answers.lafamiliainsurance.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:6a:48:12:37:3d:01:36:fb:e7:5a:38:dc:d5:5e:2c:fc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=answers.lafamiliainsurance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:6a:48:12:37:3d:01:36:fb:e7:5a:38:dc:d5:5e:2c:fc
Serial Number (int): 262158694911509434315109626866057497947388
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:ea:fe:46:f8:57:c2:63:43:64:9b:37:67:76:f0:94:d8:7f:1d:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:79:45:be:8a:59:0e:7b:3b:60:4d:91:ee:b8:40:3e:8f:bb:49:03
Fingerprint (sha256): a8:a7:1c:a1:09:8b:8d:37:d5:80:c7:3e:53:2b:26:f2:e4:2a:dd:b2:20:a9:ca:ca:76:8f:cc:c4:e3:86:18:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate answers.lafamiliainsurance.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for answers.lafamiliainsurance.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agent.travelers.com
answers-adelphi.pagescdn.com
answers-barbarian.pagescdn.com
answers-billingsclinic.pagescdn.com
answers-brixxpizza.pagescdn.com
answers-encompasshealth.pagescdn.com
answers-lafamiliainsurance.pagescdn.com
answers-mountsinai.pagescdn.com
answers-petscorner.pagescdn.com
answers-zagg.pagescdn.com
answers.abbeyfield.com
answers.arhcovid19.com
answers.bbvausa.com.yext-cdn.com
answers.bytefederal.com.yext-cdn.com
answers.familyresourcehomecare.com
answers.gomortgage.com
answers.lafamiliainsurance.com
answers.lionsden.com
answers.petvet365.com
answers.shopjustice.com
answers.tupperware.pagescdn.com
avdelinger.carglass.no
blog-hitchhikers.yext.com
branch.jtbbwt.com
branches.obrienglass.com.au
butikker.audionova.dk
doctorfinder.steward.org
doctors.columbia.edu
en.cafe.haagen-dazs.es.yext-cdn.com
events.fryemedctr.com
faq-mask.socialconnect.jp
ims.yext.com
info.traxburgersandbar.com
kr-stores.iqos.com.yext-cdn.com
l.boulanger.com
lending.nolalending.com
local.carrsqc.com
local.oldsecond.com
local.pharmacy.safeway.com
local.unitedsupermarkets.com
location.bereavementsupportgroups.co.uk
location.dclainc.com
location.eastdevoncrematorium.co.uk
location.muggandbean.co.za
locations.atlaspwm.com
locations.cell-only.com
locations.chipotle.ca
locations.chuckecheese.com
locations.cookchildrens.org
locations.cottageinn.com
locations.customink.com
locations.krystal.com
locations.legacytexas.com
locations.luggage-free-travel.com
locations.nextage.jp.yext-cdn.com
locations.orangecountyscu.org
locations.panerabread.com
locations.papaginos.com
locations.postnet.com
locations.retrofitness.com
locations.superduperburgers.com
locations.wsfsbank.com
locations.your-exchange.com
locations.zumepizza.com
markt.obi.at.yext-cdn.com
providers.winmedical.org
providersqa.steward.org
restaurants.fiveguys.me
restaurants.hippopotamus.fr
retailers.landroverkorea.co.kr
richmond.capitalalehouse.com
search.fsnb.online
search.wimpy.co.za
shop.planetwin365.it
springfieldclinic-answers.pagescdn.com
stationer.bilprovning.se
steder.carglass.dk
store-events.loft.com
storefinder.carpetright.co.uk.yext-cdn.com
stores.aeostores.com
stores.bedbathandbeyond.com
stores.carhartt.com
stores.catherines.com
stores.footlocker.be
stores.footlocker.hk
stores.footlocker.hu
stores.footlocker.my
stores.gindaco.com
stores.jared.com
stores.jdsports.com
stores.konas-coffee.com
stores.kourakuen.co.jp
stores.sanrio.co.jp
stores.scandinaviandesigns.com
stores.superdrystore.ch
stores.welcia.co.jp
www.farmersatlanta.com
www.farmersconnecticut.com
y-face.yext-cdn.com
yext.lvwadvisors.com

Other certificates including the domain name lafamiliainsurance.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for answers.lafamiliainsurance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupGwXB3lv8FMegSwW7oS
kktmAwBjKPu9qarRMcLTf09LsmIbLf/YBRc68rzIoPujY1rAJwHDkMRzRaXOTrqf
FHVBjuS5zLAf7jKshpRXiNVgqwcWJRGxqIFqwdWJPy9rTIJ9XcCRFLe9hM0tQ1GC
QDFTz13FWearoW8qS962Fq02XgzSboU2KgjeVNBShyiG1aw6tf06SaABrxgAdKSY
4OMqXg0fQl2S1h8eB+X64Qo0/aJHomKJtMQHj9hC2r6p7YusRlqrravkxUFRLh8c
nlDcPNketIsk+LOqsgxSl3i6lyqlAPABIqhEfJLgBN7MqhD8zbHr/dt3Z2DS3gPg
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262158694911509434315109626866057497947388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 01:26:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-19 01:26:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'answers.lafamiliainsurance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23552166600617060558748244949977094418616984707942475480254553967049130607693389211347878966161959731669282755960035703154124258295172440788914768780366213344568372629633382789374152197341328817030586043672305996446666327006951914752237450311911829387794692161600986868471526679607977625910625495349738523884046794180654730454170984279227649029151245785837485520569304869109142268133712114625608156905140043138991496429988071739132912070808761264121745474760611588234566317697844030920785064101235160571455401920322005526858044160786266738157170996688935895261805594742538267350484433146190724378377709961343700033547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39eafe46f857c26343649b376776f094d87f1d07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2683 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.travelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-adelphi.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-barbarian.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-billingsclinic.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-brixxpizza.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-encompasshealth.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-lafamiliainsurance.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-mountsinai.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-petscorner.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-zagg.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.abbeyfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.arhcovid19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.bbvausa.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.bytefederal.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.familyresourcehomecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.gomortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.lafamiliainsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.lionsden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.petvet365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.shopjustice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.tupperware.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avdelinger.carglass.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog-hitchhikers.yext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branch.jtbbwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branches.obrienglass.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butikker.audionova.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorfinder.steward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.cafe.haagen-dazs.es.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.fryemedctr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq-mask.socialconnect.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ims.yext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.traxburgersandbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.boulanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lending.nolalending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oldsecond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pharmacy.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.unitedsupermarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.bereavementsupportgroups.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.dclainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.eastdevoncrematorium.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.muggandbean.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.atlaspwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cell-only.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.chipotle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.chuckecheese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cookchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cottageinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.customink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.krystal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.legacytexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.luggage-free-travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.nextage.jp.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.orangecountyscu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.panerabread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.papaginos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.postnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.retrofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.superduperburgers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.wsfsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.your-exchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.zumepizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markt.obi.at.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.winmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providersqa.steward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.fiveguys.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.hippopotamus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landroverkorea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmond.capitalalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.fsnb.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.wimpy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.planetwin365.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springfieldclinic-answers.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stationer.bilprovning.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steder.carglass.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-events.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storefinder.carpetright.co.uk.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.aeostores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bedbathandbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.carhartt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.catherines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.gindaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.jdsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.konas-coffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.kourakuen.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.sanrio.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.scandinaviandesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.superdrystore.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.welcia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersatlanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersconnecticut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y-face.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yext.lvwadvisors.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017548fa50dc0000040300473045022100d61da4c742e0ee2d3e9658d8d86d96f417a19e89b3b26788b8e1c0ed2e0a028e022062196c8b1c700b95ca45f9f14d4a604fac559efb65eea8dbf3c8315ab38d10a9007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017548fa50d6000004030046304402206569015f2bc888c0c4a2494c43674e3c96ebd9b479eb0482a2e557f7d6946ac802203037098bb9bfa896a3241e4e9902959e89caa0cf1fef174e2d08de413b6b8e64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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