mail1.bitsculptor.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:76:51:71:49:21:dc:66:6b:d2:4c:2b:94:72:28:53:b6 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail1.bitsculptor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:76:51:71:49:21:dc:66:6b:d2:4c:2b:94:72:28:53:b6
Serial Number (int): 279869377386265998889789298071637173228470
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:00:87:bc:40:e7:b2:f9:70:eb:24:98:96:07:21:f1:4c:4f:ca:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:ba:4e:04:10:6a:00:af:58:69:94:09:a6:26:9b:a7:94:b3:86:da
Fingerprint (sha256): e3:66:2a:14:d8:6d:fe:fb:c3:98:dd:ee:40:fa:c5:1c:a5:84:46:4d:d4:51:05:b8:d6:8d:7f:0c:ba:76:a2:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail1.bitsculptor.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail1.bitsculptor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.airiart.com
mail.alaskazimm.com
mail.allnationsglobal.org
mail.anitaswanson.com
mail.aqmpm.com
mail.asm-afs-peoria.org
mail.banjohangout.org
mail.bethanycommunitychurch.org
mail.bitsculptor.com
mail.borntob.com
mail.brooktrailsfire.com
mail.cancersupportsonoma.com
mail.ckevinatter.com
mail.clearlakeperformingarts.org
mail.colemko.com
mail.countryair.com
mail.fiddlehangout.com
mail.flatpickerhangout.com
mail.grasstrax.com
mail.gringpestcontrol.com
mail.h2owiser.com
mail.hammersforhope.org
mail.hangoutnetwork.com
mail.harmonyhealinghouse.com
mail.heydeeye.com
mail.hoplandfire.org
mail.jaredhendricks.com
mail.kiwanislakeport.org
mail.konoctirealty.com
mail.koslagroup.com
mail.lakecochamber.com
mail.lakecountyheroproject.com
mail.lakecountysymphonyassociation.org
mail.lakecountywinestudio.com
mail.lakeportchamber.com
mail.lakeportenglishinn.com
mail.lakeportfire.com
mail.lakeportlawyers.com
mail.lakeportmainstreet.com
mail.lakeps.com
mail.lakeviewmarket.com
mail.livinghopecentral.org
mail.localfires.com
mail.logisticlinks.com
mail.madesonphotography.com
mail.mandohangout.com
mail.mapletonmanagement.com
mail.midwestvineyardsupply.com
mail.needmedi-cal.com
mail.nordhammer.com
mail.paciniwines.com
mail.predatorpestcontrol.biz
mail.predatorpwm.com
mail.redwoodvalleyfire.org
mail.regencyinnlakeport.com
mail.resohangout.com
mail.runningspringshvac.com
mail.sdgtoday.com
mail.shastalakevacations.com
mail.silverajewelry.com
mail.simplesweet.com
mail.skylarkshoreshotel.com
mail.solreyproperties.com
mail.soperreesetheatre.com
mail.sorensendesigngroup.com
mail.stfrancoisvineyard.com
mail.stokesladders.com
mail.switzerengineering.com
mail.theritzes.com
mail.towacosm.com
mail.turnkeyprod.com
mail.vdwengr.com
mail.visitkelseyville.com
mail.whiteoaknursery.com
mail.winecountryranchesandland.com
mail.wineryassociation.com
mail.woodsongguitars.com
mail.yourhappysmile.com
mail.zwiftblog.com
mail1.bitsculptor.com

Other certificates including the domain name bitsculptor.com

(limited to 100 certificates)
mail1.bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
lvpscp-4.bitsculptor.com
bitsculptor.com
www.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
lvpscp-4.bitsculptor.com
jamesboysblog.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
sossforsud.bitsculptor.com
lvpscp-3.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
secure.bitsculptor.com
bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
www.bitsculptor.com
mail1.bitsculptor.com
secure.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
mail1.bitsculptor.com
mail1.bitsculptor.com
bitsculptor.com
lvpscp-3.bitsculptor.com
mail1.bitsculptor.com
clrcadev.bitsculptor.com
bit1.bitsculptor.com

Certificate

The complete raw certificate details for mail1.bitsculptor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINKTCCDBGgAwIBAgISAzZ2UXFJIdxma9JMK5RyKFO2MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTgyMjE1NDdaFw0x
OTA1MTkyMjE1NDdaMCAxHjAcBgNVBAMTFW1haWwxLmJpdHNjdWxwdG9yLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKS8DcvcZfzuf5MZXNYJDgVQ
3VRu9+n29JJes+mY849cJfwMQgqdMIKPEqsJ5C+NSKumtiXQ5zZdmXPZNza4D9fi
H60FhBj7+edMXBj8leQ+1FK1FqC1rdAu8i+CO5CVos9CEn0/JiQLLTaJ4XCj71y0
cp/R4plvKtVSYF6/dLI7ZePt+3T3n5Te2twfrcFsSc4RsbAZIFw7aE0utHR02hq5
lGaI3DBIP4IXRyBKZGinGHcMudEgefdIfGIz+FIZ5uaGipM/E+EOtmbCCwprjrqx
a7EdD0veeM9JBdaCLaCOiBKGyUPSiCkrKKbdUhNG4EW9+tVTf13b+M+1noUdh7sC
AwEAAaOCCjEwggotMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUTACHvEDnsvlw6ySY
lgch8UxPyoswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCCB+UGA1UdEQSCB9wwggfYghBtYWlsLmFpcmlhcnQuY29tghNt
YWlsLmFsYXNrYXppbW0uY29tghltYWlsLmFsbG5hdGlvbnNnbG9iYWwub3JnghVt
YWlsLmFuaXRhc3dhbnNvbi5jb22CDm1haWwuYXFtcG0uY29tghdtYWlsLmFzbS1h
ZnMtcGVvcmlhLm9yZ4IVbWFpbC5iYW5qb2hhbmdvdXQub3Jngh9tYWlsLmJldGhh
bnljb21tdW5pdHljaHVyY2gub3JnghRtYWlsLmJpdHNjdWxwdG9yLmNvbYIQbWFp
bC5ib3JudG9iLmNvbYIYbWFpbC5icm9va3RyYWlsc2ZpcmUuY29tghxtYWlsLmNh
bmNlcnN1cHBvcnRzb25vbWEuY29tghRtYWlsLmNrZXZpbmF0dGVyLmNvbYIgbWFp
bC5jbGVhcmxha2VwZXJmb3JtaW5nYXJ0cy5vcmeCEG1haWwuY29sZW1rby5jb22C
E21haWwuY291bnRyeWFpci5jb22CFm1haWwuZmlkZGxlaGFuZ291dC5jb22CGm1h
aWwuZmxhdHBpY2tlcmhhbmdvdXQuY29tghJtYWlsLmdyYXNzdHJheC5jb22CGW1h
aWwuZ3JpbmdwZXN0Y29udHJvbC5jb22CEW1haWwuaDJvd2lzZXIuY29tghdtYWls
LmhhbW1lcnNmb3Job3BlLm9yZ4IXbWFpbC5oYW5nb3V0bmV0d29yay5jb22CHG1h
aWwuaGFybW9ueWhlYWxpbmdob3VzZS5jb22CEW1haWwuaGV5ZGVleWUuY29tghRt
YWlsLmhvcGxhbmRmaXJlLm9yZ4IXbWFpbC5qYXJlZGhlbmRyaWNrcy5jb22CGG1h
aWwua2l3YW5pc2xha2Vwb3J0Lm9yZ4IWbWFpbC5rb25vY3RpcmVhbHR5LmNvbYIT
bWFpbC5rb3NsYWdyb3VwLmNvbYIWbWFpbC5sYWtlY29jaGFtYmVyLmNvbYIebWFp
bC5sYWtlY291bnR5aGVyb3Byb2plY3QuY29tgiZtYWlsLmxha2Vjb3VudHlzeW1w
aG9ueWFzc29jaWF0aW9uLm9yZ4IdbWFpbC5sYWtlY291bnR5d2luZXN0dWRpby5j
b22CGG1haWwubGFrZXBvcnRjaGFtYmVyLmNvbYIbbWFpbC5sYWtlcG9ydGVuZ2xp
c2hpbm4uY29tghVtYWlsLmxha2Vwb3J0ZmlyZS5jb22CGG1haWwubGFrZXBvcnRs
YXd5ZXJzLmNvbYIbbWFpbC5sYWtlcG9ydG1haW5zdHJlZXQuY29tgg9tYWlsLmxh
a2Vwcy5jb22CF21haWwubGFrZXZpZXdtYXJrZXQuY29tghptYWlsLmxpdmluZ2hv
cGVjZW50cmFsLm9yZ4ITbWFpbC5sb2NhbGZpcmVzLmNvbYIWbWFpbC5sb2dpc3Rp
Y2xpbmtzLmNvbYIbbWFpbC5tYWRlc29ucGhvdG9ncmFwaHkuY29tghVtYWlsLm1h
bmRvaGFuZ291dC5jb22CG21haWwubWFwbGV0b25tYW5hZ2VtZW50LmNvbYIebWFp
bC5taWR3ZXN0dmluZXlhcmRzdXBwbHkuY29tghVtYWlsLm5lZWRtZWRpLWNhbC5j
b22CE21haWwubm9yZGhhbW1lci5jb22CFG1haWwucGFjaW5pd2luZXMuY29tghxt
YWlsLnByZWRhdG9ycGVzdGNvbnRyb2wuYml6ghRtYWlsLnByZWRhdG9ycHdtLmNv
bYIabWFpbC5yZWR3b29kdmFsbGV5ZmlyZS5vcmeCG21haWwucmVnZW5jeWlubmxh
a2Vwb3J0LmNvbYIUbWFpbC5yZXNvaGFuZ291dC5jb22CG21haWwucnVubmluZ3Nw
cmluZ3NodmFjLmNvbYIRbWFpbC5zZGd0b2RheS5jb22CHG1haWwuc2hhc3RhbGFr
ZXZhY2F0aW9ucy5jb22CF21haWwuc2lsdmVyYWpld2VscnkuY29tghRtYWlsLnNp
bXBsZXN3ZWV0LmNvbYIbbWFpbC5za3lsYXJrc2hvcmVzaG90ZWwuY29tghltYWls
LnNvbHJleXByb3BlcnRpZXMuY29tghptYWlsLnNvcGVycmVlc2V0aGVhdHJlLmNv
bYIcbWFpbC5zb3JlbnNlbmRlc2lnbmdyb3VwLmNvbYIbbWFpbC5zdGZyYW5jb2lz
dmluZXlhcmQuY29tghZtYWlsLnN0b2tlc2xhZGRlcnMuY29tghttYWlsLnN3aXR6
ZXJlbmdpbmVlcmluZy5jb22CEm1haWwudGhlcml0emVzLmNvbYIRbWFpbC50b3dh
Y29zbS5jb22CFG1haWwudHVybmtleXByb2QuY29tghBtYWlsLnZkd2VuZ3IuY29t
ghltYWlsLnZpc2l0a2Vsc2V5dmlsbGUuY29tghhtYWlsLndoaXRlb2FrbnVyc2Vy
eS5jb22CIm1haWwud2luZWNvdW50cnlyYW5jaGVzYW5kbGFuZC5jb22CGm1haWwu
d2luZXJ5YXNzb2NpYXRpb24uY29tghhtYWlsLndvb2Rzb25nZ3VpdGFycy5jb22C
F21haWwueW91cmhhcHB5c21pbGUuY29tghJtYWlsLnp3aWZ0YmxvZy5jb22CFW1h
aWwxLmJpdHNjdWxwdG9yLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AOJpS64m6OlACeiGG7Y7g9Q+5/50
iPukjyiTAZ3d8dv+AAABaQLk4YkAAAQDAEcwRQIhAK2yVJ7W0vsxN9HvUWc8+9fF
BBE2w+LOdSGTcrv0FbtPAiA4mmV32vxbmqmLeOIf7iP77fNFl8urW3ancUVoNgor
dQB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaQLk4YsAAAQD
AEcwRQIgIAYdHe6k2lz8wkntw75VcPk8IVjjctG2b85CqtlJhX4CIQDa48QL46AV
+qAX4PHS8kO452Lw2hPO8AbcWErwttEf/DANBgkqhkiG9w0BAQsFAAOCAQEAIl5A
tqDOGqvJupxPo5X8MYFkx6TmFkfsjG8GiHUzJr2xUTN+GhVy8t43hgwRMDD48iB8
I6NUAVaR+T1SuFW7c/3MK1JaxPL2KFMn50fDhBv3hhmIpPSWFHzi3/jqueyVTyGt
CYpFUjsWwcgu8twXRjFase8y12MeqqvFwj1mMhFtpyqDbvncb7CaZtbCMkcKjqt5
fAqpVSGDcYohtJZtHBJKzYWjfco3nCSUB9qyRmL5TdOgzxZ1OPINHoIumxm15Fsn
aOUmCLcGrZ9JsMmooqLshFsG2ZZ+yvrUvDTnMXX+MfYTLubKbdf8M7w081PHtFWT
aITAX4qmPUWcZH+/gg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLwNy9xl/O5/kxlc1gkO
BVDdVG736fb0kl6z6Zjzj1wl/AxCCp0wgo8SqwnkL41Iq6a2JdDnNl2Zc9k3NrgP
1+IfrQWEGPv550xcGPyV5D7UUrUWoLWt0C7yL4I7kJWiz0ISfT8mJAstNonhcKPv
XLRyn9HimW8q1VJgXr90sjtl4+37dPeflN7a3B+twWxJzhGxsBkgXDtoTS60dHTa
GrmUZojcMEg/ghdHIEpkaKcYdwy50SB590h8YjP4Uhnm5oaKkz8T4Q62ZsILCmuO
urFrsR0PS954z0kF1oItoI6IEobJQ9KIKSsopt1SE0bgRb361VN/Xdv4z7WehR2H
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279869377386265998889789298071637173228470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 22:15:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 22:15:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail1.bitsculptor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20795814844739749969268832009687213929921615907084113482115040393164405516993062799475081303459066310009723175559191610275586090950009168059967033475061034197786027410948513715518510747538627333212721768312464422090714034246341226455789126149160747163193708709408591614787729082520270233966629482055641409796821313213228987337420556721158805629595462917391370683691874097210747785268493055291187311772680195916117428349734977523131376118731831613621341052639513867630872238110287246124526917810380550467952812106486430286267157998234340978555178493287071135099807586021134732953498926816314621580079963893763485304763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c0087bc40e7b2f970eb2498960721f14c4fca8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2012 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.airiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alaskazimm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.allnationsglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.anitaswanson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aqmpm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.asm-afs-peoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.banjohangout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bethanycommunitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bitsculptor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.borntob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.brooktrailsfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cancersupportsonoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ckevinatter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.clearlakeperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.colemko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.countryair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fiddlehangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.flatpickerhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grasstrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gringpestcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.h2owiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hammersforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hangoutnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.harmonyhealinghouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.heydeeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hoplandfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jaredhendricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kiwanislakeport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.konoctirealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.koslagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecochamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountyheroproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountysymphonyassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakecountywinestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportchamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportenglishinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeportmainstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lakeviewmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.livinghopecentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.localfires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.logisticlinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.madesonphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mandohangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mapletonmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.midwestvineyardsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.needmedi-cal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nordhammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.paciniwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.predatorpestcontrol.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.predatorpwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.redwoodvalleyfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.regencyinnlakeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.resohangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.runningspringshvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sdgtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.shastalakevacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.silverajewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.simplesweet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.skylarkshoreshotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.solreyproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.soperreesetheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sorensendesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stfrancoisvineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stokesladders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.switzerengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.theritzes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.towacosm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.turnkeyprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vdwengr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.visitkelseyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.whiteoaknursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.winecountryranchesandland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wineryassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.woodsongguitars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.yourhappysmile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zwiftblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.bitsculptor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016902e4e1890000040300473045022100adb2549ed6d2fb3137d1ef51673cfbd7c5041136c3e2ce75219372bbf415bb4f0220389a6577dafc5b9aa98b78e21fee23fbedf34597cbab5b76a7714568360a2b75007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016902e4e18b0000040300473045022020061d1deea4da5cfcc249edc3be5570f93c2158e372d1b66fce42aad949857e022100dae3c40be3a015faa017e0f1d2f243b8e762f0da13cef006dc584af0b6d11ffc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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