yai.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:9d:63:c7:17:43:5a:d0:5d:08:d9:f8:d1:4f:f8:0c:00 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:9d:63:c7:17:43:5a:d0:5d:08:d9:f8:d1:4f:f8:0c:00
Serial Number (int): 307143901833456324931405721147581650177024
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:52:3d:37:21:8b:89:d1:44:0a:c4:eb:12:0b:2a:3c:6c:03:f1:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:bb:84:83:b5:a2:44:45:ef:2f:12:dc:a6:a8:49:13:38:36:22:89
Fingerprint (sha256): 96:87:0a:56:91:c7:1f:b0:a5:1b:14:b2:a3:25:7e:61:0a:4f:5b:a8:88:d3:62:65:5e:fd:91:97:af:0b:10:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate yai.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yai.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1carpet.com
*.achara.com
*.airuan.com
*.apertivo.com
*.arnall.com
*.arnoni.com
*.avtomat.com
*.biopets.com
*.bitdomain.com
*.boutland.com
*.butterbees.com
*.carabali.com
*.carzoneauto.com
*.cercadonna.com
*.chiangsaen.com
*.cwlw.com
*.decoracoes.com
*.gadkaris.com
*.gtdrivers.com
*.hannum.com
*.incendio.net
*.jzara.com
*.kawaguchiko.com
*.kitchenxchange.com
*.kliniks.com
*.laotse.com
*.losnutrientes.com
*.mebelli.com
*.mofacademy.com
*.moneyballs.com
*.myrtice.com
*.nmk.me
*.pamwe.com
*.petandgo.com
*.pinfo.com
*.polimen.com
*.primeroseguro.com
*.rishworth.com
*.salesandmarketingcareers.com
*.schoofs.com
*.sevdalinka.com
*.shopkitchenworld.com
*.teefor1.com
*.thelancasters.com
*.thuckalay.com
*.vaakai.com
*.wittstock.com
*.yai.com
*.ycare.com
*.yk.org
1carpet.com
achara.com
airuan.com
apertivo.com
arnall.com
arnoni.com
avtomat.com
biopets.com
bitdomain.com
boutland.com
butterbees.com
carabali.com
carzoneauto.com
cercadonna.com
chiangsaen.com
cwlw.com
decoracoes.com
gadkaris.com
gtdrivers.com
hannum.com
incendio.net
jzara.com
kawaguchiko.com
kitchenxchange.com
kliniks.com
laotse.com
losnutrientes.com
mebelli.com
mofacademy.com
moneyballs.com
myrtice.com
nmk.me
pamwe.com
petandgo.com
pinfo.com
polimen.com
primeroseguro.com
rishworth.com
salesandmarketingcareers.com
schoofs.com
sevdalinka.com
shopkitchenworld.com
teefor1.com
thelancasters.com
thuckalay.com
vaakai.com
wittstock.com
yai.com
ycare.com
yk.org

Other certificates including the domain name yai.com

(limited to 100 certificates)
mobirowser.com
adelgo.com
yai.com

Certificate

The complete raw certificate details for yai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMPDCCCySgAwIBAgISA4adY8cXQ1rQXQjZ+NFP+AwAMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDkwNTU3MjJaFw0y
MDAxMDcwNTU3MjJaMBIxEDAOBgNVBAMTB3lhaS5jb20wggIiMA0GCSqGSIb3DQEB
AQUAA4ICDwAwggIKAoICAQDwCO4o22kJce5Pw3DjXAjKnnejyO+KCvyGpGRt5QC8
M1fbKY0bgK7oaM4Llm1JDYF/slN1dMCTOr0ML0rjvxg5+YxP407fE7PeeImEvztb
9ICx1l89MIb8V6UWaLhaR6t1bwLrCq+5PAUWprijx+2dl4FtlEpwCPq+o/8tj2mP
XPMS/3DCib2KMokNf7SSo7kqHGBpFoJV7L0IWzKfhDvh8XeJ+huchyQADpvxYlPK
JWjXlRbx6l6cmyna80MVnZ2ENptx9GJLR/1XfnV8X11ezw8flI9KE/YrhzKc/+Po
MXixdNuL/t0MtG1301Qs1I/pu6bX3LOm6KrAWfMd4AGAb04YzTqJOq7Jdf2qslyY
AcDt7vkVVPc3lhXSan4Y+DSwAdYjMMlsOPplF7Lo9Z6P1bfHGKpNt3lJ6D1xgSdM
MC5KqKyX8AtptMfQ2Cu0KsmQTme98e0aEmvAwCDstuJFBXML0Go871lWj9iZG722
YLUuZ0xxSdYJ+A8g29hrdBggLWRlTZJWklhjSrCEeXsBaTYDTPR/3hFAsOe1yi9m
SjWQmNwtV9ndozb1I5oTAORHP17cpXKn0I0fbryx59zoi/A7j3rqwugvJk/zv0XD
Mz0XkIJdkDBGkdHYYhXUwtdvEMorgXa9WveUHS6qhRk926+bh5abGRPdt46WG2P/
CwIDAQABo4IIUjCCCE4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ3Uj03IYuJ0UQK
xOsSCyo8bAPxSzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMIIGBQYDVR0RBIIF/DCCBfiCDSouMWNhcnBldC5jb22CDCou
YWNoYXJhLmNvbYIMKi5haXJ1YW4uY29tgg4qLmFwZXJ0aXZvLmNvbYIMKi5hcm5h
bGwuY29tggwqLmFybm9uaS5jb22CDSouYXZ0b21hdC5jb22CDSouYmlvcGV0cy5j
b22CDyouYml0ZG9tYWluLmNvbYIOKi5ib3V0bGFuZC5jb22CECouYnV0dGVyYmVl
cy5jb22CDiouY2FyYWJhbGkuY29tghEqLmNhcnpvbmVhdXRvLmNvbYIQKi5jZXJj
YWRvbm5hLmNvbYIQKi5jaGlhbmdzYWVuLmNvbYIKKi5jd2x3LmNvbYIQKi5kZWNv
cmFjb2VzLmNvbYIOKi5nYWRrYXJpcy5jb22CDyouZ3Rkcml2ZXJzLmNvbYIMKi5o
YW5udW0uY29tgg4qLmluY2VuZGlvLm5ldIILKi5qemFyYS5jb22CESoua2F3YWd1
Y2hpa28uY29tghQqLmtpdGNoZW54Y2hhbmdlLmNvbYINKi5rbGluaWtzLmNvbYIM
Ki5sYW90c2UuY29tghMqLmxvc251dHJpZW50ZXMuY29tgg0qLm1lYmVsbGkuY29t
ghAqLm1vZmFjYWRlbXkuY29tghAqLm1vbmV5YmFsbHMuY29tgg0qLm15cnRpY2Uu
Y29tgggqLm5tay5tZYILKi5wYW13ZS5jb22CDioucGV0YW5kZ28uY29tggsqLnBp
bmZvLmNvbYINKi5wb2xpbWVuLmNvbYITKi5wcmltZXJvc2VndXJvLmNvbYIPKi5y
aXNod29ydGguY29tgh4qLnNhbGVzYW5kbWFya2V0aW5nY2FyZWVycy5jb22CDSou
c2Nob29mcy5jb22CECouc2V2ZGFsaW5rYS5jb22CFiouc2hvcGtpdGNoZW53b3Js
ZC5jb22CDSoudGVlZm9yMS5jb22CEyoudGhlbGFuY2FzdGVycy5jb22CDyoudGh1
Y2thbGF5LmNvbYIMKi52YWFrYWkuY29tgg8qLndpdHRzdG9jay5jb22CCSoueWFp
LmNvbYILKi55Y2FyZS5jb22CCCoueWsub3JnggsxY2FycGV0LmNvbYIKYWNoYXJh
LmNvbYIKYWlydWFuLmNvbYIMYXBlcnRpdm8uY29tggphcm5hbGwuY29tggphcm5v
bmkuY29tggthdnRvbWF0LmNvbYILYmlvcGV0cy5jb22CDWJpdGRvbWFpbi5jb22C
DGJvdXRsYW5kLmNvbYIOYnV0dGVyYmVlcy5jb22CDGNhcmFiYWxpLmNvbYIPY2Fy
em9uZWF1dG8uY29tgg5jZXJjYWRvbm5hLmNvbYIOY2hpYW5nc2Flbi5jb22CCGN3
bHcuY29tgg5kZWNvcmFjb2VzLmNvbYIMZ2Fka2FyaXMuY29tgg1ndGRyaXZlcnMu
Y29tggpoYW5udW0uY29tggxpbmNlbmRpby5uZXSCCWp6YXJhLmNvbYIPa2F3YWd1
Y2hpa28uY29tghJraXRjaGVueGNoYW5nZS5jb22CC2tsaW5pa3MuY29tggpsYW90
c2UuY29tghFsb3NudXRyaWVudGVzLmNvbYILbWViZWxsaS5jb22CDm1vZmFjYWRl
bXkuY29tgg5tb25leWJhbGxzLmNvbYILbXlydGljZS5jb22CBm5tay5tZYIJcGFt
d2UuY29tggxwZXRhbmRnby5jb22CCXBpbmZvLmNvbYILcG9saW1lbi5jb22CEXBy
aW1lcm9zZWd1cm8uY29tgg1yaXNod29ydGguY29tghxzYWxlc2FuZG1hcmtldGlu
Z2NhcmVlcnMuY29tggtzY2hvb2ZzLmNvbYIOc2V2ZGFsaW5rYS5jb22CFHNob3Br
aXRjaGVud29ybGQuY29tggt0ZWVmb3IxLmNvbYIRdGhlbGFuY2FzdGVycy5jb22C
DXRodWNrYWxheS5jb22CCnZhYWthaS5jb22CDXdpdHRzdG9jay5jb22CB3lhaS5j
b22CCXljYXJlLmNvbYIGeWsub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG
AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAsh4FzIuizYogTodm+Su5iiUg
Z2va+nDnsklTLe+LkF4AAAFtr07XhgAABAMARzBFAiBg25aOSHTORF6zng5lbYWk
Js9JyliQfgxhWagIfdzzgAIhAMKajbS1FvdoJM2sc6N6+pcYlvS01AS9BYNCZ4Qt
+1M3AHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFtr07Y/AAA
BAMASDBGAiEA2JfCyezsDrpXGlrO8F8vdO1a6znWjcu8vJmfOyd2p7ECIQDchtJP
5g2+/tltqmdvDQ5SSgvD2KPAMger2Xs9mbg+/jANBgkqhkiG9w0BAQsFAAOCAQEA
dcZqZJ0vI/fspm3g/ABrKrY8VSahILED8ANRe/2sPPU2gJsF/5aN1Z5w1vHjuR6l
d308vr3Y1fROZS6v1t0Hty3T/NVDRnqZBHmjeySNQqfYpedVSZ3S+JdVnw3t72w+
VY7C2tsIZzB9ui+GDTf1eMrOtdf41XR+lbdAcPjG/UR20M3ik036S6NhXWzORP7v
nLPM3HTQamVK1oFr4RwUt2pX+TZS/xPDewrKsAzseRdgkW+MOBVZP4YfN+GwCX7Q
lt4FeDv1frx+z1LBUetfNt4FKmbaAY3S3cB0z4+y7YKpI4R/PdFnmxDb/IUiB4jy
1uz4p6Hcn/qkKCgEvgj7Xg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307143901833456324931405721147581650177024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 05:57:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 05:57:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 979256890738927533226143614870346950249641589817543719700671633208689193697747180089293660439427968264745742874659769715044444024354024622827426374664177656789873937972197589065724554402594295045574095274956828261223963503024270843626611120223388761394885099634430923112412833472975390669501005449257887688732877963238072673640554986768649391655290591481457967289722028354164984129870772735561513075490919248123819006318281765535574516570269996802413369509679164811922922576736058258583188221378213980376799599061405720816336742157710334071832936660758792558144977038463851364833111277767610433338665781921122657404590428558748689895559741237858163505473756580259932311901437214479675678981649819374766917625713618737487734589599105068915415833226137249182939685072988535782233000795868701137339506227770274315122066105062436596882031105621988682698265007564064075047106437894802190275769338785381706204413255396136934376779550260076876518852969934963182602261928464394238687048184633463429344828586406864679538839043176506903910556770940249573655391685016675730873646333311361651183894519298625316586270718493118044885807786623408483646194528853509763385470148528056357225349089578330000952444271130767018086583009499394543842492171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37523d37218b89d1440ac4eb120b2a3c6c03f14b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1532 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1carpet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apertivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arnall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arnoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avtomat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biopets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boutland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butterbees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carabali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carzoneauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cercadonna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiangsaen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwlw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decoracoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadkaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtdrivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hannum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.incendio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jzara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kawaguchiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchenxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kliniks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laotse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losnutrientes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mebelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mofacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneyballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrtice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pamwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petandgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polimen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primeroseguro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rishworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salesandmarketingcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoofs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sevdalinka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopkitchenworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teefor1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelancasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thuckalay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaakai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wittstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1carpet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apertivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtomat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biopets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butterbees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carabali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carzoneauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercadonna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiangsaen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwlw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoracoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadkaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtdrivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incendio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jzara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawaguchiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kliniks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laotse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losnutrientes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mebelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mofacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrtice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petandgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polimen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeroseguro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rishworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesandmarketingcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoofs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevdalinka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopkitchenworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teefor1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelancasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thuckalay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaakai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wittstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yk.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016daf4ed7860000040300473045022060db968e4874ce445eb39e0e656d85a426cf49ca58907e0c6159a8087ddcf380022100c29a8db4b516f76824cdac73a37afa971896f4b4d404bd05834267842dfb53370077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016daf4ed8fc0000040300483046022100d897c2c9ecec0eba571a5acef05f2f74ed5aeb39d68dcbbcbc999f3b2776a7b1022100dc86d24fe60dbefed96daa676f0d0e524a0bc3d8a3c03207abd97b3d99b83efe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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