f07.chtah.com

Issued by R3

About this certificate

This digital certificate with serial number 04:df:e0:34:36:a6:82:b2:ca:30:c3:25:94:96:12:c4:4a:b0 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=f07.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:e0:34:36:a6:82:b2:ca:30:c3:25:94:96:12:c4:4a:b0
Serial Number (int): 424630129729345171674843556095324267498160
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d0:60:0c:c5:d1:ab:b4:3d:67:53:79:41:03:0c:bc:6d:8e:8e:db:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:53:93:c4:43:88:26:91:9e:90:ee:8c:5b:b6:11:7b:e6:6a:3b:f4
Fingerprint (sha256): a5:06:8e:f3:f7:fa:5f:f9:a4:fa:86:0c:3f:e9:6b:4d:f8:06:8d:5f:be:6a:95:67:02:73:f7:6f:06:7a:e0:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f07.chtah.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f07.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.ew.chtah.net
f.ew.mag.chtah.net
f.ew.off.chtah.net
f.exprpt.com
f.foodandwine.mag.chtah.net
f.foodandwine.off.chtah.net
f.foodandwineconnoisseurclub.mag.chtah.net
f.foodandwineconnoisseurclub.off.chtah.net
f.fortune.chtah.net
f.fortune.mag.chtah.net
f.fortune.off.chtah.net
f.golf.chtah.net
f.golf.mag.chtah.net
f.golf.off.chtah.net
f.golfmagazineplayersclub.mag.chtah.net
f.golfmagazineplayersclub.off.chtah.net
f.health.chtah.net
f.health.mag.chtah.net
f.health.off.chtah.net
f.instyle.chtah.net
f.instyle.mag.chtah.net
f.instyle.off.chtah.net
f.mail.oneassistemail.in
f.mail.oneassistinfo.in
f.mail.viu.es
f.mailing.miarevista.es
f.mailing.pandasecurity.com
f.mailing.zinetmedia.es
f.message.adda52mail.com
f.mmoser.co
f.money.chtah.net
f.money.mag.chtah.net
f.money.off.chtah.net
f.myhomeideas.chtah.net
f.myhomeideas.off.chtah.net
f.myrecipes.chtah.net
f.myrecipes.off.chtah.net
f.news.pronovias.com
f.newsletter.msdp.cn
f.newsletter.oneassistinfo.in
f.operations.eflow.ie
f.people.chtah.net
f.people.mag.chtah.net
f.people.off.chtah.net
f.peopleenespanol.chtah.net
f.peopleenespanol.mag.chtah.net
f.peopleenespanol.off.chtah.net
f.peoplepets.chtah.net
f.peoplestylewatch.mag.chtah.net
f.peoplestylewatch.off.chtah.net
f.realsimple.chtah.net
f.realsimple.mag.chtah.net
f.realsimple.off.chtah.net
f.rms.rogersmagazines.com
f.rogers.nextissue.ca
f.rra.rogersmagazines.com
f.sikids.mag.chtah.net
f.sikids.off.chtah.net
f.skyguide.mag.chtah.net
f.skyguide.off.chtah.net
f.skyguideexecutiveprivilege.mag.chtah.net
f.skyguideexecutiveprivilege.off.chtah.net
f.southernliving.chtah.net
f.southernliving.mag.chtah.net
f.southernliving.off.chtah.net
f.sportsillustrated.chtah.net
f.sportsillustrated.mag.chtah.net
f.sportsillustrated.off.chtah.net
f.sunset.chtah.net
f.sunset.mag.chtah.net
f.sunset.off.chtah.net
f.support.onlinepokernews.in
f.tfk.chtah.net
f.thisoldhouse.chtah.net
f.thisoldhouse.mag.chtah.net
f.thisoldhouse.off.chtah.net
f.tilists.chtah.net
f.time.chtah.net
f.time.mag.chtah.net
f.time.off.chtah.net
f.timeforkids.mag.chtah.net
f.tisomail.com
f.travelandleisure.chtah.net
f.travelandleisureelitetravelerclub.mag.chtah.net
f.travelandleisureelitetravelerclub.off.chtah.net
f.travelblog.goibibo.com
f.travelleisurefamily.mag.chtah.net
f.travelleisurefamily.off.chtah.net
f.trigger.trucksdekho.com
f07.chtah.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com

Certificate

The complete raw certificate details for f07.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINXDCCDESgAwIBAgISBN/gNDamgrLKMMMllJYSxEqwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTYyMDA2MTlaFw0yNDAxMTQyMDA2MThaMBgxFjAUBgNVBAMT
DWYwNy5jaHRhaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ
9vZZFKBpoPN8ZL6qB3UsaY+vW21QDZukwF4wa6to0hCQzjFqIgCTMA8X3MsRBP/+
5MsO65h4GIi14/gYKFl51va903eEI9QnlZkAPJXJOX/D11VSL6a75Gk9c/uChoUw
rJePpu/X+5xTM95ZDUwckAl4tlmkZBwPrLQlfo/RHtAY39Tw2Bx3BqSee4fx1ZJR
2z29h3tbr/ImL+WyO/95crgbeiz/Ms6I2p07xIy5LxysNy/6rAdvAvXL6LP8hLYi
HLjQs98Bp9EsC5YCx3TBbJw8UcLhIqcOg59zUC91P69vszuv4N9V8rEHUwqsH5gS
OkCKl7ptC6A9II677hqTAgMBAAGjggqEMIIKgDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFNBgDMXRq7Q9Z1N5QQMMvG2OjtsgMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIJfgYDVR0RBIIJdTCCCXGCDmYuZXcuY2h0YWgubmV0ghJmLmV3Lm1hZy5jaHRh
aC5uZXSCEmYuZXcub2ZmLmNodGFoLm5ldIIMZi5leHBycHQuY29tghtmLmZvb2Rh
bmR3aW5lLm1hZy5jaHRhaC5uZXSCG2YuZm9vZGFuZHdpbmUub2ZmLmNodGFoLm5l
dIIqZi5mb29kYW5kd2luZWNvbm5vaXNzZXVyY2x1Yi5tYWcuY2h0YWgubmV0gipm
LmZvb2RhbmR3aW5lY29ubm9pc3NldXJjbHViLm9mZi5jaHRhaC5uZXSCE2YuZm9y
dHVuZS5jaHRhaC5uZXSCF2YuZm9ydHVuZS5tYWcuY2h0YWgubmV0ghdmLmZvcnR1
bmUub2ZmLmNodGFoLm5ldIIQZi5nb2xmLmNodGFoLm5ldIIUZi5nb2xmLm1hZy5j
aHRhaC5uZXSCFGYuZ29sZi5vZmYuY2h0YWgubmV0gidmLmdvbGZtYWdhemluZXBs
YXllcnNjbHViLm1hZy5jaHRhaC5uZXSCJ2YuZ29sZm1hZ2F6aW5lcGxheWVyc2Ns
dWIub2ZmLmNodGFoLm5ldIISZi5oZWFsdGguY2h0YWgubmV0ghZmLmhlYWx0aC5t
YWcuY2h0YWgubmV0ghZmLmhlYWx0aC5vZmYuY2h0YWgubmV0ghNmLmluc3R5bGUu
Y2h0YWgubmV0ghdmLmluc3R5bGUubWFnLmNodGFoLm5ldIIXZi5pbnN0eWxlLm9m
Zi5jaHRhaC5uZXSCGGYubWFpbC5vbmVhc3Npc3RlbWFpbC5pboIXZi5tYWlsLm9u
ZWFzc2lzdGluZm8uaW6CDWYubWFpbC52aXUuZXOCF2YubWFpbGluZy5taWFyZXZp
c3RhLmVzghtmLm1haWxpbmcucGFuZGFzZWN1cml0eS5jb22CF2YubWFpbGluZy56
aW5ldG1lZGlhLmVzghhmLm1lc3NhZ2UuYWRkYTUybWFpbC5jb22CC2YubW1vc2Vy
LmNvghFmLm1vbmV5LmNodGFoLm5ldIIVZi5tb25leS5tYWcuY2h0YWgubmV0ghVm
Lm1vbmV5Lm9mZi5jaHRhaC5uZXSCF2YubXlob21laWRlYXMuY2h0YWgubmV0ghtm
Lm15aG9tZWlkZWFzLm9mZi5jaHRhaC5uZXSCFWYubXlyZWNpcGVzLmNodGFoLm5l
dIIZZi5teXJlY2lwZXMub2ZmLmNodGFoLm5ldIIUZi5uZXdzLnByb25vdmlhcy5j
b22CFGYubmV3c2xldHRlci5tc2RwLmNugh1mLm5ld3NsZXR0ZXIub25lYXNzaXN0
aW5mby5pboIVZi5vcGVyYXRpb25zLmVmbG93LmllghJmLnBlb3BsZS5jaHRhaC5u
ZXSCFmYucGVvcGxlLm1hZy5jaHRhaC5uZXSCFmYucGVvcGxlLm9mZi5jaHRhaC5u
ZXSCG2YucGVvcGxlZW5lc3Bhbm9sLmNodGFoLm5ldIIfZi5wZW9wbGVlbmVzcGFu
b2wubWFnLmNodGFoLm5ldIIfZi5wZW9wbGVlbmVzcGFub2wub2ZmLmNodGFoLm5l
dIIWZi5wZW9wbGVwZXRzLmNodGFoLm5ldIIgZi5wZW9wbGVzdHlsZXdhdGNoLm1h
Zy5jaHRhaC5uZXSCIGYucGVvcGxlc3R5bGV3YXRjaC5vZmYuY2h0YWgubmV0ghZm
LnJlYWxzaW1wbGUuY2h0YWgubmV0ghpmLnJlYWxzaW1wbGUubWFnLmNodGFoLm5l
dIIaZi5yZWFsc2ltcGxlLm9mZi5jaHRhaC5uZXSCGWYucm1zLnJvZ2Vyc21hZ2F6
aW5lcy5jb22CFWYucm9nZXJzLm5leHRpc3N1ZS5jYYIZZi5ycmEucm9nZXJzbWFn
YXppbmVzLmNvbYIWZi5zaWtpZHMubWFnLmNodGFoLm5ldIIWZi5zaWtpZHMub2Zm
LmNodGFoLm5ldIIYZi5za3lndWlkZS5tYWcuY2h0YWgubmV0ghhmLnNreWd1aWRl
Lm9mZi5jaHRhaC5uZXSCKmYuc2t5Z3VpZGVleGVjdXRpdmVwcml2aWxlZ2UubWFn
LmNodGFoLm5ldIIqZi5za3lndWlkZWV4ZWN1dGl2ZXByaXZpbGVnZS5vZmYuY2h0
YWgubmV0ghpmLnNvdXRoZXJubGl2aW5nLmNodGFoLm5ldIIeZi5zb3V0aGVybmxp
dmluZy5tYWcuY2h0YWgubmV0gh5mLnNvdXRoZXJubGl2aW5nLm9mZi5jaHRhaC5u
ZXSCHWYuc3BvcnRzaWxsdXN0cmF0ZWQuY2h0YWgubmV0giFmLnNwb3J0c2lsbHVz
dHJhdGVkLm1hZy5jaHRhaC5uZXSCIWYuc3BvcnRzaWxsdXN0cmF0ZWQub2ZmLmNo
dGFoLm5ldIISZi5zdW5zZXQuY2h0YWgubmV0ghZmLnN1bnNldC5tYWcuY2h0YWgu
bmV0ghZmLnN1bnNldC5vZmYuY2h0YWgubmV0ghxmLnN1cHBvcnQub25saW5lcG9r
ZXJuZXdzLmlugg9mLnRmay5jaHRhaC5uZXSCGGYudGhpc29sZGhvdXNlLmNodGFo
Lm5ldIIcZi50aGlzb2xkaG91c2UubWFnLmNodGFoLm5ldIIcZi50aGlzb2xkaG91
c2Uub2ZmLmNodGFoLm5ldIITZi50aWxpc3RzLmNodGFoLm5ldIIQZi50aW1lLmNo
dGFoLm5ldIIUZi50aW1lLm1hZy5jaHRhaC5uZXSCFGYudGltZS5vZmYuY2h0YWgu
bmV0ghtmLnRpbWVmb3JraWRzLm1hZy5jaHRhaC5uZXSCDmYudGlzb21haWwuY29t
ghxmLnRyYXZlbGFuZGxlaXN1cmUuY2h0YWgubmV0gjFmLnRyYXZlbGFuZGxlaXN1
cmVlbGl0ZXRyYXZlbGVyY2x1Yi5tYWcuY2h0YWgubmV0gjFmLnRyYXZlbGFuZGxl
aXN1cmVlbGl0ZXRyYXZlbGVyY2x1Yi5vZmYuY2h0YWgubmV0ghhmLnRyYXZlbGJs
b2cuZ29pYmliby5jb22CI2YudHJhdmVsbGVpc3VyZWZhbWlseS5tYWcuY2h0YWgu
bmV0giNmLnRyYXZlbGxlaXN1cmVmYW1pbHkub2ZmLmNodGFoLm5ldIIZZi50cmln
Z2VyLnRydWNrc2Rla2hvLmNvbYINZjA3LmNodGFoLmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Hl/eGMgJ7h/izHWXn2Md66Rs77obg64y5S5FJje7WIT1MJfUKXLAFf+3BOEWhoCu
ZMWUYf/4CXC1cNy/L7gkvzcMOb+skGS3+K+lDAXLSiYEQ2SV6vNmBK6UWLEqysQk
zormxeCvYA7mpHYTaeOPzO7soFztP4eJ9bFaVdPlmC2F6hDr8kbUyoimrEA01AaN
WHcpPlDFU1xIoLGmdfBNT5g79w3PJjOMWVQMWlTQ3hmRSO+/2UVo1ixBQq0/C3aZ
acxq4mvrTPjYSPl5hN0h34aiSFw2+sm9eLy2L4HsV4o+S8h/QG5j1TcLtNa7wnCU
nMcZF1cN/dYlKTY+t6xxAQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pb2WRSgaaDzfGS+qgd1
LGmPr1ttUA2bpMBeMGuraNIQkM4xaiIAkzAPF9zLEQT//uTLDuuYeBiIteP4GChZ
edb2vdN3hCPUJ5WZADyVyTl/w9dVUi+mu+RpPXP7goaFMKyXj6bv1/ucUzPeWQ1M
HJAJeLZZpGQcD6y0JX6P0R7QGN/U8NgcdwaknnuH8dWSUds9vYd7W6/yJi/lsjv/
eXK4G3os/zLOiNqdO8SMuS8crDcv+qwHbwL1y+iz/IS2Ihy40LPfAafRLAuWAsd0
wWycPFHC4SKnDoOfc1AvdT+vb7M7r+DfVfKxB1MKrB+YEjpAipe6bQugPSCOu+4a
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424630129729345171674843556095324267498160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 20:06:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 20:06:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f07.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26379349080337528474579754635462490077015378151362028634236398369886757651988046063536498939110251856785967354181278116557874029573164901462010657750735528951737528110683693401464054572005774352301908234140024756259734139872867599147125757248958724930442207838628502720635134394818598935368680370585440475204920081556194648626719583020598517670045179542992844693440780166622613314212472960623142554510839756005731135022123235855558748385039184858752034837783583256756332768341160198652230120074513801622361017130704951311453697286883115848840288093580908977240923595236141567021513300784889696857822300058997861784211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0600cc5d1abb43d67537941030cbc6d8e8edb20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2421 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ew.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ew.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ew.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.exprpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.foodandwine.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.foodandwine.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.foodandwineconnoisseurclub.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.foodandwineconnoisseurclub.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.fortune.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.fortune.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.fortune.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.golf.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.golf.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.golf.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.golfmagazineplayersclub.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.golfmagazineplayersclub.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.health.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.health.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.health.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.instyle.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.instyle.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.instyle.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.oneassistemail.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.oneassistinfo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.viu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.miarevista.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.pandasecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.zinetmedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.message.adda52mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mmoser.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.money.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.money.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.money.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.myhomeideas.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.myhomeideas.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.myrecipes.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.myrecipes.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.pronovias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.msdp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.oneassistinfo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.operations.eflow.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.people.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.people.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.people.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.peopleenespanol.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.peopleenespanol.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.peopleenespanol.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.peoplepets.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.peoplestylewatch.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.peoplestylewatch.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.realsimple.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.realsimple.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.realsimple.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.rms.rogersmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.rogers.nextissue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.rra.rogersmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sikids.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sikids.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.skyguide.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.skyguide.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.skyguideexecutiveprivilege.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.skyguideexecutiveprivilege.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.southernliving.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.southernliving.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.southernliving.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sportsillustrated.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sportsillustrated.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sportsillustrated.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sunset.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sunset.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sunset.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.support.onlinepokernews.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.tfk.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.thisoldhouse.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.thisoldhouse.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.thisoldhouse.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.tilists.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.time.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.time.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.time.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.timeforkids.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.tisomail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travelandleisure.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travelandleisureelitetravelerclub.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travelandleisureelitetravelerclub.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travelblog.goibibo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travelleisurefamily.mag.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travelleisurefamily.off.chtah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.trigger.trucksdekho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f07.chtah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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