www.leafassociation.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e9:d1:50:f2:5d:f4:99:ab:13:42:30:ed:d8:f5:49:4f:c1 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.leafassociation.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:d1:50:f2:5d:f4:99:ab:13:42:30:ed:d8:f5:49:4f:c1
Serial Number (int): 340900878238514175443942721662603166830529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:4e:82:c6:4f:cb:8a:b8:5e:d4:17:d4:95:1d:a6:51:eb:5d:4f:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:f8:14:4e:39:1c:a6:58:62:61:ee:5a:6e:85:55:bb:97:02:82:d9
Fingerprint (sha256): 88:e1:3a:8f:46:3a:4e:68:5c:41:2b:d5:ed:a4:05:7c:51:05:5b:67:6a:55:43:aa:ed:8a:7e:ce:a6:6c:44:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.leafassociation.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.leafassociation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0000local.com
1idd.com
acedonor.com
advantagechiropracticcenters.com
bentocoin.com
cantouri.com
charlestonstemcellcenters.com
childcareadvice.com
climateawarenessnetwork.com
consolidationinc.com
coospace.com
covfefeed.com
cybersecuridadmexico.com
dailygrowers.com
detroitstemcellcenters.com
droneagriservice.com
drugregulation.com
earnpeak.com
emoneyai.com
fakeorauthentic.com
fiberworksinc.com
goldsworthyrisingstars.com
handymanbeaverton.com
hartfordconvention.com
jobmoc.com
keywestfloridalawyers.com
kredit2koin.com
leafassociation.com
louisianastemcell.com
moneyprism.com
natureladakh.com
platformbedwithstorage.com
poisonivytribe.com
residentialhomebuilders.com
risingheartsdesign.com
salottocd.com
sun-chinesemusic.com
tcspoilers.com
texascoffeeshops.com
thequaestor.com
trywebinars.com
turfill.com
uavcontainers.com
webstudionyc.com
wisdomworkshops.com
www.0000local.com
www.1idd.com
www.acedonor.com
www.advantagechiropracticcenters.com
www.bentocoin.com
www.cantouri.com
www.charlestonstemcellcenters.com
www.childcareadvice.com
www.climateawarenessnetwork.com
www.consolidationinc.com
www.coospace.com
www.covfefeed.com
www.cybersecuridadmexico.com
www.dailygrowers.com
www.detroitstemcellcenters.com
www.droneagriservice.com
www.drugregulation.com
www.earnpeak.com
www.emoneyai.com
www.fakeorauthentic.com
www.fiberworksinc.com
www.goldsworthyrisingstars.com
www.handymanbeaverton.com
www.hartfordconvention.com
www.jobmoc.com
www.keywestfloridalawyers.com
www.kredit2koin.com
www.leafassociation.com
www.louisianastemcell.com
www.moneyprism.com
www.natureladakh.com
www.platformbedwithstorage.com
www.poisonivytribe.com
www.residentialhomebuilders.com
www.risingheartsdesign.com
www.salottocd.com
www.sun-chinesemusic.com
www.tcspoilers.com
www.texascoffeeshops.com
www.thequaestor.com
www.trywebinars.com
www.turfill.com
www.uavcontainers.com
www.webstudionyc.com
www.wisdomworkshops.com

Other certificates including the domain name leafassociation.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.leafassociation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINGjCCDAKgAwIBAgISA+nRUPJd9JmrE0Iw7dj1SU/BMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDIxMzUyMDJaFw0y
MDA3MDExMzUyMDJaMCIxIDAeBgNVBAMTF3d3dy5sZWFmYXNzb2NpYXRpb24uY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36hh6cBImWe05lg+iZam
zXmqm9nE7CSuheRtPWBBMGFdwXvAnwKfF9twUAhjoXAI1gzEo0DUjz7aHRi0UO/N
0/qY7LV11tLd/HERcq3OndlvNS3+68TFEoZsB3LaIEtjg1iCUhnjHMvjtBoCVspd
3kV3vVdHRwJfsB4RJZXLrqs+0CKRvpvG7/dTKt54HBWuUQ4/xxtV4CzgNDrxLybF
nDcJ7N/V0DPVVgZaoCo359TAo6FSEttxWdrjgINLuMD6hL/f1wGXFNbGWbhA+qx+
KWT5gTQvSLryZlheeV4PZjOsAi2rotJCKAst/cQlc/kqGf5E/Z8tzMsdUNWy5g5y
LwIDAQABo4IKIDCCChwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR1ToLGT8uKuF7U
F9SVHaZR611P1TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMIIH1QYDVR0RBIIHzDCCB8iCDTAwMDBsb2NhbC5jb22CCDFp
ZGQuY29tggxhY2Vkb25vci5jb22CIGFkdmFudGFnZWNoaXJvcHJhY3RpY2NlbnRl
cnMuY29tgg1iZW50b2NvaW4uY29tggxjYW50b3VyaS5jb22CHWNoYXJsZXN0b25z
dGVtY2VsbGNlbnRlcnMuY29tghNjaGlsZGNhcmVhZHZpY2UuY29tghtjbGltYXRl
YXdhcmVuZXNzbmV0d29yay5jb22CFGNvbnNvbGlkYXRpb25pbmMuY29tggxjb29z
cGFjZS5jb22CDWNvdmZlZmVlZC5jb22CGGN5YmVyc2VjdXJpZGFkbWV4aWNvLmNv
bYIQZGFpbHlncm93ZXJzLmNvbYIaZGV0cm9pdHN0ZW1jZWxsY2VudGVycy5jb22C
FGRyb25lYWdyaXNlcnZpY2UuY29tghJkcnVncmVndWxhdGlvbi5jb22CDGVhcm5w
ZWFrLmNvbYIMZW1vbmV5YWkuY29tghNmYWtlb3JhdXRoZW50aWMuY29tghFmaWJl
cndvcmtzaW5jLmNvbYIaZ29sZHN3b3J0aHlyaXNpbmdzdGFycy5jb22CFWhhbmR5
bWFuYmVhdmVydG9uLmNvbYIWaGFydGZvcmRjb252ZW50aW9uLmNvbYIKam9ibW9j
LmNvbYIZa2V5d2VzdGZsb3JpZGFsYXd5ZXJzLmNvbYIPa3JlZGl0MmtvaW4uY29t
ghNsZWFmYXNzb2NpYXRpb24uY29tghVsb3Vpc2lhbmFzdGVtY2VsbC5jb22CDm1v
bmV5cHJpc20uY29tghBuYXR1cmVsYWRha2guY29tghpwbGF0Zm9ybWJlZHdpdGhz
dG9yYWdlLmNvbYIScG9pc29uaXZ5dHJpYmUuY29tghtyZXNpZGVudGlhbGhvbWVi
dWlsZGVycy5jb22CFnJpc2luZ2hlYXJ0c2Rlc2lnbi5jb22CDXNhbG90dG9jZC5j
b22CFHN1bi1jaGluZXNlbXVzaWMuY29tgg50Y3Nwb2lsZXJzLmNvbYIUdGV4YXNj
b2ZmZWVzaG9wcy5jb22CD3RoZXF1YWVzdG9yLmNvbYIPdHJ5d2ViaW5hcnMuY29t
ggt0dXJmaWxsLmNvbYIRdWF2Y29udGFpbmVycy5jb22CEHdlYnN0dWRpb255Yy5j
b22CE3dpc2RvbXdvcmtzaG9wcy5jb22CEXd3dy4wMDAwbG9jYWwuY29tggx3d3cu
MWlkZC5jb22CEHd3dy5hY2Vkb25vci5jb22CJHd3dy5hZHZhbnRhZ2VjaGlyb3By
YWN0aWNjZW50ZXJzLmNvbYIRd3d3LmJlbnRvY29pbi5jb22CEHd3dy5jYW50b3Vy
aS5jb22CIXd3dy5jaGFybGVzdG9uc3RlbWNlbGxjZW50ZXJzLmNvbYIXd3d3LmNo
aWxkY2FyZWFkdmljZS5jb22CH3d3dy5jbGltYXRlYXdhcmVuZXNzbmV0d29yay5j
b22CGHd3dy5jb25zb2xpZGF0aW9uaW5jLmNvbYIQd3d3LmNvb3NwYWNlLmNvbYIR
d3d3LmNvdmZlZmVlZC5jb22CHHd3dy5jeWJlcnNlY3VyaWRhZG1leGljby5jb22C
FHd3dy5kYWlseWdyb3dlcnMuY29tgh53d3cuZGV0cm9pdHN0ZW1jZWxsY2VudGVy
cy5jb22CGHd3dy5kcm9uZWFncmlzZXJ2aWNlLmNvbYIWd3d3LmRydWdyZWd1bGF0
aW9uLmNvbYIQd3d3LmVhcm5wZWFrLmNvbYIQd3d3LmVtb25leWFpLmNvbYIXd3d3
LmZha2VvcmF1dGhlbnRpYy5jb22CFXd3dy5maWJlcndvcmtzaW5jLmNvbYIed3d3
LmdvbGRzd29ydGh5cmlzaW5nc3RhcnMuY29tghl3d3cuaGFuZHltYW5iZWF2ZXJ0
b24uY29tghp3d3cuaGFydGZvcmRjb252ZW50aW9uLmNvbYIOd3d3LmpvYm1vYy5j
b22CHXd3dy5rZXl3ZXN0ZmxvcmlkYWxhd3llcnMuY29tghN3d3cua3JlZGl0Mmtv
aW4uY29tghd3d3cubGVhZmFzc29jaWF0aW9uLmNvbYIZd3d3LmxvdWlzaWFuYXN0
ZW1jZWxsLmNvbYISd3d3Lm1vbmV5cHJpc20uY29tghR3d3cubmF0dXJlbGFkYWto
LmNvbYIed3d3LnBsYXRmb3JtYmVkd2l0aHN0b3JhZ2UuY29tghZ3d3cucG9pc29u
aXZ5dHJpYmUuY29tgh93d3cucmVzaWRlbnRpYWxob21lYnVpbGRlcnMuY29tghp3
d3cucmlzaW5naGVhcnRzZGVzaWduLmNvbYIRd3d3LnNhbG90dG9jZC5jb22CGHd3
dy5zdW4tY2hpbmVzZW11c2ljLmNvbYISd3d3LnRjc3BvaWxlcnMuY29tghh3d3cu
dGV4YXNjb2ZmZWVzaG9wcy5jb22CE3d3dy50aGVxdWFlc3Rvci5jb22CE3d3dy50
cnl3ZWJpbmFycy5jb22CD3d3dy50dXJmaWxsLmNvbYIVd3d3LnVhdmNvbnRhaW5l
cnMuY29tghR3d3cud2Vic3R1ZGlvbnljLmNvbYIXd3d3Lndpc2RvbXdvcmtzaG9w
cy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAA
AXE7YKkAAAAEAwBHMEUCIBpxXq7AFK75+SX0jRAXOiDLhVZgOTiAWTWS7oFBFWfC
AiEA0fq3//F9lQ76FUPjSEV0cJmm3rQPeRqT63GCjIBWVwsAdQDnEvKwN34aYvuO
yQxhhPHqezfLVh0RJlvz4PNL8kFUbgAAAXE7YKkpAAAEAwBGMEQCIBJsifBbRuE6
3Dogv6fL8QoqSU3Y9TUs7PZFRf7n1vcXAiBmpWjfaevun5Gh8uqgXXRl756opSeM
47JkRJXo4RPeATANBgkqhkiG9w0BAQsFAAOCAQEAXE7OMGQNMv9SmwEEwjsxqK6X
9ov1HA2IiY4EZzHIfMRN+7nyRjWNMkxIFmlL6HpkuwDSKnpM3sp2hezHXdKwQFy+
9OY+s8+aDoaJe7Wr/71q0xknRmr/oi8AW3nAJ9QnM70qTNcipzPZXEideWRM4/+d
ZGJg6y2P0xH/A0fX/4CwiL0TcgDIknCiUVOfFcUMzCGUp/ySy38wCDR70IzQDBi5
OFHlnMw9mc5okF+oBsaYg+jsJmmVkJROXFPKYcjDvdhxjcjDCRhhy9DCYZsVBuxl
CVv6yva8yvd2JXkhn1jfua5b89rq/U2UXfzDV61+tdGB/yIRI1Yuyj20NkQTjA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36hh6cBImWe05lg+iZam
zXmqm9nE7CSuheRtPWBBMGFdwXvAnwKfF9twUAhjoXAI1gzEo0DUjz7aHRi0UO/N
0/qY7LV11tLd/HERcq3OndlvNS3+68TFEoZsB3LaIEtjg1iCUhnjHMvjtBoCVspd
3kV3vVdHRwJfsB4RJZXLrqs+0CKRvpvG7/dTKt54HBWuUQ4/xxtV4CzgNDrxLybF
nDcJ7N/V0DPVVgZaoCo359TAo6FSEttxWdrjgINLuMD6hL/f1wGXFNbGWbhA+qx+
KWT5gTQvSLryZlheeV4PZjOsAi2rotJCKAst/cQlc/kqGf5E/Z8tzMsdUNWy5g5y
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340900878238514175443942721662603166830529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 13:52:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-01 13:52:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.leafassociation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28234174499535095901141147727666695346294653259602451526270625926566934176095944950127061221630728026420909669526504702605093236581141869312353851872687786127304732431145222665783552178324244138150332988315522898021110507829382038383890205807240109650770527717686306514845103969516899810342624920917842750659824978431328251571860847706482960299955752641879673044274288477328822597118010279139511768447009719157381020793242771226250494552063482248063993276378603232912706849459191114153286858239328036206495612858290433539190889136477316288277316197971301691546536447909369313938660279390458674809605438781243435938351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							754e82c64fcb8ab85ed417d4951da651eb5d4fd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1996 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0000local.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1idd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acedonor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagechiropracticcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentocoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantouri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlestonstemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childcareadvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateawarenessnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidationinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coospace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covfefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersecuridadmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailygrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroitstemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droneagriservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugregulation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earnpeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emoneyai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakeorauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiberworksinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldsworthyrisingstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handymanbeaverton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartfordconvention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobmoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestfloridalawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kredit2koin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianastemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyprism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natureladakh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platformbedwithstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivytribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residentialhomebuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risingheartsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salottocd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sun-chinesemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcspoilers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texascoffeeshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thequaestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trywebinars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uavcontainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstudionyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisdomworkshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.0000local.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1idd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acedonor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantagechiropracticcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bentocoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantouri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlestonstemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.childcareadvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.climateawarenessnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consolidationinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coospace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covfefeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecuridadmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailygrowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detroitstemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.droneagriservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drugregulation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earnpeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emoneyai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fakeorauthentic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiberworksinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldsworthyrisingstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handymanbeaverton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hartfordconvention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobmoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keywestfloridalawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kredit2koin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leafassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisianastemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneyprism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natureladakh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platformbedwithstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivytribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residentialhomebuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.risingheartsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salottocd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sun-chinesemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcspoilers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texascoffeeshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thequaestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trywebinars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uavcontainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webstudionyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wisdomworkshops.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001713b60a900000004030047304502201a715eaec014aef9f925f48d10173a20cb855660393880593592ee81411567c2022100d1fab7fff17d950efa1543e34845747099a6deb40f791a93eb71828c8056570b007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001713b60a92900000403004630440220126c89f05b46e13adc3a20bfa7cbf10a2a494dd8f5352cecf64545fee7d6f717022066a568df69ebee9f91a1f2eaa05d7465ef9ea8a5278ce3b2644495e8e113de01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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