puntored.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:64:91:ba:e1:e7:6e:1e:82:c2:45:3f:37:2c:fc:e2:fc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=puntored.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:64:91:ba:e1:e7:6e:1e:82:c2:45:3f:37:2c:fc:e2:fc
Serial Number (int): 314554586507996266385566787907964928582396
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:e3:4e:ab:fa:ff:36:a0:62:1f:3e:44:6a:79:32:f0:69:be:f0:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 99:6f:c5:bd:b6:6f:af:6b:15:b6:d2:8a:d4:0a:ac:01:cf:34:11:4c
Fingerprint (sha256): d0:d1:ff:de:01:aa:75:df:81:b9:e7:9b:27:ee:d2:6a:20:f1:dc:b9:6d:92:cc:d0:1e:0f:24:36:6b:a8:90:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate puntored.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for puntored.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.atreplayer.com
*.austinboating.com
*.aztecconstructionnewyork.com
*.bidauction.com
*.biodefensivos.com
*.brasilsustentavel.com
*.camelotclearwatercondo.com
*.chicosclothing.com
*.churchamerica.com
*.clicextreme.com
*.cockrockingteens.com
*.comeyshepard.com
*.curwards.com
*.decostick.com
*.detena.com
*.equiibase.com
*.etergy.com
*.fashionshoppingoutlet.com
*.frysjob.com
*.geimain.com
*.genyology.com
*.googlefligh.com
*.harampants.com
*.hdwallpapeers.com
*.imperiatoys.com
*.loweshomecenters.com
*.marcheitzchevy.com
*.myqlloan.com
*.newboroughbotoxsurgery.com
*.nzafro.com
*.opticalimage.com
*.paturnpikepaybyplate.com
*.pearda.com
*.pinoyjakol.com
*.pornsexlie.com
*.prisonbabes.com
*.puntored.com
*.saomarcoslaboratorio.com
*.sellyourhomeequity.com
*.silentnite.com
*.spencerdesigns.com
*.statrea.com
*.touchoodern.com
*.tssbillpay.com
*.visaluxuryhotel.com
*.watchiv.com
*.wayofthecross.com
*.widgames.com
*.wiltonprinting.com
*.wwwstepitupkids.com
atreplayer.com
austinboating.com
aztecconstructionnewyork.com
bidauction.com
biodefensivos.com
brasilsustentavel.com
camelotclearwatercondo.com
chicosclothing.com
churchamerica.com
clicextreme.com
cockrockingteens.com
comeyshepard.com
curwards.com
decostick.com
detena.com
equiibase.com
etergy.com
fashionshoppingoutlet.com
frysjob.com
geimain.com
genyology.com
googlefligh.com
harampants.com
hdwallpapeers.com
imperiatoys.com
loweshomecenters.com
marcheitzchevy.com
myqlloan.com
newboroughbotoxsurgery.com
nzafro.com
opticalimage.com
paturnpikepaybyplate.com
pearda.com
pinoyjakol.com
pornsexlie.com
prisonbabes.com
puntored.com
saomarcoslaboratorio.com
sellyourhomeequity.com
silentnite.com
spencerdesigns.com
statrea.com
touchoodern.com
tssbillpay.com
visaluxuryhotel.com
watchiv.com
wayofthecross.com
widgames.com
wiltonprinting.com
wwwstepitupkids.com

Other certificates including the domain name puntored.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for puntored.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINxDCCDKygAwIBAgISA5xkkbrh524egsJFPzcs/OL8MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjQxMDA1MTZaFw0x
OTA3MjMxMDA1MTZaMBcxFTATBgNVBAMTDHB1bnRvcmVkLmNvbTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAM2ec1OmnSJNsfxY7m3elOm37CQzwAjIHoMn
JgW+P4/bojiNpGYunjM4fYTff8TYQ2qtfNaFFUUWl9+erQzyvqLw+GPeeK5OPA7p
1WXU+LB1LA7MKdtHtqR7iAgI28kTAXaXAxGWtrve06CaLt+B4wK6g9hXNcxutq3V
6dftZA8na5DE/NWbDRetJndEKrznyGDxfBUz808BpTtFLZ0fjCWgeOHNfoIDU8cG
AiZ0Qe+t14TiQDD8kiWVVZ1tvY+eRuVP36RMIyFAu4ybDSgYJR3K6mHGA0dk/kII
/RiQXBdyHOVJqnpRwwJtpiwP5f921j1E/aiwE9CvcdHh/kzGbF5kVXvLSx6QFIHf
dUsQdhXpumIRX1e+ZUqtv0j+qDL2VGcx474LZSRzCDqgYXUK9EPOXUlDUsLvoKjz
bzW3KIv91cnZy9jCOf9M+boCH7172sUEGYtgkpRE+YpSjb7jPoXdp16ZqO/zqsjf
Y1UJ8wLdnfHb8/MNMTpzh2AxYcj5E5oOTeQxXbZTK0Otx6Aa3+1aswheG5WPmgAt
OW4GzWaaAWgzBqjdjgokHnms6zdoIaybxYifQNfQbVjHORcYDDBNM1cD2yPy413h
gjuOJLReJG3NvvqabU0CdUNiI2g8DSDwlXrBykIv8nq9MRcgZqf7CMSoPh3n1Z4C
ovyutkspAgMBAAGjggnVMIIJ0TAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNXjTqv6
/zagYh8+RGp5MvBpvvAoMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wggeHBgNVHREEggd+MIIHeoIQKi5hdHJlcGxheWVy
LmNvbYITKi5hdXN0aW5ib2F0aW5nLmNvbYIeKi5henRlY2NvbnN0cnVjdGlvbm5l
d3lvcmsuY29tghAqLmJpZGF1Y3Rpb24uY29tghMqLmJpb2RlZmVuc2l2b3MuY29t
ghcqLmJyYXNpbHN1c3RlbnRhdmVsLmNvbYIcKi5jYW1lbG90Y2xlYXJ3YXRlcmNv
bmRvLmNvbYIUKi5jaGljb3NjbG90aGluZy5jb22CEyouY2h1cmNoYW1lcmljYS5j
b22CESouY2xpY2V4dHJlbWUuY29tghYqLmNvY2tyb2NraW5ndGVlbnMuY29tghIq
LmNvbWV5c2hlcGFyZC5jb22CDiouY3Vyd2FyZHMuY29tgg8qLmRlY29zdGljay5j
b22CDCouZGV0ZW5hLmNvbYIPKi5lcXVpaWJhc2UuY29tggwqLmV0ZXJneS5jb22C
GyouZmFzaGlvbnNob3BwaW5nb3V0bGV0LmNvbYINKi5mcnlzam9iLmNvbYINKi5n
ZWltYWluLmNvbYIPKi5nZW55b2xvZ3kuY29tghEqLmdvb2dsZWZsaWdoLmNvbYIQ
Ki5oYXJhbXBhbnRzLmNvbYITKi5oZHdhbGxwYXBlZXJzLmNvbYIRKi5pbXBlcmlh
dG95cy5jb22CFioubG93ZXNob21lY2VudGVycy5jb22CFCoubWFyY2hlaXR6Y2hl
dnkuY29tgg4qLm15cWxsb2FuLmNvbYIcKi5uZXdib3JvdWdoYm90b3hzdXJnZXJ5
LmNvbYIMKi5uemFmcm8uY29tghIqLm9wdGljYWxpbWFnZS5jb22CGioucGF0dXJu
cGlrZXBheWJ5cGxhdGUuY29tggwqLnBlYXJkYS5jb22CECoucGlub3lqYWtvbC5j
b22CECoucG9ybnNleGxpZS5jb22CESoucHJpc29uYmFiZXMuY29tgg4qLnB1bnRv
cmVkLmNvbYIaKi5zYW9tYXJjb3NsYWJvcmF0b3Jpby5jb22CGCouc2VsbHlvdXJo
b21lZXF1aXR5LmNvbYIQKi5zaWxlbnRuaXRlLmNvbYIUKi5zcGVuY2VyZGVzaWdu
cy5jb22CDSouc3RhdHJlYS5jb22CESoudG91Y2hvb2Rlcm4uY29tghAqLnRzc2Jp
bGxwYXkuY29tghUqLnZpc2FsdXh1cnlob3RlbC5jb22CDSoud2F0Y2hpdi5jb22C
Eyoud2F5b2Z0aGVjcm9zcy5jb22CDioud2lkZ2FtZXMuY29tghQqLndpbHRvbnBy
aW50aW5nLmNvbYIVKi53d3dzdGVwaXR1cGtpZHMuY29tgg5hdHJlcGxheWVyLmNv
bYIRYXVzdGluYm9hdGluZy5jb22CHGF6dGVjY29uc3RydWN0aW9ubmV3eW9yay5j
b22CDmJpZGF1Y3Rpb24uY29tghFiaW9kZWZlbnNpdm9zLmNvbYIVYnJhc2lsc3Vz
dGVudGF2ZWwuY29tghpjYW1lbG90Y2xlYXJ3YXRlcmNvbmRvLmNvbYISY2hpY29z
Y2xvdGhpbmcuY29tghFjaHVyY2hhbWVyaWNhLmNvbYIPY2xpY2V4dHJlbWUuY29t
ghRjb2Nrcm9ja2luZ3RlZW5zLmNvbYIQY29tZXlzaGVwYXJkLmNvbYIMY3Vyd2Fy
ZHMuY29tgg1kZWNvc3RpY2suY29tggpkZXRlbmEuY29tgg1lcXVpaWJhc2UuY29t
ggpldGVyZ3kuY29tghlmYXNoaW9uc2hvcHBpbmdvdXRsZXQuY29tggtmcnlzam9i
LmNvbYILZ2VpbWFpbi5jb22CDWdlbnlvbG9neS5jb22CD2dvb2dsZWZsaWdoLmNv
bYIOaGFyYW1wYW50cy5jb22CEWhkd2FsbHBhcGVlcnMuY29tgg9pbXBlcmlhdG95
cy5jb22CFGxvd2VzaG9tZWNlbnRlcnMuY29tghJtYXJjaGVpdHpjaGV2eS5jb22C
DG15cWxsb2FuLmNvbYIabmV3Ym9yb3VnaGJvdG94c3VyZ2VyeS5jb22CCm56YWZy
by5jb22CEG9wdGljYWxpbWFnZS5jb22CGHBhdHVybnBpa2VwYXlieXBsYXRlLmNv
bYIKcGVhcmRhLmNvbYIOcGlub3lqYWtvbC5jb22CDnBvcm5zZXhsaWUuY29tgg9w
cmlzb25iYWJlcy5jb22CDHB1bnRvcmVkLmNvbYIYc2FvbWFyY29zbGFib3JhdG9y
aW8uY29tghZzZWxseW91cmhvbWVlcXVpdHkuY29tgg5zaWxlbnRuaXRlLmNvbYIS
c3BlbmNlcmRlc2lnbnMuY29tggtzdGF0cmVhLmNvbYIPdG91Y2hvb2Rlcm4uY29t
gg50c3NiaWxscGF5LmNvbYITdmlzYWx1eHVyeWhvdGVsLmNvbYILd2F0Y2hpdi5j
b22CEXdheW9mdGhlY3Jvc3MuY29tggx3aWRnYW1lcy5jb22CEndpbHRvbnByaW50
aW5nLmNvbYITd3d3c3RlcGl0dXBraWRzLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AOJpS64m6OlACeiG
G7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABak8FbQAAAAQDAEgwRgIhALHBpVfKwZ+A
xzmaiimeyE2CBAnt5XPGcZFH2ZtryfPGAiEAuZMnFDB6nToXwso7lTj/J7/TqF7D
QkbnSk49Ueb+N7MAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAA
AWpPBWzKAAAEAwBIMEYCIQCM5XYdXUaZBVo5AF3m8CjmYoS8m8gEWGb8Q39SWf1q
PAIhAM5fC+FqByGPK9RXpGNqHM3+ZLIRXxGzc5kDjjRikL4aMA0GCSqGSIb3DQEB
CwUAA4IBAQB9onpkcA/loTBsMxlyKXHbExLUTzCMDZK6A7a/DCxd/Bqayhtva1Sa
+tKmAQmdCWL2VzGA+5Z27MGiyTzimk8YTjk1wZ6a7olIiDNU33zNb30uPKzSDvSs
cAesjQj1H82LMpy6ijzUvzRSK5I1bCqlgXL4vNDKglhrn6x4U0G4VVYvUagxQnaa
IXC9oM7iXOo1jMLnQvjiUQEaJi9jYjD0/XLsh1ShfbIG7oq2WB0RFp/lySQ+QOu5
w53vX+Q2xKXjw5aFGrmsUfAYlkwIpgBPcVZc6eWCcfxPmDB/FpT56fm62PRDTlLX
jIE3J2c8jIcUXaeG0zWXLFPr6HW6f09M
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314554586507996266385566787907964928582396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 10:05:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 10:05:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'puntored.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838852118407626721795491073896958731679652731645638825073672928332764333957000776719600842986508147195909779499763459942315550991052503542065766426459948472317633016137744732227652586461968518240760836869226197127607254418049557744815102083890086357361118644299995769109425584741154201409102831336081801445405868547810018766686012969841854822804276726511225991001262570641487391796890163188488742199791230410120480773714032369066584939584613123460711504073218832401061175201913127191793987030060794702735129805459635624180115518920645246723691905546251921680591382190338319964378224083620647342699761814620078548845690046164300378664605666022270613703708215439048451324832174051556841182485245958446071621858977797986416234841250837420926767140533505261702597511292677428348608884638389307624813423637067645215586971100353236491852167296600332363947600857014643995615215706089214717961234614442952077813913266777311687266637189767954222955592731381931199808094820240910799705854479013609503834562083477326630544704867977214195236177500405164654562075625266384251077772229315478251967672178389661902014982154609767613739015731233691140989117350560712569349619722152394195197332442592976203341128685713908081456037998483801556311755561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5e34eabfaff36a0621f3e446a7932f069bef028
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atreplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinboating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aztecconstructionnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bidauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biodefensivos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasilsustentavel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camelotclearwatercondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicosclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.churchamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clicextreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cockrockingteens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comeyshepard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decostick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equiibase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionshoppingoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frysjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geimain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genyology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googlefligh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harampants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdwallpapeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperiatoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loweshomecenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcheitzchevy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myqlloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newboroughbotoxsurgery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzafro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opticalimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paturnpikepaybyplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pearda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinoyjakol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornsexlie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prisonbabes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puntored.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saomarcoslaboratorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sellyourhomeequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silentnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spencerdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchoodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tssbillpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visaluxuryhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayofthecross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.widgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwstepitupkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atreplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinboating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aztecconstructionnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biodefensivos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasilsustentavel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camelotclearwatercondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicosclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicextreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockrockingteens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comeyshepard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decostick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equiibase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionshoppingoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frysjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geimain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genyology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlefligh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harampants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdwallpapeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperiatoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loweshomecenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcheitzchevy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myqlloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newboroughbotoxsurgery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzafro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticalimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paturnpikepaybyplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinoyjakol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornsexlie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisonbabes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntored.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saomarcoslaboratorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellyourhomeequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silentnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spencerdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchoodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tssbillpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visaluxuryhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayofthecross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwstepitupkids.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a4f056d000000040300483046022100b1c1a557cac19f80c7399a8a299ec84d820409ede573c6719147d99b6bc9f3c6022100b9932714307a9d3a17c2ca3b9538ff27bfd3a85ec34246e74a4e3d51e6fe37b300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a4f056cca00000403004830460221008ce5761d5d4699055a39005de6f028e66284bc9bc8045866fc437f5259fd6a3c022100ce5f0be16a07218f2bd457a4636a1ccdfe64b2115f11b37399038e346290be1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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