geographyschool.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ed:59:6d:8d:d9:cc:fa:94:87:20:be:3f:56:9a:3b:8f:24 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geographyschool.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:59:6d:8d:d9:cc:fa:94:87:20:be:3f:56:9a:3b:8f:24
Serial Number (int): 342102648884601296844933687514621145747236
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:3e:51:6a:2a:73:a0:79:31:e8:e7:7f:16:e0:db:e0:b7:fc:02:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:6f:b1:41:cd:ac:20:cf:b9:11:a1:fb:15:c4:d6:13:35:8a:5e:b9
Fingerprint (sha256): 91:6b:0b:f1:b8:db:23:20:21:d9:db:e4:1c:1f:62:0b:7a:ba:34:33:78:70:1f:dc:85:27:dd:88:f8:87:cb:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geographyschool.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geographyschool.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4217.com
*.akasharecords.net
*.alabwa.com
*.alborznews.net
*.anahit.com
*.aquiferstorage.com
*.astha.tv
*.bateto.com
*.bonga.com.vn
*.ch1st.cn
*.courseherro.com
*.dahui.net
*.desenvoutement.com
*.divietodisosta.com
*.geographyschool.com
*.guadagnareconunsito.com
*.healers.org
*.hodad.com
*.home-connect.co
*.i96xxnet.com
*.itler.com
*.jiraoncloud.com
*.jxpcreditcard.com
*.kioskonet.com
*.koening.com
*.l9qg7ti.shop
*.lastigi.com
*.md5lab.com
*.mediballs.com
*.medrel.com
*.mercimerci.com
*.minicardo.com
*.munajat.com
*.nojm.com
*.northshoreweddings.com
*.oscher.com
*.ourmall.shop
*.pallie.com
*.peavey.com.au
*.peretz.com
*.phandinhphung.com
*.pogge.com
*.pyflor.com
*.sandiegoparagliding.com
*.stoptext.com
*.strope.com
*.thepassinglane.com
*.turismosol.com
*.votrelien.com
*.youhistory.com
4217.com
akasharecords.net
alabwa.com
alborznews.net
anahit.com
aquiferstorage.com
astha.tv
bateto.com
bonga.com.vn
ch1st.cn
courseherro.com
dahui.net
desenvoutement.com
divietodisosta.com
geographyschool.com
guadagnareconunsito.com
healers.org
hodad.com
home-connect.co
i96xxnet.com
itler.com
jiraoncloud.com
jxpcreditcard.com
kioskonet.com
koening.com
l9qg7ti.shop
lastigi.com
md5lab.com
mediballs.com
medrel.com
mercimerci.com
minicardo.com
munajat.com
nojm.com
northshoreweddings.com
oscher.com
ourmall.shop
pallie.com
peavey.com.au
peretz.com
phandinhphung.com
pogge.com
pyflor.com
sandiegoparagliding.com
stoptext.com
strope.com
thepassinglane.com
turismosol.com
votrelien.com
youhistory.com

Other certificates including the domain name geographyschool.com

(limited to 100 certificates)
geographyschool.com
www.southfloridaexterminator.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
ditos.com
irefrigerator.com
geographyschool.com
fayettecountyrealestate.com
geographyschool.com
geographyschool.com
geographyschool.com

Certificate

The complete raw certificate details for geographyschool.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMWzCCC0OgAwIBAgISA+1ZbY3ZzPqUhyC+P1aaO48kMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEwMjUwNzA4MDJaFw0yMzAxMjMwNzA4MDFaMB4xHDAaBgNVBAMT
E2dlb2dyYXBoeXNjaG9vbC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDGuMP0Ii4zEpZcTlZljKpTHZFUU/PdZbmjTrZGHJEDIeIy9xRTcSs5n4YY
pdJ01NKncifhZbLFpjk/KirmlsKNgqb8BaNmf42bXYyZLlTPMfApi/tVDe5spXcq
bg56+HkJvX80Jp2Q+kYeR8P42nZaOES6dr/DZqMnnQ3kg+U/mhZV/EkEYX4nPSJc
ng6r0A1msiJhD97M7yH1H2Gq3Eh8qpSeLLWRd2kQt78NU4kaUAB5FpwNFAfkE0r8
voYHsPA+prbpSy8Z3fJqyy+PT5iOBptwfnG2IakPmPpwmOcQL0L98nwm/pcyEXlb
liEagXx1b3KEizAR1wz1U89JcMM57tJ9FzrnztNHqFcVkKQL/9RN0gs86V+K1JNK
TpKHzF65ODEOkQmkScMamHg5pWwvGL8AcJz/cOcGSlzth2OSU0eb64adhcqXZeRM
uujAKfkBzxnCYT1D1uqYMBnguiFIs/O0U7MbQcKwd1ZLkfH9FO0KTkEGv0ribG1v
/4anVbBbi4QWhaycTMtOwdLhhrG2E6fFrt2yirtFyAoAjG8Mjnijr3ZP2AvJwfKt
5Tww1OykiIo05B7JkR3wGdPOs2ma0axohAVzrJAsbngfpQR7mPBk7U1AY8xKY1NI
HRiJfvTHB0qdyTsdKljVV9iWDKUzJL8Mi0VBWJ+2cTd09grUIwIDAQABo4IIfTCC
CHkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQRPlFqKnOgeTHo538W4Nvgt/wCDTAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCBkkGA1UdEQSCBkAwggY8ggoqLjQyMTcu
Y29tghMqLmFrYXNoYXJlY29yZHMubmV0ggwqLmFsYWJ3YS5jb22CECouYWxib3J6
bmV3cy5uZXSCDCouYW5haGl0LmNvbYIUKi5hcXVpZmVyc3RvcmFnZS5jb22CCiou
YXN0aGEudHaCDCouYmF0ZXRvLmNvbYIOKi5ib25nYS5jb20udm6CCiouY2gxc3Qu
Y26CESouY291cnNlaGVycm8uY29tggsqLmRhaHVpLm5ldIIUKi5kZXNlbnZvdXRl
bWVudC5jb22CFCouZGl2aWV0b2Rpc29zdGEuY29tghUqLmdlb2dyYXBoeXNjaG9v
bC5jb22CGSouZ3VhZGFnbmFyZWNvbnVuc2l0by5jb22CDSouaGVhbGVycy5vcmeC
CyouaG9kYWQuY29tghEqLmhvbWUtY29ubmVjdC5jb4IOKi5pOTZ4eG5ldC5jb22C
CyouaXRsZXIuY29tghEqLmppcmFvbmNsb3VkLmNvbYITKi5qeHBjcmVkaXRjYXJk
LmNvbYIPKi5raW9za29uZXQuY29tgg0qLmtvZW5pbmcuY29tgg4qLmw5cWc3dGku
c2hvcIINKi5sYXN0aWdpLmNvbYIMKi5tZDVsYWIuY29tgg8qLm1lZGliYWxscy5j
b22CDCoubWVkcmVsLmNvbYIQKi5tZXJjaW1lcmNpLmNvbYIPKi5taW5pY2FyZG8u
Y29tgg0qLm11bmFqYXQuY29tggoqLm5vam0uY29tghgqLm5vcnRoc2hvcmV3ZWRk
aW5ncy5jb22CDCoub3NjaGVyLmNvbYIOKi5vdXJtYWxsLnNob3CCDCoucGFsbGll
LmNvbYIPKi5wZWF2ZXkuY29tLmF1ggwqLnBlcmV0ei5jb22CEyoucGhhbmRpbmhw
aHVuZy5jb22CCyoucG9nZ2UuY29tggwqLnB5Zmxvci5jb22CGSouc2FuZGllZ29w
YXJhZ2xpZGluZy5jb22CDiouc3RvcHRleHQuY29tggwqLnN0cm9wZS5jb22CFCou
dGhlcGFzc2luZ2xhbmUuY29tghAqLnR1cmlzbW9zb2wuY29tgg8qLnZvdHJlbGll
bi5jb22CECoueW91aGlzdG9yeS5jb22CCDQyMTcuY29tghFha2FzaGFyZWNvcmRz
Lm5ldIIKYWxhYndhLmNvbYIOYWxib3J6bmV3cy5uZXSCCmFuYWhpdC5jb22CEmFx
dWlmZXJzdG9yYWdlLmNvbYIIYXN0aGEudHaCCmJhdGV0by5jb22CDGJvbmdhLmNv
bS52boIIY2gxc3QuY26CD2NvdXJzZWhlcnJvLmNvbYIJZGFodWkubmV0ghJkZXNl
bnZvdXRlbWVudC5jb22CEmRpdmlldG9kaXNvc3RhLmNvbYITZ2VvZ3JhcGh5c2No
b29sLmNvbYIXZ3VhZGFnbmFyZWNvbnVuc2l0by5jb22CC2hlYWxlcnMub3Jngglo
b2RhZC5jb22CD2hvbWUtY29ubmVjdC5jb4IMaTk2eHhuZXQuY29tgglpdGxlci5j
b22CD2ppcmFvbmNsb3VkLmNvbYIRanhwY3JlZGl0Y2FyZC5jb22CDWtpb3Nrb25l
dC5jb22CC2tvZW5pbmcuY29tggxsOXFnN3RpLnNob3CCC2xhc3RpZ2kuY29tggpt
ZDVsYWIuY29tgg1tZWRpYmFsbHMuY29tggptZWRyZWwuY29tgg5tZXJjaW1lcmNp
LmNvbYINbWluaWNhcmRvLmNvbYILbXVuYWphdC5jb22CCG5vam0uY29tghZub3J0
aHNob3Jld2VkZGluZ3MuY29tggpvc2NoZXIuY29tggxvdXJtYWxsLnNob3CCCnBh
bGxpZS5jb22CDXBlYXZleS5jb20uYXWCCnBlcmV0ei5jb22CEXBoYW5kaW5ocGh1
bmcuY29tgglwb2dnZS5jb22CCnB5Zmxvci5jb22CF3NhbmRpZWdvcGFyYWdsaWRp
bmcuY29tggxzdG9wdGV4dC5jb22CCnN0cm9wZS5jb22CEnRoZXBhc3NpbmdsYW5l
LmNvbYIOdHVyaXNtb3NvbC5jb22CDXZvdHJlbGllbi5jb22CDnlvdWhpc3Rvcnku
Y29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIE
AgSB9wSB9ADyAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGE
Di8ndAAABAMASDBGAiEArS6MTswnp1SviwANf96FMnkm+G/cmD2ylU2jdm/fTuUC
IQC9+MdhrBY1moxl6NDQQqvH+G5EsXOaAdBH2TvhP3v/RAB3ALc++yTfnE26dfI5
xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhA4vJ3AAAAQDAEgwRgIhAPlzoa1h75PO
8b52gCPKhxi3u4KOWOQG6PyQLNLw3PlLAiEAguF45TU8BPSGnmt24b1oLWxakp+v
XZ+V7q07hWS/G8swDQYJKoZIhvcNAQELBQADggEBADYtfjYoduK807BYJmVTHYHB
vAXvNBW7Ew+RDuktIKVScpQH8mNtoS51sHwqYu3HGZiC1YUNhUl2TpT7BLOnYEbQ
KoFkrYQF2GIGfHD9t/C6n1QKHx/oP0Sx6RDz5XbBVLKAO+cH696mvmLQD0uJ2chK
hqgfYJkBVRLM5EGqxEZapSWaOIAnJ+W/RYd1QEF0eo72l5STI0fE5wWaY9WSeema
LMsVKsMiGsr35Ci5lyvsdd+bt9aRh7AHpTSfg0+8IsjLGXINIMHdturq1PaBPtdE
xpGNeBnvHMHBVhbxvSJZMemO8v793+inD3d7rn3RHU1iNiq7vhuPFvYePi5qMts=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxrjD9CIuMxKWXE5WZYyq
Ux2RVFPz3WW5o062RhyRAyHiMvcUU3ErOZ+GGKXSdNTSp3In4WWyxaY5Pyoq5pbC
jYKm/AWjZn+Nm12MmS5UzzHwKYv7VQ3ubKV3Km4Oevh5Cb1/NCadkPpGHkfD+Np2
WjhEuna/w2ajJ50N5IPlP5oWVfxJBGF+Jz0iXJ4Oq9ANZrIiYQ/ezO8h9R9hqtxI
fKqUniy1kXdpELe/DVOJGlAAeRacDRQH5BNK/L6GB7DwPqa26UsvGd3yassvj0+Y
jgabcH5xtiGpD5j6cJjnEC9C/fJ8Jv6XMhF5W5YhGoF8dW9yhIswEdcM9VPPSXDD
Oe7SfRc6587TR6hXFZCkC//UTdILPOlfitSTSk6Sh8xeuTgxDpEJpEnDGph4OaVs
Lxi/AHCc/3DnBkpc7YdjklNHm+uGnYXKl2XkTLrowCn5Ac8ZwmE9Q9bqmDAZ4Loh
SLPztFOzG0HCsHdWS5Hx/RTtCk5BBr9K4mxtb/+Gp1WwW4uEFoWsnEzLTsHS4Yax
thOnxa7dsoq7RcgKAIxvDI54o692T9gLycHyreU8MNTspIiKNOQeyZEd8BnTzrNp
mtGsaIQFc6yQLG54H6UEe5jwZO1NQGPMSmNTSB0YiX70xwdKnck7HSpY1VfYlgyl
MyS/DItFQViftnE3dPYK1CMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342102648884601296844933687514621145747236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-25 07:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 07:08:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geographyschool.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810713967840296314613284078911720180897452821179775812142313763310084955608264409907126926840734944472345344959756048565146915309534711135818292925359611153949444566380357195855615371735051635592628163403790891508169098778106228105933011438105739669126078874528879454296626156742942329857304851960649111633110567578774451421911464011411487248290848418409157966886132255840885298308791715586365802721786123312897996452025766945192752246989850313999378106112933328519953478220547318045256620407635184636375549085411580290492462968372889970278506190661556125525593840378954727665785106782473616320323978638159333274522370442331947838064440899172013890763521205346632227784036387915577772613238870771111165634752139724586286749305163563748525418136130424768871054654400070120212359192075903681868235778032040226733501039665119698531958787912676587674031826428676311246476443147768404480159613968699375592358777080764052378006557203853263149392767664740357743585146209569983027100435080499197476696300745885870077498966915700444952796799955987307045812799026647604678396356561249966294482045198995857706721757875579638965192594073754442524543756470426427067158357216985075715032679808742345230092269500149150160325274146856831429886268451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							113e516a2a73a07931e8e77f16e0dbe0b7fc020d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4217.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akasharecords.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alabwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alborznews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anahit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquiferstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astha.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bateto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonga.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ch1st.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courseherro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dahui.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desenvoutement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divietodisosta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geographyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guadagnareconunsito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hodad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.home-connect.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i96xxnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiraoncloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jxpcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kioskonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.l9qg7ti.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.md5lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercimerci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minicardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.munajat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nojm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northshoreweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oscher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourmall.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pallie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peavey.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peretz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phandinhphung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyflor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandiegoparagliding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoptext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepassinglane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turismosol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.votrelien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4217.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akasharecords.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alborznews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anahit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquiferstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astha.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bateto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonga.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch1st.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courseherro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahui.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desenvoutement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divietodisosta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geographyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guadagnareconunsito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hodad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home-connect.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i96xxnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiraoncloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jxpcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kioskonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l9qg7ti.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md5lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercimerci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minicardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munajat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nojm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshoreweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourmall.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pallie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peavey.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peretz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phandinhphung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pogge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyflor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegoparagliding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoptext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepassinglane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turismosol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votrelien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youhistory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001840e2f27740000040300483046022100ad2e8c4ecc27a754af8b000d7fde85327926f86fdc983db2954da3766fdf4ee5022100bdf8c761ac16359a8c65e8d0d042abc7f86e44b1739a01d047d93be13f7bff44007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001840e2f27700000040300483046022100f973a1ad61ef93cef1be768023ca8718b7bb828e58e406e8fc902cd2f0dcf94b02210082e178e5353c04f4869e6b76e1bd682d6c5a929faf5d9f95eead3b8564bf1bcb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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