goodgermanshepherds.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:57:1a:2b:89:dd:ae:c0:3b:71:94:c2:c0:4d:b6:10:74 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goodgermanshepherds.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:57:1a:2b:89:dd:ae:c0:3b:71:94:c2:c0:4d:b6:10:74
Serial Number (int): 329509109897886520888537672678687257268340
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:a6:8d:3b:cf:3e:53:e1:3d:97:f0:c6:94:94:32:45:51:89:b5:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:ea:37:bc:45:f4:6f:e8:89:84:83:b2:e7:24:c2:23:96:14:be:71
Fingerprint (sha256): c0:21:f4:3f:d2:e3:2b:da:a6:8e:19:17:7b:15:64:61:cd:f1:d9:63:ae:d3:c4:4e:fc:be:0d:96:b9:4a:c8:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate goodgermanshepherds.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goodgermanshepherds.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3dxperience.com
*.agesen.com
*.aircop.com
*.amazinggrains.com
*.aydilge.com
*.buddyrabbits.com
*.canaln.com
*.celticsarongs.com
*.comprarlentillas.com
*.dallascowbys.com
*.dcrecords.com
*.desiduniya.com
*.diorecttv.com
*.elfengshui.com
*.estrename.com
*.foodnetworki.com
*.goodgermanshepherds.com
*.guaral.com
*.h2otec.com
*.igorsaharoff.com
*.katniss.com
*.koltuv.com
*.lakvideo.com
*.luvlike.com
*.medikalservis.com
*.mme2000.com
*.mompi.com
*.muzai.com
*.mycutestamps.com
*.newidcard.com
*.paperfy.com
*.piedrahita.com
*.recipeinventor.com
*.reigner.com
*.retrodome.com
*.revenderroupas.com
*.secondnaturecd.com
*.sherpablanket.com
*.sjsu.com
*.sporthoodies.com
*.submitrelease.com
*.thecoldplate.com
*.thesnooker.com
*.tinhnguoi.com
*.toptvbytes.com
*.tumie.com
*.vanillamatercard.com
*.victoriasecerete.com
*.victorirasecret.com
*.wolontariat.com
3dxperience.com
agesen.com
aircop.com
amazinggrains.com
aydilge.com
buddyrabbits.com
canaln.com
celticsarongs.com
comprarlentillas.com
dallascowbys.com
dcrecords.com
desiduniya.com
diorecttv.com
elfengshui.com
estrename.com
foodnetworki.com
goodgermanshepherds.com
guaral.com
h2otec.com
igorsaharoff.com
katniss.com
koltuv.com
lakvideo.com
luvlike.com
medikalservis.com
mme2000.com
mompi.com
muzai.com
mycutestamps.com
newidcard.com
paperfy.com
piedrahita.com
recipeinventor.com
reigner.com
retrodome.com
revenderroupas.com
secondnaturecd.com
sherpablanket.com
sjsu.com
sporthoodies.com
submitrelease.com
thecoldplate.com
thesnooker.com
tinhnguoi.com
toptvbytes.com
tumie.com
vanillamatercard.com
victoriasecerete.com
victorirasecret.com
wolontariat.com

Other certificates including the domain name goodgermanshepherds.com

(limited to 100 certificates)
deprotetor.com
blondell.com
joanfabrics.com
zairen.com
tsushin.com
goodgermanshepherds.com
knattspyrna.com

Certificate

The complete raw certificate details for goodgermanshepherds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM/jCCC+agAwIBAgISA8hXGiuJ3a7AO3GUwsBNthB0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjkwOTM0MzlaFw0y
MDA1MjkwOTM0MzlaMCIxIDAeBgNVBAMTF2dvb2RnZXJtYW5zaGVwaGVyZHMuY29t
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAto0jf2WNXB3abFKRYF+s
iwN9QeP9krfnzrb7YgfnJc01sdSjb1vv/Mf/Mo85hfX2Oq4a/4AcMMS4lHAOJbbP
RtYTZ84DUJfMOqfkIk48V0ZXQ+yc2dGhBuONKuGUY2LADknjVaCZFD4o2PkCYsRu
hpAPSDyWRohYBy4hyNYeT17Et/N1ZaV1MR9vCuF7jHEtFSOgkvZqUMg9uW8R8bNP
Tf18aR6ObSjikcsfCctLKVhAWlx/MiYmDIgA6cN8doatGtpzHoZdZQv5ojHFRRLQ
CTPxuuH8iC4vtPfKqav5+CwD6XRCv7KBDD3sDLHYT1j58aTWMldTBbXk2NTfEXPr
tGnyowE0dOrtXtvJJhwyx4isVHZPM+pAnP43O5OOGz4asYJfOnrBaKaddbkMqmJp
tymX6I6Yayhz3koxg57h0ZO3d0kMg4YVsB4RrYPIhkZld5xkVlaVC6MBP/Ge0cXl
DD82de2NsGt4AFWtPKbzUrxm3aVAVAOMLTvp/ki5djrSrFSF3eF3pR1vHFFlpeFI
UgXQCcfj8uv5LQ/Kps0xjWQQMfHdEH+08lGWikKyMg+uLT1OzrtPwYjsNu3PMKoY
1c5oiu/jrzTKKVOXpPSn+lWkN9wowJh1qSKwCao3BWvJHqzGmQPQNrdnttbbODs6
hQX2mePX4sxOYFgUnLbSKxcCAwEAAaOCCQQwggkAMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUa6aNO88+U+E9l/DGlJQyRVGJtYAwHwYDVR0jBBgwFoAUqEpqYwR93brm
0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8v
b2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8v
Y2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCBrkGA1UdEQSCBrAwggasghEq
LjNkeHBlcmllbmNlLmNvbYIMKi5hZ2VzZW4uY29tggwqLmFpcmNvcC5jb22CEyou
YW1hemluZ2dyYWlucy5jb22CDSouYXlkaWxnZS5jb22CEiouYnVkZHlyYWJiaXRz
LmNvbYIMKi5jYW5hbG4uY29tghMqLmNlbHRpY3Nhcm9uZ3MuY29tghYqLmNvbXBy
YXJsZW50aWxsYXMuY29tghIqLmRhbGxhc2Nvd2J5cy5jb22CDyouZGNyZWNvcmRz
LmNvbYIQKi5kZXNpZHVuaXlhLmNvbYIPKi5kaW9yZWN0dHYuY29tghAqLmVsZmVu
Z3NodWkuY29tgg8qLmVzdHJlbmFtZS5jb22CEiouZm9vZG5ldHdvcmtpLmNvbYIZ
Ki5nb29kZ2VybWFuc2hlcGhlcmRzLmNvbYIMKi5ndWFyYWwuY29tggwqLmgyb3Rl
Yy5jb22CEiouaWdvcnNhaGFyb2ZmLmNvbYINKi5rYXRuaXNzLmNvbYIMKi5rb2x0
dXYuY29tgg4qLmxha3ZpZGVvLmNvbYINKi5sdXZsaWtlLmNvbYITKi5tZWRpa2Fs
c2VydmlzLmNvbYINKi5tbWUyMDAwLmNvbYILKi5tb21waS5jb22CCyoubXV6YWku
Y29tghIqLm15Y3V0ZXN0YW1wcy5jb22CDyoubmV3aWRjYXJkLmNvbYINKi5wYXBl
cmZ5LmNvbYIQKi5waWVkcmFoaXRhLmNvbYIUKi5yZWNpcGVpbnZlbnRvci5jb22C
DSoucmVpZ25lci5jb22CDyoucmV0cm9kb21lLmNvbYIUKi5yZXZlbmRlcnJvdXBh
cy5jb22CFCouc2Vjb25kbmF0dXJlY2QuY29tghMqLnNoZXJwYWJsYW5rZXQuY29t
ggoqLnNqc3UuY29tghIqLnNwb3J0aG9vZGllcy5jb22CEyouc3VibWl0cmVsZWFz
ZS5jb22CEioudGhlY29sZHBsYXRlLmNvbYIQKi50aGVzbm9va2VyLmNvbYIPKi50
aW5obmd1b2kuY29tghAqLnRvcHR2Ynl0ZXMuY29tggsqLnR1bWllLmNvbYIWKi52
YW5pbGxhbWF0ZXJjYXJkLmNvbYIWKi52aWN0b3JpYXNlY2VyZXRlLmNvbYIVKi52
aWN0b3JpcmFzZWNyZXQuY29tghEqLndvbG9udGFyaWF0LmNvbYIPM2R4cGVyaWVu
Y2UuY29tggphZ2VzZW4uY29tggphaXJjb3AuY29tghFhbWF6aW5nZ3JhaW5zLmNv
bYILYXlkaWxnZS5jb22CEGJ1ZGR5cmFiYml0cy5jb22CCmNhbmFsbi5jb22CEWNl
bHRpY3Nhcm9uZ3MuY29tghRjb21wcmFybGVudGlsbGFzLmNvbYIQZGFsbGFzY293
YnlzLmNvbYINZGNyZWNvcmRzLmNvbYIOZGVzaWR1bml5YS5jb22CDWRpb3JlY3R0
di5jb22CDmVsZmVuZ3NodWkuY29tgg1lc3RyZW5hbWUuY29tghBmb29kbmV0d29y
a2kuY29tghdnb29kZ2VybWFuc2hlcGhlcmRzLmNvbYIKZ3VhcmFsLmNvbYIKaDJv
dGVjLmNvbYIQaWdvcnNhaGFyb2ZmLmNvbYILa2F0bmlzcy5jb22CCmtvbHR1di5j
b22CDGxha3ZpZGVvLmNvbYILbHV2bGlrZS5jb22CEW1lZGlrYWxzZXJ2aXMuY29t
ggttbWUyMDAwLmNvbYIJbW9tcGkuY29tggltdXphaS5jb22CEG15Y3V0ZXN0YW1w
cy5jb22CDW5ld2lkY2FyZC5jb22CC3BhcGVyZnkuY29tgg5waWVkcmFoaXRhLmNv
bYIScmVjaXBlaW52ZW50b3IuY29tggtyZWlnbmVyLmNvbYINcmV0cm9kb21lLmNv
bYIScmV2ZW5kZXJyb3VwYXMuY29tghJzZWNvbmRuYXR1cmVjZC5jb22CEXNoZXJw
YWJsYW5rZXQuY29tgghzanN1LmNvbYIQc3BvcnRob29kaWVzLmNvbYIRc3VibWl0
cmVsZWFzZS5jb22CEHRoZWNvbGRwbGF0ZS5jb22CDnRoZXNub29rZXIuY29tgg10
aW5obmd1b2kuY29tgg50b3B0dmJ5dGVzLmNvbYIJdHVtaWUuY29tghR2YW5pbGxh
bWF0ZXJjYXJkLmNvbYIUdmljdG9yaWFzZWNlcmV0ZS5jb22CE3ZpY3RvcmlyYXNl
Y3JldC5jb22CD3dvbG9udGFyaWF0LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2APCVpFnyANGCQBAtL5OI
jq1L/h1H45nh0DSmsKiqjrJzAAABcJCDKIYAAAQDAEcwRQIgOBpowdhP6MO0h2KZ
Wm0iiEg2qJgEdSsCNGVWyFmMUZcCIQDl5z8egSmUnWM0a1TINol5BArIeVlnYGDh
82WeVaY5RAB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcJCD
KIQAAAQDAEYwRAIgPX/ZTzToZzLnPR7xFKb4SmcZJ01eeldKqCpBtSkmlvECIAd7
fTmHJWxwIiFnNVBg6en+DVnmUT6zy4YVTPY7J7W4MA0GCSqGSIb3DQEBCwUAA4IB
AQBYvuQAM0djkh+3aCmB5oTiGMShza3E3gP8XLn9G1pndhIM0fMKFx6grgmJGSxL
dELD0ylNbhiXQIC68H/kYegRIMGh5ajg907fYis+6QNGTNPr4cOtk4fd0yHXqMWh
Ax2XZ2mGi7ocpwzjQvRDLKajQ5nmQV+veVgLJ2Gm8HPqWehvlI8QRfZ+n7Yrdhc8
YTXZgJtZ4GyQpe6fKcm5vQZFBW/BC2lne2RyvVym0WXdNGpF9KCQqAW3QNUmSMil
8u/8bEDSThVDyFMCTv1uqMu1ojsIxyRUzaD3/vpWaI7zyYwWg+gTsINpvBeCSdvQ
HIBpTRVRFU5nmn9IoFkPHpXB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329509109897886520888537672678687257268340
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 09:34:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 09:34:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goodgermanshepherds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744744421582501652418075052691921109794228587296300703334721452412490845150763623603233240123910446319595602713343257742688884843869447303886840400043160502562088964796847080990296710435575158399867851514940147354794973748508593380326904121123790385745315638490530331388229409248769439874699071107040652992502364259662871911241516019721887591376604578204745747922413056195054006144500432109017547618165634670099932581789724193918987952699288255456024954823603451990209419980435366676190939407467217142741763013180067767772969476861687794054110960576494613820723914793744412389053406424345016171565035633223130382850197299982832451053258443130108305716351712425441868881644285630271943933122883495033260952873514160075663176110247286378026384920028557179626646715473115543126144111439458104961106313676511413700582048075113640190892696739725252358046044820726552052362803032822867842303631646500895065495494058049098559360067530296669708932706328930982222151916767479362724705281585830088688196149713383175231341013808728677503248669570656619715523026126035255884642122371777583475386857921574814446207551203588889276435307801767395250058399466115208511475402090574497188482698583574352916987656315973866859296821566975544537304410903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ba68d3bcf3e53e13d97f0c6949432455189b580
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dxperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agesen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aircop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazinggrains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aydilge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buddyrabbits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canaln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celticsarongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comprarlentillas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dallascowbys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desiduniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diorecttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elfengshui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estrename.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodnetworki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodgermanshepherds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guaral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h2otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igorsaharoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katniss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koltuv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luvlike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medikalservis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mme2000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mompi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muzai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycutestamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newidcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paperfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piedrahita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recipeinventor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retrodome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revenderroupas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secondnaturecd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpablanket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sporthoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.submitrelease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecoldplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesnooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinhnguoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toptvbytes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tumie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanillamatercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoriasecerete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorirasecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolontariat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dxperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agesen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazinggrains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aydilge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddyrabbits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canaln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celticsarongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comprarlentillas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallascowbys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desiduniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diorecttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elfengshui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estrename.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodnetworki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodgermanshepherds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guaral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2otec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igorsaharoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katniss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koltuv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luvlike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medikalservis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mme2000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mompi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muzai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycutestamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newidcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paperfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedrahita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipeinventor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrodome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revenderroupas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondnaturecd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherpablanket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'submitrelease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecoldplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesnooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinhnguoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toptvbytes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tumie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanillamatercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriasecerete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorirasecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolontariat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001709083288600000403004730450220381a68c1d84fe8c3b48762995a6d22884836a89804752b02346556c8598c5197022100e5e73f1e8129949d63346b54c8368979040ac87959676060e1f3659e55a63944007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017090832884000004030046304402203d7fd94f34e86732e73d1ef114a6f84a6719274d5e7a574aa82a41b5292696f10220077b7d3987256c70222167355060e9e9fe0d59e6513eb3cb86154cf63b27b5b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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