standorte.hansaton.at

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:8d:a5:48:59:96:83:b4:d2:48:3a:59:7c:e1:65:1a:b8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=standorte.hansaton.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:8d:a5:48:59:96:83:b4:d2:48:3a:59:7c:e1:65:1a:b8
Serial Number (int): 294192244363509543718344160737927109089976
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:ac:b3:8d:4b:f9:5c:5c:da:7c:82:05:8b:f4:6c:3d:9f:b4:5a:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:1d:4e:e0:01:fb:06:76:0b:c0:55:6a:62:25:12:dd:2f:4e:5b:c1
Fingerprint (sha256): 9c:26:1d:85:ef:a4:db:ed:a4:30:3c:d3:71:73:8d:d2:e9:c8:be:e9:ca:33:7e:6c:90:ee:34:a0:16:12:c4:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate standorte.hansaton.at

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for standorte.hansaton.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advisors.bankofthewest.com
af247.yext-cdn.com
agent.travelers.com
answers-unitedfcu.yext-cdn.com
answers.healthcareassociates.com
answers.ihacares.com.yext-cdn.com
answers.onward19.com
bankers.ccbg.com
boutique.sfr.fr
branches.burkeandherbertbank.com
butiker.audionova.se
ca-stores.iqos.com.yext-cdn.com
cable-tv-service.spectrum.com
centri.audionovaitalia.it
cz-stores.iqos.com.yext-cdn.com
directory.monument.health
directory.regionalhealth.org
events.americanforkmoderndentistry.com
events.constitutiondentalgroup.com
events.shopwestlakeplaza.com
events.size.co.uk
flavors.16handles.com
florists.interflora.co.uk
fukushima.explore-japan.net
hitchhiker-answers.yext.com
homes.caringladyfuneraldirector.co.uk
hotspots.optimum.com
kr-stores.iqos.com.yext-cdn.com
l.autozone.com.br
lesclubs.fitnesspark.fr
loans.bankwithsouthern.com
local.cicispizza.com
local.fuel.safeway.com
local.pavilions.com
local.pharmacy.albertsons.com
location.1-800boardup.com
locations.ajg.com
locations.bankwithsouthern.com
locations.blackhorsenj.com
locations.blissworld.com
locations.bojangles.com
locations.cell-only.com
locations.columbiabankonline.com
locations.dish.com
locations.firstinterstatebank.com
locations.gocolonial.com
locations.ihacares.com.yext-cdn.com
locations.legacytexas.com
locations.manationalguard.net
locations.myeyedr.com
locations.ncsecu.org
locations.noodles.com
locations.ohio.aaa.com
locations.rachelskitchen.com
locations.rallys.com
locations.southphillycheesesteaksfries.com
locations.tacobelluk.co.uk
locations.tccrocks.com
locations.tiaa.org
my-stores.iqos.com.yext-cdn.com
practices.ncmahealth.com
restaurants.fiveguys.co.uk
restaurants.subway.com
retailers.jaguar.co.jp
ro-stores.iqos.com.yext-cdn.com
salp-ima-internet.yext-cdn.com
salp-ima-mobile.yext-cdn.com
service.gng.com
shops.lapperre.lu
sneaks.yext-cdn.com
specialties.ihacares.com.yext-cdn.com
standorte.berliner-volksbank.de
standorte.geers.de
standorte.hansaton.at
stores.bikini-spanish.jp
stores.cashconverters.us.com
stores.chaumet.com
stores.christmastreeshops.com
stores.christopherandbanks.com
stores.colehaan.com
stores.evans.co.uk
stores.footlocker.ca
stores.footlocker.dk
stores.footlocker.fr
stores.footlocker.se
stores.jared.com
stores.konas-coffee.com
stores.motherhood.com
stores.nyxcosmetics.it
stores.oakley.com
stores.soliver.com
stores.speedqueenlaundry.com
stores.sterlingjewelers.com
stores.stopandshop.com
synergic.yext-cdn.com
www.farmersagencyjobs.com
www.farmersconnecticut.com
www.farmersnewyork.com
www.farmersphiladelphia.com
www.nic.farmers

Other certificates including the domain name hansaton.at

(limited to 100 certificates)
answers-autozone.pagescdn.com
answers.alpinebank.com.pagescdn.com
www.hansaton.at
standorte.hansaton.at
standorte.hansaton.at
answers-autozone.pagescdn.com
answers.alpinebank.com.pagescdn.com
stores.sleepnumber.com
standorte.hansaton.at
unsichtbare-hoergeraete.hansaton.at
locations.bucadibeppo.com
www.hansaton.at
local.cicispizza.com
www.hansaton.at
standorte.hansaton.at
hansaton.at
stores.sleepnumber.com
store.obi.hu.pagescdn.com
phonak-audeo.hansaton.at
standorte.hansaton.at
unsichtbare-hoergeraete.hansaton.at
mail.hansaton.at
unsichtbare-hoergeraete.hansaton.at
hansaton.at
unsichtbare-hoergeraete.hansaton.at
stores.tenpura-tensei.jp
store.obi.hu.pagescdn.com
standorte.hansaton.at
events.lifelinescreening.com
local.cicispizza.com
standorte.hansaton.at
stores.tenpura-tensei.jp
standorte.hansaton.at
events.lifelinescreening.com
locations.bucadibeppo.com
standorte.hansaton.at

Certificate

The complete raw certificate details for standorte.hansaton.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJNfsME2XsRBnVTxUqpp
04/vhB4sntg/s4IXO27ONs0yp5knSxubnV2TFOOAGniLMZlMpVhjSIe19wO2iFgX
g3L9Q/yT0yZOccRfod+uF6Xs105Tg4IfLd4mF0a3YSsOTVw4m1PNdWO8jI/ZdV5Y
L+nFDxyNovEaSDEZlY9m8Dy4nRgZgf4qi2YRKHsZj4Xvv1PkHIqzEyhaJgFGm0jl
DYsbADLn6O/HQa19MNcEwP4SdyipYvGYGXOkx6ER+DhKLe75yJqJ5AE7II2H/4qN
XfiyOX1XpDqIpEtxFx8eUzhO3KZKKOPkW2iIw8pnki+wz5brTR3q4EaPoYC5cQL2
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294192244363509543718344160737927109089976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 18:18:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 18:18:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'standorte.hansaton.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24815380498147039646814687207049589351277933940765889499511622850230466684265831949353231393050417640286543192088750088718404669420923110519078646070974493159075112053663487589897996938964791365728249988664567686650769082339964303402507262473074683674294914212203889615423863351857856596039200801806143408875954048995672765508081621967137964886806017953584272217926111466415655397765510529203635270597080142189830430408170675926514246606927855077595252422443066575637527672445362108259086234248321791023491831519579422098962208319477252296942870210759358382610528398043494039635905157741635333368289973045861789398601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78acb38d4bf95c5cda7c82058bf46c3d9fb45a6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2647 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.bankofthewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af247.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.travelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-unitedfcu.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.healthcareassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.ihacares.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.onward19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankers.ccbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutique.sfr.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branches.burkeandherbertbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butiker.audionova.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cable-tv-service.spectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centri.audionovaitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.monument.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.regionalhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.americanforkmoderndentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.constitutiondentalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.shopwestlakeplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.size.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flavors.16handles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florists.interflora.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fukushima.explore-japan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitchhiker-answers.yext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homes.caringladyfuneraldirector.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotspots.optimum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.autozone.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesclubs.fitnesspark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.bankwithsouthern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cicispizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fuel.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pharmacy.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.1-800boardup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.ajg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bankwithsouthern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.blackhorsenj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.blissworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bojangles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cell-only.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.columbiabankonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.dish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.firstinterstatebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.gocolonial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.ihacares.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.legacytexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.manationalguard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.myeyedr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.ncsecu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.noodles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.ohio.aaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.rachelskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.rallys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.southphillycheesesteaksfries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tacobelluk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tccrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tiaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practices.ncmahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.fiveguys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.subway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.jaguar.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salp-ima-internet.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salp-ima-mobile.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.gng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shops.lapperre.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sneaks.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialties.ihacares.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standorte.berliner-volksbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standorte.geers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standorte.hansaton.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bikini-spanish.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.cashconverters.us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.christmastreeshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.christopherandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.colehaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.evans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.konas-coffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.motherhood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.nyxcosmetics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.soliver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.speedqueenlaundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.sterlingjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.stopandshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergic.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersagencyjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersconnecticut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersphiladelphia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.farmers'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017035b040580000040300473045022038f06604f86b4ab37a64ba7dea6c1aadecc32d3a1b721bb2742add0a1f0550bd022100bc47691d5c23a9dd68fc20f367e73085d306c2d6827c7f2820ea8bedcbe62119007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017035b0405a000004030046304402207545f158fc0456247b53fc5ab3a07a55d9af6b609e4c5d0e59385bfb7d870e8e02202654387a8c2a0c8bab7fdf5a36f525fdc55940d837635fade9fb78d8f4274ace
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0031d990e60046881af5ffaafd99b49506ce5f7a831bb02871636bbd3c3be49aba3e630242644da2fb3d06ea4a150201d691ce69e9b1edd32bcbfd924ee07c8f97a1b6b1820fcb956b86b3015add44dbec8eb075ea9c710e05d42352d295c8a729f0efe25712f8d69c5faf69b5703eaddba6830460f112f778b9d3e92caca71f4b421f805f1213f51e788e6c9c4458b7954e9856cd48244914c3a0d0a7b48de1dea554569e025eb7b1a695583fb3270975e7da50758a8a93c3ee35ff92419967c1ef010bed87bc9518638a19285276dbd5adb080fda44b1d005a959bd9496703db733dab2f62a20e08c9514ef40284e7075b91d2097bb45342a49ef06e90878de6