825865c09195b937afa