knihy.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:6a:2a:3b:ec:ad:d6:60:6e:ef:b3:3a:f3:bb:38:d3:1b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=knihy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:6a:2a:3b:ec:ad:d6:60:6e:ef:b3:3a:f3:bb:38:d3:1b
Serial Number (int): 269304469693897397185850541637669551133467
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:df:f4:bc:af:27:97:a7:d5:a2:68:ad:ac:80:f7:19:e8:4c:cf:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:f0:40:70:b4:f5:72:c0:33:5f:b2:c7:64:02:20:39:72:6f:82:c1
Fingerprint (sha256): ee:d2:67:27:e2:01:4b:17:63:3a:cf:7a:b3:b8:26:2b:a3:13:6e:80:df:02:60:4e:0f:48:cb:18:af:86:99:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate knihy.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for knihy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1922silverdollar.com
automated-trading.com
benckenstein.com
bogardus.com
ccsls.com
coach-superstore.com
convergepad.com
dairytv.com
ecology-superstore.com
elual.com
fakenewsbook.com
feline-superstore.com
gal-superstore.com
gals-superstore.com
galssuperstore.com
galsuperstore.com
gaujo.com
girlsflats.com
guy-superstore.com
guys-superstore.com
guysuperstore.com
hangoutsale.com
hangoutsales.com
ilgmann.com
ilutas.com
jogoaovivo.com
knihy.com
learningtreks.com
logicprevails.com
makefy.com
michaelunderhill.com
mysensa.com
nauticalnellie.com
nauticalnellies.com
nowlocation.com
pennysense.com
phakephood.org
postresdenavidad.com
qualifiedinstallation.com
replaceremotes.com
satelliteradio.org
softestsheets.com
stemscape.com
submarines.org
tamarindohomes.com
terryfoxday.com
uofbiology.com
uofcomputerscience.com
uofpsychology.com
waterfieldcredit.com
www.1922silverdollar.com
www.automated-trading.com
www.benckenstein.com
www.bogardus.com
www.ccsls.com
www.coach-superstore.com
www.convergepad.com
www.dairytv.com
www.ecology-superstore.com
www.elual.com
www.fakenewsbook.com
www.feline-superstore.com
www.gal-superstore.com
www.gals-superstore.com
www.galssuperstore.com
www.galsuperstore.com
www.gaujo.com
www.girlsflats.com
www.guy-superstore.com
www.guys-superstore.com
www.guysuperstore.com
www.hangoutsale.com
www.hangoutsales.com
www.ilgmann.com
www.ilutas.com
www.jogoaovivo.com
www.knihy.com
www.learningtreks.com
www.logicprevails.com
www.makefy.com
www.michaelunderhill.com
www.mysensa.com
www.nauticalnellie.com
www.nauticalnellies.com
www.nowlocation.com
www.pennysense.com
www.phakephood.org
www.postresdenavidad.com
www.qualifiedinstallation.com
www.replaceremotes.com
www.satelliteradio.org
www.softestsheets.com
www.stemscape.com
www.submarines.org
www.tamarindohomes.com
www.terryfoxday.com
www.uofbiology.com
www.uofcomputerscience.com
www.uofpsychology.com
www.waterfieldcredit.com

Other certificates including the domain name knihy.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for knihy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINGjCCDAKgAwIBAgISAxdqKjvsrdZgbu+zOvO7ONMbMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTkwODEwMzRaFw0y
MDAyMTcwODEwMzRaMBQxEjAQBgNVBAMTCWtuaWh5LmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANtubDlNf3kNytlIJ6LFx1xnbZ7OhscnxJNNzut6
+1T2UugB9Oal+krW+3r8zFeMWXDqGjy3GaitEzgKRBcoNhaPmQWxzxXQEMqId+90
F7ESRp4A2sPGkaYrTyw4DKKP8Ba5UbrMJkZDwa/KjTWnPE7ASBAp5OioWctRCwnE
N2nAh/uKHDXivhi37S++Shuj+Bjlj6aeo1It47t7Sqqz9QnIW6qKGrJBc2Dsdf0T
jnuixCsCZ9qraDCHc6qbAEiOhsenwZJAnbyhsadzXq2tpFC2Ad9ZiBC37eGugfNZ
sHKSRz6Z1jbRRalRtHVHyy7/i2cZElado/00KMRB3stS5W8CAwEAAaOCCi4wggoq
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUSd/0vK8nl6fVomitrID3GehMz8EwHwYD
VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G
CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G
CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCC
B+EGA1UdEQSCB9gwggfUghQxOTIyc2lsdmVyZG9sbGFyLmNvbYIVYXV0b21hdGVk
LXRyYWRpbmcuY29tghBiZW5ja2Vuc3RlaW4uY29tggxib2dhcmR1cy5jb22CCWNj
c2xzLmNvbYIUY29hY2gtc3VwZXJzdG9yZS5jb22CD2NvbnZlcmdlcGFkLmNvbYIL
ZGFpcnl0di5jb22CFmVjb2xvZ3ktc3VwZXJzdG9yZS5jb22CCWVsdWFsLmNvbYIQ
ZmFrZW5ld3Nib29rLmNvbYIVZmVsaW5lLXN1cGVyc3RvcmUuY29tghJnYWwtc3Vw
ZXJzdG9yZS5jb22CE2dhbHMtc3VwZXJzdG9yZS5jb22CEmdhbHNzdXBlcnN0b3Jl
LmNvbYIRZ2Fsc3VwZXJzdG9yZS5jb22CCWdhdWpvLmNvbYIOZ2lybHNmbGF0cy5j
b22CEmd1eS1zdXBlcnN0b3JlLmNvbYITZ3V5cy1zdXBlcnN0b3JlLmNvbYIRZ3V5
c3VwZXJzdG9yZS5jb22CD2hhbmdvdXRzYWxlLmNvbYIQaGFuZ291dHNhbGVzLmNv
bYILaWxnbWFubi5jb22CCmlsdXRhcy5jb22CDmpvZ29hb3Zpdm8uY29tgglrbmlo
eS5jb22CEWxlYXJuaW5ndHJla3MuY29tghFsb2dpY3ByZXZhaWxzLmNvbYIKbWFr
ZWZ5LmNvbYIUbWljaGFlbHVuZGVyaGlsbC5jb22CC215c2Vuc2EuY29tghJuYXV0
aWNhbG5lbGxpZS5jb22CE25hdXRpY2FsbmVsbGllcy5jb22CD25vd2xvY2F0aW9u
LmNvbYIOcGVubnlzZW5zZS5jb22CDnBoYWtlcGhvb2Qub3JnghRwb3N0cmVzZGVu
YXZpZGFkLmNvbYIZcXVhbGlmaWVkaW5zdGFsbGF0aW9uLmNvbYIScmVwbGFjZXJl
bW90ZXMuY29tghJzYXRlbGxpdGVyYWRpby5vcmeCEXNvZnRlc3RzaGVldHMuY29t
gg1zdGVtc2NhcGUuY29tgg5zdWJtYXJpbmVzLm9yZ4ISdGFtYXJpbmRvaG9tZXMu
Y29tgg90ZXJyeWZveGRheS5jb22CDnVvZmJpb2xvZ3kuY29tghZ1b2Zjb21wdXRl
cnNjaWVuY2UuY29tghF1b2Zwc3ljaG9sb2d5LmNvbYIUd2F0ZXJmaWVsZGNyZWRp
dC5jb22CGHd3dy4xOTIyc2lsdmVyZG9sbGFyLmNvbYIZd3d3LmF1dG9tYXRlZC10
cmFkaW5nLmNvbYIUd3d3LmJlbmNrZW5zdGVpbi5jb22CEHd3dy5ib2dhcmR1cy5j
b22CDXd3dy5jY3Nscy5jb22CGHd3dy5jb2FjaC1zdXBlcnN0b3JlLmNvbYITd3d3
LmNvbnZlcmdlcGFkLmNvbYIPd3d3LmRhaXJ5dHYuY29tghp3d3cuZWNvbG9neS1z
dXBlcnN0b3JlLmNvbYINd3d3LmVsdWFsLmNvbYIUd3d3LmZha2VuZXdzYm9vay5j
b22CGXd3dy5mZWxpbmUtc3VwZXJzdG9yZS5jb22CFnd3dy5nYWwtc3VwZXJzdG9y
ZS5jb22CF3d3dy5nYWxzLXN1cGVyc3RvcmUuY29tghZ3d3cuZ2Fsc3N1cGVyc3Rv
cmUuY29tghV3d3cuZ2Fsc3VwZXJzdG9yZS5jb22CDXd3dy5nYXVqby5jb22CEnd3
dy5naXJsc2ZsYXRzLmNvbYIWd3d3Lmd1eS1zdXBlcnN0b3JlLmNvbYIXd3d3Lmd1
eXMtc3VwZXJzdG9yZS5jb22CFXd3dy5ndXlzdXBlcnN0b3JlLmNvbYITd3d3Lmhh
bmdvdXRzYWxlLmNvbYIUd3d3LmhhbmdvdXRzYWxlcy5jb22CD3d3dy5pbGdtYW5u
LmNvbYIOd3d3LmlsdXRhcy5jb22CEnd3dy5qb2dvYW92aXZvLmNvbYINd3d3Lmtu
aWh5LmNvbYIVd3d3LmxlYXJuaW5ndHJla3MuY29tghV3d3cubG9naWNwcmV2YWls
cy5jb22CDnd3dy5tYWtlZnkuY29tghh3d3cubWljaGFlbHVuZGVyaGlsbC5jb22C
D3d3dy5teXNlbnNhLmNvbYIWd3d3Lm5hdXRpY2FsbmVsbGllLmNvbYIXd3d3Lm5h
dXRpY2FsbmVsbGllcy5jb22CE3d3dy5ub3dsb2NhdGlvbi5jb22CEnd3dy5wZW5u
eXNlbnNlLmNvbYISd3d3LnBoYWtlcGhvb2Qub3Jnghh3d3cucG9zdHJlc2RlbmF2
aWRhZC5jb22CHXd3dy5xdWFsaWZpZWRpbnN0YWxsYXRpb24uY29tghZ3d3cucmVw
bGFjZXJlbW90ZXMuY29tghZ3d3cuc2F0ZWxsaXRlcmFkaW8ub3JnghV3d3cuc29m
dGVzdHNoZWV0cy5jb22CEXd3dy5zdGVtc2NhcGUuY29tghJ3d3cuc3VibWFyaW5l
cy5vcmeCFnd3dy50YW1hcmluZG9ob21lcy5jb22CE3d3dy50ZXJyeWZveGRheS5j
b22CEnd3dy51b2ZiaW9sb2d5LmNvbYIad3d3LnVvZmNvbXB1dGVyc2NpZW5jZS5j
b22CFXd3dy51b2Zwc3ljaG9sb2d5LmNvbYIYd3d3LndhdGVyZmllbGRjcmVkaXQu
Y29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIE
AgSB9gSB8wDxAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFu
gu2GJAAABAMARzBFAiEApZPRY8V4MonOXfXFuYEVjQRgzr6WnUngBWbB1xpI118C
IEwP2L7TlHqcbW4pWQibMTZUKz65+q+aLRw+dV5VLuNbAHcAsh4FzIuizYogTodm
+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFugu2GHwAABAMASDBGAiEAhMFE7uBiwJg5
sE/SjVqJQprx/QvDrGbtE380P6FkiSYCIQC2umQCbG+x9H6znDuRDBPeMdbGQn9W
Wvr5oykZ7Ha7GDANBgkqhkiG9w0BAQsFAAOCAQEATL/5oHpBPctxcROgvZGjU74Z
3U9tmmxoegZD+Ouzx3FgzDxU+jDFPeT522vIGj2yyeoiR9vUw0Z3dgKsUpP4Zy6+
nsmNEg/FdVcWq8p5MceP8JtCY1VB5enVNVli30eYRTRZnG4fpYP866vj7Yj9jig2
ag9EUp88TWYZJCVrHp950c+L80XgjVCGYu920hz+ka9BQRUAZT4j4UJZlgzPVaAg
JHBjjBGrWqua0gXQn6QpRpP0y87hJ6SVpGz8i2cvnUVV0a9uaT1dcdU4aiB+zKjO
+no7e4wp4ttTH20EYVQ84w3ZYS8CXgbsIfCYz2m+3ZCtlFijKyCyiMAmymY2RQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA225sOU1/eQ3K2UgnosXH
XGdtns6GxyfEk03O63r7VPZS6AH05qX6Stb7evzMV4xZcOoaPLcZqK0TOApEFyg2
Fo+ZBbHPFdAQyoh373QXsRJGngDaw8aRpitPLDgMoo/wFrlRuswmRkPBr8qNNac8
TsBIECnk6KhZy1ELCcQ3acCH+4ocNeK+GLftL75KG6P4GOWPpp6jUi3ju3tKqrP1
CchbqooaskFzYOx1/ROOe6LEKwJn2qtoMIdzqpsASI6Gx6fBkkCdvKGxp3Nera2k
ULYB31mIELft4a6B81mwcpJHPpnWNtFFqVG0dUfLLv+LZxkSVp2j/TQoxEHey1Ll
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269304469693897397185850541637669551133467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 08:10:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 08:10:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'knihy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27700640274716009008536898201813629688786900070637237698596969139068859364093929764989560981170730419005403538333984738965661584903564767704522845739354946174228478713097941605198787434562983168520739088321872383143699323393939047529838958398214160339649333481277248110492490399309717620936648317013084466627090939731430376906909791602529597938677019068856556398907744296186232233934166148532384233358910482394913668793729803352355811995554121810784376546601171925657186439584484065528391541070758880208528595262259545445691603616681183188781178792154662082193222257027579363903873704104234979462265119033858918114671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49dff4bcaf2797a7d5a268adac80f719e84ccfc1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1922silverdollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automated-trading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benckenstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogardus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccsls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convergepad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecology-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakenewsbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feline-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gal-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gals-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galssuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galsuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaujo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlsflats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guy-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guys-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guysuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangoutsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangoutsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilgmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilutas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jogoaovivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knihy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningtreks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicprevails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makefy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelunderhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysensa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nauticalnellie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nauticalnellies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowlocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennysense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phakephood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postresdenavidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualifiedinstallation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replaceremotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satelliteradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softestsheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'submarines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamarindohomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terryfoxday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uofbiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uofcomputerscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uofpsychology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfieldcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1922silverdollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automated-trading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benckenstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogardus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccsls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coach-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.convergepad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecology-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fakenewsbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feline-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gal-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gals-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galssuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galsuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaujo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.girlsflats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guy-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guys-superstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guysuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hangoutsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hangoutsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilutas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jogoaovivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knihy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learningtreks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logicprevails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makefy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelunderhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysensa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nauticalnellie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nauticalnellies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nowlocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennysense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phakephood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postresdenavidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualifiedinstallation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.replaceremotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satelliteradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softestsheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.submarines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamarindohomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terryfoxday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofbiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofcomputerscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uofpsychology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterfieldcredit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e82ed86240000040300473045022100a593d163c5783289ce5df5c5b981158d0460cebe969d49e00566c1d71a48d75f02204c0fd8bed3947a9c6d6e2959089b3136542b3eb9faaf9a2d1c3e755e552ee35b007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e82ed861f000004030048304602210084c144eee062c09839b04fd28d5a89429af1fd0bc3ac66ed137f343fa1648926022100b6ba64026c6fb1f47eb39c3b910c13de31d6c6427f565afaf9a32919ec76bb18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004cbff9a07a413dcb717113a0bd91a353be19dd4f6d9a6c687a0643f8ebb3c77160cc3c54fa30c53de4f9db6bc81a3db2c9ea2247dbd4c346777602ac5293f8672ebe9ec98d120fc5755716abca7931c78ff09b42635541e5e9d5355962df47984534599c6e1fa583fcebabe3ed88fd8e28366a0f44529f3c4d661924256b1e9f79d1cf8bf345e08d508662ef76d21cfe91af41411500653e23e14259960ccf55a0202470638c11ab5aab9ad205d09fa4294693f4cbcee127a495a46cfc8b672f9d4555d1af6e693d5d71d5386a207ecca8cefa7a3b7b8c29e2db531f6d0461543ce30dd9612f025e06ec21f098cf69bedd90ad9458a32b20b288c026ca663645