www.maskani.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:56:11:14:b4:70:b5:2c:6e:f3:31:ee:b8:e0:15:44:07 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.maskani.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:56:11:14:b4:70:b5:2c:6e:f3:31:ee:b8:e0:15:44:07
Serial Number (int): 289354414179425934473112950028460736463879
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:c8:42:ac:4d:0f:60:1d:42:66:77:4a:c2:af:33:13:ae:f2:ef:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:e2:22:e3:41:d9:0a:fa:41:09:08:c0:1e:b5:a4:a9:ec:75:5b:f5
Fingerprint (sha256): 90:ae:1e:48:0d:87:24:37:73:7f:25:4b:83:52:42:a4:e7:0b:c6:39:01:89:8e:54:c0:f4:14:ef:b1:67:4d:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.maskani.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.maskani.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autorevoli.com
avventori.com
aylesworth.com
bossoni.com
cartelloni.com
centralini.com
cittaoggi.com
compensati.com
componibili.com
concordati.com
consumazioni.com
daikei.com
diffusioni.com
ejani.com
ferush.com
gardeningtouch.com
igemi.com
individualki.com
intestatari.com
isoladeifamosi.com
kasikfitigi.com
kkaufmich.com
lisoladeifamosi.com
lottizzazioni.com
lunarsabbath.com
macchinari.com
maskani.com
massaggiatriciorientali.com
messaggeri.com
obblighi.com
piantagioni.com
pinoli.com
popowich.com
portavalori.com
porticati.com
pugili.com
ricordiamoci.com
rifugialpini.com
sgabelli.com
sotch.com
trasferiredomini.com
tuttoscafi.com
utilizzabili.com
uxuri.com
verifichestrutturali.com
verificheventennali.com
whitlatch.com
www.autorevoli.com
www.avventori.com
www.aylesworth.com
www.bossoni.com
www.cartelloni.com
www.centralini.com
www.cittaoggi.com
www.compensati.com
www.componibili.com
www.concordati.com
www.consumazioni.com
www.daikei.com
www.diffusioni.com
www.ejani.com
www.ferush.com
www.gardeningtouch.com
www.igemi.com
www.individualki.com
www.intestatari.com
www.isoladeifamosi.com
www.kasikfitigi.com
www.kkaufmich.com
www.lisoladeifamosi.com
www.lottizzazioni.com
www.lunarsabbath.com
www.macchinari.com
www.maskani.com
www.massaggiatriciorientali.com
www.messaggeri.com
www.obblighi.com
www.piantagioni.com
www.pinoli.com
www.popowich.com
www.portavalori.com
www.porticati.com
www.pugili.com
www.ricordiamoci.com
www.rifugialpini.com
www.sgabelli.com
www.sotch.com
www.trasferiredomini.com
www.tuttoscafi.com
www.utilizzabili.com
www.uxuri.com
www.verifichestrutturali.com
www.verificheventennali.com
www.whitlatch.com
www.yalei.com
yalei.com

Other certificates including the domain name maskani.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.maskani.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMJTCCCw2gAwIBAgISA1JWERS0cLUsbvMx7rjgFUQHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjEwODUwNThaFw0y
MDA1MjEwODUwNThaMBoxGDAWBgNVBAMTD3d3dy5tYXNrYW5pLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALVXZqqPIc0jC0UcqMiG2xSan1B0X5nw
ec91HB5Y5w2AhziF4f/dum543enrXi05s9UXd5Wz6u0fFi90dLWZI0xVE5YWvEMN
OW8jaowVdfBu/t3noC0hXa2dOvUdgxqcqXmSJd9Zinhze/IQ4TxVXN2V6LaDLdv2
Vz43FGO1gnufxJrUoXcgpId1WKeYdeInOnpFywn2fxq+ZPiGQsOQWGaGaOQscRp9
AAEyjYdNlTq12a4cS6JXIBImkhJDkimCX5DAxdHcgQghs56jtfmLcgssjOejcuXb
jI57KRgNyoXU15xZ33AAcehxYVgkC5W18OZ/rrkCqUu0TkW4ZmPdCm8CAwEAAaOC
CTMwggkvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUV8hCrE0PYB1CZndKwq8zE67y
78owHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCBucGA1UdEQSCBt4wggbagg5hdXRvcmV2b2xpLmNvbYINYXZ2ZW50b3Jp
LmNvbYIOYXlsZXN3b3J0aC5jb22CC2Jvc3NvbmkuY29tgg5jYXJ0ZWxsb25pLmNv
bYIOY2VudHJhbGluaS5jb22CDWNpdHRhb2dnaS5jb22CDmNvbXBlbnNhdGkuY29t
gg9jb21wb25pYmlsaS5jb22CDmNvbmNvcmRhdGkuY29tghBjb25zdW1hemlvbmku
Y29tggpkYWlrZWkuY29tgg5kaWZmdXNpb25pLmNvbYIJZWphbmkuY29tggpmZXJ1
c2guY29tghJnYXJkZW5pbmd0b3VjaC5jb22CCWlnZW1pLmNvbYIQaW5kaXZpZHVh
bGtpLmNvbYIPaW50ZXN0YXRhcmkuY29tghJpc29sYWRlaWZhbW9zaS5jb22CD2th
c2lrZml0aWdpLmNvbYINa2thdWZtaWNoLmNvbYITbGlzb2xhZGVpZmFtb3NpLmNv
bYIRbG90dGl6emF6aW9uaS5jb22CEGx1bmFyc2FiYmF0aC5jb22CDm1hY2NoaW5h
cmkuY29tggttYXNrYW5pLmNvbYIbbWFzc2FnZ2lhdHJpY2lvcmllbnRhbGkuY29t
gg5tZXNzYWdnZXJpLmNvbYIMb2JibGlnaGkuY29tgg9waWFudGFnaW9uaS5jb22C
CnBpbm9saS5jb22CDHBvcG93aWNoLmNvbYIPcG9ydGF2YWxvcmkuY29tgg1wb3J0
aWNhdGkuY29tggpwdWdpbGkuY29tghByaWNvcmRpYW1vY2kuY29tghByaWZ1Z2lh
bHBpbmkuY29tggxzZ2FiZWxsaS5jb22CCXNvdGNoLmNvbYIUdHJhc2ZlcmlyZWRv
bWluaS5jb22CDnR1dHRvc2NhZmkuY29tghB1dGlsaXp6YWJpbGkuY29tggl1eHVy
aS5jb22CGHZlcmlmaWNoZXN0cnV0dHVyYWxpLmNvbYIXdmVyaWZpY2hldmVudGVu
bmFsaS5jb22CDXdoaXRsYXRjaC5jb22CEnd3dy5hdXRvcmV2b2xpLmNvbYIRd3d3
LmF2dmVudG9yaS5jb22CEnd3dy5heWxlc3dvcnRoLmNvbYIPd3d3LmJvc3Nvbmku
Y29tghJ3d3cuY2FydGVsbG9uaS5jb22CEnd3dy5jZW50cmFsaW5pLmNvbYIRd3d3
LmNpdHRhb2dnaS5jb22CEnd3dy5jb21wZW5zYXRpLmNvbYITd3d3LmNvbXBvbmli
aWxpLmNvbYISd3d3LmNvbmNvcmRhdGkuY29tghR3d3cuY29uc3VtYXppb25pLmNv
bYIOd3d3LmRhaWtlaS5jb22CEnd3dy5kaWZmdXNpb25pLmNvbYINd3d3LmVqYW5p
LmNvbYIOd3d3LmZlcnVzaC5jb22CFnd3dy5nYXJkZW5pbmd0b3VjaC5jb22CDXd3
dy5pZ2VtaS5jb22CFHd3dy5pbmRpdmlkdWFsa2kuY29tghN3d3cuaW50ZXN0YXRh
cmkuY29tghZ3d3cuaXNvbGFkZWlmYW1vc2kuY29tghN3d3cua2FzaWtmaXRpZ2ku
Y29tghF3d3cua2thdWZtaWNoLmNvbYIXd3d3Lmxpc29sYWRlaWZhbW9zaS5jb22C
FXd3dy5sb3R0aXp6YXppb25pLmNvbYIUd3d3Lmx1bmFyc2FiYmF0aC5jb22CEnd3
dy5tYWNjaGluYXJpLmNvbYIPd3d3Lm1hc2thbmkuY29tgh93d3cubWFzc2FnZ2lh
dHJpY2lvcmllbnRhbGkuY29tghJ3d3cubWVzc2FnZ2VyaS5jb22CEHd3dy5vYmJs
aWdoaS5jb22CE3d3dy5waWFudGFnaW9uaS5jb22CDnd3dy5waW5vbGkuY29tghB3
d3cucG9wb3dpY2guY29tghN3d3cucG9ydGF2YWxvcmkuY29tghF3d3cucG9ydGlj
YXRpLmNvbYIOd3d3LnB1Z2lsaS5jb22CFHd3dy5yaWNvcmRpYW1vY2kuY29tghR3
d3cucmlmdWdpYWxwaW5pLmNvbYIQd3d3LnNnYWJlbGxpLmNvbYINd3d3LnNvdGNo
LmNvbYIYd3d3LnRyYXNmZXJpcmVkb21pbmkuY29tghJ3d3cudHV0dG9zY2FmaS5j
b22CFHd3dy51dGlsaXp6YWJpbGkuY29tgg13d3cudXh1cmkuY29tghx3d3cudmVy
aWZpY2hlc3RydXR0dXJhbGkuY29tght3d3cudmVyaWZpY2hldmVudGVubmFsaS5j
b22CEXd3dy53aGl0bGF0Y2guY29tgg13d3cueWFsZWkuY29tggl5YWxlaS5jb20w
TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1
BIHyAPAAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXBnKEnD
AAAEAwBHMEUCIQD1zdExwyT8Iv46wsAREGq6VQSjm2TUymKNf2sDz0TrfgIgCbfK
/cPB6pjmxjeh347eQsrCDHNE+8LtrMoYohuVSbUAdgAHt1wb5X1o//Gwxh0jFce6
5ld8V5S3au68YToaadOiHAAAAXBnKEnQAAAEAwBHMEUCIA6yXhZbn7JQj3FkGlm4
Rb+TBm7ky/4XhYJkcF30AbwlAiEAzi5kHtN/T4WL6KY0OaYyeLP1SmUsuSRlYfiR
6Ta7TuswDQYJKoZIhvcNAQELBQADggEBAEeu3FqekZekzzX/Bjbkyvd+FvhrNVke
AP2sZuSDFGWme7Ld2R5bJ9lGitHwpdUozhvsozSHJGAE2jx3VE7rhDXA2+SJWq6w
8ErtZUN0sC+kyayBohVxGWY6UAeYpsgqTnFaQZAqIkui4f/Jtcq2Zz9cmO3buvfp
XDW+TODsqRB/onIHhFdkfvXef7FPh/3F5JmOut7PntM8fr4KoIHNzK+UvXkB9tAs
UEngXVVtTz3MeKO6CI5m/nG5+SD33ahzSAa5eGtJkbiEjMvUFfi5yPgvg8GfhfGk
kSI8xfGIA0UyIGm+m3UJtTw2okvNvDmCe7Bn7Sht/uAlSYYElFDRfNA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVdmqo8hzSMLRRyoyIbb
FJqfUHRfmfB5z3UcHljnDYCHOIXh/926bnjd6eteLTmz1Rd3lbPq7R8WL3R0tZkj
TFUTlha8Qw05byNqjBV18G7+3eegLSFdrZ069R2DGpypeZIl31mKeHN78hDhPFVc
3ZXotoMt2/ZXPjcUY7WCe5/EmtShdyCkh3VYp5h14ic6ekXLCfZ/Gr5k+IZCw5BY
ZoZo5CxxGn0AATKNh02VOrXZrhxLolcgEiaSEkOSKYJfkMDF0dyBCCGznqO1+Yty
CyyM56Ny5duMjnspGA3KhdTXnFnfcABx6HFhWCQLlbXw5n+uuQKpS7RORbhmY90K
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289354414179425934473112950028460736463879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 08:50:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 08:50:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.maskani.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22892232258017105103730400547206730780465422291913967206955574678484673171749013838693985500236611112576443315166135051117606863716364146933248815806416235179733867185876807461860895593145566960705131892537534353961418160707229855913049397548449294461077940408575696760791237141208145967996564471413457598665487175673856181814188430022023024151915701427718373277764688478824110975632943362046291916038669369231111409615000696532198884579612071501003788931030917021507241432094584998884229885492345688122175194105619786660151639900079355691387622571150454125997236116456993883007027217073551129052791234025342973577839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57c842ac4d0f601d4266774ac2af3313aef2efca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1758 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autorevoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avventori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aylesworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartelloni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cittaoggi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'componibili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concordati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumazioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daikei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diffusioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardeningtouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individualki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intestatari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isoladeifamosi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasikfitigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkaufmich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisoladeifamosi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottizzazioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunarsabbath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macchinari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maskani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massaggiatriciorientali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaggeri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obblighi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piantagioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popowich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portavalori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porticati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pugili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricordiamoci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rifugialpini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgabelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trasferiredomini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuttoscafi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilizzabili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxuri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifichestrutturali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verificheventennali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitlatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autorevoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avventori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aylesworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bossoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartelloni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cittaoggi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compensati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.componibili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concordati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumazioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daikei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diffusioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardeningtouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.individualki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intestatari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isoladeifamosi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasikfitigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kkaufmich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisoladeifamosi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lottizzazioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lunarsabbath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macchinari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maskani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massaggiatriciorientali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.messaggeri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obblighi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piantagioni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popowich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portavalori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porticati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pugili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricordiamoci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rifugialpini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgabelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trasferiredomini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuttoscafi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utilizzabili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uxuri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verifichestrutturali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verificheventennali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitlatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yalei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yalei.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170672849c30000040300473045022100f5cdd131c324fc22fe3ac2c011106aba5504a39b64d4ca628d7f6b03cf44eb7e022009b7cafdc3c1ea98e6c637a1df8ede42cac20c7344fbc2edacca18a21b9549b500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170672849d0000004030047304502200eb25e165b9fb2508f71641a59b845bf93066ee4cbfe17858264705df401bc25022100ce2e641ed37f4f858be8a63439a63278b3f54a652cb9246561f891e936bb4eeb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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