mineearth.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7e:71:be:a2:69:df:54:57:34:7e:ad:56:2b:7e:5c:31:23 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mineearth.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:71:be:a2:69:df:54:57:34:7e:ad:56:2b:7e:5c:31:23
Serial Number (int): 304363628621384233421486064490324720103715
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:37:00:a9:a7:ac:39:2d:2e:e9:f6:bc:8c:e7:4f:7a:8d:07:a9:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:08:6f:1c:a3:71:34:7b:49:28:72:88:1b:08:d3:18:3f:7a:28:53
Fingerprint (sha256): 97:a5:cd:03:a3:70:84:bb:13:38:8f:be:ad:0c:da:73:82:1b:d5:96:f8:d8:89:a0:7a:c4:7c:84:8a:e7:41:55

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mineearth.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mineearth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aflfootballtipping.com
africaneconomicoutlook.com
arcosul.com
artecohome.com
bernuydrivingschool.com
bigdataskill.com
bigdatatutorial.com
buffaloregenerativemedicine.com
calciogol.com
cartaricaricabile.com
chilled-rackmount-case.com
contratti.com
davisstorage.com
diamond-solitaire.com
digitalcyberdefense.com
donorbuck.com
ercoli.com
faiaffari.com
finditbyme.com
flaem.com
huntsvillesportsmedicine.com
jogosdenatal.com
juezhi.com
magpiemagazine.com
massachusettsregenerativemedicine.com
maybejustnothing.com
mineearth.com
my-mortgage.com
mywfl.com
odoshi.com
plastimedical.com
renaissancemortgage.com
rotomold-case.com
salamh.com
salemregenerativemedicine.com
samherji.com
scarpeneonati.com
scarpetteneonati.com
shoesmesh.com
slingshotcafe.com
stemcellsknoxville.com
thepariscafe.com
turboprestiti.com
vacanzeecologiche.com
vuonxinh.com
washingtonregenerativemedicine.com
whistlindixie.com
whitenoisethemusical.com
www.aflfootballtipping.com
www.africaneconomicoutlook.com
www.arcosul.com
www.artecohome.com
www.bernuydrivingschool.com
www.bigdataskill.com
www.bigdatatutorial.com
www.buffaloregenerativemedicine.com
www.calciogol.com
www.cartaricaricabile.com
www.chilled-rackmount-case.com
www.contratti.com
www.davisstorage.com
www.diamond-solitaire.com
www.digitalcyberdefense.com
www.donorbuck.com
www.ercoli.com
www.faiaffari.com
www.finditbyme.com
www.flaem.com
www.huntsvillesportsmedicine.com
www.jogosdenatal.com
www.juezhi.com
www.magpiemagazine.com
www.massachusettsregenerativemedicine.com
www.maybejustnothing.com
www.mineearth.com
www.my-mortgage.com
www.mywfl.com
www.odoshi.com
www.plastimedical.com
www.renaissancemortgage.com
www.rotomold-case.com
www.salamh.com
www.salemregenerativemedicine.com
www.samherji.com
www.scarpeneonati.com
www.scarpetteneonati.com
www.shoesmesh.com
www.slingshotcafe.com
www.stemcellsknoxville.com
www.thepariscafe.com
www.turboprestiti.com
www.vacanzeecologiche.com
www.vuonxinh.com
www.washingtonregenerativemedicine.com
www.whistlindixie.com
www.whitenoisethemusical.com
www.yaral.com
www.zatai.com
yaral.com
zatai.com

Other certificates including the domain name mineearth.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mineearth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINxDCCDKygAwIBAgISA35xvqJp31RXNH6tVit+XDEjMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjIxMDAzNTJaFw0y
MDA1MjIxMDAzNTJaMBgxFjAUBgNVBAMTDW1pbmVlYXJ0aC5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhNVhIzKhkrmWiKA/crOLB9azJOsbRG+2
AbN9De40VVT9MZYqo/+oH0OKuM+8JjYio1GupXQFuTfIwDnib4Oon59j41qCV3aO
GJa4+4vluuxQ+ITkj8wFpnupP/eXaVRcUXckj6NR01Nl/jOCPJi22oNf8MYk29xs
eGKvcKAgimvXOpOUDUj/ysuSX6vMCxYvLcg8LTZw5SplR4sPZXvsrf64RksVpZHt
7OdXy0U3TUBLgVvoBu4GYgqA4RWCaa8Yr5G/aES1IOXVFaAqm8bLJ+iuea6YTYYW
lo7Ns2xKhGZ5TCaQ4IDkceFRc4waOcQuQbwYRchVvFjeixxB3jExAgMBAAGjggrU
MIIK0DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAY3AKmnrDktLun2vIznT3qNB6lB
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wggiJBgNVHREEggiAMIIIfIIWYWZsZm9vdGJhbGx0aXBwaW5nLmNvbYIaYWZy
aWNhbmVjb25vbWljb3V0bG9vay5jb22CC2FyY29zdWwuY29tgg5hcnRlY29ob21l
LmNvbYIXYmVybnV5ZHJpdmluZ3NjaG9vbC5jb22CEGJpZ2RhdGFza2lsbC5jb22C
E2JpZ2RhdGF0dXRvcmlhbC5jb22CH2J1ZmZhbG9yZWdlbmVyYXRpdmVtZWRpY2lu
ZS5jb22CDWNhbGNpb2dvbC5jb22CFWNhcnRhcmljYXJpY2FiaWxlLmNvbYIaY2hp
bGxlZC1yYWNrbW91bnQtY2FzZS5jb22CDWNvbnRyYXR0aS5jb22CEGRhdmlzc3Rv
cmFnZS5jb22CFWRpYW1vbmQtc29saXRhaXJlLmNvbYIXZGlnaXRhbGN5YmVyZGVm
ZW5zZS5jb22CDWRvbm9yYnVjay5jb22CCmVyY29saS5jb22CDWZhaWFmZmFyaS5j
b22CDmZpbmRpdGJ5bWUuY29tgglmbGFlbS5jb22CHGh1bnRzdmlsbGVzcG9ydHNt
ZWRpY2luZS5jb22CEGpvZ29zZGVuYXRhbC5jb22CCmp1ZXpoaS5jb22CEm1hZ3Bp
ZW1hZ2F6aW5lLmNvbYIlbWFzc2FjaHVzZXR0c3JlZ2VuZXJhdGl2ZW1lZGljaW5l
LmNvbYIUbWF5YmVqdXN0bm90aGluZy5jb22CDW1pbmVlYXJ0aC5jb22CD215LW1v
cnRnYWdlLmNvbYIJbXl3ZmwuY29tggpvZG9zaGkuY29tghFwbGFzdGltZWRpY2Fs
LmNvbYIXcmVuYWlzc2FuY2Vtb3J0Z2FnZS5jb22CEXJvdG9tb2xkLWNhc2UuY29t
ggpzYWxhbWguY29tgh1zYWxlbXJlZ2VuZXJhdGl2ZW1lZGljaW5lLmNvbYIMc2Ft
aGVyamkuY29tghFzY2FycGVuZW9uYXRpLmNvbYIUc2NhcnBldHRlbmVvbmF0aS5j
b22CDXNob2VzbWVzaC5jb22CEXNsaW5nc2hvdGNhZmUuY29tghZzdGVtY2VsbHNr
bm94dmlsbGUuY29tghB0aGVwYXJpc2NhZmUuY29tghF0dXJib3ByZXN0aXRpLmNv
bYIVdmFjYW56ZWVjb2xvZ2ljaGUuY29tggx2dW9ueGluaC5jb22CIndhc2hpbmd0
b25yZWdlbmVyYXRpdmVtZWRpY2luZS5jb22CEXdoaXN0bGluZGl4aWUuY29tghh3
aGl0ZW5vaXNldGhlbXVzaWNhbC5jb22CGnd3dy5hZmxmb290YmFsbHRpcHBpbmcu
Y29tgh53d3cuYWZyaWNhbmVjb25vbWljb3V0bG9vay5jb22CD3d3dy5hcmNvc3Vs
LmNvbYISd3d3LmFydGVjb2hvbWUuY29tght3d3cuYmVybnV5ZHJpdmluZ3NjaG9v
bC5jb22CFHd3dy5iaWdkYXRhc2tpbGwuY29tghd3d3cuYmlnZGF0YXR1dG9yaWFs
LmNvbYIjd3d3LmJ1ZmZhbG9yZWdlbmVyYXRpdmVtZWRpY2luZS5jb22CEXd3dy5j
YWxjaW9nb2wuY29tghl3d3cuY2FydGFyaWNhcmljYWJpbGUuY29tgh53d3cuY2hp
bGxlZC1yYWNrbW91bnQtY2FzZS5jb22CEXd3dy5jb250cmF0dGkuY29tghR3d3cu
ZGF2aXNzdG9yYWdlLmNvbYIZd3d3LmRpYW1vbmQtc29saXRhaXJlLmNvbYIbd3d3
LmRpZ2l0YWxjeWJlcmRlZmVuc2UuY29tghF3d3cuZG9ub3JidWNrLmNvbYIOd3d3
LmVyY29saS5jb22CEXd3dy5mYWlhZmZhcmkuY29tghJ3d3cuZmluZGl0YnltZS5j
b22CDXd3dy5mbGFlbS5jb22CIHd3dy5odW50c3ZpbGxlc3BvcnRzbWVkaWNpbmUu
Y29tghR3d3cuam9nb3NkZW5hdGFsLmNvbYIOd3d3Lmp1ZXpoaS5jb22CFnd3dy5t
YWdwaWVtYWdhemluZS5jb22CKXd3dy5tYXNzYWNodXNldHRzcmVnZW5lcmF0aXZl
bWVkaWNpbmUuY29tghh3d3cubWF5YmVqdXN0bm90aGluZy5jb22CEXd3dy5taW5l
ZWFydGguY29tghN3d3cubXktbW9ydGdhZ2UuY29tgg13d3cubXl3ZmwuY29tgg53
d3cub2Rvc2hpLmNvbYIVd3d3LnBsYXN0aW1lZGljYWwuY29tght3d3cucmVuYWlz
c2FuY2Vtb3J0Z2FnZS5jb22CFXd3dy5yb3RvbW9sZC1jYXNlLmNvbYIOd3d3LnNh
bGFtaC5jb22CIXd3dy5zYWxlbXJlZ2VuZXJhdGl2ZW1lZGljaW5lLmNvbYIQd3d3
LnNhbWhlcmppLmNvbYIVd3d3LnNjYXJwZW5lb25hdGkuY29tghh3d3cuc2NhcnBl
dHRlbmVvbmF0aS5jb22CEXd3dy5zaG9lc21lc2guY29tghV3d3cuc2xpbmdzaG90
Y2FmZS5jb22CGnd3dy5zdGVtY2VsbHNrbm94dmlsbGUuY29tghR3d3cudGhlcGFy
aXNjYWZlLmNvbYIVd3d3LnR1cmJvcHJlc3RpdGkuY29tghl3d3cudmFjYW56ZWVj
b2xvZ2ljaGUuY29tghB3d3cudnVvbnhpbmguY29tgiZ3d3cud2FzaGluZ3RvbnJl
Z2VuZXJhdGl2ZW1lZGljaW5lLmNvbYIVd3d3LndoaXN0bGluZGl4aWUuY29tghx3
d3cud2hpdGVub2lzZXRoZW11c2ljYWwuY29tgg13d3cueWFyYWwuY29tgg13d3cu
emF0YWkuY29tggl5YXJhbC5jb22CCXphdGFpLmNvbTBMBgNVHSAERTBDMAgGBmeB
DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ALIeBcyLos2K
IE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcGyRY1kAAAQDAEYwRAIgFqGuq4i0
7dhSddMliO321p1Wr5Oo+zcYXtIqt8K+Z3oCIHBdutsylrfhInqtflgzvXWDbXH1
dnjbUrS9PZTSpyUxAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMA
AAFwbJFjtwAABAMARzBFAiAqip4Boqg5ZUOTuKT3D7hgqhaR1Jd1e69NC5OLtXbf
IQIhAPM5ETT7u743E2AT5AiZHi0qwppDbkd65b9Ojs1BDbQFMA0GCSqGSIb3DQEB
CwUAA4IBAQAnFsokswowAkkNk/iY6ZMYvWjZirzz6ia4mYsLF8WUk3GIILzSCySz
gWj8Y6M9eMzJ5CKiu/rwbH47B20MyI2YX/BV6FxyaTyfI+xW3CDUZLBTIwea5X8f
eradw4rikungh/Yyuz42jOyYpsU71i9XnIGuBIe92nifOB52BeWyHFQ3fIxpZRt2
hh/11KnY4zDiEHOCuGt+obsPrevei9Y+mGLzXrgHlex7AZbcAZhJVf2IIJ6Hxv62
/rwMFhv7XkTs2mBSZkD5RV4+sQDOLWaYc3yLNDn2iZecizNzQpFtefyYhz95B4IU
tacc0qZZt5ZHOR7iiOf4rivJ/Z1hH6/P
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YTVYSMyoZK5loigP3Kz
iwfWsyTrG0RvtgGzfQ3uNFVU/TGWKqP/qB9DirjPvCY2IqNRrqV0Bbk3yMA54m+D
qJ+fY+Nagld2jhiWuPuL5brsUPiE5I/MBaZ7qT/3l2lUXFF3JI+jUdNTZf4zgjyY
ttqDX/DGJNvcbHhir3CgIIpr1zqTlA1I/8rLkl+rzAsWLy3IPC02cOUqZUeLD2V7
7K3+uEZLFaWR7eznV8tFN01AS4Fb6AbuBmIKgOEVgmmvGK+Rv2hEtSDl1RWgKpvG
yyfornmumE2GFpaOzbNsSoRmeUwmkOCA5HHhUXOMGjnELkG8GEXIVbxY3oscQd4x
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304363628621384233421486064490324720103715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 10:03:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 10:03:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mineearth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27459214824434236737988369611169083254239562500939302470085288202576447711428396533183972916568067352712022161824917008103672706417734958720034138712279008717479990698232612470892664970086470324770971665929872839886934270635768927852194340500898826680375876143978028717062262134184982749361348828823056713410413365180309680471563220669563419735930861414527152613792666889095990297029420461887825746160517898294688144708168541253459192167315824179671287986495611846087131930927815047096453161945970002914314324730132178489203656624341276604849431872064384875730423189036821379990550434163878384934412627564131589697841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							063700a9a7ac392d2ee9f6bc8ce74f7a8d07a941
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflfootballtipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africaneconomicoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcosul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artecohome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernuydrivingschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigdataskill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigdatatutorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffaloregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calciogol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartaricaricabile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilled-rackmount-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contratti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davisstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamond-solitaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcyberdefense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donorbuck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ercoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faiaffari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finditbyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsvillesportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jogosdenatal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juezhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpiemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massachusettsregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maybejustnothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odoshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastimedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaissancemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotomold-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salamh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salemregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samherji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarpeneonati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarpetteneonati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoesmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slingshotcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsknoxville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepariscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turboprestiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacanzeecologiche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuonxinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whistlindixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitenoisethemusical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aflfootballtipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africaneconomicoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcosul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artecohome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernuydrivingschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigdataskill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigdatatutorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buffaloregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calciogol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartaricaricabile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chilled-rackmount-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davisstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamond-solitaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalcyberdefense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donorbuck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ercoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faiaffari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finditbyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntsvillesportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jogosdenatal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juezhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magpiemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massachusettsregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maybejustnothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odoshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plastimedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renaissancemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotomold-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salamh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salemregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samherji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scarpeneonati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scarpetteneonati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoesmesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slingshotcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsknoxville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thepariscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turboprestiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacanzeecologiche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vuonxinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washingtonregenerativemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whistlindixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitenoisethemusical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yaral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zatai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zatai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706c9163590000040300463044022016a1aeab88b4edd85275d32588edf6d69d56af93a8fb37185ed22ab7c2be677a0220705dbadb3296b7e1227aad7e5833bd75836d71f57678db52b4bd3d94d2a725310076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001706c9163b7000004030047304502202a8a9e01a2a839654393b8a4f70fb860aa1691d497757baf4d0b938bb576df21022100f3391134fbbbbe37136013e408991e2d2ac29a436e477ae5bf4e8ecd410db405
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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