mamascherokee.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:50:85:fe:f3:41:6e:75:0e:a9:07:18:e6:20:ff:d7:64 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mamascherokee.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:50:85:fe:f3:41:6e:75:0e:a9:07:18:e6:20:ff:d7:64
Serial Number (int): 332562906467906590084380269982055437162340
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:4f:55:8d:89:bc:0e:d7:8e:81:ed:16:56:0f:fc:88:fe:0e:ef:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:cb:4d:86:9d:46:0f:d1:61:6b:b7:4d:66:25:b8:d0:6e:41:25:e5
Fingerprint (sha256): c1:85:eb:5d:1f:1f:52:4e:a4:e3:59:9a:fb:ed:75:86:54:42:a4:92:29:3a:11:5c:69:5e:40:1e:0a:37:29:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mamascherokee.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mamascherokee.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.achuff.com
*.akrem.com
*.aksoyschrijnwerkerij.com
*.allandroiddevices.com
*.alquilervehiculos.com
*.annet.cc
*.beansproutec.com
*.beateasefst.com
*.bigthoughts.co
*.blackreligionandspirituality.com
*.boatcenterpalace.com
*.boyslove7.com
*.brinknarak.com
*.btcnootropics.com
*.cabogrillandcantina.com
*.cannahost.us
*.capit-alone.com
*.carpete.com
*.celuloterapia.com
*.claassen.com
*.firstpornshots.com
*.gemynewfashion.com
*.happywheals.com
*.huaishan.com
*.huette.com
*.jookm.com
*.kovrigin.com
*.kubanto.org
*.lacrosseleague.com
*.lorwin.com
*.mamascherokee.com
*.merkalcalzado.com
*.music2gogo.com
*.myplaypoint.com
*.programafullmega.com
*.reklamiranje.com
*.sinemakina.com
*.sportychicksonly.com
*.tagmanagementtips.com
*.thecongregation.org
*.theflaticons.com
*.themassagesolution.com
*.thetechz.com
*.thevapeshopnc.com
*.trester.com
*.tvespanola.com
*.ukensnytt.com
*.unlokriber.com
*.vranjes.com
*.weiluan.com
achuff.com
akrem.com
aksoyschrijnwerkerij.com
allandroiddevices.com
alquilervehiculos.com
annet.cc
beansproutec.com
beateasefst.com
bigthoughts.co
blackreligionandspirituality.com
boatcenterpalace.com
boyslove7.com
brinknarak.com
btcnootropics.com
cabogrillandcantina.com
cannahost.us
capit-alone.com
carpete.com
celuloterapia.com
claassen.com
firstpornshots.com
gemynewfashion.com
happywheals.com
huaishan.com
huette.com
jookm.com
kovrigin.com
kubanto.org
lacrosseleague.com
lorwin.com
mamascherokee.com
merkalcalzado.com
music2gogo.com
myplaypoint.com
programafullmega.com
reklamiranje.com
sinemakina.com
sportychicksonly.com
tagmanagementtips.com
thecongregation.org
theflaticons.com
themassagesolution.com
thetechz.com
thevapeshopnc.com
trester.com
tvespanola.com
ukensnytt.com
unlokriber.com
vranjes.com
weiluan.com

Other certificates including the domain name mamascherokee.com

(limited to 100 certificates)
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
jeanines.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
tls.automattic.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
tls.automattic.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
tls.automattic.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
tls.automattic.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
tls.automattic.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
tls.automattic.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
sni198459.cloudflaressl.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for mamascherokee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINgDCCDGigAwIBAgISA9FQhf7zQW51DqkHGOYg/9dkMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDMwNjI2MDdaFw0y
MDA0MDIwNjI2MDdaMBwxGjAYBgNVBAMTEW1hbWFzY2hlcm9rZWUuY29tMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuyY9g2KCNW9pB58Q5dE1Z2CNJev0
XnfbEIGLmcbfFqa9V8m8Rgh9PJYStQNvmoIIpiSaRYR+O1K9p1c+WskGFFL82eUD
jJXJnpF0uzhI6s3ZvTTqWzVAt6ObkeT1QaK8lVu2M+PNceU8p0szdpBIbeMVJhZf
JQW9OKj6HIj+P6wDAwqjBZVMQd5hgzj9zA4xwVONBu8zBcOvLnCkRH16QAwV6wf6
AiRVBfMRnFs00NZ05RPIigQ9ZK+NTVaINdN/177x+QY2aeiEt3JEsAjV4oGl8V3X
rYfTyB/h2dIK3FRCDUf6VC6lcMSqNYos+7fHyX/yUCu6R/DglA6Mu0ewWtXUqKTk
8/GOxS2j6gETNYEWcyqNbSo7d9ZP/Dds+dx3yBIRlQ+MHOZoY/fTapXRxcsUp56p
vMSFrHa0XcDNwJ9oSKYlsFk2j8Q3MXacUiQCFp/Dkub8hsIh7+aL7Ar73y9Jsv0d
vCwVoB3gg55YUGD08yS4iQdUjW6UHb3HZ8lQmblGVXR/0YzX1gBFTiAa8Yc3gKkG
jJlSktcXhtNJD2v30N/bxh/oVe0libs4DwEpF8tg1ilVJrb7OHiYwk/sOdSWx3VP
xECTR1nvf1QSXLj+ZBnqITWXNq1OwwiQH6gydr22un5RfiKzptA6KJwVluSMApl2
4ocawZkdI76Q8T8CAwEAAaOCCYwwggmIMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
ok9VjYm8DteOge0WVg/8iP4O7z8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzCCBz8GA1UdEQSCBzYwggcyggwqLmFjaHVm
Zi5jb22CCyouYWtyZW0uY29tghoqLmFrc295c2NocmlqbndlcmtlcmlqLmNvbYIX
Ki5hbGxhbmRyb2lkZGV2aWNlcy5jb22CFyouYWxxdWlsZXJ2ZWhpY3Vsb3MuY29t
ggoqLmFubmV0LmNjghIqLmJlYW5zcHJvdXRlYy5jb22CESouYmVhdGVhc2Vmc3Qu
Y29tghAqLmJpZ3Rob3VnaHRzLmNvgiIqLmJsYWNrcmVsaWdpb25hbmRzcGlyaXR1
YWxpdHkuY29tghYqLmJvYXRjZW50ZXJwYWxhY2UuY29tgg8qLmJveXNsb3ZlNy5j
b22CECouYnJpbmtuYXJhay5jb22CEyouYnRjbm9vdHJvcGljcy5jb22CGSouY2Fi
b2dyaWxsYW5kY2FudGluYS5jb22CDiouY2FubmFob3N0LnVzghEqLmNhcGl0LWFs
b25lLmNvbYINKi5jYXJwZXRlLmNvbYITKi5jZWx1bG90ZXJhcGlhLmNvbYIOKi5j
bGFhc3Nlbi5jb22CFCouZmlyc3Rwb3Juc2hvdHMuY29tghQqLmdlbXluZXdmYXNo
aW9uLmNvbYIRKi5oYXBweXdoZWFscy5jb22CDiouaHVhaXNoYW4uY29tggwqLmh1
ZXR0ZS5jb22CCyouam9va20uY29tgg4qLmtvdnJpZ2luLmNvbYINKi5rdWJhbnRv
Lm9yZ4IUKi5sYWNyb3NzZWxlYWd1ZS5jb22CDCoubG9yd2luLmNvbYITKi5tYW1h
c2NoZXJva2VlLmNvbYITKi5tZXJrYWxjYWx6YWRvLmNvbYIQKi5tdXNpYzJnb2dv
LmNvbYIRKi5teXBsYXlwb2ludC5jb22CFioucHJvZ3JhbWFmdWxsbWVnYS5jb22C
EioucmVrbGFtaXJhbmplLmNvbYIQKi5zaW5lbWFraW5hLmNvbYIWKi5zcG9ydHlj
aGlja3Nvbmx5LmNvbYIXKi50YWdtYW5hZ2VtZW50dGlwcy5jb22CFSoudGhlY29u
Z3JlZ2F0aW9uLm9yZ4ISKi50aGVmbGF0aWNvbnMuY29tghgqLnRoZW1hc3NhZ2Vz
b2x1dGlvbi5jb22CDioudGhldGVjaHouY29tghMqLnRoZXZhcGVzaG9wbmMuY29t
gg0qLnRyZXN0ZXIuY29tghAqLnR2ZXNwYW5vbGEuY29tgg8qLnVrZW5zbnl0dC5j
b22CECoudW5sb2tyaWJlci5jb22CDSoudnJhbmplcy5jb22CDSoud2VpbHVhbi5j
b22CCmFjaHVmZi5jb22CCWFrcmVtLmNvbYIYYWtzb3lzY2hyaWpud2Vya2VyaWou
Y29tghVhbGxhbmRyb2lkZGV2aWNlcy5jb22CFWFscXVpbGVydmVoaWN1bG9zLmNv
bYIIYW5uZXQuY2OCEGJlYW5zcHJvdXRlYy5jb22CD2JlYXRlYXNlZnN0LmNvbYIO
YmlndGhvdWdodHMuY2+CIGJsYWNrcmVsaWdpb25hbmRzcGlyaXR1YWxpdHkuY29t
ghRib2F0Y2VudGVycGFsYWNlLmNvbYINYm95c2xvdmU3LmNvbYIOYnJpbmtuYXJh
ay5jb22CEWJ0Y25vb3Ryb3BpY3MuY29tghdjYWJvZ3JpbGxhbmRjYW50aW5hLmNv
bYIMY2FubmFob3N0LnVzgg9jYXBpdC1hbG9uZS5jb22CC2NhcnBldGUuY29tghFj
ZWx1bG90ZXJhcGlhLmNvbYIMY2xhYXNzZW4uY29tghJmaXJzdHBvcm5zaG90cy5j
b22CEmdlbXluZXdmYXNoaW9uLmNvbYIPaGFwcHl3aGVhbHMuY29tggxodWFpc2hh
bi5jb22CCmh1ZXR0ZS5jb22CCWpvb2ttLmNvbYIMa292cmlnaW4uY29tggtrdWJh
bnRvLm9yZ4ISbGFjcm9zc2VsZWFndWUuY29tggpsb3J3aW4uY29tghFtYW1hc2No
ZXJva2VlLmNvbYIRbWVya2FsY2FsemFkby5jb22CDm11c2ljMmdvZ28uY29tgg9t
eXBsYXlwb2ludC5jb22CFHByb2dyYW1hZnVsbG1lZ2EuY29tghByZWtsYW1pcmFu
amUuY29tgg5zaW5lbWFraW5hLmNvbYIUc3BvcnR5Y2hpY2tzb25seS5jb22CFXRh
Z21hbmFnZW1lbnR0aXBzLmNvbYITdGhlY29uZ3JlZ2F0aW9uLm9yZ4IQdGhlZmxh
dGljb25zLmNvbYIWdGhlbWFzc2FnZXNvbHV0aW9uLmNvbYIMdGhldGVjaHouY29t
ghF0aGV2YXBlc2hvcG5jLmNvbYILdHJlc3Rlci5jb22CDnR2ZXNwYW5vbGEuY29t
gg11a2Vuc255dHQuY29tgg51bmxva3JpYmVyLmNvbYILdnJhbmplcy5jb22CC3dl
aWx1YW4uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB
BAHWeQIEAgSB9gSB8wDxAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqO
snMAAAFvakwPCAAABAMARzBFAiBuiv7dthrHovOzdKTO0wAcj9hgCqWP/2hv1VGf
6wWlGQIhAOhXdKOdPZf6b4jHQx/NpOqL3bKUv0IeXtcPyhvkU8oqAHcAB7dcG+V9
aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvakwPQAAABAMASDBGAiEAuMBQ
PjiAM6WArXI8e73brFMUkH+ErNvG/V9nEnRJmUwCIQD2wDwV5Y5/FPaVhJ4n3ASi
6BuS5F55NWMkklqyNpEsAzANBgkqhkiG9w0BAQsFAAOCAQEAmvttCHQsCIx5bRb8
141ROvz/k4UvpT5sFdumheRM94/qxZFQZcoNl0KcqSUI7x2OzHsTt0wDnJOPLNsy
toHOzfyqLYkNZOiXCNvvGtx9m72gcUx1+4rp3jAs1lE774HSFOxs30XqSG69Ecij
6bUEmPIZ9Cn4NPStzTecX1YVrsNmEkpaLRZZECJxtqrGpyIom0eaZvGYtq02+O6q
icev5g9t5ez9CYzjV/DEcYtKHMsI7urdKuG6aLn8+F9MKvc8MiDJuKXCaL0FwGBr
RK1o8c9otKHj5YUTLak/Dxj3LZIUuTykcuk5vSyQbjrw/DWO6+nn9FvtKdBPM0aK
jgG03g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332562906467906590084380269982055437162340
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 06:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 06:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mamascherokee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763502842110517166584034220467843585769389532489008244835064979447990847556925290187136798679638800290120330330358236280887772515944052830635746965078584938733511466487930068611775475171601628010260213013446105681850219075454641948704745300051142822791120145247705498993867000851431576040736763270136733166503069301026293053472797978570622177106133639153108349673127908495640844899648049416431191834300232500431159132954117678417208195354745144315440253074892896109983717050420837221549432820083755453552214290572406152461152825917068666039180361881972977340229917243951894153148223730196653947664574699933101524491829574052006598537739582461343145437993362505153764240293266792619137171287223837252122387815879404388746519908140064919875098173306721277795634618629689249312227182447675315020150749810505865711914957005168838653591405688521179246655309104685043121858178561793548122700956827347394235339522101255524493386700358561392702606740568849641448997206247681582596772343212836637094883118234757040648388822321697633173074054386182008641063195334122075926445017557441753724268030587206766913548526973818970147342380251014014933865869260666399660823958134364234275832021676186908380134660847957936190462767618832907283431747903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a24f558d89bc0ed78e81ed16560ffc88fe0eef3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akrem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aksoyschrijnwerkerij.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allandroiddevices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alquilervehiculos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annet.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beansproutec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beateasefst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigthoughts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackreligionandspirituality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatcenterpalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boyslove7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinknarak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcnootropics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabogrillandcantina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannahost.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capit-alone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carpete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celuloterapia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claassen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstpornshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemynewfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happywheals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huaishan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jookm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kovrigin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kubanto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacrosseleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mamascherokee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merkalcalzado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.music2gogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myplaypoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.programafullmega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reklamiranje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinemakina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportychicksonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagmanagementtips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecongregation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theflaticons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themassagesolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetechz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thevapeshopnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvespanola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukensnytt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlokriber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vranjes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weiluan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akrem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aksoyschrijnwerkerij.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allandroiddevices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alquilervehiculos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annet.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beansproutec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beateasefst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigthoughts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackreligionandspirituality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatcenterpalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boyslove7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinknarak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcnootropics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabogrillandcantina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannahost.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capit-alone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celuloterapia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claassen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstpornshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemynewfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happywheals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huaishan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jookm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kovrigin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubanto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacrosseleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamascherokee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merkalcalzado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music2gogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplaypoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programafullmega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reklamiranje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinemakina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportychicksonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagmanagementtips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecongregation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theflaticons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themassagesolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetechz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevapeshopnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvespanola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukensnytt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlokriber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vranjes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiluan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f6a4c0f08000004030047304502206e8afeddb61ac7a2f3b374a4ced3001c8fd8600aa58fff686fd5519feb05a519022100e85774a39d3d97fa6f88c7431fcda4ea8bddb294bf421e5ed70fca1be453ca2a00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f6a4c0f400000040300483046022100b8c0503e388033a580ad723c7bbddbac5314907f84acdbc6fd5f67127449994c022100f6c03c15e58e7f14f695849e27dc04a2e81b92e45e79356324925ab236912c03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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