birren.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:ec:1d:3b:aa:72:31:ec:02:32:a8:3d:4a:a2:f0:ec:91 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=birren.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:ec:1d:3b:aa:72:31:ec:02:32:a8:3d:4a:a2:f0:ec:91
Serial Number (int): 293977532246550327510776132602962602159249
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:97:c7:07:26:ef:47:8c:03:b8:17:b7:22:6d:82:df:4b:ab:87:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:dc:75:d7:ef:99:25:5d:72:34:82:cc:b2:4b:c2:d4:54:a2:18:b1
Fingerprint (sha256): ce:5f:6a:e9:8c:72:d0:77:16:d2:ec:9b:39:f4:13:18:0c:5a:49:6c:83:87:8b:1b:4a:86:cb:86:b2:d5:66:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate birren.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for birren.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agroambiente.com
*.aiminlines.com
*.baskentankara.com
*.birren.com
*.candil.com
*.cbsnfl.com
*.clubdelago.com
*.coproducer.org
*.eqtest.com
*.ertac.com
*.ezpopups.com
*.ferienvilla.com
*.frehsbooks.com
*.gaetjens.com
*.himn.com
*.hopwoodmotel.com
*.jabars.com
*.jaszewski.com
*.jayrun.com
*.jera.org
*.jiangye.com
*.jouli.com
*.kechang.com
*.kjtl.com
*.kubuku.com
*.lacripta.com
*.loribeth.com
*.losmellizos.com
*.mybrownbag.com
*.notmarketing.com
*.panita.com
*.plantesetjardin.com
*.prativi.com
*.pronunciationhelp.com
*.pusup.com
*.ramirezranch.com
*.ritter.org
*.rtalent.com
*.sapatonas.com
*.scichi.com
*.sexjie.com
*.sliwoski.com
*.smerter.com
*.suelzer.com
*.thanuja.com
*.thelivechannel.com
*.themagneticfield.com
*.thvb.com
*.truckattorneys.com
*.vocarstvo.com
agroambiente.com
aiminlines.com
baskentankara.com
birren.com
candil.com
cbsnfl.com
clubdelago.com
coproducer.org
eqtest.com
ertac.com
ezpopups.com
ferienvilla.com
frehsbooks.com
gaetjens.com
himn.com
hopwoodmotel.com
jabars.com
jaszewski.com
jayrun.com
jera.org
jiangye.com
jouli.com
kechang.com
kjtl.com
kubuku.com
lacripta.com
loribeth.com
losmellizos.com
mybrownbag.com
notmarketing.com
panita.com
plantesetjardin.com
prativi.com
pronunciationhelp.com
pusup.com
ramirezranch.com
ritter.org
rtalent.com
sapatonas.com
scichi.com
sexjie.com
sliwoski.com
smerter.com
suelzer.com
thanuja.com
thelivechannel.com
themagneticfield.com
thvb.com
truckattorneys.com
vocarstvo.com

Other certificates including the domain name birren.com

(limited to 100 certificates)
birren.com
birren.com
andrewfitnesstraining.com
birren.com
birren.com
www.usasoberliving.com
birren.com
senshin.com
www.bbweb.co
birren.com
birren.com

Certificate

The complete raw certificate details for birren.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMTTCCCzWgAwIBAgISA1/sHTuqcjHsAjKoPUqi8OyRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDUwMTAxNTNaFw0y
MDA0MDQwMTAxNTNaMBUxEzARBgNVBAMTCmJpcnJlbi5jb20wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQC4ZztxDBREX2luBs1R9W8p/1cN9ChEIJ7H6wuW
qz5b7bUA0kdFpAvfaQeNus40rL49MTSfzyBljsw1vuWQYOdVz1jfoPR9a503w/xk
pg8p52qK+iLg9uXp2o558z2MzIXMVCKuDXBjqPPAxN8CrrGyYt1g94XhV1YmX4sO
FFhr1VCkwuhX+fFGgBlqM6TRYhSFTtoV0ABq+1mtVwH+wCDmTj1wY8DnIbmW5Hcx
Dk+QHBzQkrIxOeePe0oqsvJ7hbkGbzTDYTZzejmereDUHysuA6laXjRuGvEnvmFh
G4LJdF3QoNn1DgptmD+FRy1jYdHNFgW1/ss3Lvf4oaTl1B9Z3/Tg5Sp3hFoGd0ak
itECrEUunYh9W9L2EoL5kk4T8ECantdfTaZi0FwkjIUMMGYIhseCjeYFeUEJ1yL6
g32OQvDgECbJ+zj7yBUSVrLQ6WmZxFFrbV1ZDtpGVxyP7iBVcYn4+WIukLLO10tR
dPtOq1ZdmLDrcUawgOm0EOL7gArVT4TUUbfF1DtJapLiGyZwLFow4RmISBiSa9D3
bBOLYYrT9Gbl+o92gueLhs5sc0RYH66ryTwjQ9acUoXkxyDlqqOa64tDHOrl3IJB
w0xt51Ma0JG+a6tE3Fbxe8t3qFBuVhsFrMX6LIh5U3BrLwWiWDrho4jhWaKcTYDn
JPyTQQIDAQABo4IIYDCCCFwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTAl8cHJu9H
jAO4F7cibYLfS6uHuDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIGFQYDVR0RBIIGDDCCBgiCEiouYWdyb2FtYmllbnRl
LmNvbYIQKi5haW1pbmxpbmVzLmNvbYITKi5iYXNrZW50YW5rYXJhLmNvbYIMKi5i
aXJyZW4uY29tggwqLmNhbmRpbC5jb22CDCouY2JzbmZsLmNvbYIQKi5jbHViZGVs
YWdvLmNvbYIQKi5jb3Byb2R1Y2VyLm9yZ4IMKi5lcXRlc3QuY29tggsqLmVydGFj
LmNvbYIOKi5lenBvcHVwcy5jb22CESouZmVyaWVudmlsbGEuY29tghAqLmZyZWhz
Ym9va3MuY29tgg4qLmdhZXRqZW5zLmNvbYIKKi5oaW1uLmNvbYISKi5ob3B3b29k
bW90ZWwuY29tggwqLmphYmFycy5jb22CDyouamFzemV3c2tpLmNvbYIMKi5qYXly
dW4uY29tggoqLmplcmEub3Jngg0qLmppYW5neWUuY29tggsqLmpvdWxpLmNvbYIN
Ki5rZWNoYW5nLmNvbYIKKi5ranRsLmNvbYIMKi5rdWJ1a3UuY29tgg4qLmxhY3Jp
cHRhLmNvbYIOKi5sb3JpYmV0aC5jb22CESoubG9zbWVsbGl6b3MuY29tghAqLm15
YnJvd25iYWcuY29tghIqLm5vdG1hcmtldGluZy5jb22CDCoucGFuaXRhLmNvbYIV
Ki5wbGFudGVzZXRqYXJkaW4uY29tgg0qLnByYXRpdmkuY29tghcqLnByb251bmNp
YXRpb25oZWxwLmNvbYILKi5wdXN1cC5jb22CEioucmFtaXJlenJhbmNoLmNvbYIM
Ki5yaXR0ZXIub3Jngg0qLnJ0YWxlbnQuY29tgg8qLnNhcGF0b25hcy5jb22CDCou
c2NpY2hpLmNvbYIMKi5zZXhqaWUuY29tgg4qLnNsaXdvc2tpLmNvbYINKi5zbWVy
dGVyLmNvbYINKi5zdWVsemVyLmNvbYINKi50aGFudWphLmNvbYIUKi50aGVsaXZl
Y2hhbm5lbC5jb22CFioudGhlbWFnbmV0aWNmaWVsZC5jb22CCioudGh2Yi5jb22C
FCoudHJ1Y2thdHRvcm5leXMuY29tgg8qLnZvY2Fyc3R2by5jb22CEGFncm9hbWJp
ZW50ZS5jb22CDmFpbWlubGluZXMuY29tghFiYXNrZW50YW5rYXJhLmNvbYIKYmly
cmVuLmNvbYIKY2FuZGlsLmNvbYIKY2JzbmZsLmNvbYIOY2x1YmRlbGFnby5jb22C
DmNvcHJvZHVjZXIub3JnggplcXRlc3QuY29tggllcnRhYy5jb22CDGV6cG9wdXBz
LmNvbYIPZmVyaWVudmlsbGEuY29tgg5mcmVoc2Jvb2tzLmNvbYIMZ2FldGplbnMu
Y29tgghoaW1uLmNvbYIQaG9wd29vZG1vdGVsLmNvbYIKamFiYXJzLmNvbYINamFz
emV3c2tpLmNvbYIKamF5cnVuLmNvbYIIamVyYS5vcmeCC2ppYW5neWUuY29tgglq
b3VsaS5jb22CC2tlY2hhbmcuY29tgghranRsLmNvbYIKa3VidWt1LmNvbYIMbGFj
cmlwdGEuY29tggxsb3JpYmV0aC5jb22CD2xvc21lbGxpem9zLmNvbYIObXlicm93
bmJhZy5jb22CEG5vdG1hcmtldGluZy5jb22CCnBhbml0YS5jb22CE3BsYW50ZXNl
dGphcmRpbi5jb22CC3ByYXRpdmkuY29tghVwcm9udW5jaWF0aW9uaGVscC5jb22C
CXB1c3VwLmNvbYIQcmFtaXJlenJhbmNoLmNvbYIKcml0dGVyLm9yZ4ILcnRhbGVu
dC5jb22CDXNhcGF0b25hcy5jb22CCnNjaWNoaS5jb22CCnNleGppZS5jb22CDHNs
aXdvc2tpLmNvbYILc21lcnRlci5jb22CC3N1ZWx6ZXIuY29tggt0aGFudWphLmNv
bYISdGhlbGl2ZWNoYW5uZWwuY29tghR0aGVtYWduZXRpY2ZpZWxkLmNvbYIIdGh2
Yi5jb22CEnRydWNrYXR0b3JuZXlzLmNvbYINdm9jYXJzdHZvLmNvbTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1
APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABb3Nv8HQAAAQDAEYw
RAIgJ2DuZwR6uoxp6uhxJDVH7Qj2Hb4xS7OGKYSWvcz242ECIHD5wvQjwJ5KrR79
Fj4IAorv1gXMeA5/W1OuzZnOpVblAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ru
vGE6GmnTohwAAAFvc2/wnwAABAMARzBFAiEA2tLT1TAMBW4X/BuIkqj+ptGIxyTs
r95u4dpPkdB2NoMCIC7oSmpMW7KOBZUgYZP9clTYaxPHlIPvpHpTkDIQUjsUMA0G
CSqGSIb3DQEBCwUAA4IBAQB6uEcSVzCBcu5s95+9uik1e695y5EWy7HPSfbhNpzX
8HjTNxkr346I19mnlQcMd+C8yf1yHLJVGmGULV+buOHE/KNb27mFxRBpZ8UA5YmB
Id/SByUveMvd8WPyAGh6Th/AN0HofXV6QmrHblp5zK1LAtA3wqD57g4zkrKW3CZC
vqybfo65w1b3hf1tXqnsORphe3GUfdKjrirH1u5sdhhSpPX28kn2rNLqYh8vNNB8
2B/vw0MYRQcAu4Az2e5vRbcPSBxlje0pCpJT4m2ALz4RHrG1SspbN1VvHWRxuAIT
ajZjJyisbeAUr+xwp9Ne8drpJMgY3nwkCMASEYapyy2y
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293977532246550327510776132602962602159249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 01:01:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 01:01:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'birren.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752299628073166295920290392702258433929166270570464461935234012344327203359601658050093418031197707431387606997604433392001494818154529371869250127017046550691514154957620373400420522463754907067024835083865299563654756182397619816642903289913838838256008668214493256647829722361984291097725903839743157197137831592544459376714195911290029109763246305277127629271481839513231926564944510844728618391850563127979121143989390108264347461398899249438304477811304782061793809860621197130920494355896018429242185223907944079267741337520034761708005592229944535629558549000338494297657093734338031289841323051629380462251698586554513944619112912264033708389593939995973225790783778359470133989606383702175357369615456376594821759264322565792637226250986852996988197291403568143233321925820439859760953354612738901739676680348321811753745649891940066103884559286125205653210903764838890674922158334087753171670334513280848131175782056888822780083380668971291318579423248816678669671879437539149842279450305292833994680752799230921955592058311359123703589691179451398495219924906965807870294094287025252922335592762824232519468031150015558757265801930721120894318899273876193826706706228718096050405962449356308665941596228311593620873188161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c097c70726ef478c03b817b7226d82df4bab87b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1548 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agroambiente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiminlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baskentankara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbsnfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubdelago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coproducer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eqtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ertac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezpopups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferienvilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frehsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaetjens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.himn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopwoodmotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jabars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaszewski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jayrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiangye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jouli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kechang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kjtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kubuku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacripta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loribeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losmellizos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybrownbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plantesetjardin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prativi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronunciationhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pusup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ramirezranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ritter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sapatonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scichi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexjie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sliwoski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smerter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suelzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thanuja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelivechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themagneticfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truckattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocarstvo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agroambiente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiminlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baskentankara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsnfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdelago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coproducer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ertac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezpopups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienvilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frehsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaetjens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'himn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopwoodmotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaszewski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jayrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiangye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jouli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kechang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubuku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacripta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loribeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losmellizos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybrownbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantesetjardin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prativi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronunciationhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pusup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramirezranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapatonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scichi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexjie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sliwoski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smerter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suelzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanuja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelivechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themagneticfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocarstvo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f736ff074000004030046304402202760ee67047aba8c69eae871243547ed08f61dbe314bb386298496bdccf6e361022070f9c2f423c09e4aad1efd163e08028aefd605cc780e7f5b53aecd99cea556e500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f736ff09f0000040300473045022100dad2d3d5300c056e17fc1b8892a8fea6d188c724ecafde6ee1da4f91d076368302202ee84a6a4c5bb28e0595206193fd7254d86b13c79483efa47a53903210523b14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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