visitvalleywater.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:3d:4b:4d:cc:ca:e4:87:48:01:f1:bc:f5:c9:a3:04:de was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=visitvalleywater.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:3d:4b:4d:cc:ca:e4:87:48:01:f1:bc:f5:c9:a3:04:de
Serial Number (int): 293745156560748040829218670445409765360862
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:4c:8c:81:c9:22:8f:99:a1:d3:83:71:4e:84:6f:af:f9:be:6f:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:74:ed:41:1d:b6:ab:10:f2:ab:d9:19:9d:d3:f7:a0:7d:85:1d:bf
Fingerprint (sha256): e0:92:48:56:71:8d:41:6b:3e:b0:df:89:53:45:40:e4:48:43:32:6a:86:ff:82:f4:30:6a:d9:f9:f6:97:bf:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate visitvalleywater.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for visitvalleywater.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dphotoprints.com
420equipment.com
a2t.com
aachristiancrafts.com
aboutandroid.com
academyoffinearts.com
aiowallet.com
al5t.com
annoncecampus.com
augmentedplus.com
aurajet.com
b6t.com
bigrockit.com
bluexs.com
bridalassistant.com
bugfreekit.com
carbonboat.com
carwreckmanagement.com
catalogmanagement.com
catapultconnect.com
catclips.com
cincinnatiohioseniorportraits.com
completelywireless.com
coralboats.com
cryptocoinprofits.com
ctsthirdbrakelight.com
customdesignedtshirts.com
cybergymnasiet.com
czechonet.com
dag-wallet.com
deliveredtonight.com
dubunit.com
ecobilt.com
ecomhumt.com
eggift.com
embant.com
enginegeneratorset.com
enrolledagent.com
exelfreight.com
floridarlt.com
glbit.com
gram-wallet.com
healingarts.com
healthyhomemassachussetts.com
healthyhomepeopleandpets.com
healthyhometechnologys.com
hedleys.com
ideadesigns.com
incubesys.com
instant-instant.com
insurancegift.com
interqubit.com
iqplant.com
kulapays.com
lakutis.com
lechateaudeversailles.com
lynxentertainment.com
mayfairnews.com
mycardoctors.com
mytaxaccountant.com
namingconsult.com
nationalpoisonivyawareness.com
networldcasinos.com
newportbeachpropertymanagement.com
nmgmgmt.com
onetimespecialoffers.com
pennsylvaniapropertymanagement.com
pennysmarts.com
qjubit.com
railcontainers.com
rvwindowcovers.com
scottys.com
sculpit.com
seatoskybus.com
secretcloset.com
shrimpboots.com
sixservants.com
smartbuilt.com
soiloutlet.com
southdakotapropertymanagement.com
stlwireless.com
teamchampionsneverquit.com
thegait.com
themotioncaptureplant.com
theprisonfight.com
thewoodlandsnews.com
trademarkbright.com
visitvalleywater.org
waterforthelonghaul.com
whollet.com
winerocket.com
winnerinstinct.com
www.breathdetect.com
www.elitemalt.com
www.funboxtoys.com
xflight.com
xrwallets.com
yourbusinessasset.com
youwonit.com

Other certificates including the domain name visitvalleywater.org

(limited to 100 certificates)
visitvalleywater.org
visitvalleywater.org
visitvalleywater.org
visitvalleywater.org
visitvalleywater.org
visitvalleywater.org
visitvalleywater.org
visitvalleywater.org
ecosafe.org
visitvalleywater.org
visitvalleywater.org
www.datingsmsclub.xyz
visitvalleywater.org
visitvalleywater.org

Certificate

The complete raw certificate details for visitvalleywater.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMqzCCC5OgAwIBAgISA189S03MyuSHSAHxvPXJowTeMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDYwMTM0MThaFw0y
MDAzMDUwMTM0MThaMB8xHTAbBgNVBAMTFHZpc2l0dmFsbGV5d2F0ZXIub3JnMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cXmiyZWzxyFdGqMr7a9NeIR
+Pjxx+EjXSBk8dfnG1Eq3OO1KO9zZXwl2KxrjMQGgCuUXrybtlxnn+R/Z6LAFBNy
dN21XhfZHkqCKBAWM+ZB60ZSiYdvWd7Q6i7PMdV/+YrK9HgCcjlQ56fu7QFnd+jF
aUTWDTGMPqMQHoXmAegBblT8Fduq9tXiDCVPGIjyj2ZeMSSYdWtfAmOn7NiVoBmW
CBLrEk76RkLl/UOmv/h3LQKl96zkwKAuLSAIWNr/0a7zIy+4IhU0Vyi/jjzya0Z+
nT+0qtiFXKU45uCQ6JXMmw9eoeJkrPBihG7SRBs75Cf2TR/CRbY6+pt4qa6qEwID
AQABo4IJtDCCCbAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTfTIyBySKPmaHTg3FO
hG+v+b5v+DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIIHaQYDVR0RBIIHYDCCB1yCETNkcGhvdG9wcmludHMuY29tghA0
MjBlcXVpcG1lbnQuY29tggdhMnQuY29tghVhYWNocmlzdGlhbmNyYWZ0cy5jb22C
EGFib3V0YW5kcm9pZC5jb22CFWFjYWRlbXlvZmZpbmVhcnRzLmNvbYINYWlvd2Fs
bGV0LmNvbYIIYWw1dC5jb22CEWFubm9uY2VjYW1wdXMuY29tghFhdWdtZW50ZWRw
bHVzLmNvbYILYXVyYWpldC5jb22CB2I2dC5jb22CDWJpZ3JvY2tpdC5jb22CCmJs
dWV4cy5jb22CE2JyaWRhbGFzc2lzdGFudC5jb22CDmJ1Z2ZyZWVraXQuY29tgg5j
YXJib25ib2F0LmNvbYIWY2Fyd3JlY2ttYW5hZ2VtZW50LmNvbYIVY2F0YWxvZ21h
bmFnZW1lbnQuY29tghNjYXRhcHVsdGNvbm5lY3QuY29tggxjYXRjbGlwcy5jb22C
IWNpbmNpbm5hdGlvaGlvc2VuaW9ycG9ydHJhaXRzLmNvbYIWY29tcGxldGVseXdp
cmVsZXNzLmNvbYIOY29yYWxib2F0cy5jb22CFWNyeXB0b2NvaW5wcm9maXRzLmNv
bYIWY3RzdGhpcmRicmFrZWxpZ2h0LmNvbYIZY3VzdG9tZGVzaWduZWR0c2hpcnRz
LmNvbYISY3liZXJneW1uYXNpZXQuY29tgg1jemVjaG9uZXQuY29tgg5kYWctd2Fs
bGV0LmNvbYIUZGVsaXZlcmVkdG9uaWdodC5jb22CC2R1YnVuaXQuY29tggtlY29i
aWx0LmNvbYIMZWNvbWh1bXQuY29tggplZ2dpZnQuY29tggplbWJhbnQuY29tghZl
bmdpbmVnZW5lcmF0b3JzZXQuY29tghFlbnJvbGxlZGFnZW50LmNvbYIPZXhlbGZy
ZWlnaHQuY29tgg5mbG9yaWRhcmx0LmNvbYIJZ2xiaXQuY29tgg9ncmFtLXdhbGxl
dC5jb22CD2hlYWxpbmdhcnRzLmNvbYIdaGVhbHRoeWhvbWVtYXNzYWNodXNzZXR0
cy5jb22CHGhlYWx0aHlob21lcGVvcGxlYW5kcGV0cy5jb22CGmhlYWx0aHlob21l
dGVjaG5vbG9neXMuY29tggtoZWRsZXlzLmNvbYIPaWRlYWRlc2lnbnMuY29tgg1p
bmN1YmVzeXMuY29tghNpbnN0YW50LWluc3RhbnQuY29tghFpbnN1cmFuY2VnaWZ0
LmNvbYIOaW50ZXJxdWJpdC5jb22CC2lxcGxhbnQuY29tggxrdWxhcGF5cy5jb22C
C2xha3V0aXMuY29tghlsZWNoYXRlYXVkZXZlcnNhaWxsZXMuY29tghVseW54ZW50
ZXJ0YWlubWVudC5jb22CD21heWZhaXJuZXdzLmNvbYIQbXljYXJkb2N0b3JzLmNv
bYITbXl0YXhhY2NvdW50YW50LmNvbYIRbmFtaW5nY29uc3VsdC5jb22CHm5hdGlv
bmFscG9pc29uaXZ5YXdhcmVuZXNzLmNvbYITbmV0d29ybGRjYXNpbm9zLmNvbYIi
bmV3cG9ydGJlYWNocHJvcGVydHltYW5hZ2VtZW50LmNvbYILbm1nbWdtdC5jb22C
GG9uZXRpbWVzcGVjaWFsb2ZmZXJzLmNvbYIicGVubnN5bHZhbmlhcHJvcGVydHlt
YW5hZ2VtZW50LmNvbYIPcGVubnlzbWFydHMuY29tggpxanViaXQuY29tghJyYWls
Y29udGFpbmVycy5jb22CEnJ2d2luZG93Y292ZXJzLmNvbYILc2NvdHR5cy5jb22C
C3NjdWxwaXQuY29tgg9zZWF0b3NreWJ1cy5jb22CEHNlY3JldGNsb3NldC5jb22C
D3NocmltcGJvb3RzLmNvbYIPc2l4c2VydmFudHMuY29tgg5zbWFydGJ1aWx0LmNv
bYIOc29pbG91dGxldC5jb22CIXNvdXRoZGFrb3RhcHJvcGVydHltYW5hZ2VtZW50
LmNvbYIPc3Rsd2lyZWxlc3MuY29tghp0ZWFtY2hhbXBpb25zbmV2ZXJxdWl0LmNv
bYILdGhlZ2FpdC5jb22CGXRoZW1vdGlvbmNhcHR1cmVwbGFudC5jb22CEnRoZXBy
aXNvbmZpZ2h0LmNvbYIUdGhld29vZGxhbmRzbmV3cy5jb22CE3RyYWRlbWFya2Jy
aWdodC5jb22CFHZpc2l0dmFsbGV5d2F0ZXIub3Jnghd3YXRlcmZvcnRoZWxvbmdo
YXVsLmNvbYILd2hvbGxldC5jb22CDndpbmVyb2NrZXQuY29tghJ3aW5uZXJpbnN0
aW5jdC5jb22CFHd3dy5icmVhdGhkZXRlY3QuY29tghF3d3cuZWxpdGVtYWx0LmNv
bYISd3d3LmZ1bmJveHRveXMuY29tggt4ZmxpZ2h0LmNvbYINeHJ3YWxsZXRzLmNv
bYIVeW91cmJ1c2luZXNzYXNzZXQuY29tggx5b3V3b25pdC5jb20wTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBv
U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW7ZDtcSAAAEAwBGMEQC
IE/k1T7FQ1JcOA/X/dzsNTBrG7nxwqdByeFKu8/XhJPAAiAC+ieLONfotAldxWpG
NOSucIsQmRiHH7Aa1KhQJ2wwuwB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxh
Ohpp06IcAAABbtkO1yAAAAQDAEcwRQIhAIiYe0y/wIygoaC7Am08c3GF7w2I53ky
dK9bwUL3cq39AiB/1Pph0y04TmYJ8Bv92OVPQnkx+JGUrg0VpZtvuhZVfjANBgkq
hkiG9w0BAQsFAAOCAQEARkFCA5PRzCQYL2IZciyl0DdMAUfLIz+M10K7DT0vfdIl
M6boy1z3ALXo6KSRODuKnjTJin5mriz9B1/s4db+8kLehx6nFwz7y7JWZ0KCQ74A
g1D6Z3RbIwX/xoo56IDwxHS3LqRvF1XQoRglIQDlnTILpzDDDQ61OOhKGPS5XYup
xjagSHQ2GJDIzvRzb1YRCzWCzkhP2KXSlO2Ke0x+xYtLT8TwEVBAMTGuk7sAKA+p
s6HDsUf7egiLK335NFzgabaS+6d+nFHCwZVgIUu574dTUvdPMo5xoNrOxFEdk7qK
7pn4K72mVjZ15DBjB7BPb0622HckrTWj/FwEk2r9bg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cXmiyZWzxyFdGqMr7a9
NeIR+Pjxx+EjXSBk8dfnG1Eq3OO1KO9zZXwl2KxrjMQGgCuUXrybtlxnn+R/Z6LA
FBNydN21XhfZHkqCKBAWM+ZB60ZSiYdvWd7Q6i7PMdV/+YrK9HgCcjlQ56fu7QFn
d+jFaUTWDTGMPqMQHoXmAegBblT8Fduq9tXiDCVPGIjyj2ZeMSSYdWtfAmOn7NiV
oBmWCBLrEk76RkLl/UOmv/h3LQKl96zkwKAuLSAIWNr/0a7zIy+4IhU0Vyi/jjzy
a0Z+nT+0qtiFXKU45uCQ6JXMmw9eoeJkrPBihG7SRBs75Cf2TR/CRbY6+pt4qa6q
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293745156560748040829218670445409765360862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 01:34:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 01:34:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'visitvalleywater.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26481394141585078283056343469525703819843610697988245235178643790148597925447806458377769940347903876838547570445468809211053883834612714459986619652716324777576777358991914123544858227141726691618079603174899992014019286673602596529663492729980626315464548249795357059780613003337648878947061115629943469071814770503432965578262295964886862864356139276330872514150967308498145750538113910668422611535159907646761097047186775982594785250013249260455779393088807478035391569206355701669476673211030946386971101439053040915480955151543498685969030541691304213775627031781179966034679916677781076391187407619710390282771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df4c8c81c9228f99a1d383714e846faff9be6ff8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dphotoprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420equipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aachristiancrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutandroid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academyoffinearts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiowallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al5t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annoncecampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augmentedplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurajet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrockit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluexs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridalassistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugfreekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonboat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carwreckmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catapultconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catclips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatiohioseniorportraits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completelywireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coralboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocoinprofits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctsthirdbrakelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customdesignedtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybergymnasiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dag-wallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveredtonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubunit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecobilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecomhumt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eggift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enginegeneratorset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrolledagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exelfreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridarlt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gram-wallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healingarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomemassachussetts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomepeopleandpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhometechnologys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideadesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incubesys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instant-instant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancegift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interqubit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqplant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulapays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakutis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lechateaudeversailles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynxentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayfairnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycardoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytaxaccountant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namingconsult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalpoisonivyawareness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networldcasinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newportbeachpropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmgmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetimespecialoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniapropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennysmarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qjubit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'railcontainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvwindowcovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seatoskybus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretcloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shrimpboots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixservants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartbuilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soiloutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southdakotapropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamchampionsneverquit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themotioncaptureplant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theprisonfight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewoodlandsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trademarkbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitvalleywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterforthelonghaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whollet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winerocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnerinstinct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breathdetect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elitemalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funboxtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xflight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrwallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourbusinessasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youwonit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ed90ed712000004030046304402204fe4d53ec543525c380fd7fddcec35306b1bb9f1c2a741c9e14abbcfd78493c0022002fa278b38d7e8b4095dc56a4634e4ae708b109918871fb01ad4a850276c30bb00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed90ed720000004030047304502210088987b4cbfc08ca0a1a0bb026d3c737185ef0d88e7793274af5bc142f772adfd02207fd4fa61d32d384e6609f01bfdd8e54f427931f89194ae0d15a59b6fba16557e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004641420393d1cc24182f6219722ca5d0374c0147cb233f8cd742bb0d3d2f7dd22533a6e8cb5cf700b5e8e8a491383b8a9e34c98a7e66ae2cfd075fece1d6fef242de871ea7170cfbcbb25667428243be008350fa67745b2305ffc68a39e880f0c474b72ea46f1755d0a118252100e59d320ba730c30d0eb538e84a18f4b95d8ba9c636a04874361890c8cef4736f56110b3582ce484fd8a5d294ed8a7b4c7ec58b4b4fc4f01150403131ae93bb00280fa9b3a1c3b147fb7a088b2b7df9345ce069b692fba77e9c51c2c19560214bb9ef875352f74f328e71a0dacec4511d93ba8aee99f82bbda6563675e4306307b04f6f4eb6d87724ad35a3fc5c04936afd6e