www.saotomeenergy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:9f:a3:f2:54:ec:2b:47:58:d9:73:8c:b1:04:bc:22:a5 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.saotomeenergy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:9f:a3:f2:54:ec:2b:47:58:d9:73:8c:b1:04:bc:22:a5
Serial Number (int): 312251128977289694314567201411235470647973
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:70:78:e9:31:eb:52:63:36:71:a1:78:26:f5:66:90:bc:88:ea:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:4f:e5:9d:83:f4:8c:e6:87:87:ad:75:f6:42:ff:d1:8b:56:0d:a4
Fingerprint (sha256): 9a:62:cf:da:04:8d:26:64:da:a9:87:93:42:7a:8c:74:90:53:3b:a8:b9:7f:4c:30:65:2e:48:ba:7f:f9:15:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.saotomeenergy.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.saotomeenergy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3poste.com
abacooffshore.com
adelaidepersonal.com
b-date.com
budapestlawyer.org
campinasrealestate.com
cordobadetective.com
cuiabaenergy.com
dubaipenthouse.net
easyplaylist.org
energypowerhouse.net
forestrylive.com
greenparkpenthouse.net
hamahenergy.com
hannoverenergy.com
hochiminhcityrealestate.com
huainanenergy.com
indiapublictv.com
investmentbankassets.com
kawasakienergy.com
luandaenergy.com
manilaairshow.com
manilamarinelaw.com
mayfairpenthouse.net
menloparkdrive.com
mozambiquelaw.com
newyorkpenthouse.net
oilarchive.com
onlineprivatebanking.com
outdoordallas.com
palermoproperty.com
piccadillypenthouse.net
propagandacorp.com
quezoncityrealestate.com
reduceyourenergycosts.com
roadshowlive.com
saotomeenergy.com
sky-penthouse.net
submarinetreasures.com
suvacoin.com
telavivstock.com
trade-cafe.net
vanuatulifestyle.com
winningbestpicture.com
www.3poste.com
www.abacooffshore.com
www.adelaidepersonal.com
www.assetpolicies.com
www.b-date.com
www.bomberjacket.org
www.budapestlawyer.org
www.businessradiotv.com
www.dubaipenthouse.net
www.ecopsychology.com
www.energypowerhouse.net
www.forestrylive.com
www.greenparkpenthouse.net
www.haititonight.com
www.hamahenergy.com
www.hochiminhcityrealestate.com
www.huainanenergy.com
www.investmentbankassets.com
www.investmentconcept.org
www.kuwaitlifestyle.com
www.luandaenergy.com
www.manilamarinelaw.com
www.marinehullsurvey.com
www.mayfairpenthouse.net
www.menloparkdrive.com
www.nassaumarine.net
www.naturalrawtalent.com
www.newyorkpenthouse.net
www.nightsoho.com
www.onlineprivatebanking.com
www.outdoorlasvegas.com
www.palermoproperty.com
www.piccadillypenthouse.net
www.propagandacorp.com
www.punelaw.com
www.quezoncityrealestate.com
www.reduceyourenergycosts.com
www.roadshowlive.com
www.saotomeenergy.com
www.sky-penthouse.net
www.tamilenglish.com
www.trade-cafe.net
www.tulaenergy.com
www.uzbekistangirl.com
www.westernsahararealestate.com
www.winningbestpicture.com

Other certificates including the domain name saotomeenergy.com

(limited to 100 certificates)
sunrenewableenergy.com
oilarchive.com
www.saotomeenergy.com
www.loopycooking.com
shipagencyservice.net
www.luandaenergy.com
www.piccadillypenthouse.net
factscommission.com
www.warszawaradio.com
www.nigeriaconstruction.net
shipagencyservice.net
newyorkpenthouse.net
windoffshoreenergy.com
www.piccadillypenthouse.net
vanuatulifestyle.com
www.factcommission.com
www.africahomeenergy.com
www.menloparkdrive.com
opensourcerenewableenergy.com
investmentbankassets.com
www.africahomeenergy.com
soundrenewableenergy.com
www.sandiegorenewableenergy.com
kwameadjato.com
www.cayenneenergy.com
www.roadshowlive.com
www.africahomeenergy.com
www.tamilenglish.com
www.africahomeenergy.com
www.piccadillypenthouse.net
www.mayfairpenthouse.net
www.winningbestpicture.com
www.africahomeenergy.com
thinmovieenergy.com
www.piccadillypenthouse.net
manilamarinelaw.com
thenatureenergy.com
www.warszawaradio.com
oilarchive.com
www.bomberjacket.org
www.saotomeenergy.com
3poste.com
www.piccadillypenthouse.net
tvchannellive.com
www.onlineprivatebanking.com
www.saotomeenergy.com
3poste.com
www.africahomeenergy.com
www.karmaandthought.com
www.plasmarenewableenergy.com
trade-cafe.net
www.managaloreenergy.com
huainanenergy.com
www.skypenthouse.net
mayfairpenthouse.net
www.nightsoho.com
www.greenparkpenthouse.net
www.shipssuitcases.com

Certificate

The complete raw certificate details for www.saotomeenergy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINMTCCDBmgAwIBAgISA5Wfo/JU7CtHWNlzjLEEvCKlMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTYxMDMyNTlaFw0y
MDAxMTQxMDMyNTlaMCAxHjAcBgNVBAMTFXd3dy5zYW90b21lZW5lcmd5LmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOg8veuvW9njxADIdW/CQYT
kf9aArR9QmappAoXPe8dHnwrBnTGVgLIt8ZAOIkCXF5Nkjecizp2kuPHAFJYGL1U
J6nEwrt2N0E/JvXLDGjX8DHsfuEOIey3KLBlamrT+IkmYueSbwAsSdrpPSM2yqAZ
uSQHM86kO2y0mOH36AegP3bfdFztX43wVWwvkxVfsgJ07FP/NxfF3v5qm13NEElo
CdM4J8RK6tn8yN+Ch6Aki0VMFvL/r7OSVe+wL9JBockMVY8aiOxmeafY42D2IT/F
TONk6xoYf2denVi7Rr4EzUBwKQ2yIKF0fyVkHorjGXjMSv368MC/IR4SFjVpG90C
AwEAAaOCCjkwggo1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUNnB46THrUmM2caF4
JvVmkLyI6qEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCCB+4GA1UdEQSCB+UwggfhggozcG9zdGUuY29tghFhYmFjb29m
ZnNob3JlLmNvbYIUYWRlbGFpZGVwZXJzb25hbC5jb22CCmItZGF0ZS5jb22CEmJ1
ZGFwZXN0bGF3eWVyLm9yZ4IWY2FtcGluYXNyZWFsZXN0YXRlLmNvbYIUY29yZG9i
YWRldGVjdGl2ZS5jb22CEGN1aWFiYWVuZXJneS5jb22CEmR1YmFpcGVudGhvdXNl
Lm5ldIIQZWFzeXBsYXlsaXN0Lm9yZ4IUZW5lcmd5cG93ZXJob3VzZS5uZXSCEGZv
cmVzdHJ5bGl2ZS5jb22CFmdyZWVucGFya3BlbnRob3VzZS5uZXSCD2hhbWFoZW5l
cmd5LmNvbYISaGFubm92ZXJlbmVyZ3kuY29tghtob2NoaW1pbmhjaXR5cmVhbGVz
dGF0ZS5jb22CEWh1YWluYW5lbmVyZ3kuY29tghFpbmRpYXB1YmxpY3R2LmNvbYIY
aW52ZXN0bWVudGJhbmthc3NldHMuY29tghJrYXdhc2FraWVuZXJneS5jb22CEGx1
YW5kYWVuZXJneS5jb22CEW1hbmlsYWFpcnNob3cuY29tghNtYW5pbGFtYXJpbmVs
YXcuY29tghRtYXlmYWlycGVudGhvdXNlLm5ldIISbWVubG9wYXJrZHJpdmUuY29t
ghFtb3phbWJpcXVlbGF3LmNvbYIUbmV3eW9ya3BlbnRob3VzZS5uZXSCDm9pbGFy
Y2hpdmUuY29tghhvbmxpbmVwcml2YXRlYmFua2luZy5jb22CEW91dGRvb3JkYWxs
YXMuY29tghNwYWxlcm1vcHJvcGVydHkuY29tghdwaWNjYWRpbGx5cGVudGhvdXNl
Lm5ldIIScHJvcGFnYW5kYWNvcnAuY29tghhxdWV6b25jaXR5cmVhbGVzdGF0ZS5j
b22CGXJlZHVjZXlvdXJlbmVyZ3ljb3N0cy5jb22CEHJvYWRzaG93bGl2ZS5jb22C
EXNhb3RvbWVlbmVyZ3kuY29tghFza3ktcGVudGhvdXNlLm5ldIIWc3VibWFyaW5l
dHJlYXN1cmVzLmNvbYIMc3V2YWNvaW4uY29tghB0ZWxhdml2c3RvY2suY29tgg50
cmFkZS1jYWZlLm5ldIIUdmFudWF0dWxpZmVzdHlsZS5jb22CFndpbm5pbmdiZXN0
cGljdHVyZS5jb22CDnd3dy4zcG9zdGUuY29tghV3d3cuYWJhY29vZmZzaG9yZS5j
b22CGHd3dy5hZGVsYWlkZXBlcnNvbmFsLmNvbYIVd3d3LmFzc2V0cG9saWNpZXMu
Y29tgg53d3cuYi1kYXRlLmNvbYIUd3d3LmJvbWJlcmphY2tldC5vcmeCFnd3dy5i
dWRhcGVzdGxhd3llci5vcmeCF3d3dy5idXNpbmVzc3JhZGlvdHYuY29tghZ3d3cu
ZHViYWlwZW50aG91c2UubmV0ghV3d3cuZWNvcHN5Y2hvbG9neS5jb22CGHd3dy5l
bmVyZ3lwb3dlcmhvdXNlLm5ldIIUd3d3LmZvcmVzdHJ5bGl2ZS5jb22CGnd3dy5n
cmVlbnBhcmtwZW50aG91c2UubmV0ghR3d3cuaGFpdGl0b25pZ2h0LmNvbYITd3d3
LmhhbWFoZW5lcmd5LmNvbYIfd3d3LmhvY2hpbWluaGNpdHlyZWFsZXN0YXRlLmNv
bYIVd3d3Lmh1YWluYW5lbmVyZ3kuY29tghx3d3cuaW52ZXN0bWVudGJhbmthc3Nl
dHMuY29tghl3d3cuaW52ZXN0bWVudGNvbmNlcHQub3Jnghd3d3cua3V3YWl0bGlm
ZXN0eWxlLmNvbYIUd3d3Lmx1YW5kYWVuZXJneS5jb22CF3d3dy5tYW5pbGFtYXJp
bmVsYXcuY29tghh3d3cubWFyaW5laHVsbHN1cnZleS5jb22CGHd3dy5tYXlmYWly
cGVudGhvdXNlLm5ldIIWd3d3Lm1lbmxvcGFya2RyaXZlLmNvbYIUd3d3Lm5hc3Nh
dW1hcmluZS5uZXSCGHd3dy5uYXR1cmFscmF3dGFsZW50LmNvbYIYd3d3Lm5ld3lv
cmtwZW50aG91c2UubmV0ghF3d3cubmlnaHRzb2hvLmNvbYIcd3d3Lm9ubGluZXBy
aXZhdGViYW5raW5nLmNvbYIXd3d3Lm91dGRvb3JsYXN2ZWdhcy5jb22CF3d3dy5w
YWxlcm1vcHJvcGVydHkuY29tght3d3cucGljY2FkaWxseXBlbnRob3VzZS5uZXSC
Fnd3dy5wcm9wYWdhbmRhY29ycC5jb22CD3d3dy5wdW5lbGF3LmNvbYIcd3d3LnF1
ZXpvbmNpdHlyZWFsZXN0YXRlLmNvbYIdd3d3LnJlZHVjZXlvdXJlbmVyZ3ljb3N0
cy5jb22CFHd3dy5yb2Fkc2hvd2xpdmUuY29tghV3d3cuc2FvdG9tZWVuZXJneS5j
b22CFXd3dy5za3ktcGVudGhvdXNlLm5ldIIUd3d3LnRhbWlsZW5nbGlzaC5jb22C
End3dy50cmFkZS1jYWZlLm5ldIISd3d3LnR1bGFlbmVyZ3kuY29tghZ3d3cudXpi
ZWtpc3RhbmdpcmwuY29tgh93d3cud2VzdGVybnNhaGFyYXJlYWxlc3RhdGUuY29t
ghp3d3cud2lubmluZ2Jlc3RwaWN0dXJlLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbdRXr6UAAAQDAEcwRQIgAVKQmWWY/k8D
GKuiZQdjMD0A6J2cLBmXwiolUBRGK1MCIQCJad8HHYF4ipkCpDvLwvSllcpG4CJV
LLGNmDLXQ6YD9wB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAAB
bdRXsNoAAAQDAEYwRAIgCOU6b/UWeFIgGQo4fLC1FEhBbSq9TLl43UPCinMJCh0C
IGxBGRnL19FMwDL2NSWsH10mSM6prQfA3dEeuu3DU5v0MA0GCSqGSIb3DQEBCwUA
A4IBAQAUDx1Lz4v4ioZnxf9i4hMt131iWtf3Oj+imm9HkAwOuOqRY3z6fVNRPLQr
UufVjmJYoOXg8HUU+sIozhIHfIavqZaobMlyKwXbCyZLCtsRVsRbdX6ZTrbf5Sbr
2X0x7BP5jcud/8KX9tLncSoFVSlE54g7JUif4wDk+DgLIUQhBK7C30xuPTCvZezm
bfEAnBJgSTHs3WBiy0An7hq4YT79INj2GG0LipLEqKP+yCoUxVcCgx//PH5PMcpn
17g0Tdr5InKOcvYWYSv/BxL1AbH+FEvMumN8nrAsPoHmlD1sA0ADe4HWgP207Itr
MCnAYEXajSncRA1ViRzIMORaKda3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Dy9669b2ePEAMh1b8J
BhOR/1oCtH1CZqmkChc97x0efCsGdMZWAsi3xkA4iQJcXk2SN5yLOnaS48cAUlgY
vVQnqcTCu3Y3QT8m9csMaNfwMex+4Q4h7LcosGVqatP4iSZi55JvACxJ2uk9IzbK
oBm5JAczzqQ7bLSY4ffoB6A/dt90XO1fjfBVbC+TFV+yAnTsU/83F8Xe/mqbXc0Q
SWgJ0zgnxErq2fzI34KHoCSLRUwW8v+vs5JV77Av0kGhyQxVjxqI7GZ5p9jjYPYh
P8VM42TrGhh/Z16dWLtGvgTNQHApDbIgoXR/JWQeiuMZeMxK/frwwL8hHhIWNWkb
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312251128977289694314567201411235470647973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 10:32:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 10:32:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saotomeenergy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24695836423612798629381894701817532521446916925628457249739393467497538071736884679157568173122216726682607316174526999358607762113143176497449674433767551901371474296832206847677034667222727653921270159381757156461598591099541513655775232218407853014162895448054004997011022365943094128269740199433166221967124240242827200627639362095691905990580516731115045639719575819922964755622831948416628677500951075648336264668295068072268846788463394987852165524920009382940875548665044694365105359087029407983401161746750285363866485362562554430034006621390520185197595321425304931044821983016431124094329308411421432290269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							367078e931eb52633671a17826f56690bc88eaa1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2021 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3poste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abacooffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adelaidepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-date.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budapestlawyer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campinasrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cordobadetective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuiabaenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaipenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyplaylist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energypowerhouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestrylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenparkpenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamahenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannoverenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochiminhcityrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huainanenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiapublictv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentbankassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawasakienergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luandaenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manilaairshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manilamarinelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayfairpenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menloparkdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozambiquelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkpenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilarchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineprivatebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoordallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palermoproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piccadillypenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propagandacorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quezoncityrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reduceyourenergycosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadshowlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saotomeenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sky-penthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'submarinetreasures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suvacoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telavivstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade-cafe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanuatulifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winningbestpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3poste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abacooffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adelaidepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assetpolicies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b-date.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bomberjacket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budapestlawyer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessradiotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaipenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecopsychology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energypowerhouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forestrylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenparkpenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haititonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamahenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hochiminhcityrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huainanenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investmentbankassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investmentconcept.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuwaitlifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luandaenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manilamarinelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinehullsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfairpenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menloparkdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nassaumarine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalrawtalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkpenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nightsoho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineprivatebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outdoorlasvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palermoproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piccadillypenthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propagandacorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quezoncityrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reduceyourenergycosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadshowlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saotomeenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sky-penthouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamilenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trade-cafe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulaenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzbekistangirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernsahararealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winningbestpicture.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd457afa500000403004730450220015290996598fe4f0318aba2650763303d00e89d9c2c1997c22a255014462b530221008969df071d81788a9902a43bcbc2f4a595ca46e022552cb18d9832d743a603f70075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd457b0da0000040300463044022008e53a6ff516785220190a387cb0b51448416d2abd4cb978dd43c28a73090a1d02206c411919cbd7d14cc032f63525ac1f5d2648cea9ad07c0ddd11ebaedc3539bf4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00140f1d4bcf8bf88a8667c5ff62e2132dd77d625ad7f73a3fa29a6f47900c0eb8ea91637cfa7d53513cb42b52e7d58e6258a0e5e0f07514fac228ce12077c86afa996a86cc9722b05db0b264b0adb1156c45b757e994eb6dfe526ebd97d31ec13f98dcb9dffc297f6d2e7712a05552944e7883b25489fe300e4f8380b21442104aec2df4c6e3d30af65ece66df1009c12604931ecdd6062cb4027ee1ab8613efd20d8f6186d0b8a92c4a8a3fec82a14c55702831fff3c7e4f31ca67d7b8344ddaf922728e72f616612bff0712f501b1fe144bccba637c9eb02c3e81e6943d6c0340037b81d680fdb4ec8b6b3029c06045da8d29dc440d55891cc830e45a29d6b7