bigprocurement.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:65:3d:2b:b0:d5:d6:25:2c:d0:fc:61:c7:25:5f:d9:33 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bigprocurement.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:65:3d:2b:b0:d5:d6:25:2c:d0:fc:61:c7:25:5f:d9:33
Serial Number (int): 333271006859435351610596336849724848986419
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:ac:2d:df:75:0e:ad:47:49:42:55:67:5a:1a:d2:cc:d8:d7:c1:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:0a:88:9a:6b:46:bc:ec:84:dd:d2:00:2b:8c:41:77:a2:ff:ee:e2
Fingerprint (sha256): a0:59:85:ea:f9:28:71:42:ff:21:a4:29:a7:33:60:6d:dc:79:03:a8:48:cc:6a:95:06:86:64:a6:92:3d:bf:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bigprocurement.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bigprocurement.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abandonement.com
agencefrancaisededeveloppement.com
agencefrancaisepourledeveloppement.com
agerequirement.com
alliedprocurement.com
argentinaprocurement.com
australiaprocurement.com
baghdadprocurement.com
beijingprocurement.com
belizeretirement.com
berkeleysettlement.com
bigprocurement.com
canadaprocurement.com
chicagosettlement.com
chileprocurement.com
clearwatersettlement.com
coloradosettlement.com
culturalrefinement.com
delhiprocurement.com
denversettlement.com
dubaiprocurement.com
equipement.com
europeprocurement.com
freeprocurement.com
fundprocurement.com
genretirement.com
genxretirement.com
greekrefinement.com
hollidayretirement.com
idahosettlement.com
illinoissettlement.com
industriallawyersettlement.com
italianrefinement.com
kansassettlement.com
karachiprocurement.com
kentuckysettlement.com
lightsettlement.com
maritimeprocurement.com
massachusettssettlement.com
mumbaiprocurement.com
nigeriaprocurement.com
phoenixsettlement.com
rawsettlement.com
realprocurement.com
russiaprocurement.com
seaprocurement.com
shanghaiprocurement.com
singaporeprocurement.com
super-procurement.com
superpublicprocurement.com
www.abandonement.com
www.agencefrancaisededeveloppement.com
www.agencefrancaisepourledeveloppement.com
www.agerequirement.com
www.alliedprocurement.com
www.argentinaprocurement.com
www.australiaprocurement.com
www.baghdadprocurement.com
www.beijingprocurement.com
www.belizeretirement.com
www.berkeleysettlement.com
www.bigprocurement.com
www.canadaprocurement.com
www.chicagosettlement.com
www.chileprocurement.com
www.clearwatersettlement.com
www.coloradosettlement.com
www.culturalrefinement.com
www.delhiprocurement.com
www.denversettlement.com
www.dubaiprocurement.com
www.equipement.com
www.europeprocurement.com
www.freeprocurement.com
www.fundprocurement.com
www.genretirement.com
www.genxretirement.com
www.greekrefinement.com
www.hollidayretirement.com
www.idahosettlement.com
www.illinoissettlement.com
www.industriallawyersettlement.com
www.italianrefinement.com
www.kansassettlement.com
www.karachiprocurement.com
www.kentuckysettlement.com
www.lightsettlement.com
www.maritimeprocurement.com
www.massachusettssettlement.com
www.mumbaiprocurement.com
www.nigeriaprocurement.com
www.phoenixsettlement.com
www.rawsettlement.com
www.realprocurement.com
www.russiaprocurement.com
www.seaprocurement.com
www.shanghaiprocurement.com
www.singaporeprocurement.com
www.super-procurement.com
www.superpublicprocurement.com

Other certificates including the domain name bigprocurement.com

(limited to 100 certificates)
hollidayretirement.com
www.agerequirement.com
www.super-procurement.com
www.abandonement.com
genretirement.com
www.abandonement.com
tamilprincesss.net
www.abandonement.com
www.abandonement.com
hollidayretirement.com
www.lightsettlement.com
www.europeanfilmaward.org
hollidayretirement.com
irancommerz.com
lawtanzania.com
abandonement.com
www.massachusettssettlement.com
www.canadaprocurement.com
www.theoreticallife.net
abandonement.com
www.abandonement.com
www.irancommerz.com
www.seaprocurement.com
bankandorra.com
www.seaprocurement.com
www.gdanskuniversity.com
worldrefi.net
hudsonbaymedia.com
hollidayretirement.com
www.belizeretirement.com
equipement.com
www.baghdadprocurement.com
www.loft99.com
www.portoflongbeach.org
bigprocurement.com
www.baghdadprocurement.com
seaprocurement.com
www.worldgeo.net
canadaprocurement.com
www.canadaprocurement.com
irancommerz.com
www.theoreticalphysics.net
www.canadaprocurement.com
hollidayretirement.com
italianrefinement.com
hudsonbaymedia.com
www.allergenpillow.com
fundprocurement.com

Certificate

The complete raw certificate details for bigprocurement.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBhdntEr5Ht2pB2P+q/U
xdPz19iEgpsSLvJ7sE1tVTsVkTxLCztQUPIHbHSFqVGyq3ClHDsqxHJ1rwz70LA8
AC3mKj5VAa6lQQYe6TvsLR/FqgqB/io/61wHM6+EXcfDn6y5SZGyjyFBLbkYZpod
yc9uc8z6SKmrLi1U5dpr+GTOR2iRrW44JihcdnMe3kveYYFtuLd8IylV/wXXxzzj
3abz/W5UNL1Tw5mjgKS3MKdGvi86KzW72t/Sj88GjbVi1QIby2r3/ycHF6IVbxHd
aemG8gTjReWpfp7/MmJDtHBsPaxcSN4Tu73wVuX14ZqdlmU+Y+CaE22JXaSUntMR
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333271006859435351610596336849724848986419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-24 12:51:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-22 12:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bigprocurement.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22734910070643670059653301160709991434801400073771187493172733540404531248933692741336981954582177173226123982831617137569580102274713213000084548188903585500373249656513734510449714507517512534162166283470652309411840029341813529060773170072673795799272606488047050163405675758228238445378093501683232367086004208479754041083791775102073545107476285193902515760774631968681625162416467608328383590452895014514674689255432630069171094805986853199034752007796529289025801025482010032655623456376954989844427782962969229959512649673833200083927545961189404363816986754940719275956122595054234696857007498392418064208233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93ac2ddf750ead47494255675a1ad2ccd8d7c141
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abandonement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencefrancaisededeveloppement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencefrancaisepourledeveloppement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agerequirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliedprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentinaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baghdadprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beijingprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belizeretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeleysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chileprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearwatersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturalrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delhiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denversettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equipement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genxretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollidayretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoissettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industriallawyersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italianrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansassettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karachiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massachusettssettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mumbaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russiaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanghaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super-procurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superpublicprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abandonement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agencefrancaisededeveloppement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agencefrancaisepourledeveloppement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agerequirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alliedprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.argentinaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australiaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baghdadprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beijingprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belizeretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkeleysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chileprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearwatersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturalrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delhiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denversettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equipement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genxretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greekrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollidayretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahosettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illinoissettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industriallawyersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianrefinement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansassettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karachiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentuckysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritimeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massachusettssettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mumbaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russiaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanghaiprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singaporeprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.super-procurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superpublicprocurement.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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