paetsgeek.com

Issued by R3

About this certificate

This digital certificate with serial number 04:22:11:f0:50:0c:76:39:40:48:57:dc:0a:48:4c:c5:b4:e0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paetsgeek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:22:11:f0:50:0c:76:39:40:48:57:dc:0a:48:4c:c5:b4:e0
Serial Number (int): 360042588853107380958521940844275858519264
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:bf:9d:94:de:c9:fa:c3:d5:f3:25:84:1d:3e:c6:a1:8b:12:d8:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 28:c7:2e:4a:53:2d:c0:2f:a0:f8:c1:70:1f:e5:3f:ce:2d:d6:6b:bb
Fingerprint (sha256): e9:f6:a3:f0:1e:a3:f9:07:c9:3f:eb:7f:01:b9:96:68:d6:e2:fb:92:b6:96:f7:98:40:e3:ac:cc:c6:8d:40:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate paetsgeek.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paetsgeek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abaconstructionmariettaga.com
*.acabo.com
*.acquao.com
*.acquavillage.com
*.asadullah.com
*.bellaandcanvas.com
*.biwi.nl
*.briarclifftoyshop.com
*.cbsnfl.com
*.dolos.com
*.dormie.com
*.ebay-kleinaziegen.de
*.empleopublico.es
*.equimenttrader.com
*.ethiopienairlines.com
*.gopetpan.com
*.hadida.com
*.halqa.com
*.i18nobs.xyz
*.iseku.com
*.jidoka-labo.com
*.jornalbalcao.com
*.kauaian.com
*.kietz.com
*.lazertagexperience.com
*.madelli.com
*.mbala.com
*.medizi.com
*.myfailymobile.com
*.nextinsurace.com
*.nrhm.com.au
*.olivespringsquarry.com
*.opticspanet.com
*.paetsgeek.com
*.pier20.com.au
*.postermywall.co
*.rapidsharegfx.com
*.redservicio.com
*.saylin.com
*.schmeissner.com
*.science-academic-organizer.rest
*.shidosetsuna.xyz
*.sistastyle.com
*.sourcelocally.com
*.sprove-criving.icu
*.survivaltent.com
*.tecnologiainmobiliaria.com
*.trusinvestin.com
*.wholelifeexpo.com.au
*.wwwpurposegames.com
abaconstructionmariettaga.com
acabo.com
acquao.com
acquavillage.com
asadullah.com
bellaandcanvas.com
biwi.nl
briarclifftoyshop.com
cbsnfl.com
dolos.com
dormie.com
ebay-kleinaziegen.de
empleopublico.es
equimenttrader.com
ethiopienairlines.com
gopetpan.com
hadida.com
halqa.com
i18nobs.xyz
iseku.com
jidoka-labo.com
jornalbalcao.com
kauaian.com
kietz.com
lazertagexperience.com
madelli.com
mbala.com
medizi.com
myfailymobile.com
nextinsurace.com
nrhm.com.au
olivespringsquarry.com
opticspanet.com
paetsgeek.com
pier20.com.au
postermywall.co
rapidsharegfx.com
redservicio.com
saylin.com
schmeissner.com
science-academic-organizer.rest
shidosetsuna.xyz
sistastyle.com
sourcelocally.com
sprove-criving.icu
survivaltent.com
tecnologiainmobiliaria.com
trusinvestin.com
wholelifeexpo.com.au
wwwpurposegames.com

Other certificates including the domain name paetsgeek.com

(limited to 100 certificates)
paetsgeek.com
paetsgeek.com
nutrisys6em.com
paetsgeek.com
paetsgeek.com
paetsgeek.com
wesai.co
paetsgeek.com
paetsgeek.com
paetsgeek.com

Certificate

The complete raw certificate details for paetsgeek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINJDCCDAygAwIBAgISBCIR8FAMdjlASFfcCkhMxbTgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MTgxMTA2MDFaFw0yMzA4MTYxMTA2MDBaMBgxFjAUBgNVBAMT
DXBhZXRzZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDY
r3t3rjXp0c2AZhpY+rOsV8WffhnQZDZCADjBYVB4bk/A+L1KQ7Q5OzNXmCdxc7Jo
AFqWrq8jjKTtabuT0RvpQ3fx1qpoKLeajeBeF08nnXNAKezkuKUQQlpWSa+7tO1k
Lz5xuHtTfm46uHbFHiKJFDKOKaMQYG5XxGEM9Iq5LGxe8TgTrRsYUuu2LlYjJRBF
CofwX0m7Wzs6BXKJv+gvJGmNr4RrWoEIDLDNN2a78SrhDZAW92jWfwSBZ54VM6AC
wVUmh444QX/PLvCG0U8fasZUWlFc3rXRjCAu13mhEyUeSHaNdNN7Razj1J1ycymP
qO9k0NIE6lu6az+SoIbeCXkEi9hGnScZu3H/CgKM8PuLujAvs/N0r1V8VmzeUBHr
CXEUWnG0jo47o/Q3txfZZRCtJF538M7J8j90ubvxFGQOapWbz86vh296Rysjj91H
LvRzd/koF79pNn4bZu+4knjkiGVszNoQr+cOQvWpvs2wn9G3UIroRh2RXhqBrvck
Ia+X00+xySBDZm/lUT3tQz09KqxuBcw0ISuidXxRaKnFXM1XvrdF+8AQS0GN3BIb
yQYl3tydS9ZygG9Wwc9d02X9FrymjrUnP+4hXpv9kGs9e3ucrC3FJdKuFzc486lD
gusfhbbL1cu5f9OlRc/2rRJNtI5nwGnPa9t/zv/8RQIDAQABo4IJTDCCCUgwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSRv52U3sn6w9XzJYQdPsahixLY8TAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBxsGA1UdEQSCBxIwggcOgh8qLmFiYWNvbnN0cnVj
dGlvbm1hcmlldHRhZ2EuY29tggsqLmFjYWJvLmNvbYIMKi5hY3F1YW8uY29tghIq
LmFjcXVhdmlsbGFnZS5jb22CDyouYXNhZHVsbGFoLmNvbYIUKi5iZWxsYWFuZGNh
bnZhcy5jb22CCSouYml3aS5ubIIXKi5icmlhcmNsaWZmdG95c2hvcC5jb22CDCou
Y2JzbmZsLmNvbYILKi5kb2xvcy5jb22CDCouZG9ybWllLmNvbYIWKi5lYmF5LWts
ZWluYXppZWdlbi5kZYISKi5lbXBsZW9wdWJsaWNvLmVzghQqLmVxdWltZW50dHJh
ZGVyLmNvbYIXKi5ldGhpb3BpZW5haXJsaW5lcy5jb22CDiouZ29wZXRwYW4uY29t
ggwqLmhhZGlkYS5jb22CCyouaGFscWEuY29tgg0qLmkxOG5vYnMueHl6ggsqLmlz
ZWt1LmNvbYIRKi5qaWRva2EtbGFiby5jb22CEiouam9ybmFsYmFsY2FvLmNvbYIN
Ki5rYXVhaWFuLmNvbYILKi5raWV0ei5jb22CGCoubGF6ZXJ0YWdleHBlcmllbmNl
LmNvbYINKi5tYWRlbGxpLmNvbYILKi5tYmFsYS5jb22CDCoubWVkaXppLmNvbYIT
Ki5teWZhaWx5bW9iaWxlLmNvbYISKi5uZXh0aW5zdXJhY2UuY29tgg0qLm5yaG0u
Y29tLmF1ghgqLm9saXZlc3ByaW5nc3F1YXJyeS5jb22CESoub3B0aWNzcGFuZXQu
Y29tgg8qLnBhZXRzZ2Vlay5jb22CDyoucGllcjIwLmNvbS5hdYIRKi5wb3N0ZXJt
eXdhbGwuY2+CEyoucmFwaWRzaGFyZWdmeC5jb22CESoucmVkc2VydmljaW8uY29t
ggwqLnNheWxpbi5jb22CESouc2NobWVpc3NuZXIuY29tgiEqLnNjaWVuY2UtYWNh
ZGVtaWMtb3JnYW5pemVyLnJlc3SCEiouc2hpZG9zZXRzdW5hLnh5eoIQKi5zaXN0
YXN0eWxlLmNvbYITKi5zb3VyY2Vsb2NhbGx5LmNvbYIUKi5zcHJvdmUtY3Jpdmlu
Zy5pY3WCEiouc3Vydml2YWx0ZW50LmNvbYIcKi50ZWNub2xvZ2lhaW5tb2JpbGlh
cmlhLmNvbYISKi50cnVzaW52ZXN0aW4uY29tghYqLndob2xlbGlmZWV4cG8uY29t
LmF1ghUqLnd3d3B1cnBvc2VnYW1lcy5jb22CHWFiYWNvbnN0cnVjdGlvbm1hcmll
dHRhZ2EuY29tgglhY2Fiby5jb22CCmFjcXVhby5jb22CEGFjcXVhdmlsbGFnZS5j
b22CDWFzYWR1bGxhaC5jb22CEmJlbGxhYW5kY2FudmFzLmNvbYIHYml3aS5ubIIV
YnJpYXJjbGlmZnRveXNob3AuY29tggpjYnNuZmwuY29tgglkb2xvcy5jb22CCmRv
cm1pZS5jb22CFGViYXkta2xlaW5hemllZ2VuLmRlghBlbXBsZW9wdWJsaWNvLmVz
ghJlcXVpbWVudHRyYWRlci5jb22CFWV0aGlvcGllbmFpcmxpbmVzLmNvbYIMZ29w
ZXRwYW4uY29tggpoYWRpZGEuY29tggloYWxxYS5jb22CC2kxOG5vYnMueHl6gglp
c2VrdS5jb22CD2ppZG9rYS1sYWJvLmNvbYIQam9ybmFsYmFsY2FvLmNvbYILa2F1
YWlhbi5jb22CCWtpZXR6LmNvbYIWbGF6ZXJ0YWdleHBlcmllbmNlLmNvbYILbWFk
ZWxsaS5jb22CCW1iYWxhLmNvbYIKbWVkaXppLmNvbYIRbXlmYWlseW1vYmlsZS5j
b22CEG5leHRpbnN1cmFjZS5jb22CC25yaG0uY29tLmF1ghZvbGl2ZXNwcmluZ3Nx
dWFycnkuY29tgg9vcHRpY3NwYW5ldC5jb22CDXBhZXRzZ2Vlay5jb22CDXBpZXIy
MC5jb20uYXWCD3Bvc3Rlcm15d2FsbC5jb4IRcmFwaWRzaGFyZWdmeC5jb22CD3Jl
ZHNlcnZpY2lvLmNvbYIKc2F5bGluLmNvbYIPc2NobWVpc3NuZXIuY29tgh9zY2ll
bmNlLWFjYWRlbWljLW9yZ2FuaXplci5yZXN0ghBzaGlkb3NldHN1bmEueHl6gg5z
aXN0YXN0eWxlLmNvbYIRc291cmNlbG9jYWxseS5jb22CEnNwcm92ZS1jcml2aW5n
LmljdYIQc3Vydml2YWx0ZW50LmNvbYIadGVjbm9sb2dpYWlubW9iaWxpYXJpYS5j
b22CEHRydXNpbnZlc3Rpbi5jb22CFHdob2xlbGlmZWV4cG8uY29tLmF1ghN3d3dw
dXJwb3NlZ2FtZXMuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXE
nh0JgSXttJkAAAGILsC2CQAABAMARjBEAiA5T57ykfiT5Xlqs/4MzDRzvA86cDcX
hpVptCgtBPRWigIgUsFzoVTaYVD+JGIEd1HyWAYs1Uc1cgyBhyrflLM49MQAdgB6
MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYguwLYVAAAEAwBHMEUC
IAFRbntbSm8kJwLaQVxTTJC7smRs1S4zQDI5dUWTlV0wAiEAoSoB8Bv1fbWgaREk
ynfhbKzbtZrb/E5JRtIjscrWsmswDQYJKoZIhvcNAQELBQADggEBADzvPgII2WJj
yl5r6DUCFl6UDZUAHA4Jwoh1oC4UMBT/abZQ2FPZPmgDQSMAczMf3IUv+UpJEZso
S0A/RQAT0ner3nnhYS2wPyyuoTYSJ1+NyuYtcqmgc92lVVQJbe63POktmr5ujIX6
+pXUmszw7+bQmFkNbfgMM5N8rqDyQj4cmmqXLHJT4ceXPWj1La/H8lYH3+sEovrc
WkFo1Jy3KjMQAYIHEzmrXwXH+ANll+Oik4nBRslKeLLGvVfiQmx/QaAEufzzgu9s
u6FycU3FIVdlgELFTU1bGIQs7QGU7JvrIWGHQ4o5Hign0PQYA5yEpx+YHui7jKON
hwvfWlYdV3Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2K97d6416dHNgGYaWPqz
rFfFn34Z0GQ2QgA4wWFQeG5PwPi9SkO0OTszV5gncXOyaABalq6vI4yk7Wm7k9Eb
6UN38daqaCi3mo3gXhdPJ51zQCns5LilEEJaVkmvu7TtZC8+cbh7U35uOrh2xR4i
iRQyjimjEGBuV8RhDPSKuSxsXvE4E60bGFLrti5WIyUQRQqH8F9Ju1s7OgVyib/o
LyRpja+Ea1qBCAywzTdmu/Eq4Q2QFvdo1n8EgWeeFTOgAsFVJoeOOEF/zy7whtFP
H2rGVFpRXN610YwgLtd5oRMlHkh2jXTTe0Ws49SdcnMpj6jvZNDSBOpbums/kqCG
3gl5BIvYRp0nGbtx/woCjPD7i7owL7PzdK9VfFZs3lAR6wlxFFpxtI6OO6P0N7cX
2WUQrSRed/DOyfI/dLm78RRkDmqVm8/Or4dvekcrI4/dRy70c3f5KBe/aTZ+G2bv
uJJ45IhlbMzaEK/nDkL1qb7NsJ/Rt1CK6EYdkV4aga73JCGvl9NPsckgQ2Zv5VE9
7UM9PSqsbgXMNCEronV8UWipxVzNV763RfvAEEtBjdwSG8kGJd7cnUvWcoBvVsHP
XdNl/Ra8po61Jz/uIV6b/ZBrPXt7nKwtxSXSrhc3OPOpQ4LrH4W2y9XLuX/TpUXP
9q0STbSOZ8Bpz2vbf87//EUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360042588853107380958521940844275858519264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 11:06:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 11:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paetsgeek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 883999623784348767405900277211837618655563504453442010870656834541131073998897214076815316622285744087396828177641127118106650077854536817741426442361931624442501695794306113131502236641303615412539919576886687881593037335664866079796346101146756841809997419795703410741925546327377766182792948094464543710909701762158740283636482346934500994155925014668136181201415188556793328483919676902562458494047001965244355551942691810924655462184383103193902915055305085143071718093303007121859373531078387812907516460213977792055620577492554991623012758629085441608106777266882703120428653006200796990146144333051596265375634928282675021747172828061543466669594617448211248759868642143056513128938066207648879341083005410000812941052051354613420250442936835832319719329549058093293924098980058310855186045547593260436823533525967407662075688042882661536811920879063775181660595967711500388968818215462105550405713533564346836144590260494433009940639365014988698031615277564141113225267942704182052146714169503200998990682308346119107264830167374244549906988977872730804150789337744194738074971996690641636169146593575201836604279291251836972724939602142740064385868855085514172474580929691209290466053396343797156657675605746163003611413573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91bf9d94dec9fac3d5f325841d3ec6a18b12d8f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1810 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abaconstructionmariettaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acquao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acquavillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asadullah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellaandcanvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biwi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briarclifftoyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbsnfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dolos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dormie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinaziegen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empleopublico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equimenttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethiopienairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gopetpan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hadida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i18nobs.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iseku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jidoka-labo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jornalbalcao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kauaian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kietz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lazertagexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medizi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfailymobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextinsurace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrhm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olivespringsquarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opticspanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paetsgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pier20.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postermywall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidsharegfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redservicio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schmeissner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.science-academic-organizer.rest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shidosetsuna.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sistastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sourcelocally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprove-criving.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survivaltent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnologiainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trusinvestin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholelifeexpo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwpurposegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abaconstructionmariettaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquavillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asadullah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellaandcanvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biwi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briarclifftoyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsnfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinaziegen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empleopublico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equimenttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethiopienairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopetpan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i18nobs.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iseku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jidoka-labo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jornalbalcao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauaian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kietz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazertagexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medizi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfailymobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextinsurace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrhm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivespringsquarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticspanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paetsgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pier20.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postermywall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidsharegfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redservicio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmeissner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science-academic-organizer.rest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shidosetsuna.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistastyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcelocally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprove-criving.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivaltent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnologiainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trusinvestin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholelifeexpo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwpurposegames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001882ec0b60900000403004630440220394f9ef291f893e5796ab3fe0ccc3473bc0f3a703717869569b4282d04f4568a022052c173a154da6150fe2462047751f258062cd54735720c81872adf94b338f4c40076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001882ec0b6150000040300473045022001516e7b5b4a6f242702da415c534c90bbb2646cd52e33403239754593955d30022100a12a01f01bf57db5a0691124ca77e16cacdbb59adbfc4e4946d223b1cad6b26b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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