answers.crumiller.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:5a:02:bd:3e:c4:83:e5:06:64:7c:02:97:d9:4e:56:56 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=answers.crumiller.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:5a:02:bd:3e:c4:83:e5:06:64:7c:02:97:d9:4e:56:56
Serial Number (int): 414583567652265787675404169461776857847382
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:8c:6e:54:30:f6:fd:b7:4f:3d:26:f2:cf:48:08:5a:71:d5:66:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:13:53:36:4e:d7:ec:e5:20:78:dc:bf:c6:2f:9b:1d:ef:d1:90:bf
Fingerprint (sha256): d1:ac:e7:76:a3:f6:f2:86:72:29:6a:c6:1d:a8:c9:86:e9:23:21:6b:44:3b:d2:65:cb:0b:f9:ca:45:75:17:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate answers.crumiller.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for answers.crumiller.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agents.washingtonnational.com
answers-embed.amplifonuk.com.pagescdn.com
answers-embed.carymedicalcenter.org.pagescdn.com
answers-embed.coingenie.us.pagescdn.com
answers-embed.comfedcu.pagescdn.com
answers-embed.daveandbusters.com.pagescdn.com
answers-embed.dchosp.org.pagescdn.com
answers-embed.encompasshealth.com.pagescdn.com
answers-embed.ipr.com.pagescdn.com
answers-embed.jdsports.com.pagescdn.com
answers-embed.limamemorial.com.pagescdn.com
answers-embed.pavers.co.uk.pagescdn.com
answers-embed.piedmont.com.pagescdn.com
answers-embed.premierworkspaces.com.pagescdn.com
answers-embed.republicebank.pagescdn.com
answers-embed.thefieldsofrockville.com.pagescdn.com
answers-embed.wavegardening.com.pagescdn.com
answers-kertel.pagescdn.com
answers-thepowermba.pagescdn.com
answers-totalwireless.pagescdn.com
answers.akronchildrens.org.yext-cdn.com
answers.crumiller.com
answers.dynamix.site.pagescdn.com
answers.frischs.com
answers.fsegwerytr.com.pagescdn.com
answers.jessieshop.org.pagescdn.com
answers.lcmchealth.pagescdn.com
answers.sharemobility.com
answers.smoothwipes.com.pagescdn.com
cafe.haagen-dazs.tw.yext-cdn.com
cafe.haagendazs.lu.yext-cdn.com
coronavirus.carey.jhu.edu
covid19.alabama.gov
covid19.nj.gov.pagescdn.com
cz-stores.iqos.com.yext-cdn.com
events.auroravillagedentalgroup.com
events.ohiohealth.com
funeraldirectorfeedback.dignityfunerals.co.uk
harrisonburg.capitalalehouse.com
home.camberleyanddistrict.co.uk
homes.caringladyfuneraldirector.co.uk
iframe.houseofblues.com.pagescdn.com
info.traxburgersandbar.com
jobs.aspendentaljobs.com
katastimata.carglass.gr
krispy-ui-refresh.krispy.com.pagescdn.com
l.boulanger.com
landing.virtualfitness.fit
local.fifamily.com
local.lenscrafters.com
location.eastdevoncrematorium.co.uk
location.fishaways.co.za
locations.acutx.org
locations.autozone.com
locations.banksouth.com
locations.boscovs.com
locations.communitybanknet.com
locations.edgecappartners.com
locations.filling-stations.co.uk.pagescdn.com
locations.intoxalock.com.yext-cdn.com
locations.judge.com
locations.lakecitybank.com
locations.mccu.com
locations.nextlevelburger.com
locations.papajohns.com
locations.pitapitusa.com
locations.pret.co.uk
locations.southphillycheesesteaksfries.com
locations.stockmanbank.com
locations.tacobell.com
maklerbetreuer.maklerservice.de
midlothian.capitalalehouse.com
mortgage.stockmanbank.com
mortgagebankers.ccbg.com
parneranswers.com.pagescdn.com
providers.winmedical.org
repairs.hotpointservice.co.uk
retailers.landrover.co.za
retailers.landrover.com.br
retailers.landrover.com.hk
site.krispykreme.com
sk-stores.iqos.com.yext-cdn.com
store-events.anntaylor.com
store-events.loft.com
stores.bikini-spanish.jp
stores.buybuybaby.com
stores.centralengland.coop
stores.champssports.com
stores.chaumet.com
stores.footaction.com
stores.madewell.com.yext-cdn.com
stores.perkinsrestaurants.com
stores.superdry.com
stores.superdrystore.ch
stores.wallis.co.uk
stores.zalesoutlet.com
storeslocator.moncler.com.yext-cdn.com
suche.ekir.de
winkels.hema.nl
yjobs.bell24.co.jp

Other certificates including the domain name crumiller.com

(limited to 100 certificates)
*.crumiller.com
blog-hitchhikers.yext.com
www.crumiller.com
www.crumiller.com
blog-hitchhikers.yext.com
www.crumiller.com
magasins.espace-emeraude.com
answers-embed.shumanlaw.com.pagescdn.com
answers.crumiller.com
answers.necco.org
answers.crumiller.com
magasins.espace-emeraude.com
*.crumiller.com
answers.necco.org
answers-embed.shumanlaw.com.pagescdn.com
www.crumiller.com
crumiller.com
answers.crumiller.com
*.crumiller.com
answers.crumiller.com

Certificate

The complete raw certificate details for answers.crumiller.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQYDCCD0igAwIBAgISBMJaAr0+xIPlBmR8ApfZTlZWMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA0MDYxNTE3NDFaFw0yMTA3MDUxNTE3NDFaMCAxHjAcBgNVBAMT
FWFuc3dlcnMuY3J1bWlsbGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALDKvwtOwt+wkW858Wvfdmm+ntAfGEujEb+3HsOzDpLFJq7QWT2L/dMA
3pWtbMlTSoWONU+88vOVw79NMEN2+jfffnOq81ec7XQ3fEMBNLjiqrTNcHC+THDz
5FQkosA69q+TYJe/pk/xSOGuKjuDWe3yv2lFnBFw43MHUZ0FXMK+aR2/QhKI3L60
0/OCcKg4LNdXyPQyUx8odKsj6G9v7bBnd/oHPAFemRy/7uzDLYSyHEEfWY/Z818B
/MpVXhGxTeYWiuuHlK+3fqR8PXjq05u9j5PMrdx+fmlzYPPgWimBJtezbN4Ad6+b
miZpVyBlM1YrPG9lIcWtmQNdQfXbmzcCAwEAAaOCDYAwgg18MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUwoxuVDD2/bdPPSbyz0gIWnHVZoUwHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wggxBBgNVHREEggw4MIIMNIIdYWdlbnRzLndhc2hpbmd0b25uYXRp
b25hbC5jb22CKWFuc3dlcnMtZW1iZWQuYW1wbGlmb251ay5jb20ucGFnZXNjZG4u
Y29tgjBhbnN3ZXJzLWVtYmVkLmNhcnltZWRpY2FsY2VudGVyLm9yZy5wYWdlc2Nk
bi5jb22CJ2Fuc3dlcnMtZW1iZWQuY29pbmdlbmllLnVzLnBhZ2VzY2RuLmNvbYIj
YW5zd2Vycy1lbWJlZC5jb21mZWRjdS5wYWdlc2Nkbi5jb22CLWFuc3dlcnMtZW1i
ZWQuZGF2ZWFuZGJ1c3RlcnMuY29tLnBhZ2VzY2RuLmNvbYIlYW5zd2Vycy1lbWJl
ZC5kY2hvc3Aub3JnLnBhZ2VzY2RuLmNvbYIuYW5zd2Vycy1lbWJlZC5lbmNvbXBh
c3NoZWFsdGguY29tLnBhZ2VzY2RuLmNvbYIiYW5zd2Vycy1lbWJlZC5pcHIuY29t
LnBhZ2VzY2RuLmNvbYInYW5zd2Vycy1lbWJlZC5qZHNwb3J0cy5jb20ucGFnZXNj
ZG4uY29tgithbnN3ZXJzLWVtYmVkLmxpbWFtZW1vcmlhbC5jb20ucGFnZXNjZG4u
Y29tgidhbnN3ZXJzLWVtYmVkLnBhdmVycy5jby51ay5wYWdlc2Nkbi5jb22CJ2Fu
c3dlcnMtZW1iZWQucGllZG1vbnQuY29tLnBhZ2VzY2RuLmNvbYIwYW5zd2Vycy1l
bWJlZC5wcmVtaWVyd29ya3NwYWNlcy5jb20ucGFnZXNjZG4uY29tgihhbnN3ZXJz
LWVtYmVkLnJlcHVibGljZWJhbmsucGFnZXNjZG4uY29tgjNhbnN3ZXJzLWVtYmVk
LnRoZWZpZWxkc29mcm9ja3ZpbGxlLmNvbS5wYWdlc2Nkbi5jb22CLGFuc3dlcnMt
ZW1iZWQud2F2ZWdhcmRlbmluZy5jb20ucGFnZXNjZG4uY29tghthbnN3ZXJzLWtl
cnRlbC5wYWdlc2Nkbi5jb22CIGFuc3dlcnMtdGhlcG93ZXJtYmEucGFnZXNjZG4u
Y29tgiJhbnN3ZXJzLXRvdGFsd2lyZWxlc3MucGFnZXNjZG4uY29tgidhbnN3ZXJz
LmFrcm9uY2hpbGRyZW5zLm9yZy55ZXh0LWNkbi5jb22CFWFuc3dlcnMuY3J1bWls
bGVyLmNvbYIhYW5zd2Vycy5keW5hbWl4LnNpdGUucGFnZXNjZG4uY29tghNhbnN3
ZXJzLmZyaXNjaHMuY29tgiNhbnN3ZXJzLmZzZWd3ZXJ5dHIuY29tLnBhZ2VzY2Ru
LmNvbYIjYW5zd2Vycy5qZXNzaWVzaG9wLm9yZy5wYWdlc2Nkbi5jb22CH2Fuc3dl
cnMubGNtY2hlYWx0aC5wYWdlc2Nkbi5jb22CGWFuc3dlcnMuc2hhcmVtb2JpbGl0
eS5jb22CJGFuc3dlcnMuc21vb3Rod2lwZXMuY29tLnBhZ2VzY2RuLmNvbYIgY2Fm
ZS5oYWFnZW4tZGF6cy50dy55ZXh0LWNkbi5jb22CH2NhZmUuaGFhZ2VuZGF6cy5s
dS55ZXh0LWNkbi5jb22CGWNvcm9uYXZpcnVzLmNhcmV5LmpodS5lZHWCE2Nvdmlk
MTkuYWxhYmFtYS5nb3aCG2NvdmlkMTkubmouZ292LnBhZ2VzY2RuLmNvbYIfY3ot
c3RvcmVzLmlxb3MuY29tLnlleHQtY2RuLmNvbYIjZXZlbnRzLmF1cm9yYXZpbGxh
Z2VkZW50YWxncm91cC5jb22CFWV2ZW50cy5vaGlvaGVhbHRoLmNvbYItZnVuZXJh
bGRpcmVjdG9yZmVlZGJhY2suZGlnbml0eWZ1bmVyYWxzLmNvLnVrgiBoYXJyaXNv
bmJ1cmcuY2FwaXRhbGFsZWhvdXNlLmNvbYIfaG9tZS5jYW1iZXJsZXlhbmRkaXN0
cmljdC5jby51a4IlaG9tZXMuY2FyaW5nbGFkeWZ1bmVyYWxkaXJlY3Rvci5jby51
a4IkaWZyYW1lLmhvdXNlb2ZibHVlcy5jb20ucGFnZXNjZG4uY29tghppbmZvLnRy
YXhidXJnZXJzYW5kYmFyLmNvbYIYam9icy5hc3BlbmRlbnRhbGpvYnMuY29tghdr
YXRhc3RpbWF0YS5jYXJnbGFzcy5ncoIpa3Jpc3B5LXVpLXJlZnJlc2gua3Jpc3B5
LmNvbS5wYWdlc2Nkbi5jb22CD2wuYm91bGFuZ2VyLmNvbYIabGFuZGluZy52aXJ0
dWFsZml0bmVzcy5maXSCEmxvY2FsLmZpZmFtaWx5LmNvbYIWbG9jYWwubGVuc2Ny
YWZ0ZXJzLmNvbYIjbG9jYXRpb24uZWFzdGRldm9uY3JlbWF0b3JpdW0uY28udWuC
GGxvY2F0aW9uLmZpc2hhd2F5cy5jby56YYITbG9jYXRpb25zLmFjdXR4Lm9yZ4IW
bG9jYXRpb25zLmF1dG96b25lLmNvbYIXbG9jYXRpb25zLmJhbmtzb3V0aC5jb22C
FWxvY2F0aW9ucy5ib3Njb3ZzLmNvbYIebG9jYXRpb25zLmNvbW11bml0eWJhbmtu
ZXQuY29tgh1sb2NhdGlvbnMuZWRnZWNhcHBhcnRuZXJzLmNvbYItbG9jYXRpb25z
LmZpbGxpbmctc3RhdGlvbnMuY28udWsucGFnZXNjZG4uY29tgiVsb2NhdGlvbnMu
aW50b3hhbG9jay5jb20ueWV4dC1jZG4uY29tghNsb2NhdGlvbnMuanVkZ2UuY29t
ghpsb2NhdGlvbnMubGFrZWNpdHliYW5rLmNvbYISbG9jYXRpb25zLm1jY3UuY29t
gh1sb2NhdGlvbnMubmV4dGxldmVsYnVyZ2VyLmNvbYIXbG9jYXRpb25zLnBhcGFq
b2hucy5jb22CGGxvY2F0aW9ucy5waXRhcGl0dXNhLmNvbYIUbG9jYXRpb25zLnBy
ZXQuY28udWuCKmxvY2F0aW9ucy5zb3V0aHBoaWxseWNoZWVzZXN0ZWFrc2ZyaWVz
LmNvbYIabG9jYXRpb25zLnN0b2NrbWFuYmFuay5jb22CFmxvY2F0aW9ucy50YWNv
YmVsbC5jb22CH21ha2xlcmJldHJldWVyLm1ha2xlcnNlcnZpY2UuZGWCHm1pZGxv
dGhpYW4uY2FwaXRhbGFsZWhvdXNlLmNvbYIZbW9ydGdhZ2Uuc3RvY2ttYW5iYW5r
LmNvbYIYbW9ydGdhZ2ViYW5rZXJzLmNjYmcuY29tgh5wYXJuZXJhbnN3ZXJzLmNv
bS5wYWdlc2Nkbi5jb22CGHByb3ZpZGVycy53aW5tZWRpY2FsLm9yZ4IdcmVwYWly
cy5ob3Rwb2ludHNlcnZpY2UuY28udWuCGXJldGFpbGVycy5sYW5kcm92ZXIuY28u
emGCGnJldGFpbGVycy5sYW5kcm92ZXIuY29tLmJyghpyZXRhaWxlcnMubGFuZHJv
dmVyLmNvbS5oa4IUc2l0ZS5rcmlzcHlrcmVtZS5jb22CH3NrLXN0b3Jlcy5pcW9z
LmNvbS55ZXh0LWNkbi5jb22CGnN0b3JlLWV2ZW50cy5hbm50YXlsb3IuY29tghVz
dG9yZS1ldmVudHMubG9mdC5jb22CGHN0b3Jlcy5iaWtpbmktc3BhbmlzaC5qcIIV
c3RvcmVzLmJ1eWJ1eWJhYnkuY29tghpzdG9yZXMuY2VudHJhbGVuZ2xhbmQuY29v
cIIXc3RvcmVzLmNoYW1wc3Nwb3J0cy5jb22CEnN0b3Jlcy5jaGF1bWV0LmNvbYIV
c3RvcmVzLmZvb3RhY3Rpb24uY29tgiBzdG9yZXMubWFkZXdlbGwuY29tLnlleHQt
Y2RuLmNvbYIdc3RvcmVzLnBlcmtpbnNyZXN0YXVyYW50cy5jb22CE3N0b3Jlcy5z
dXBlcmRyeS5jb22CF3N0b3Jlcy5zdXBlcmRyeXN0b3JlLmNoghNzdG9yZXMud2Fs
bGlzLmNvLnVrghZzdG9yZXMuemFsZXNvdXRsZXQuY29tgiZzdG9yZXNsb2NhdG9y
Lm1vbmNsZXIuY29tLnlleHQtY2RuLmNvbYINc3VjaGUuZWtpci5kZYIPd2lua2Vs
cy5oZW1hLm5sghJ5am9icy5iZWxsMjQuY28uanAwTAYDVR0gBEUwQzAIBgZngQwB
AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz
ZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKlrkscYOwNWVTWkHPO9IU6YACByB8jNPvHwiYAwHmP+cvs1SzHivEmWlIcm
d4vIEWghU2cZANSf1v7tB1h4EPdFlW7q63pc9wXGFUg7lCNz4T4b8Lp9MJnLvDdR
W5yVzpNzp9NSXdLIPHXkKxSqGCjCt29CSh4UyBCGTfD0d5AOyvv87EFDElVRpv1X
XVDe5/EzbPJzLqLHsvEQHUqSmZCd8WQXpTYzq2yRlwtKoGDjryvXe79mtoBEQ3i/
W2jowuIAx9Py/BSD7CcxD8/NtP4npPgSoyVMbpCizScZyolFdGpLiaZ60U7YNa0Q
RyKwL05eraNAsnPFhln4DyOSqHQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMq/C07C37CRbznxa992
ab6e0B8YS6MRv7cew7MOksUmrtBZPYv90wDela1syVNKhY41T7zy85XDv00wQ3b6
N99+c6rzV5ztdDd8QwE0uOKqtM1wcL5McPPkVCSiwDr2r5Ngl7+mT/FI4a4qO4NZ
7fK/aUWcEXDjcwdRnQVcwr5pHb9CEojcvrTT84JwqDgs11fI9DJTHyh0qyPob2/t
sGd3+gc8AV6ZHL/u7MMthLIcQR9Zj9nzXwH8ylVeEbFN5haK64eUr7d+pHw9eOrT
m72Pk8yt3H5+aXNg8+BaKYEm17Ns3gB3r5uaJmlXIGUzVis8b2Uhxa2ZA11B9dub
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414583567652265787675404169461776857847382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-06 15:17:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-05 15:17:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'answers.crumiller.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22317919584162255316243618529459896093773671347933370989906238369698123129726044462667077431598424181656924185875520160010509005128938053701169151493709015626423483374619676038152470748642898458208616521623533833446853819485787119027721274196799388006976031286175037545447351655509929330290541080324328094853579960866105006463773499366708745870005898987522445480563495292924830905285275893298225180933778469863932985607015675142214361254687461386561935294737194886021039999427969897705904957005334652516954866833476369937917423111297670934118478572096292441771243634527884196375139943115862704584426536828962458016567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c28c6e5430f6fdb74f3d26f2cf48085a71d56685
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.washingtonnational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.amplifonuk.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.carymedicalcenter.org.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.coingenie.us.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.comfedcu.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.daveandbusters.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.dchosp.org.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.encompasshealth.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.ipr.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.jdsports.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.limamemorial.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.pavers.co.uk.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.piedmont.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.premierworkspaces.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.republicebank.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.thefieldsofrockville.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-embed.wavegardening.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-kertel.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-thepowermba.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-totalwireless.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.akronchildrens.org.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.crumiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.dynamix.site.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.frischs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.fsegwerytr.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.jessieshop.org.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.lcmchealth.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.sharemobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.smoothwipes.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe.haagen-dazs.tw.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe.haagendazs.lu.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.alabama.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.nj.gov.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.auroravillagedentalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.ohiohealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funeraldirectorfeedback.dignityfunerals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisonburg.capitalalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.camberleyanddistrict.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homes.caringladyfuneraldirector.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iframe.houseofblues.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.traxburgersandbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.aspendentaljobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katastimata.carglass.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krispy-ui-refresh.krispy.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.boulanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.virtualfitness.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fifamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.eastdevoncrematorium.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.fishaways.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.acutx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.autozone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.banksouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.boscovs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.communitybanknet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.edgecappartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.filling-stations.co.uk.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.intoxalock.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.judge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.lakecitybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.mccu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.nextlevelburger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.papajohns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.pitapitusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.pret.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.southphillycheesesteaksfries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.stockmanbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tacobell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maklerbetreuer.maklerservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midlothian.capitalalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgage.stockmanbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagebankers.ccbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parneranswers.com.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.winmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repairs.hotpointservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landrover.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landrover.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landrover.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.krispykreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-events.anntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-events.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bikini-spanish.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.buybuybaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.centralengland.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.champssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.chaumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.madewell.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.perkinsrestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.superdry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.superdrystore.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.wallis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.zalesoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeslocator.moncler.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suche.ekir.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winkels.hema.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yjobs.bell24.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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