*.witman-melamed.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:3c:05:81:31:2d:7d:e9:88:30:f6:0a:ce:55:3a:99:5a was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.witman-melamed.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:3c:05:81:31:2d:7d:e9:88:30:f6:0a:ce:55:3a:99:5a
Serial Number (int): 320625771901082518087268776586733879466330
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:62:8e:4a:ca:1c:2b:83:e6:30:7c:a8:47:8b:1f:99:2a:87:3e:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:b2:51:4e:4c:31:7c:c5:f4:61:00:7a:92:0c:de:e8:1f:43:0b:55
Fingerprint (sha256): d4:3e:d7:d7:da:75:7e:c1:6e:76:d2:06:7c:a4:a4:2e:92:dd:34:8e:d3:6d:63:ff:3e:f1:9e:ae:55:30:79:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.witman-melamed.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.witman-melamed.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aleluyatv.net
*.averybrooks.us
*.budgethometheater.net
*.cutesnacks.com
*.dailybibleblessing.com
*.drsgattypeoplesolutions.com
*.fragmentsofempire.com
*.ftcfolsom.com
*.giantsfootballnews.com
*.glutenfreewatchdog.com
*.gracemahomet.org
*.graybulldistributing.com
*.hairwithjulie.com
*.infertilityhaiku.com
*.insightaxis.com
*.jenniferbrooks.us
*.johncallon.com
*.judsonsb.org
*.karlmalonetoyotareviews.com
*.kilnconcierge.com
*.marvelsaga.com
*.mo-lighting.com
*.nextstep4coaches.com
*.productsforhumanity.com
*.realmarketexperts.com
*.ripittoshreds.com
*.roadtripinsider.com
*.secondtactical.com
*.shapingmag.com
*.sierrawebsites.com
*.spraylaviedenver.com
*.szilvaonline.com
*.tamboratv.com
*.targaaudio.com
*.teaprayer.com
*.teardropheadlights.com
*.theblackgoatpodcast.com
*.thegnosticsociety.org
*.thehbcuadvocate.com
*.thewritingjungle.com
*.upcountryclothingco.com
*.witman-melamed.org
*.worldfreeofals.com
*.worldfreeofals.net
*.xraysupportwp.com
aleluyatv.net
averybrooks.us
budgethometheater.net
cutesnacks.com
dailybibleblessing.com
drsgattypeoplesolutions.com
fragmentsofempire.com
ftcfolsom.com
giantsfootballnews.com
glutenfreewatchdog.com
gracemahomet.org
graybulldistributing.com
hairwithjulie.com
infertilityhaiku.com
insightaxis.com
jenniferbrooks.us
johncallon.com
judsonsb.org
karlmalonetoyotareviews.com
kilnconcierge.com
marvelsaga.com
mo-lighting.com
nextstep4coaches.com
productsforhumanity.com
realmarketexperts.com
ripittoshreds.com
roadtripinsider.com
secondtactical.com
shapingmag.com
sierrawebsites.com
spraylaviedenver.com
szilvaonline.com
tamboratv.com
targaaudio.com
teaprayer.com
teardropheadlights.com
theblackgoatpodcast.com
thegnosticsociety.org
thehbcuadvocate.com
thewritingjungle.com
upcountryclothingco.com
witman-melamed.org
worldfreeofals.com
worldfreeofals.net
xraysupportwp.com

Other certificates including the domain name witman-melamed.org

(limited to 100 certificates)
lists.williams94610.net
lists.iajgs.com
lists.hwlf.org
*.thewendymclean.com
web14.tigertech.info
*.openeyecreative.com
*.songsofequus.com
lists.skylarkshiddencafe.com
lists.wcaia.ca
web14.tigertech.info
lists.iajgs.com
customers.tigertech.net
lists.iajgs.org
lists.culturescholar.org
customers.tigertech.net
lists.stormintegration.com
*.mikecaroffphoto.com
web14.tigertech.info
lists.the-green-mother.com
*.tech.ceo
*.newcastleunitedcentral.co.uk
lists.iajgs.org
customers.tigertech.net
*.tech.ceo
lists.hwlf.org
lists.hwlf.org
customers.tigertech.net
*.sheafferer.co.uk
lists.the-green-mother.com
web14.tigertech.info
customers.tigertech.net
*.ramseyfinancialhelp.com
*.songsofequus.com
lists.znrcds.com
web14.tigertech.info
lists.dutchmansdock.com
customers.tigertech.net
*.tech.ceo
*.lutimusic.com
*.fanchesterunited.com
lists.iajgs2019.com
web14.tigertech.info
lists.hwlf.org
lists.episcopalurbancaucus.org
lists.thelatitude.com
customers.tigertech.net
*.tech.ceo
*.witman-melamed.org
*.tech.ceo
customers.tigertech.net
lists.iajgs.com
lists.leonard-harris.com
web14.tigertech.info

Certificate

The complete raw certificate details for *.witman-melamed.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMyzCCC7OgAwIBAgISA648BYExLX3piDD2Cs5VOplaMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDYwOTU4NDBaFw0y
MDA0MDUwOTU4NDBaMB8xHTAbBgNVBAMMFCoud2l0bWFuLW1lbGFtZWQub3JnMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTwnvkt/rqmfhW/RDKiTTvz
tGYwkO+vyXku22t1UGmsIIBjI3cVSHes29R9wf/KW8oCCwyq5rVIuhH3Xj1xf/jX
fzfzzJS4jTTRH/xLnLpsX06FIpVyH1B/pYdMaxrak2CKIpqwsGe1MdHYrjU4HtjB
Cuq06ENtt8zmsAxCIrNaTDz9rith3eH5/a8h9yRAxWMiEP3anE+hSz+zvnrgij88
9L/k1spC9Mt9WDLjpRmRMaJMNaOL9pTOk8EB9Rhj65vXVu7hQYC2Q+WRsCmQaEUr
QpT3NKACG3+PoUkT9cVWEtqdPtguQUy/FYbChTqBxbP5OSiKt+X5Wf9hCgxg+QID
AQABo4IJ1DCCCdAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTFYo5Kyhwrg+YwfKhH
ix+ZKoc+8TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIIHhwYDVR0RBIIHfjCCB3qCDyouYWxlbHV5YXR2Lm5ldIIQKi5h
dmVyeWJyb29rcy51c4IXKi5idWRnZXRob21ldGhlYXRlci5uZXSCECouY3V0ZXNu
YWNrcy5jb22CGCouZGFpbHliaWJsZWJsZXNzaW5nLmNvbYIdKi5kcnNnYXR0eXBl
b3BsZXNvbHV0aW9ucy5jb22CFyouZnJhZ21lbnRzb2ZlbXBpcmUuY29tgg8qLmZ0
Y2ZvbHNvbS5jb22CGCouZ2lhbnRzZm9vdGJhbGxuZXdzLmNvbYIYKi5nbHV0ZW5m
cmVld2F0Y2hkb2cuY29tghIqLmdyYWNlbWFob21ldC5vcmeCGiouZ3JheWJ1bGxk
aXN0cmlidXRpbmcuY29tghMqLmhhaXJ3aXRoanVsaWUuY29tghYqLmluZmVydGls
aXR5aGFpa3UuY29tghEqLmluc2lnaHRheGlzLmNvbYITKi5qZW5uaWZlcmJyb29r
cy51c4IQKi5qb2huY2FsbG9uLmNvbYIOKi5qdWRzb25zYi5vcmeCHSoua2FybG1h
bG9uZXRveW90YXJldmlld3MuY29tghMqLmtpbG5jb25jaWVyZ2UuY29tghAqLm1h
cnZlbHNhZ2EuY29tghEqLm1vLWxpZ2h0aW5nLmNvbYIWKi5uZXh0c3RlcDRjb2Fj
aGVzLmNvbYIZKi5wcm9kdWN0c2Zvcmh1bWFuaXR5LmNvbYIXKi5yZWFsbWFya2V0
ZXhwZXJ0cy5jb22CEyoucmlwaXR0b3NocmVkcy5jb22CFSoucm9hZHRyaXBpbnNp
ZGVyLmNvbYIUKi5zZWNvbmR0YWN0aWNhbC5jb22CECouc2hhcGluZ21hZy5jb22C
FCouc2llcnJhd2Vic2l0ZXMuY29tghYqLnNwcmF5bGF2aWVkZW52ZXIuY29tghIq
LnN6aWx2YW9ubGluZS5jb22CDyoudGFtYm9yYXR2LmNvbYIQKi50YXJnYWF1ZGlv
LmNvbYIPKi50ZWFwcmF5ZXIuY29tghgqLnRlYXJkcm9waGVhZGxpZ2h0cy5jb22C
GSoudGhlYmxhY2tnb2F0cG9kY2FzdC5jb22CFyoudGhlZ25vc3RpY3NvY2lldHku
b3JnghUqLnRoZWhiY3VhZHZvY2F0ZS5jb22CFioudGhld3JpdGluZ2p1bmdsZS5j
b22CGSoudXBjb3VudHJ5Y2xvdGhpbmdjby5jb22CFCoud2l0bWFuLW1lbGFtZWQu
b3JnghQqLndvcmxkZnJlZW9mYWxzLmNvbYIUKi53b3JsZGZyZWVvZmFscy5uZXSC
EyoueHJheXN1cHBvcnR3cC5jb22CDWFsZWx1eWF0di5uZXSCDmF2ZXJ5YnJvb2tz
LnVzghVidWRnZXRob21ldGhlYXRlci5uZXSCDmN1dGVzbmFja3MuY29tghZkYWls
eWJpYmxlYmxlc3NpbmcuY29tghtkcnNnYXR0eXBlb3BsZXNvbHV0aW9ucy5jb22C
FWZyYWdtZW50c29mZW1waXJlLmNvbYINZnRjZm9sc29tLmNvbYIWZ2lhbnRzZm9v
dGJhbGxuZXdzLmNvbYIWZ2x1dGVuZnJlZXdhdGNoZG9nLmNvbYIQZ3JhY2VtYWhv
bWV0Lm9yZ4IYZ3JheWJ1bGxkaXN0cmlidXRpbmcuY29tghFoYWlyd2l0aGp1bGll
LmNvbYIUaW5mZXJ0aWxpdHloYWlrdS5jb22CD2luc2lnaHRheGlzLmNvbYIRamVu
bmlmZXJicm9va3MudXOCDmpvaG5jYWxsb24uY29tggxqdWRzb25zYi5vcmeCG2th
cmxtYWxvbmV0b3lvdGFyZXZpZXdzLmNvbYIRa2lsbmNvbmNpZXJnZS5jb22CDm1h
cnZlbHNhZ2EuY29tgg9tby1saWdodGluZy5jb22CFG5leHRzdGVwNGNvYWNoZXMu
Y29tghdwcm9kdWN0c2Zvcmh1bWFuaXR5LmNvbYIVcmVhbG1hcmtldGV4cGVydHMu
Y29tghFyaXBpdHRvc2hyZWRzLmNvbYITcm9hZHRyaXBpbnNpZGVyLmNvbYISc2Vj
b25kdGFjdGljYWwuY29tgg5zaGFwaW5nbWFnLmNvbYISc2llcnJhd2Vic2l0ZXMu
Y29tghRzcHJheWxhdmllZGVudmVyLmNvbYIQc3ppbHZhb25saW5lLmNvbYINdGFt
Ym9yYXR2LmNvbYIOdGFyZ2FhdWRpby5jb22CDXRlYXByYXllci5jb22CFnRlYXJk
cm9waGVhZGxpZ2h0cy5jb22CF3RoZWJsYWNrZ29hdHBvZGNhc3QuY29tghV0aGVn
bm9zdGljc29jaWV0eS5vcmeCE3RoZWhiY3VhZHZvY2F0ZS5jb22CFHRoZXdyaXRp
bmdqdW5nbGUuY29tghd1cGNvdW50cnljbG90aGluZ2NvLmNvbYISd2l0bWFuLW1l
bGFtZWQub3JnghJ3b3JsZGZyZWVvZmFscy5jb22CEndvcmxkZnJlZW9mYWxzLm5l
dIIReHJheXN1cHBvcnR3cC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDwlaRZ8gDRgkAQLS+TiI6tS/4d
R+OZ4dA0prCoqo6ycwAAAW96gbutAAAEAwBIMEYCIQDSXSpIv2KtYCbVrci+z4zr
DY5jy4g+zoT94bNaR0uPAAIhAPEjz4suM+LjN97dg/PmXK2KSCG0GTP9TeKNwJ0s
Va+6AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFveoG7pgAA
BAMARzBFAiEA4Q3pV8p27y0v35oowJNGWgB5kXzYm+JwnOReUoA202MCIH5+WeNM
8ZybhqWww08wbxFnugHlHgNJswJ2gI7pEiFfMA0GCSqGSIb3DQEBCwUAA4IBAQA8
2l0hKJ+NIxZXfqyvblB7ItXqxq5Ldab8YzhUNe4TLxdJm4mGvbru8hn5e82bswLb
cGD9ciH4IH7IrQBU4THMDjrXqkiYw329n1I8QWr6lxrInYkMR9ae4AsYMCOtuT4R
hsHG9ohVZA42PxSDhdSZAcSmvP/1lqROr76KRH4sQR49scD1qc0l2A3VAAUyjPR5
SVaimHv/Bfov5Tt2mvAZJMysxQc5F6Y7vKZsvc8r3lGk7vIQwd5+tznDHQJp+N5T
Kr2/m7UsF3uN5dYhGsRteAPC+/qaDtPlt3XhKKOvUoiiwq+3YSap5Vxos9InSulQ
4En/oyZAy0Vzjjmhlp/Y
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTwnvkt/rqmfhW/RDKi
TTvztGYwkO+vyXku22t1UGmsIIBjI3cVSHes29R9wf/KW8oCCwyq5rVIuhH3Xj1x
f/jXfzfzzJS4jTTRH/xLnLpsX06FIpVyH1B/pYdMaxrak2CKIpqwsGe1MdHYrjU4
HtjBCuq06ENtt8zmsAxCIrNaTDz9rith3eH5/a8h9yRAxWMiEP3anE+hSz+zvnrg
ij889L/k1spC9Mt9WDLjpRmRMaJMNaOL9pTOk8EB9Rhj65vXVu7hQYC2Q+WRsCmQ
aEUrQpT3NKACG3+PoUkT9cVWEtqdPtguQUy/FYbChTqBxbP5OSiKt+X5Wf9hCgxg
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320625771901082518087268776586733879466330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 09:58:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 09:58:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.witman-melamed.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23380192069074614503612620979768095217869035430559388218061962942491291867392265171370480635328177553658739465501069779155343807323024149221317027269971930709543715521421254564678050088095582979177158131018338062458840209367653275980195928417508658144539519798900390463591961967938376976296565089334693223511074353502238375438695055715037080980567436863806769660639924960607743196958841225263150057929301532290720656333764666165514224570039064925391498828650352196824619627575999429345122099814529002106232392746438611204812758442748380855251104257855164582127131554903442061387902792975123832508456261641095340646649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5628e4aca1c2b83e6307ca8478b1f992a873ef1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aleluyatv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.averybrooks.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgethometheater.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cutesnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailybibleblessing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drsgattypeoplesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fragmentsofempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftcfolsom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giantsfootballnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glutenfreewatchdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gracemahomet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graybulldistributing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairwithjulie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infertilityhaiku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insightaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenniferbrooks.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johncallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.judsonsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karlmalonetoyotareviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kilnconcierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marvelsaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mo-lighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextstep4coaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.productsforhumanity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realmarketexperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ripittoshreds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadtripinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secondtactical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shapingmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sierrawebsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spraylaviedenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.szilvaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamboratv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.targaaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teaprayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teardropheadlights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theblackgoatpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegnosticsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehbcuadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewritingjungle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upcountryclothingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.witman-melamed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldfreeofals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldfreeofals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xraysupportwp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aleluyatv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averybrooks.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgethometheater.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutesnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailybibleblessing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drsgattypeoplesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fragmentsofempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftcfolsom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giantsfootballnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glutenfreewatchdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracemahomet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graybulldistributing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairwithjulie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infertilityhaiku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insightaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenniferbrooks.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johncallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judsonsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karlmalonetoyotareviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kilnconcierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvelsaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo-lighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextstep4coaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productsforhumanity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmarketexperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripittoshreds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadtripinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondtactical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapingmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierrawebsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spraylaviedenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szilvaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamboratv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targaaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaprayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teardropheadlights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theblackgoatpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegnosticsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehbcuadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewritingjungle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upcountryclothingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witman-melamed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldfreeofals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldfreeofals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xraysupportwp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f7a81bbad0000040300483046022100d25d2a48bf62ad6026d5adc8becf8ceb0d8e63cb883ece84fde1b35a474b8f00022100f123cf8b2e33e2e337dedd83f3e65cad8a4821b41933fd4de28dc09d2c55afba007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7a81bba60000040300473045022100e10de957ca76ef2d2fdf9a28c093465a0079917cd89be2709ce45e528036d36302207e7e59e34cf19c9b86a5b0c34f306f1167ba01e51e0349b30276808ee912215f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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