www.newyorkannuityalert.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:58:5f:bc:4f:b4:3c:0b:86:92:86:c9:fa:fb:c7:03:80:80 was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.newyorkannuityalert.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:5f:bc:4f:b4:3c:0b:86:92:86:c9:fa:fb:c7:03:80:80
Serial Number (int): 378521246444082553902115475501202685526144
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:ce:1b:d0:01:2f:5f:0b:33:02:74:1a:52:88:79:5e:2b:08:17:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:d6:bd:ee:e8:c9:f5:43:94:54:fe:71:38:31:05:91:96:b3:e6:05
Fingerprint (sha256): fa:8f:62:d9:b3:7c:1b:8c:9c:82:10:a4:e0:6e:2e:1b:b9:69:fb:d2:e7:bd:e4:7b:d8:9f:e8:6d:48:d7:b6:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.newyorkannuityalert.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.newyorkannuityalert.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alabamaannuityalert.com
annuity.frontporchsolutions.com
arizonaannuityalert.com
arkansasannuityalert.com
californiaannuityalert.com
georgiaannuityalert.com
hawaiiannuityalert.com
kansasannuityalert.com
marylandannuityalert.com
michiganannuityalert.com
minnesotaannuityalert.com
missouriannuityalert.com
newcoloradoannuityalert.com
newjerseyannuityalert.com
newyorkannuityalert.com
northcarolinaannuityalert.com
northdakotaannuityalert.com
pennsylvaniaannuityalert.com
rhodeislandannuityalert.com
southcarolinaannuityalert.com
texasannuityalerts.com
utahannuityalert.com
virginiaannuityalert.com
www.alabamaannuityalert.com
www.arizonaannuityalert.com
www.arkansasannuityalert.com
www.californiaannuityalert.com
www.georgiaannuityalert.com
www.hawaiiannuityalert.com
www.kansasannuityalert.com
www.marylandannuityalert.com
www.michiganannuityalert.com
www.minnesotaannuityalert.com
www.missouriannuityalert.com
www.newcoloradoannuityalert.com
www.newjerseyannuityalert.com
www.newyorkannuityalert.com
www.northcarolinaannuityalert.com
www.northdakotaannuityalert.com
www.pennsylvaniaannuityalert.com
www.rhodeislandannuityalert.com
www.southcarolinaannuityalert.com
www.texasannuityalerts.com
www.utahannuityalert.com
www.virginiaannuityalert.com

Other certificates including the domain name newyorkannuityalert.com

(limited to 100 certificates)
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
www.michiganannuityalert.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
www.michiganannuityalert.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
www.newyorkannuityalert.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
sni10692.cloudflaressl.com
www.michiganannuityalert.com
sni10692.cloudflaressl.com
www.michiganannuityalert.com
www.newyorkannuityalert.com
www.missouriannuityalert.com
www.newyorkannuityalert.com
sni10692.cloudflaressl.com

Certificate

The complete raw certificate details for www.newyorkannuityalert.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKDTCCCPWgAwIBAgISBFhfvE+0PAuGkobJ+vvHA4CAMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA4MjExNzA3MDBaFw0x
NzExMTkxNzA3MDBaMCYxJDAiBgNVBAMTG3d3dy5uZXd5b3JrYW5udWl0eWFsZXJ0
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALyXtylE97wIGXTs
bW7//uM6eifkHHd6dYZWkcJkSuLXBaKO/sigONhtkAelIDmTLSC00vteIkp5IWm3
u0Jn/aN9jLVacGdpV4ZVJMlS1mTAJcvE5SDOjAO1XjHhaFAym4YZrl0QN9wnDatn
FXdF9TFduN2MYd0qKnrvOhYoj/zaXK4lLLqlOR+AW7eXN1wVN1PqeONy2yDouEJS
kAELXmvNte4uVDuUl6avi+2pdVRUGLVnpedMDnc06giqiUnOjw6wsMyyyaVDybcZ
t7C7GH07Pxb4Nc0oWZ9MCW8B9oR9BATzJbwNhSD9O1FeQIT/3IGZ5OJAxqh2v9VZ
pEgR6rcCAwEAAaOCBw8wggcLMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU/M4b0AEv
XwszAnQaUoh5XisIF5MwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCBRgGA1UdEQSCBQ8wggULghdhbGFiYW1hYW5udWl0
eWFsZXJ0LmNvbYIfYW5udWl0eS5mcm9udHBvcmNoc29sdXRpb25zLmNvbYIXYXJp
em9uYWFubnVpdHlhbGVydC5jb22CGGFya2Fuc2FzYW5udWl0eWFsZXJ0LmNvbYIa
Y2FsaWZvcm5pYWFubnVpdHlhbGVydC5jb22CF2dlb3JnaWFhbm51aXR5YWxlcnQu
Y29tghZoYXdhaWlhbm51aXR5YWxlcnQuY29tghZrYW5zYXNhbm51aXR5YWxlcnQu
Y29tghhtYXJ5bGFuZGFubnVpdHlhbGVydC5jb22CGG1pY2hpZ2FuYW5udWl0eWFs
ZXJ0LmNvbYIZbWlubmVzb3RhYW5udWl0eWFsZXJ0LmNvbYIYbWlzc291cmlhbm51
aXR5YWxlcnQuY29tghtuZXdjb2xvcmFkb2FubnVpdHlhbGVydC5jb22CGW5ld2pl
cnNleWFubnVpdHlhbGVydC5jb22CF25ld3lvcmthbm51aXR5YWxlcnQuY29tgh1u
b3J0aGNhcm9saW5hYW5udWl0eWFsZXJ0LmNvbYIbbm9ydGhkYWtvdGFhbm51aXR5
YWxlcnQuY29tghxwZW5uc3lsdmFuaWFhbm51aXR5YWxlcnQuY29tghtyaG9kZWlz
bGFuZGFubnVpdHlhbGVydC5jb22CHXNvdXRoY2Fyb2xpbmFhbm51aXR5YWxlcnQu
Y29tghZ0ZXhhc2FubnVpdHlhbGVydHMuY29tghR1dGFoYW5udWl0eWFsZXJ0LmNv
bYIYdmlyZ2luaWFhbm51aXR5YWxlcnQuY29tght3d3cuYWxhYmFtYWFubnVpdHlh
bGVydC5jb22CG3d3dy5hcml6b25hYW5udWl0eWFsZXJ0LmNvbYIcd3d3LmFya2Fu
c2FzYW5udWl0eWFsZXJ0LmNvbYIed3d3LmNhbGlmb3JuaWFhbm51aXR5YWxlcnQu
Y29tght3d3cuZ2VvcmdpYWFubnVpdHlhbGVydC5jb22CGnd3dy5oYXdhaWlhbm51
aXR5YWxlcnQuY29tghp3d3cua2Fuc2FzYW5udWl0eWFsZXJ0LmNvbYIcd3d3Lm1h
cnlsYW5kYW5udWl0eWFsZXJ0LmNvbYIcd3d3Lm1pY2hpZ2FuYW5udWl0eWFsZXJ0
LmNvbYIdd3d3Lm1pbm5lc290YWFubnVpdHlhbGVydC5jb22CHHd3dy5taXNzb3Vy
aWFubnVpdHlhbGVydC5jb22CH3d3dy5uZXdjb2xvcmFkb2FubnVpdHlhbGVydC5j
b22CHXd3dy5uZXdqZXJzZXlhbm51aXR5YWxlcnQuY29tght3d3cubmV3eW9ya2Fu
bnVpdHlhbGVydC5jb22CIXd3dy5ub3J0aGNhcm9saW5hYW5udWl0eWFsZXJ0LmNv
bYIfd3d3Lm5vcnRoZGFrb3RhYW5udWl0eWFsZXJ0LmNvbYIgd3d3LnBlbm5zeWx2
YW5pYWFubnVpdHlhbGVydC5jb22CH3d3dy5yaG9kZWlzbGFuZGFubnVpdHlhbGVy
dC5jb22CIXd3dy5zb3V0aGNhcm9saW5hYW5udWl0eWFsZXJ0LmNvbYIad3d3LnRl
eGFzYW5udWl0eWFsZXJ0cy5jb22CGHd3dy51dGFoYW5udWl0eWFsZXJ0LmNvbYIc
d3d3LnZpcmdpbmlhYW5udWl0eWFsZXJ0LmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeB
DAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNh
dGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFu
ZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5
IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0G
CSqGSIb3DQEBCwUAA4IBAQAKtrV95M09wVXGaj2pMsQGqfvttP6rF3s0yeqcP0aO
UNtC1K5YpYq/ftXTxrt3lGnKB86k+zZVboqR/02YjwfEpzBLx5Su+ILkz/ONJD06
1bo+OkjRbrh1IR8PLryyy7e4t8z3BtaBGbS42efYmARMsbcfBNYDyrzz1gGpOFcd
z3+ek3Q9FYcU6J2JmPCmKxRazMRiZWWjGF1Ha8fbxvWOiqolkBJ5+Mzn9kyTUprt
DgfkcQaiUVJBJLGfq+vcTugj9bDECFrq5IVMQ4sAEbSCXZ7eIMWp+Dl0dLSwgtEt
kYrZz1FqIZQOdIYs2+0OGeutAkupp56/GByywIxKOkrk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJe3KUT3vAgZdOxtbv/+
4zp6J+Qcd3p1hlaRwmRK4tcFoo7+yKA42G2QB6UgOZMtILTS+14iSnkhabe7Qmf9
o32MtVpwZ2lXhlUkyVLWZMAly8TlIM6MA7VeMeFoUDKbhhmuXRA33CcNq2cVd0X1
MV243Yxh3Soqeu86FiiP/NpcriUsuqU5H4Bbt5c3XBU3U+p443LbIOi4QlKQAQte
a8217i5UO5SXpq+L7al1VFQYtWel50wOdzTqCKqJSc6PDrCwzLLJpUPJtxm3sLsY
fTs/Fvg1zShZn0wJbwH2hH0EBPMlvA2FIP07UV5AhP/cgZnk4kDGqHa/1VmkSBHq
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378521246444082553902115475501202685526144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-21 17:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-19 17:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.newyorkannuityalert.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23807615021931992494166039319728096475555581136878379360395832206553562839432686811533773312537592905284042670604875301594447096407577887980163767539286529395033100849667559712612587446589075142641184990586833136705678835832335266521916189888210954939688345030620246171284313618295803443350461554911456953354290140276566700646742567729890712552152770115508028512766377999081619353955975578005029589666308626463377081839480664233423389072207485396336484621783590057759419204079759813848461167713452451966468077212887831618758703887310158073050347869584597389828748217820237262477077475268877374095484582728678117599927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcce1bd0012f5f0b3302741a5288795e2b081793
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1295 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuity.frontporchsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiiannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marylandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouriannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcoloradoannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjerseyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdakotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodeislandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasannuityalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alabamaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiiannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansasannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michiganannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missouriannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcoloradoannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newjerseyannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northdakotaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsylvaniaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhodeislandannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcarolinaannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasannuityalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahannuityalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virginiaannuityalert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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