mail1.bitsculptor.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:2f:f1:2e:f4:b2:89:9a:7a:8c:8f:c9:41:64:43:bc:8e was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail1.bitsculptor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:2f:f1:2e:f4:b2:89:9a:7a:8c:8f:c9:41:64:43:bc:8e
Serial Number (int): 296449667599859967721632132029634459188366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:22:16:7f:87:de:b7:4b:ca:fe:e2:e1:7a:da:50:9c:39:a4:fc:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:35:57:fc:fc:3d:c8:1c:1d:de:c2:86:b5:c5:35:96:cd:94:4d:0e
Fingerprint (sha256): ab:25:6f:c3:1d:a6:d3:2e:d9:ef:4a:9c:62:d6:5e:4e:af:e9:1c:6d:71:b7:ac:f1:8a:96:9b:28:e3:8e:71:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail1.bitsculptor.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail1.bitsculptor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.airiart.com
mail.alaskazimm.com
mail.anitaswanson.com
mail.aqmpm.com
mail.asm-afs-peoria.org
mail.banjohangout.org
mail.bethanycommunitychurch.org
mail.bitsculptor.com
mail.borntob.com
mail.brooktrailsfire.com
mail.ckevinatter.com
mail.clearlakeperformingarts.org
mail.colemko.com
mail.countryair.com
mail.fiddlehangout.com
mail.flatpickerhangout.com
mail.grasstrax.com
mail.gringpestcontrol.com
mail.h2owiser.com
mail.hammersforhope.org
mail.hangoutnetwork.com
mail.harmonyhealinghouse.com
mail.heydeeye.com
mail.hoplandfire.org
mail.jaredhendricks.com
mail.kiwanislakeport.org
mail.konoctirealty.com
mail.lakecochamber.com
mail.lakecountysymphonyassociation.org
mail.lakecountywineries.org
mail.lakecountywinestudio.com
mail.lakeportenglishinn.com
mail.lakeportfire.com
mail.lakeportlawyers.com
mail.lakeportmainstreet.com
mail.lakeps.com
mail.lakeviewmarket.com
mail.livinghopecentral.org
mail.localfires.com
mail.logisticlinks.com
mail.madesonphotography.com
mail.mandohangout.com
mail.mapletonmanagement.com
mail.midwestvineyardsupply.com
mail.needmedi-cal.com
mail.nordhammer.com
mail.paciniwines.com
mail.predatorpestcontrol.biz
mail.predatorpwm.com
mail.redwoodvalleyfire.org
mail.regencyinnlakeport.com
mail.resohangout.com
mail.runningspringshvac.com
mail.sdgtoday.com
mail.shastalakevacations.com
mail.silverajewelry.com
mail.simplesweet.com
mail.skylarkshoreshotel.com
mail.solreyproperties.com
mail.soperreesetheatre.com
mail.sorensendesigngroup.com
mail.sossforsud.com
mail.stfrancoisvineyard.com
mail.stokesladders.com
mail.switzerengineering.com
mail.theritzes.com
mail.towacosm.com
mail.turnkeyprod.com
mail.vdwengr.com
mail.visitkelseyville.com
mail.whiteoaknursery.com
mail.wineryassociation.com
mail.woodsongguitars.com
mail.yourhappysmile.com
mail.zwiftblog.com
mail1.bitsculptor.com

Other certificates including the domain name bitsculptor.com

(limited to 100 certificates)
mail1.bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
lvpscp-4.bitsculptor.com
bitsculptor.com
www.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
lvpscp-4.bitsculptor.com
jamesboysblog.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
sossforsud.bitsculptor.com
lvpscp-3.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
secure.bitsculptor.com
bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
www.bitsculptor.com
mail1.bitsculptor.com
secure.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
lvpscp-3.bitsculptor.com
mail1.bitsculptor.com
clrcadev.bitsculptor.com
bit1.bitsculptor.com

Certificate

The complete raw certificate details for mail1.bitsculptor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMsDCCC5igAwIBAgISA2cv8S70somaeoyPyUFkQ7yOMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTYyMDM1MDdaFw0x
OTEwMTQyMDM1MDdaMCAxHjAcBgNVBAMTFW1haWwxLmJpdHNjdWxwdG9yLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALakrHgymThcpfQuVhUFKP9+
WJuPyiReps0ltOkFU2Bd5XUMcATcrChcm2+3ysDRiXnQ300jPjoQUUisPfQKhXW6
GpdOmmXG3o4mwNUMi3tCFY1G6HzvJwvBADe9dX2GXIYoWAJB81tveEwSI+YKyHYw
y1amYZZ//NS4nI0TUOezuklCQzBhSQ575z9r/Vtgz/KWS8BzHPYP2/YjBNjzRrte
tllwWYm6GxQe5axo+KDU7c7wbpFU8RRpc8SeSLaSKlw8d4xtlB+XNhpddva7vfU+
QIP79QiQBarCbTo6w7qkDg5VU6gLuElhLmXNi3eKZ5U0XizZopfE+a/+gx/DvfUC
AwEAAaOCCbgwggm0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUTSIWf4fet0vK/uLh
etpQnDmk/DcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCCB2sGA1UdEQSCB2IwggdeghBtYWlsLmFpcmlhcnQuY29tghNt
YWlsLmFsYXNrYXppbW0uY29tghVtYWlsLmFuaXRhc3dhbnNvbi5jb22CDm1haWwu
YXFtcG0uY29tghdtYWlsLmFzbS1hZnMtcGVvcmlhLm9yZ4IVbWFpbC5iYW5qb2hh
bmdvdXQub3Jngh9tYWlsLmJldGhhbnljb21tdW5pdHljaHVyY2gub3JnghRtYWls
LmJpdHNjdWxwdG9yLmNvbYIQbWFpbC5ib3JudG9iLmNvbYIYbWFpbC5icm9va3Ry
YWlsc2ZpcmUuY29tghRtYWlsLmNrZXZpbmF0dGVyLmNvbYIgbWFpbC5jbGVhcmxh
a2VwZXJmb3JtaW5nYXJ0cy5vcmeCEG1haWwuY29sZW1rby5jb22CE21haWwuY291
bnRyeWFpci5jb22CFm1haWwuZmlkZGxlaGFuZ291dC5jb22CGm1haWwuZmxhdHBp
Y2tlcmhhbmdvdXQuY29tghJtYWlsLmdyYXNzdHJheC5jb22CGW1haWwuZ3Jpbmdw
ZXN0Y29udHJvbC5jb22CEW1haWwuaDJvd2lzZXIuY29tghdtYWlsLmhhbW1lcnNm
b3Job3BlLm9yZ4IXbWFpbC5oYW5nb3V0bmV0d29yay5jb22CHG1haWwuaGFybW9u
eWhlYWxpbmdob3VzZS5jb22CEW1haWwuaGV5ZGVleWUuY29tghRtYWlsLmhvcGxh
bmRmaXJlLm9yZ4IXbWFpbC5qYXJlZGhlbmRyaWNrcy5jb22CGG1haWwua2l3YW5p
c2xha2Vwb3J0Lm9yZ4IWbWFpbC5rb25vY3RpcmVhbHR5LmNvbYIWbWFpbC5sYWtl
Y29jaGFtYmVyLmNvbYImbWFpbC5sYWtlY291bnR5c3ltcGhvbnlhc3NvY2lhdGlv
bi5vcmeCG21haWwubGFrZWNvdW50eXdpbmVyaWVzLm9yZ4IdbWFpbC5sYWtlY291
bnR5d2luZXN0dWRpby5jb22CG21haWwubGFrZXBvcnRlbmdsaXNoaW5uLmNvbYIV
bWFpbC5sYWtlcG9ydGZpcmUuY29tghhtYWlsLmxha2Vwb3J0bGF3eWVycy5jb22C
G21haWwubGFrZXBvcnRtYWluc3RyZWV0LmNvbYIPbWFpbC5sYWtlcHMuY29tghdt
YWlsLmxha2V2aWV3bWFya2V0LmNvbYIabWFpbC5saXZpbmdob3BlY2VudHJhbC5v
cmeCE21haWwubG9jYWxmaXJlcy5jb22CFm1haWwubG9naXN0aWNsaW5rcy5jb22C
G21haWwubWFkZXNvbnBob3RvZ3JhcGh5LmNvbYIVbWFpbC5tYW5kb2hhbmdvdXQu
Y29tghttYWlsLm1hcGxldG9ubWFuYWdlbWVudC5jb22CHm1haWwubWlkd2VzdHZp
bmV5YXJkc3VwcGx5LmNvbYIVbWFpbC5uZWVkbWVkaS1jYWwuY29tghNtYWlsLm5v
cmRoYW1tZXIuY29tghRtYWlsLnBhY2luaXdpbmVzLmNvbYIcbWFpbC5wcmVkYXRv
cnBlc3Rjb250cm9sLmJpeoIUbWFpbC5wcmVkYXRvcnB3bS5jb22CGm1haWwucmVk
d29vZHZhbGxleWZpcmUub3JnghttYWlsLnJlZ2VuY3lpbm5sYWtlcG9ydC5jb22C
FG1haWwucmVzb2hhbmdvdXQuY29tghttYWlsLnJ1bm5pbmdzcHJpbmdzaHZhYy5j
b22CEW1haWwuc2RndG9kYXkuY29tghxtYWlsLnNoYXN0YWxha2V2YWNhdGlvbnMu
Y29tghdtYWlsLnNpbHZlcmFqZXdlbHJ5LmNvbYIUbWFpbC5zaW1wbGVzd2VldC5j
b22CG21haWwuc2t5bGFya3Nob3Jlc2hvdGVsLmNvbYIZbWFpbC5zb2xyZXlwcm9w
ZXJ0aWVzLmNvbYIabWFpbC5zb3BlcnJlZXNldGhlYXRyZS5jb22CHG1haWwuc29y
ZW5zZW5kZXNpZ25ncm91cC5jb22CE21haWwuc29zc2ZvcnN1ZC5jb22CG21haWwu
c3RmcmFuY29pc3ZpbmV5YXJkLmNvbYIWbWFpbC5zdG9rZXNsYWRkZXJzLmNvbYIb
bWFpbC5zd2l0emVyZW5naW5lZXJpbmcuY29tghJtYWlsLnRoZXJpdHplcy5jb22C
EW1haWwudG93YWNvc20uY29tghRtYWlsLnR1cm5rZXlwcm9kLmNvbYIQbWFpbC52
ZHdlbmdyLmNvbYIZbWFpbC52aXNpdGtlbHNleXZpbGxlLmNvbYIYbWFpbC53aGl0
ZW9ha251cnNlcnkuY29tghptYWlsLndpbmVyeWFzc29jaWF0aW9uLmNvbYIYbWFp
bC53b29kc29uZ2d1aXRhcnMuY29tghdtYWlsLnlvdXJoYXBweXNtaWxlLmNvbYIS
bWFpbC56d2lmdGJsb2cuY29tghVtYWlsMS5iaXRzY3VscHRvci5jb20wTAYDVR0g
BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA
dwDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWv8teZ7AAAEAwBI
MEYCIQCbZstCeAEIPnv6MCUh4ol6BUDmT5sqwW0kTEO1ptqmBwIhAIG9mesLXiOy
ukrLy57EGGUnq5CBbtWy0xJUSP2e/+a6AHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXeP
vXWmOLHHaFRL2I0AAAFr/LXomQAABAMARzBFAiBv9CLtzN0eF8zL2MvfegMY/a1F
UzADiA4VCdm8l+NfxgIhAORiID6FHXcJ2FbWHmYgUxdi8fHVFJLahxLxq0Ocstq0
MA0GCSqGSIb3DQEBCwUAA4IBAQBlD7azLbxkkLcpNE0pQ6ARg3WgP1KxlBXjkyjH
X4k1Zbe5O6jRvt9FIYtQN7IYdby/RxeHRdto/5M2iTIaXw/E8DPKKde0lfXlP+Y7
cpLIPa7316pUVS78nGLszxe0CjZowd8VpXEAn0gUi+EQy+ei4+vptlw9YQH8NrTl
VB6Z1x8agxPNxIdPU9MTZCbcSYRHmZL18WaU0fz/3y6lPn4fLIuh5MAznd+rxaKG
58fOVAOFPgdZWK1bslCxo9pdK2QTCe4OZ71L6EXDNhzI7IFHeq+FerZdOeAiRZtO
LDphYPFJ+aUujm23j2tUIRMRLgDuxBA5TQo6GH/y2dUgy/Li
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqSseDKZOFyl9C5WFQUo
/35Ym4/KJF6mzSW06QVTYF3ldQxwBNysKFybb7fKwNGJedDfTSM+OhBRSKw99AqF
dboal06aZcbejibA1QyLe0IVjUbofO8nC8EAN711fYZchihYAkHzW294TBIj5grI
djDLVqZhln/81LicjRNQ57O6SUJDMGFJDnvnP2v9W2DP8pZLwHMc9g/b9iME2PNG
u162WXBZibobFB7lrGj4oNTtzvBukVTxFGlzxJ5ItpIqXDx3jG2UH5c2Gl129ru9
9T5Ag/v1CJAFqsJtOjrDuqQODlVTqAu4SWEuZc2Ld4pnlTReLNmil8T5r/6DH8O9
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296449667599859967721632132029634459188366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 20:35:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 20:35:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail1.bitsculptor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23056575136266207028099326392171115712962249788093938552685647574286173288166687966206110475591570916109542144536569123368047998748742952581140255619459332370525736752276748886907882814856730474360323776349679607377136383830488202545873258676230020856189589649072736436253295237269325056355962378228036962838876076883416791118637494375181057998539980807298615227377521726013246004210387530606471154168674984386741791536921300077876558178084091207310730706641533760536704943645428475497110750448055763134758136998451257943411475412644662592849605786263891972917890071047909543490835151108346360078361349513294299512309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d22167f87deb74bcafee2e17ada509c39a4fc37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1890 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.airiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alaskazimm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.anitaswanson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aqmpm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.asm-afs-peoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.banjohangout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bethanycommunitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bitsculptor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.borntob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.brooktrailsfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ckevinatter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.clearlakeperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.colemko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.countryair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fiddlehangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.flatpickerhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grasstrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gringpestcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.h2owiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hammersforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hangoutnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.harmonyhealinghouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.heydeeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hoplandfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jaredhendricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kiwanislakeport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.konoctirealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecochamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountysymphonyassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountywineries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountywinestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportenglishinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportmainstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeviewmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.livinghopecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.localfires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.logisticlinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.madesonphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mandohangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mapletonmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.midwestvineyardsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.needmedi-cal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nordhammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.paciniwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.predatorpestcontrol.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.predatorpwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.redwoodvalleyfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.regencyinnlakeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.resohangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.runningspringshvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sdgtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.shastalakevacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.silverajewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.simplesweet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.skylarkshoreshotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.solreyproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.soperreesetheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sorensendesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sossforsud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stfrancoisvineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stokesladders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.switzerengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.theritzes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.towacosm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.turnkeyprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vdwengr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.visitkelseyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.whiteoaknursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wineryassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.woodsongguitars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.yourhappysmile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zwiftblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.bitsculptor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bfcb5e67b00000403004830460221009b66cb427801083e7bfa302521e2897a0540e64f9b2ac16d244c43b5a6daa60702210081bd99eb0b5e23b2ba4acbcb9ec4186527ab90816ed5b2d3125448fd9effe6ba00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bfcb5e899000004030047304502206ff422edccdd1e17cccbd8cbdf7a0318fdad45533003880e1509d9bc97e35fc6022100e462203e851d7709d856d61e6620531762f1f1d51492da8712f1ab439cb2dab4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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