fieldtrips.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:23:07:da:ac:c7:c4:e6:19:13:99:50:66:72:4f:14:95:a0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fieldtrips.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:07:da:ac:c7:c4:e6:19:13:99:50:66:72:4f:14:95:a0
Serial Number (int): 273257180658601034566333264815223003714976
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:ff:59:ad:d9:bb:6e:b0:1c:37:cf:6e:ca:7c:15:9f:1f:dc:60:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:a5:90:fe:2c:2f:68:a7:d1:15:f8:a5:97:40:8d:fc:8f:b7:ff:d3
Fingerprint (sha256): e5:60:ac:a0:15:b5:a9:e9:88:65:2c:ed:f0:f2:3d:60:49:6d:34:a4:61:62:76:86:6f:54:ff:04:90:fe:68:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fieldtrips.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fieldtrips.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.absolutismus.de
*.afro.info
*.augustabagiennorum.it
*.auslandszusatzversicherung.de
*.baldrock.com.au
*.beachtowels.com.au
*.ck-modellcars.de
*.clad.com.au
*.clarinets.com.au
*.drawtolearn.org
*.ebaykkleinanzeigen.de
*.eventkleider.de
*.extrenergie.de
*.eyelashes.com.au
*.fieldtrips.ca
*.filestube.fr
*.freegiftcard.me
*.fruitwine.com.au
*.getmoneyfast.com.au
*.happyshopper.com.au
*.helptobuynw.co.uk
*.ib24csob.cz
*.iftm.com.br
*.immolbilien.de
*.kayakstore.com.au
*.kokuszgolyo.hu
*.landshausen.de
*.partybrot.de
*.partydessous.de
*.pg-elektronik.de
*.polisingowe.pl
*.prams4kids.co.uk
*.qit.at
*.queromaiscreditos.com.br
*.service4you.us
*.shippers.de
*.slpiegel.de
*.spargelzubereitung.de
*.thirstytowels.com.au
*.torrents2.me
*.uvk.net
*.warfor.cz
*.wechsel-gesetzliche-krankenkasse.de
*.xn--bsensell-n4a.de
*.xn--fhlinger-see-dlb.de
*.xn--gardinenvorschlge-4qb.de
*.xn--hrmoos-wxa.de
*.xn--kchenboden-9db.de
*.xn--marmeladenlffel-jtb.de
*.xn--rckendeckung-dlb.de
absolutismus.de
afro.info
augustabagiennorum.it
auslandszusatzversicherung.de
baldrock.com.au
beachtowels.com.au
ck-modellcars.de
clad.com.au
clarinets.com.au
drawtolearn.org
ebaykkleinanzeigen.de
eventkleider.de
extrenergie.de
eyelashes.com.au
fieldtrips.ca
filestube.fr
freegiftcard.me
fruitwine.com.au
getmoneyfast.com.au
happyshopper.com.au
helptobuynw.co.uk
ib24csob.cz
iftm.com.br
immolbilien.de
kayakstore.com.au
kokuszgolyo.hu
landshausen.de
partybrot.de
partydessous.de
pg-elektronik.de
polisingowe.pl
prams4kids.co.uk
qit.at
queromaiscreditos.com.br
service4you.us
shippers.de
slpiegel.de
spargelzubereitung.de
thirstytowels.com.au
torrents2.me
uvk.net
warfor.cz
wechsel-gesetzliche-krankenkasse.de
xn--bsensell-n4a.de
xn--fhlinger-see-dlb.de
xn--gardinenvorschlge-4qb.de
xn--hrmoos-wxa.de
xn--kchenboden-9db.de
xn--marmeladenlffel-jtb.de
xn--rckendeckung-dlb.de

Other certificates including the domain name fieldtrips.ca

(limited to 100 certificates)
kinesthetik.de
hundezelt.de
vollmarstein.de
fieldtrips.ca
kaminholzpreise.de

Certificate

The complete raw certificate details for fieldtrips.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN5DCCDMygAwIBAgISAyMH2qzHxOYZE5lQZnJPFJWgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDgwNzE2MTlaFw0x
OTA2MDYwNzE2MTlaMBgxFjAUBgNVBAMTDWZpZWxkdHJpcHMuY2EwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDAenfeMTw9N5h6LhjWVswjNd0JoF4yGLMq
RhPjnAPmfzTk7xQibYBDPCqwiFKxxui3woXYMwT294PRup9Q0O8rwpEITL4IaHXy
V99kTiBgd+NCJfIJlvq4z04Lphyvz9Mubm811OONf6/OJ0iBCPgWqr+v/TbpnXwH
N2cYQt0zmhUHrpEFGjkkh/dk8sOIMdhX23xfnL0ZhJz7utXduw2FybGhWaO6bZp9
Po4bKJB/8XYd3tEXX788yyVLwRgv7MywuCKE4UXoKqBzmpf8vquDzRVaqq3X1cIi
b/Q+xRpdSxwaNf2GSzgiNjjZULeSrZvs0aDktoOBNz/F0s+jLTBLTvZZVoWnzpYr
XGJzX47hfh6CHHWRFCtLJFIS082rPpLy9W2XqRbkXE7kanR/flNVVNtHo+zwoJvd
XRxXNhW1DoXKM/tgYnuzgJDWLCD+kBtFLl5EkJ6YGBt8/FFr0dwCDetm0laZ8vsS
jfLLzhg2n5a4PjMD1i8SVFDKSFLTxu4+bwwpotUqkpSIgmAf089vsTyZbOtPW9tH
7gm0gKf5rYGXE7skCjHM+m0pmJW6B6HXVhu3Yls2OKSRKX4K7K0pLek9k90WrqSG
0nbuZ6C1/RqX5XyqN30yOWHAygWqtLecnQNz6jIkqRWhFsFQSobB3stYi4wYyUr1
gauQfUuJYwIDAQABo4IJ9DCCCfAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR+/1mt
2btusBw3z27KfBWfH9xgBzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIIHpwYDVR0RBIIHnjCCB5qCESouYWJzb2x1dGlz
bXVzLmRlggsqLmFmcm8uaW5mb4IXKi5hdWd1c3RhYmFnaWVubm9ydW0uaXSCHyou
YXVzbGFuZHN6dXNhdHp2ZXJzaWNoZXJ1bmcuZGWCESouYmFsZHJvY2suY29tLmF1
ghQqLmJlYWNodG93ZWxzLmNvbS5hdYISKi5jay1tb2RlbGxjYXJzLmRlgg0qLmNs
YWQuY29tLmF1ghIqLmNsYXJpbmV0cy5jb20uYXWCESouZHJhd3RvbGVhcm4ub3Jn
ghcqLmViYXlra2xlaW5hbnplaWdlbi5kZYIRKi5ldmVudGtsZWlkZXIuZGWCECou
ZXh0cmVuZXJnaWUuZGWCEiouZXllbGFzaGVzLmNvbS5hdYIPKi5maWVsZHRyaXBz
LmNhgg4qLmZpbGVzdHViZS5mcoIRKi5mcmVlZ2lmdGNhcmQubWWCEiouZnJ1aXR3
aW5lLmNvbS5hdYIVKi5nZXRtb25leWZhc3QuY29tLmF1ghUqLmhhcHB5c2hvcHBl
ci5jb20uYXWCEyouaGVscHRvYnV5bncuY28udWuCDSouaWIyNGNzb2IuY3qCDSou
aWZ0bS5jb20uYnKCECouaW1tb2xiaWxpZW4uZGWCEyoua2F5YWtzdG9yZS5jb20u
YXWCECoua29rdXN6Z29seW8uaHWCECoubGFuZHNoYXVzZW4uZGWCDioucGFydHli
cm90LmRlghEqLnBhcnR5ZGVzc291cy5kZYISKi5wZy1lbGVrdHJvbmlrLmRlghAq
LnBvbGlzaW5nb3dlLnBsghIqLnByYW1zNGtpZHMuY28udWuCCCoucWl0LmF0ghoq
LnF1ZXJvbWFpc2NyZWRpdG9zLmNvbS5icoIQKi5zZXJ2aWNlNHlvdS51c4INKi5z
aGlwcGVycy5kZYINKi5zbHBpZWdlbC5kZYIXKi5zcGFyZ2VsenViZXJlaXR1bmcu
ZGWCFioudGhpcnN0eXRvd2Vscy5jb20uYXWCDioudG9ycmVudHMyLm1lggkqLnV2
ay5uZXSCCyoud2FyZm9yLmN6giUqLndlY2hzZWwtZ2VzZXR6bGljaGUta3Jhbmtl
bmthc3NlLmRlghUqLnhuLS1ic2Vuc2VsbC1uNGEuZGWCGSoueG4tLWZobGluZ2Vy
LXNlZS1kbGIuZGWCHioueG4tLWdhcmRpbmVudm9yc2NobGdlLTRxYi5kZYITKi54
bi0taHJtb29zLXd4YS5kZYIXKi54bi0ta2NoZW5ib2Rlbi05ZGIuZGWCHCoueG4t
LW1hcm1lbGFkZW5sZmZlbC1qdGIuZGWCGSoueG4tLXJja2VuZGVja3VuZy1kbGIu
ZGWCD2Fic29sdXRpc211cy5kZYIJYWZyby5pbmZvghVhdWd1c3RhYmFnaWVubm9y
dW0uaXSCHWF1c2xhbmRzenVzYXR6dmVyc2ljaGVydW5nLmRlgg9iYWxkcm9jay5j
b20uYXWCEmJlYWNodG93ZWxzLmNvbS5hdYIQY2stbW9kZWxsY2Fycy5kZYILY2xh
ZC5jb20uYXWCEGNsYXJpbmV0cy5jb20uYXWCD2RyYXd0b2xlYXJuLm9yZ4IVZWJh
eWtrbGVpbmFuemVpZ2VuLmRlgg9ldmVudGtsZWlkZXIuZGWCDmV4dHJlbmVyZ2ll
LmRlghBleWVsYXNoZXMuY29tLmF1gg1maWVsZHRyaXBzLmNhggxmaWxlc3R1YmUu
ZnKCD2ZyZWVnaWZ0Y2FyZC5tZYIQZnJ1aXR3aW5lLmNvbS5hdYITZ2V0bW9uZXlm
YXN0LmNvbS5hdYITaGFwcHlzaG9wcGVyLmNvbS5hdYIRaGVscHRvYnV5bncuY28u
dWuCC2liMjRjc29iLmN6ggtpZnRtLmNvbS5icoIOaW1tb2xiaWxpZW4uZGWCEWth
eWFrc3RvcmUuY29tLmF1gg5rb2t1c3pnb2x5by5odYIObGFuZHNoYXVzZW4uZGWC
DHBhcnR5YnJvdC5kZYIPcGFydHlkZXNzb3VzLmRlghBwZy1lbGVrdHJvbmlrLmRl
gg5wb2xpc2luZ293ZS5wbIIQcHJhbXM0a2lkcy5jby51a4IGcWl0LmF0ghhxdWVy
b21haXNjcmVkaXRvcy5jb20uYnKCDnNlcnZpY2U0eW91LnVzggtzaGlwcGVycy5k
ZYILc2xwaWVnZWwuZGWCFXNwYXJnZWx6dWJlcmVpdHVuZy5kZYIUdGhpcnN0eXRv
d2Vscy5jb20uYXWCDHRvcnJlbnRzMi5tZYIHdXZrLm5ldIIJd2FyZm9yLmN6giN3
ZWNoc2VsLWdlc2V0emxpY2hlLWtyYW5rZW5rYXNzZS5kZYITeG4tLWJzZW5zZWxs
LW40YS5kZYIXeG4tLWZobGluZ2VyLXNlZS1kbGIuZGWCHHhuLS1nYXJkaW5lbnZv
cnNjaGxnZS00cWIuZGWCEXhuLS1ocm1vb3Mtd3hhLmRlghV4bi0ta2NoZW5ib2Rl
bi05ZGIuZGWCGnhuLS1tYXJtZWxhZGVubGZmZWwtanRiLmRlghd4bi0tcmNrZW5k
ZWNrdW5nLWRsYi5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1
eeYQe8xWAAABaVxf3NIAAAQDAEcwRQIhAIqMIFHhIOhfd8Ml0ElEl67iXp/vNEzY
dHCe/o8d7UIvAiBa1P92X1gO2TNMPB5bLkMPN0Lyr0dnp9/y8La2ZXUciwB3ACk8
UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaVxf3NMAAAQDAEgwRgIh
AIb2Kv94an1wkV4bXzChB2qjveg0Gyfotl2coj/NcK2EAiEAnFRTH06WOH00+zwQ
2wihwGEGgfgdugja5nk9YOpcV48wDQYJKoZIhvcNAQELBQADggEBAJw7fJXxZMau
3BU+8/NjIxpEILfAr6/xISfoXQfptlQdkr7yS017q0IBxlAb+nOAHr/naNwnf2Si
rzzqFiUlgST3fKwQF0e4ONspktFpm2ndICX6EfQ4EwUK1ajgfY1cUIHKyJSjy+EK
dpHDjSnJd0pDVPWODt3yEavVi/dB7MU7towbG2qp/zNfTuabUude1dWJcjZTmwzC
xnhgurWPYDjGp93UXy5HtX28eRLuTyMnxka6/TSlMQspk/aRXfBz8/02XRHaS1p4
CKSnTpArNc1qPkMLxVKz7T8ewClGzDePiPbq5P3wTYZBPNUHNpUC6Hh80n09NPLs
psR+qF/VmD0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273257180658601034566333264815223003714976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 07:16:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 07:16:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fieldtrips.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785243328266556248843490616941684925165646035900614952892923294580928822032925570212078772841676818805337785805431614114733325037133489015031425887126112778158175412742348029989139921828099430531678696122930728964801852876734748215384895726461440979325665532269036136533723846361190313452253218421069705374038916289947837286061536943649108739785299207496879332251991944347011898451471636212781812470386062347993666786792385600796690051553861391424915870659878252808289800300574487016714090983227217311429029334960578982521845391659233424045071868554900320951367933557711258522335975174393149238193366296683945502689788573279637694919125612012794029233262514705221332599569277255171502343846624228441038968860018960688420682594119673171453487022701818466077150002943534296718588466018623322963087564499939816470358731704988318937691679146430455355087810796621714532808916151683649723143714532840383691741050624796440440595920969264283741753953256922874165398514149084806066623357677150590537197102022766692814404304707572970879678101471285291243891459466776705824321407121632962424408052856532553876798941575814132257114566473987774457630047465983793915760562068990841081218126845846260059014195629240026769466997198901503338360834403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eff59add9bb6eb01c37cf6eca7c159f1fdc6007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1950 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.absolutismus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afro.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augustabagiennorum.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auslandszusatzversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baldrock.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beachtowels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ck-modellcars.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarinets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drawtolearn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaykkleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eventkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extrenergie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyelashes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fieldtrips.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filestube.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freegiftcard.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fruitwine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmoneyfast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happyshopper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helptobuynw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ib24csob.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iftm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immolbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kayakstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kokuszgolyo.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landshausen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partybrot.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partydessous.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pg-elektronik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polisingowe.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prams4kids.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qit.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queromaiscreditos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.service4you.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shippers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slpiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spargelzubereitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thirstytowels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrents2.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uvk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warfor.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wechsel-gesetzliche-krankenkasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bsensell-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fhlinger-see-dlb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gardinenvorschlge-4qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hrmoos-wxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kchenboden-9db.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--marmeladenlffel-jtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rckendeckung-dlb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutismus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afro.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustabagiennorum.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auslandszusatzversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldrock.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachtowels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ck-modellcars.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarinets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drawtolearn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaykkleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extrenergie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyelashes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldtrips.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filestube.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freegiftcard.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruitwine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmoneyfast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyshopper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helptobuynw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib24csob.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iftm.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immolbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kayakstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokuszgolyo.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landshausen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partybrot.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partydessous.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-elektronik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polisingowe.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prams4kids.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qit.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queromaiscreditos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service4you.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slpiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spargelzubereitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirstytowels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrents2.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uvk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warfor.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wechsel-gesetzliche-krankenkasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bsensell-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fhlinger-see-dlb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gardinenvorschlge-4qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hrmoos-wxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kchenboden-9db.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--marmeladenlffel-jtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rckendeckung-dlb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001695c5fdcd200000403004730450221008a8c2051e120e85f77c325d0494497aee25e9fef344cd874709efe8f1ded422f02205ad4ff765f580ed9334c3c1e5b2e430f3742f2af4767a7dff2f0b6b665751c8b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001695c5fdcd3000004030048304602210086f62aff786a7d70915e1b5f30a1076aa3bde8341b27e8b65d9ca23fcd70ad840221009c54531f4e96387d34fb3c10db08a1c0610681f81dba08dae6793d60ea5c578f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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