aegisfinancialgroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:fa:1d:71:5a:2f:c5:70:d0:70:bb:e8:16:65:93:20:6a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aegisfinancialgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:fa:1d:71:5a:2f:c5:70:d0:70:bb:e8:16:65:93:20:6a
Serial Number (int): 276982024181335701599471442771394656673898
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:aa:72:25:17:60:07:ae:1d:60:2b:de:a3:52:5e:27:5d:14:99:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:59:d6:13:ca:94:bc:55:8f:68:e6:78:e4:99:82:5b:bc:0e:30:eb
Fingerprint (sha256): df:14:09:7b:db:3a:4a:17:74:17:04:0a:1b:e8:a5:65:6e:56:8e:0b:ad:f5:84:a6:84:78:f2:27:b5:c0:02:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aegisfinancialgroup.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aegisfinancialgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dsm.com
adamkylesnyder.com
aegisfinancialgroup.com
annuncipadova.com
balloonssacramento.com
birthday-poems.org
bitcointas.com
bonusdragons.com
carsonsprings.com
clevelandweddingcatering.com
composite-rack-cases.com
curiosityfeeder.com
designhomeandgarden.com
desmoinesjointpain.com
doversportsmed.com
drdevkinandan.com
drrefferal.com
ehandfans.com
eternalstones.com
filmandslidescanner.com
fish-hook.com
foodgrowingsystem.com
huntingtonlawyer.com
internationaldiscipleshipministries.com
jacksonvillecomingsoon.com
jobworldathome.com
jointpaincoloradosprings.com
lavabo.com
lovecues.com
lowable.com
malestripperslondon.com
missioneighty-5.org
mtb-bikes.com
munchiecafeteria.com
mymeans.com
oscarserrano.com
paladinmortgages.com
personalprivacy.link
portable-headphones.com
professionalmosquitocontrol.org
quantcontractor.com
retirefunds.com
sorrente.com
step-dad.com
thermalplate.com
twinsdaycare.com
uzsj.com
videostoreworld.com
www.3dsm.com
www.adamkylesnyder.com
www.aegisfinancialgroup.com
www.annuncipadova.com
www.balloonssacramento.com
www.birthday-poems.org
www.bitcointas.com
www.bonusdragons.com
www.carsonsprings.com
www.clevelandweddingcatering.com
www.composite-rack-cases.com
www.curiosityfeeder.com
www.designhomeandgarden.com
www.desmoinesjointpain.com
www.doversportsmed.com
www.drdevkinandan.com
www.drrefferal.com
www.ehandfans.com
www.eternalstones.com
www.filmandslidescanner.com
www.fish-hook.com
www.foodgrowingsystem.com
www.huntingtonlawyer.com
www.internationaldiscipleshipministries.com
www.jacksonvillecomingsoon.com
www.jobworldathome.com
www.jointpaincoloradosprings.com
www.lavabo.com
www.lovecues.com
www.lowable.com
www.malestripperslondon.com
www.missioneighty-5.org
www.mtb-bikes.com
www.munchiecafeteria.com
www.mymeans.com
www.oscarserrano.com
www.paladinmortgages.com
www.personalprivacy.link
www.portable-headphones.com
www.professionalmosquitocontrol.org
www.quantcontractor.com
www.retirefunds.com
www.sorrente.com
www.step-dad.com
www.thermalplate.com
www.twinsdaycare.com
www.uzsj.com
www.videostoreworld.com
www.xn--azri-w6b.com
www.yssco.com
xn--azri-w6b.com
yssco.com

Other certificates including the domain name aegisfinancialgroup.com

(limited to 100 certificates)
www.sportwetten.world
www.timnassauer.com
www.bitcoinato.com
eboas.com
www.scriptul.com
farmsandacreage.com
www.tshirtone.com
jaxcomingsoon.com
louisvilleprp.com
www.urushiolremovalsoap.com
www.nffco.com
aegisfinancialgroup.com
www.theladivorcelawyer.com
nettcasinospilleautomater.com
albuquerquestemcellcenter.com
designedtolivewell.com
julianamoore.com
www.funbands.com
aegisfinancialgroup.com
mobicanada.com
traje.org

Certificate

The complete raw certificate details for aegisfinancialgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN+DCCDOCgAwIBAgISAy36HXFaL8Vw0HC76BZlkyBqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDIwMjU2NDhaFw0y
MDA0MDEwMjU2NDhaMCIxIDAeBgNVBAMTF2FlZ2lzZmluYW5jaWFsZ3JvdXAuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXi+essLNaCVBCd/xrKN
HmFqNbnYYEWyxxsH0lGhatae2Im21aqWJ7KqIak9nuPnt78tJNe2luk99klYAmbT
PL998qs3rjgWOPXPi3msowVU2gUJUmU7ASSWZo2t4stEb9pJe6dITA1gOg66BNut
kqHHR80qWWnq7gZQ2+baZ4qxy1L562ri/lRqJhBFkLXuq/aqSZI5lct4f2+zsYgk
iuN3Qc63bVehk92bagUKm3qx7S90Fc3Pbc25B02aAVPSVLcASkOwJMq1g3bYuINm
yUYQWLHyfiY+u0D8IiMXxVZ8aIP6Qq0SwmkcIBiWliUy1rR2hVSLDdOdxVep6+l9
hQIDAQABo4IK/jCCCvowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTcqnIlF2AHrh1g
K96jUl4nXRSZ1DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMIIIswYDVR0RBIIIqjCCCKaCCDNkc20uY29tghJhZGFta3ls
ZXNueWRlci5jb22CF2FlZ2lzZmluYW5jaWFsZ3JvdXAuY29tghFhbm51bmNpcGFk
b3ZhLmNvbYIWYmFsbG9vbnNzYWNyYW1lbnRvLmNvbYISYmlydGhkYXktcG9lbXMu
b3Jngg5iaXRjb2ludGFzLmNvbYIQYm9udXNkcmFnb25zLmNvbYIRY2Fyc29uc3By
aW5ncy5jb22CHGNsZXZlbGFuZHdlZGRpbmdjYXRlcmluZy5jb22CGGNvbXBvc2l0
ZS1yYWNrLWNhc2VzLmNvbYITY3VyaW9zaXR5ZmVlZGVyLmNvbYIXZGVzaWduaG9t
ZWFuZGdhcmRlbi5jb22CFmRlc21vaW5lc2pvaW50cGFpbi5jb22CEmRvdmVyc3Bv
cnRzbWVkLmNvbYIRZHJkZXZraW5hbmRhbi5jb22CDmRycmVmZmVyYWwuY29tgg1l
aGFuZGZhbnMuY29tghFldGVybmFsc3RvbmVzLmNvbYIXZmlsbWFuZHNsaWRlc2Nh
bm5lci5jb22CDWZpc2gtaG9vay5jb22CFWZvb2Rncm93aW5nc3lzdGVtLmNvbYIU
aHVudGluZ3Rvbmxhd3llci5jb22CJ2ludGVybmF0aW9uYWxkaXNjaXBsZXNoaXBt
aW5pc3RyaWVzLmNvbYIaamFja3NvbnZpbGxlY29taW5nc29vbi5jb22CEmpvYndv
cmxkYXRob21lLmNvbYIcam9pbnRwYWluY29sb3JhZG9zcHJpbmdzLmNvbYIKbGF2
YWJvLmNvbYIMbG92ZWN1ZXMuY29tggtsb3dhYmxlLmNvbYIXbWFsZXN0cmlwcGVy
c2xvbmRvbi5jb22CE21pc3Npb25laWdodHktNS5vcmeCDW10Yi1iaWtlcy5jb22C
FG11bmNoaWVjYWZldGVyaWEuY29tggtteW1lYW5zLmNvbYIQb3NjYXJzZXJyYW5v
LmNvbYIUcGFsYWRpbm1vcnRnYWdlcy5jb22CFHBlcnNvbmFscHJpdmFjeS5saW5r
ghdwb3J0YWJsZS1oZWFkcGhvbmVzLmNvbYIfcHJvZmVzc2lvbmFsbW9zcXVpdG9j
b250cm9sLm9yZ4ITcXVhbnRjb250cmFjdG9yLmNvbYIPcmV0aXJlZnVuZHMuY29t
ggxzb3JyZW50ZS5jb22CDHN0ZXAtZGFkLmNvbYIQdGhlcm1hbHBsYXRlLmNvbYIQ
dHdpbnNkYXljYXJlLmNvbYIIdXpzai5jb22CE3ZpZGVvc3RvcmV3b3JsZC5jb22C
DHd3dy4zZHNtLmNvbYIWd3d3LmFkYW1reWxlc255ZGVyLmNvbYIbd3d3LmFlZ2lz
ZmluYW5jaWFsZ3JvdXAuY29tghV3d3cuYW5udW5jaXBhZG92YS5jb22CGnd3dy5i
YWxsb29uc3NhY3JhbWVudG8uY29tghZ3d3cuYmlydGhkYXktcG9lbXMub3JnghJ3
d3cuYml0Y29pbnRhcy5jb22CFHd3dy5ib251c2RyYWdvbnMuY29tghV3d3cuY2Fy
c29uc3ByaW5ncy5jb22CIHd3dy5jbGV2ZWxhbmR3ZWRkaW5nY2F0ZXJpbmcuY29t
ghx3d3cuY29tcG9zaXRlLXJhY2stY2FzZXMuY29tghd3d3cuY3VyaW9zaXR5ZmVl
ZGVyLmNvbYIbd3d3LmRlc2lnbmhvbWVhbmRnYXJkZW4uY29tghp3d3cuZGVzbW9p
bmVzam9pbnRwYWluLmNvbYIWd3d3LmRvdmVyc3BvcnRzbWVkLmNvbYIVd3d3LmRy
ZGV2a2luYW5kYW4uY29tghJ3d3cuZHJyZWZmZXJhbC5jb22CEXd3dy5laGFuZGZh
bnMuY29tghV3d3cuZXRlcm5hbHN0b25lcy5jb22CG3d3dy5maWxtYW5kc2xpZGVz
Y2FubmVyLmNvbYIRd3d3LmZpc2gtaG9vay5jb22CGXd3dy5mb29kZ3Jvd2luZ3N5
c3RlbS5jb22CGHd3dy5odW50aW5ndG9ubGF3eWVyLmNvbYIrd3d3LmludGVybmF0
aW9uYWxkaXNjaXBsZXNoaXBtaW5pc3RyaWVzLmNvbYIed3d3LmphY2tzb252aWxs
ZWNvbWluZ3Nvb24uY29tghZ3d3cuam9id29ybGRhdGhvbWUuY29tgiB3d3cuam9p
bnRwYWluY29sb3JhZG9zcHJpbmdzLmNvbYIOd3d3LmxhdmFiby5jb22CEHd3dy5s
b3ZlY3Vlcy5jb22CD3d3dy5sb3dhYmxlLmNvbYIbd3d3Lm1hbGVzdHJpcHBlcnNs
b25kb24uY29tghd3d3cubWlzc2lvbmVpZ2h0eS01Lm9yZ4IRd3d3Lm10Yi1iaWtl
cy5jb22CGHd3dy5tdW5jaGllY2FmZXRlcmlhLmNvbYIPd3d3Lm15bWVhbnMuY29t
ghR3d3cub3NjYXJzZXJyYW5vLmNvbYIYd3d3LnBhbGFkaW5tb3J0Z2FnZXMuY29t
ghh3d3cucGVyc29uYWxwcml2YWN5LmxpbmuCG3d3dy5wb3J0YWJsZS1oZWFkcGhv
bmVzLmNvbYIjd3d3LnByb2Zlc3Npb25hbG1vc3F1aXRvY29udHJvbC5vcmeCF3d3
dy5xdWFudGNvbnRyYWN0b3IuY29tghN3d3cucmV0aXJlZnVuZHMuY29tghB3d3cu
c29ycmVudGUuY29tghB3d3cuc3RlcC1kYWQuY29tghR3d3cudGhlcm1hbHBsYXRl
LmNvbYIUd3d3LnR3aW5zZGF5Y2FyZS5jb22CDHd3dy51enNqLmNvbYIXd3d3LnZp
ZGVvc3RvcmV3b3JsZC5jb22CFHd3dy54bi0tYXpyaS13NmIuY29tgg13d3cueXNz
Y28uY29tghB4bi0tYXpyaS13NmIuY29tggl5c3Njby5jb20wTAYDVR0gBEUwQzAI
BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBep3P5
31bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW9kZhJ3AAAEAwBGMEQCID60
SGmG7vaFmItnC0sdMrnVVfY58akahrYIHCb8TM5CAiBx6OxKVHME9T1Zr8KGtV2j
SoOdpf3d/d71Jyldgk7ZAgB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3v
i5BeAAABb2RmEm0AAAQDAEcwRQIgX3StDB9scXH75uEktvyl9CwClAEl3deDB7uF
ufKjiBICIQCtMSrBeuN8L+HXCSgektmubwGQU+zXHiUeFNcES7SLNjANBgkqhkiG
9w0BAQsFAAOCAQEAl92oBicoivDNNOUCJrrbxbxl/RNG+wqnkdUg90dIz8kUQuw0
Pf4XX6S2c+XaFJPy/V0KnEcb/CMhI9HyO/0O0v3kmIzKh9I4RsVBJRKfC2olZrHv
gpy+CbTWoWbOHTc7ZDlC8HFi9IT62/tu6y89z/M4cOC2dh8MKPq8ZpwFcDPYOoXU
DhAlroL3YBrr+/hJHXIDiXxQCRNMF6brc91LBScMYmWCCNYVY0XNmGL81iRsFfQp
jEk6d/t9ib8bXtNMVmcjDUrsCGZr6EwGrWXDOSDqP8lMSC4S3Q6yfZNButszNAe5
sHgiZv4w6Eo8h3BtHni0/MsdInyWgNpDCd/E5A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXi+essLNaCVBCd/xrKN
HmFqNbnYYEWyxxsH0lGhatae2Im21aqWJ7KqIak9nuPnt78tJNe2luk99klYAmbT
PL998qs3rjgWOPXPi3msowVU2gUJUmU7ASSWZo2t4stEb9pJe6dITA1gOg66BNut
kqHHR80qWWnq7gZQ2+baZ4qxy1L562ri/lRqJhBFkLXuq/aqSZI5lct4f2+zsYgk
iuN3Qc63bVehk92bagUKm3qx7S90Fc3Pbc25B02aAVPSVLcASkOwJMq1g3bYuINm
yUYQWLHyfiY+u0D8IiMXxVZ8aIP6Qq0SwmkcIBiWliUy1rR2hVSLDdOdxVep6+l9
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276982024181335701599471442771394656673898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 02:56:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 02:56:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aegisfinancialgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22908674314549586877578047566725678355659834891606156471716735004150427990255271710662386269907211905102892400971013366448202409382159571157936640155368513458236504849836641083247876066588610428691281775596401226635683208078535146472859079727259674512025962416196693448420646431601766421975204817092830822283498829314976386905510794568169158707548509511629736250506456800604740433619572921592694802208031905494246572945446100352470652669887055659142295220056455347419471098515478277553616595498883271953759209789470735936679901417397707049112792992037897159987611373075980511886355975502920490578716014095849411411333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcaa7225176007ae1d602bdea3525e275d1499d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2218 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamkylesnyder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegisfinancialgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuncipadova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balloonssacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthday-poems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcointas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonusdragons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsonsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevelandweddingcatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'composite-rack-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiosityfeeder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designhomeandgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmoinesjointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doversportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drdevkinandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drrefferal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehandfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eternalstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmandslidescanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fish-hook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodgrowingsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationaldiscipleshipministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonvillecomingsoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobworldathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaincoloradosprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovecues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malestripperslondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missioneighty-5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtb-bikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munchiecafeteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscarserrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paladinmortgages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalprivacy.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portable-headphones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalmosquitocontrol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirefunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorrente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'step-dad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermalplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinsdaycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videostoreworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adamkylesnyder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegisfinancialgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annuncipadova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balloonssacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birthday-poems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcointas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonusdragons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carsonsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevelandweddingcatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.composite-rack-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curiosityfeeder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designhomeandgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desmoinesjointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doversportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drdevkinandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drrefferal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ehandfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eternalstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmandslidescanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fish-hook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodgrowingsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntingtonlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationaldiscipleshipministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksonvillecomingsoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobworldathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaincoloradosprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovecues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malestripperslondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missioneighty-5.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtb-bikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.munchiecafeteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oscarserrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paladinmortgages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalprivacy.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portable-headphones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professionalmosquitocontrol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quantcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirefunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorrente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.step-dad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermalplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twinsdaycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videostoreworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--azri-w6b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yssco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--azri-w6b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yssco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f64661277000004030046304402203eb4486986eef685988b670b4b1d32b9d555f639f1a91a86b6081c26fc4cce42022071e8ec4a547304f53d59afc286b55da34a839da5fdddfddef527295d824ed902007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f6466126d000004030047304502205f74ad0c1f6c7171fbe6e124b6fca5f42c02940125ddd78307bb85b9f2a38812022100ad312ac17ae37c2fe1d709281e92d9ae6f019053ecd71e251e14d7044bb48b36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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