*.pemfguide.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:01:30:2a:f1:e9:aa:cb:f1:0d:b9:63:e5:3e:2b:51:74:1d was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pemfguide.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:01:30:2a:f1:e9:aa:cb:f1:0d:b9:63:e5:3e:2b:51:74:1d
Serial Number (int): 348853452020801394822449415716808288203805
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:46:78:56:5e:48:08:e0:9c:4a:65:37:b2:5b:24:8d:68:05:5c:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:5b:f5:0b:8c:f7:90:a7:03:aa:86:ba:40:96:2d:b2:ed:1b:af:1c
Fingerprint (sha256): dd:cf:e8:6f:79:68:3e:db:07:a9:69:c7:0e:09:d4:ee:2c:32:08:d5:80:59:7e:3a:23:9b:dc:3f:a1:ce:1b:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.pemfguide.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pemfguide.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anibleu.com
*.behnkeestates.com
*.birthcircleplacentas.com
*.bluexlog.com
*.classicsteelbicycles.com
*.doctoramirimd.com
*.dramatherapysf.com
*.drearycoast.org
*.ecophysics-us.com
*.fiduciaryforesight.com
*.futuregallery.org
*.hancockstreetapothecary.com
*.injmed.org
*.jrosacreations.com
*.kayleighroberts.com
*.magnaenterprise.net
*.maskandprotect.com
*.mcgpdx.com
*.mikegriffin.net
*.millavenueautoworks.com
*.nakedmindthefilm.org
*.oldyellowhousefoundation.org
*.overflowtechnologiesnc.com
*.parrotvillage.org
*.pemfguide.com
*.pinemountainarts.org
*.propertyresearchcorp.com
*.rhapsodybelle.com
*.scheheradesign.com
*.segrafin.com
*.sf-cfo.com
*.shaggyfrigador.com
*.shiplaw.com
*.spedtesting.com
*.ststier1.com
*.sytochgreentech.com
*.text-eval.com
*.townsendwalker.com
*.usaequipmentexport.com
*.vitalsourcenaturalmedicine.com
*.wordsly.com
*.worldofatkelem.com
anibleu.com
behnkeestates.com
birthcircleplacentas.com
bluexlog.com
classicsteelbicycles.com
doctoramirimd.com
dramatherapysf.com
drearycoast.org
ecophysics-us.com
fiduciaryforesight.com
futuregallery.org
hancockstreetapothecary.com
injmed.org
jrosacreations.com
kayleighroberts.com
magnaenterprise.net
maskandprotect.com
mcgpdx.com
mikegriffin.net
millavenueautoworks.com
nakedmindthefilm.org
oldyellowhousefoundation.org
overflowtechnologiesnc.com
parrotvillage.org
pemfguide.com
pinemountainarts.org
propertyresearchcorp.com
rhapsodybelle.com
scheheradesign.com
segrafin.com
sf-cfo.com
shaggyfrigador.com
shiplaw.com
spedtesting.com
ststier1.com
sytochgreentech.com
text-eval.com
townsendwalker.com
usaequipmentexport.com
vitalsourcenaturalmedicine.com
wordsly.com
worldofatkelem.com

Other certificates including the domain name pemfguide.com

(limited to 100 certificates)
*.singularis.com
*.thunkmedia.com
*.thunkmedia.com
*.thunkmedia.com
*.thunkmedia.com
*.thunkmedia.com
*.singularis.com
web08.tigertechnologies.net
web08.tigertechnologies.net
*.thunkmedia.com
*.thunkmedia.com
web08.tigertechnologies.net
web08.tigertechnologies.net
*.singularis.com
*.thunkmedia.com
web08.tigertechnologies.net
web08.tigertechnologies.net
*.thunkmedia.com
*.dvh-art.com
*.pemfguide.com
web08.tigertechnologies.net
*.thunkmedia.com
pemfguide.com

Certificate

The complete raw certificate details for *.pemfguide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMzDCCC7SgAwIBAgISBAEwKvHpqsvxDblj5T4rUXQdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMjEwNjM0MjBaFw0x
OTAxMTkwNjM0MjBaMBoxGDAWBgNVBAMMDyoucGVtZmd1aWRlLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0mI6qAgRKhop0o+ZMCUWIaOeYhtlni
MfS3BxKIa2FyhetwHVxJiV1cgnwyRXQdDtjJZ1WBmGmciMeG+DnE4D8v0fu3DA+z
Ga/+g/k2rfMRV1iBtiaKkqjo/wiOVbZJuSQ9dhQH+1aedw025pZmImIMot3foggp
XU2Fzo/oOMrLonSQ/w/E8wr3/Y8dfySTwwlVrnJVOfnzNF51zp5Jjw0UaFJgzfvW
e1fRGm36rAB8eKuy62Yc+/JzQJjQ5eu79D7CthUl0fCDvP1kTKQdulTRlBz5QDi1
LiwzN5MxdM7YWwWw8xHpaE2FDLHCmW1xsj3EHiERIolQt4jWDhIXnAUCAwEAAaOC
CdowggnWMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUEUZ4Vl5ICOCcSmU3slskjWgF
XHEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCBtsGA1UdEQSCBtIwggbOgg0qLmFuaWJsZXUuY29tghMqLmJlaG5rZWVz
dGF0ZXMuY29tghoqLmJpcnRoY2lyY2xlcGxhY2VudGFzLmNvbYIOKi5ibHVleGxv
Zy5jb22CGiouY2xhc3NpY3N0ZWVsYmljeWNsZXMuY29tghMqLmRvY3RvcmFtaXJp
bWQuY29tghQqLmRyYW1hdGhlcmFweXNmLmNvbYIRKi5kcmVhcnljb2FzdC5vcmeC
EyouZWNvcGh5c2ljcy11cy5jb22CGCouZmlkdWNpYXJ5Zm9yZXNpZ2h0LmNvbYIT
Ki5mdXR1cmVnYWxsZXJ5Lm9yZ4IdKi5oYW5jb2Nrc3RyZWV0YXBvdGhlY2FyeS5j
b22CDCouaW5qbWVkLm9yZ4IUKi5qcm9zYWNyZWF0aW9ucy5jb22CFSoua2F5bGVp
Z2hyb2JlcnRzLmNvbYIVKi5tYWduYWVudGVycHJpc2UubmV0ghQqLm1hc2thbmRw
cm90ZWN0LmNvbYIMKi5tY2dwZHguY29tghEqLm1pa2VncmlmZmluLm5ldIIZKi5t
aWxsYXZlbnVlYXV0b3dvcmtzLmNvbYIWKi5uYWtlZG1pbmR0aGVmaWxtLm9yZ4Ie
Ki5vbGR5ZWxsb3dob3VzZWZvdW5kYXRpb24ub3JnghwqLm92ZXJmbG93dGVjaG5v
bG9naWVzbmMuY29tghMqLnBhcnJvdHZpbGxhZ2Uub3Jngg8qLnBlbWZndWlkZS5j
b22CFioucGluZW1vdW50YWluYXJ0cy5vcmeCGioucHJvcGVydHlyZXNlYXJjaGNv
cnAuY29tghMqLnJoYXBzb2R5YmVsbGUuY29tghQqLnNjaGVoZXJhZGVzaWduLmNv
bYIOKi5zZWdyYWZpbi5jb22CDCouc2YtY2ZvLmNvbYIUKi5zaGFnZ3lmcmlnYWRv
ci5jb22CDSouc2hpcGxhdy5jb22CESouc3BlZHRlc3RpbmcuY29tgg4qLnN0c3Rp
ZXIxLmNvbYIVKi5zeXRvY2hncmVlbnRlY2guY29tgg8qLnRleHQtZXZhbC5jb22C
FCoudG93bnNlbmR3YWxrZXIuY29tghgqLnVzYWVxdWlwbWVudGV4cG9ydC5jb22C
ICoudml0YWxzb3VyY2VuYXR1cmFsbWVkaWNpbmUuY29tgg0qLndvcmRzbHkuY29t
ghQqLndvcmxkb2ZhdGtlbGVtLmNvbYILYW5pYmxldS5jb22CEWJlaG5rZWVzdGF0
ZXMuY29tghhiaXJ0aGNpcmNsZXBsYWNlbnRhcy5jb22CDGJsdWV4bG9nLmNvbYIY
Y2xhc3NpY3N0ZWVsYmljeWNsZXMuY29tghFkb2N0b3JhbWlyaW1kLmNvbYISZHJh
bWF0aGVyYXB5c2YuY29tgg9kcmVhcnljb2FzdC5vcmeCEWVjb3BoeXNpY3MtdXMu
Y29tghZmaWR1Y2lhcnlmb3Jlc2lnaHQuY29tghFmdXR1cmVnYWxsZXJ5Lm9yZ4Ib
aGFuY29ja3N0cmVldGFwb3RoZWNhcnkuY29tggppbmptZWQub3JnghJqcm9zYWNy
ZWF0aW9ucy5jb22CE2theWxlaWdocm9iZXJ0cy5jb22CE21hZ25hZW50ZXJwcmlz
ZS5uZXSCEm1hc2thbmRwcm90ZWN0LmNvbYIKbWNncGR4LmNvbYIPbWlrZWdyaWZm
aW4ubmV0ghdtaWxsYXZlbnVlYXV0b3dvcmtzLmNvbYIUbmFrZWRtaW5kdGhlZmls
bS5vcmeCHG9sZHllbGxvd2hvdXNlZm91bmRhdGlvbi5vcmeCGm92ZXJmbG93dGVj
aG5vbG9naWVzbmMuY29tghFwYXJyb3R2aWxsYWdlLm9yZ4INcGVtZmd1aWRlLmNv
bYIUcGluZW1vdW50YWluYXJ0cy5vcmeCGHByb3BlcnR5cmVzZWFyY2hjb3JwLmNv
bYIRcmhhcHNvZHliZWxsZS5jb22CEnNjaGVoZXJhZGVzaWduLmNvbYIMc2VncmFm
aW4uY29tggpzZi1jZm8uY29tghJzaGFnZ3lmcmlnYWRvci5jb22CC3NoaXBsYXcu
Y29tgg9zcGVkdGVzdGluZy5jb22CDHN0c3RpZXIxLmNvbYITc3l0b2NoZ3JlZW50
ZWNoLmNvbYINdGV4dC1ldmFsLmNvbYISdG93bnNlbmR3YWxrZXIuY29tghZ1c2Fl
cXVpcG1lbnRleHBvcnQuY29tgh52aXRhbHNvdXJjZW5hdHVyYWxtZWRpY2luZS5j
b22CC3dvcmRzbHkuY29tghJ3b3JsZG9mYXRrZWxlbS5jb20wgf4GA1UdIASB9jCB
8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENl
cnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFy
dGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRl
IFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0
b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHR+2oMxrTMQkSGcziVPQnDC
v/1eQiAIxjc1eeYQe8xWAAABZpWL05kAAAQDAEcwRQIhAP32PuMoFAzaiwsI/5Ns
ou3pVaI/E8juSoNt5m8d4mMZAiAlK0lxPAxW3zaGdc8QwLDvYtiXNNeGEC8F2lqN
p7ndnwB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZpWL06gA
AAQDAEcwRQIhANraZ677zOoeh4M0ZpxyeXfUeT1yBZ+wLiXvRp88PhgMAiACwRWe
LeeeXpTUfEEC2yuferfT4Mp2jg3Y/m/bZhF9DDANBgkqhkiG9w0BAQsFAAOCAQEA
AQiXoPMQj7Xl/BnkkZ+RR32iEE+0Xqmnx7fj4DhcptHo22kJlNouB0VOEtcSRahs
YPYrB6p0HDQnTi+lCwREeKOeLt0Iv2nCcEwmsrtFetf6ZD1laKhoMZaAuUeJyyr3
2SgOJHzLjzu0mC0utlop0CwsVNOjY0RoypGs0/L5ESDgC2Ycuy6BgcYwsNuIiCS5
e3e7mVlHZZCSA+XCdH4JGKAeRdoinkGW5wmqB0OU53jMt9QadxntlOuyFpLzeEvh
0BCJywdSmPnPkaEh3NC9ycIZ6bFqfA5Lv/V4gK1LlTXv926ZDKp36TD82tEHHfVJ
zzZsZh2anbgCf2L3t7APkA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSYjqoCBEqGinSj5kwJR
Yho55iG2WeIx9LcHEohrYXKF63AdXEmJXVyCfDJFdB0O2MlnVYGYaZyIx4b4OcTg
Py/R+7cMD7MZr/6D+Tat8xFXWIG2JoqSqOj/CI5Vtkm5JD12FAf7Vp53DTbmlmYi
Ygyi3d+iCCldTYXOj+g4ysuidJD/D8TzCvf9jx1/JJPDCVWuclU5+fM0XnXOnkmP
DRRoUmDN+9Z7V9EabfqsAHx4q7LrZhz78nNAmNDl67v0PsK2FSXR8IO8/WRMpB26
VNGUHPlAOLUuLDM3kzF0zthbBbDzEeloTYUMscKZbXGyPcQeIREiiVC3iNYOEhec
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348853452020801394822449415716808288203805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-21 06:34:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 06:34:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pemfguide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23877846838430025975287752822475856223324941174767269801073143788063290839689464849423874922282887369491013622956530860464489718201629112412362885893377431693081080422192604034069214005302513791080315534316371181971299496865864520170984605797273031202500446776473775449030825216690123119625122003044529401585680649799185568076617017851636605022967681702942568638969254602043572094183163101163207098454046537931512688219845441261876485127638064805782547184886395822393324088858623099938893345177065400728232595248922932700423308126635448453631409723422260367036620278466591264478285000438320708698432758440328391269381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							114678565e4808e09c4a6537b25b248d68055c71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anibleu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.behnkeestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birthcircleplacentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluexlog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classicsteelbicycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctoramirimd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dramatherapysf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drearycoast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecophysics-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiduciaryforesight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futuregallery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hancockstreetapothecary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.injmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jrosacreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kayleighroberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnaenterprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maskandprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcgpdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mikegriffin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millavenueautoworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakedmindthefilm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldyellowhousefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overflowtechnologiesnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parrotvillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pemfguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinemountainarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propertyresearchcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhapsodybelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheheradesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segrafin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sf-cfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaggyfrigador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shiplaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spedtesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ststier1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sytochgreentech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.text-eval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.townsendwalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usaequipmentexport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitalsourcenaturalmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordsly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldofatkelem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anibleu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behnkeestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthcircleplacentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluexlog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicsteelbicycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctoramirimd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dramatherapysf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drearycoast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecophysics-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiduciaryforesight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futuregallery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hancockstreetapothecary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'injmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrosacreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kayleighroberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnaenterprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maskandprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcgpdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikegriffin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millavenueautoworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakedmindthefilm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldyellowhousefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overflowtechnologiesnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrotvillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pemfguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinemountainarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyresearchcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhapsodybelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheheradesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segrafin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf-cfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaggyfrigador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiplaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spedtesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ststier1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sytochgreentech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'text-eval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townsendwalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaequipmentexport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalsourcenaturalmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordsly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldofatkelem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166958bd3990000040300473045022100fdf63ee328140cda8b0b08ff936ca2ede955a23f13c8ee4a836de66f1de263190220252b49713c0c56df368675cf10c0b0ef62d89734d786102f05da5a8da7b9dd9f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166958bd3a80000040300473045022100dada67aefbccea1e878334669c727977d4793d72059fb02e25ef469f3c3e180c022002c1159e2de79e5e94d47c4102db2b9f7ab7d3e0ca768e0dd8fe6fdb66117d0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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