pat.acegasapsamga.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:79:37:b4:94:99:7e:79:78:c0:f7:6b:c6:cf:a7:64:aa was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pat.acegasapsamga.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:79:37:b4:94:99:7e:79:78:c0:f7:6b:c6:cf:a7:64:aa
Serial Number (int): 342825469315809227757960753445471636645034
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:7f:f0:38:6d:03:18:17:ed:73:b3:bc:31:21:b5:29:cb:2d:08:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:44:8f:e2:ac:d1:d4:e4:2f:9f:61:41:60:0a:0b:f9:34:7f:8d:30
Fingerprint (sha256): fc:db:16:d9:eb:05:fe:b1:d5:13:be:96:f8:1d:26:70:fd:34:ad:3a:a0:48:8d:c4:8a:60:98:02:c6:f7:da:a0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pat.acegasapsamga.it

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pat.acegasapsamga.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adventure.tyf.com
ammonia.3bz.co.uk
app.tryspecter.com
assetmanagement.genesis-tec.com
c4approval.converge-digital.com
check.ticketpay.de
client.lesbottes.ch
contractor.captivatesolutions.org
coty.asecca.co.uk
creditduediligence.polymathandboffinrems.com
db.weconnectminds.com
designer.captivatesolutions.org
grc.orangeoaks.nl
hosting.oblonet.cloud
inhus.dsst.lt
itbytesize.euvrg.com
kunden-portal.ccsys.de
login.aimloop.com
members.icssweep.co.uk
my.answerbee.co.uk
my.converge-digital.com
my.orgavoice.com
my.sixlinks.com
myapp.atelieruldeit.ro
neptune.rotarod.co.uk
nova.tutorsunited.org
partner.billyard.de
partnership.coherenze.com
pat.acegasapsamga.it
permissions.genesis-tec.com
portaal.damenshipleasefinance.nl
portal.avatarjo.co.uk
portal.bathpilates.co.uk
portal.damenshipleasefinance.nl
portal.ezireturns.com
portal.tonbridgedancefestival.co.uk
privacy.appzco.uk
richieste.acegasapsamga.it
rteapproval.converge-digital.com
select.converge-digital.com
signature.genesis-tec.com
ssioforms.euvrg.com
startersleavers.genesis-tec.com
tenders.dunstonbusinessvillage.com
trades.wineowners.com
tv3approval.converge-digital.com
v2.dieschrankhelden.de
vehiclechecks.genesis-tec.com
virtualvda.intelauto.co.uk
wanapptest.workapp.be
www.f2b2.org
www.fernoxwqt.com
www.isp-proof-of-concept.com
www.sovereigntesting.com
www.swaletesting.com
www.test.sencontrol.com
www.yfcmedlem.dk

Other certificates including the domain name acegasapsamga.it

(limited to 100 certificates)
nova.tutorsunited.org
nova.tutorsunited.org
*.acegasapsamga.it
planner.podmanagement.co.uk
acegasapsamga.it
www.miupdate.co.uk
v2.dieschrankhelden.de
servizionline.acegasapsamga.it
acegasapsamga.it
servizionline.acegasapsamga.it
www.f2b2.org
www.gruppohera.it
servizionline.acegasapsamga.it
adventure.tyf.com
sts.gruppohera.it
adventure.tyf.com
greeneco-air-gf.sunapps.fr
fieldservice.mango-solar.de
www.gruppohera.it
privacy.appzco.uk
sts.gruppohera.it
servizionline.acegasapsamga.it
select.converge-digital.com
*.acegasapsamga.it
sts.gruppohera.it
www.itvcreate.com
*.acegasapsamga.it
richieste.acegasapsamga.it
corpoapp.wast.fr
sts.gruppohera.it
adventure.tyf.com
servizionline.acegasapsamga.it
adventure.tyf.com
app.futurest8.co.za
www.gruppohera.it
check.ticketpay.de
nova.tutorsunited.org
sip.gruppohera.it
my.answerbee.co.uk
www.gruppohera.it
my.sixlinks.com
docenti.forema.it
wanapptest.workapp.be
*.acegasapsamga.it
select.converge-digital.com
nova.tutorsunited.org
sip.gruppohera.it
www.gruppohera.it
partnership.coherenze.com
portal.wakelake.sk
db.weconnectminds.com
sip.gruppohera.it
servizionline.acegasapsamga.it
nova.tutorsunited.org
portal.pleaseconnectme.co.uk
myapp.atelieruldeit.ro
nova.tutorsunited.org
login.aimloop.com
nova.tutorsunited.org
inhus.dsst.lt
adventure.tyf.com
complex2.propertydashboard.co.za
adventure.tyf.com
permissions.genesis-tec.com
sip.gruppohera.it
nova.tutorsunited.org
adventure.tyf.com
complex1.propertydashboard.co.za
portal.mmbb.be
grc.orangeoaks.nl
*.acegasapsamga.it
coty.asecca.co.uk
*.acegasapsamga.it
pat.acegasapsamga.it
virtualvda.intelauto.co.uk

Certificate

The complete raw certificate details for pat.acegasapsamga.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK7TCCCdWgAwIBAgISA+95N7SUmX55eMD3a8bPp2SqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDYxMjAwMjhaFw0y
MDAzMDUxMjAwMjhaMB8xHTAbBgNVBAMTFHBhdC5hY2VnYXNhcHNhbWdhLml0MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7beCF7ysfTGYiAWwnT6mr70w
1P6uzbyjMsj27nFR2jP2qYv9hcQ7dppx2A3wIsRfHBUr9BVUIZkZlll0yOMTE96w
cOWJf/YFD7k/jNIwZIBCtlygDkplJIqxKyIIBcwHyhWzBZQqaqA3InPmkJYhS4YS
nRtfx0L5lAI7lSmmHk7NCakx7M3BRC8AUZvwtyse3+XVLVnsgKjdrYa3eW2BP7RV
KzMjWX6AOnNYh0TSVesJJprgrErUu3ou2E7KbJoypXJ5qYCHIFZhvuU5BP7i0Jon
XN3x95/EtVeWFCUbABPK9bPyqDFrniYLxzo/YXE1lgiqRSPT6Okcy261zmStWQID
AQABo4IH9jCCB/IwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQjf/A4bQMYF+1zs7wx
IbUpyy0I/DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIIFqQYDVR0RBIIFoDCCBZyCEWFkdmVudHVyZS50eWYuY29tghFh
bW1vbmlhLjNiei5jby51a4ISYXBwLnRyeXNwZWN0ZXIuY29tgh9hc3NldG1hbmFn
ZW1lbnQuZ2VuZXNpcy10ZWMuY29tgh9jNGFwcHJvdmFsLmNvbnZlcmdlLWRpZ2l0
YWwuY29tghJjaGVjay50aWNrZXRwYXkuZGWCE2NsaWVudC5sZXNib3R0ZXMuY2iC
IWNvbnRyYWN0b3IuY2FwdGl2YXRlc29sdXRpb25zLm9yZ4IRY290eS5hc2VjY2Eu
Y28udWuCLGNyZWRpdGR1ZWRpbGlnZW5jZS5wb2x5bWF0aGFuZGJvZmZpbnJlbXMu
Y29tghVkYi53ZWNvbm5lY3RtaW5kcy5jb22CH2Rlc2lnbmVyLmNhcHRpdmF0ZXNv
bHV0aW9ucy5vcmeCEWdyYy5vcmFuZ2VvYWtzLm5sghVob3N0aW5nLm9ibG9uZXQu
Y2xvdWSCDWluaHVzLmRzc3QubHSCFGl0Ynl0ZXNpemUuZXV2cmcuY29tghZrdW5k
ZW4tcG9ydGFsLmNjc3lzLmRlghFsb2dpbi5haW1sb29wLmNvbYIWbWVtYmVycy5p
Y3Nzd2VlcC5jby51a4ISbXkuYW5zd2VyYmVlLmNvLnVrghdteS5jb252ZXJnZS1k
aWdpdGFsLmNvbYIQbXkub3JnYXZvaWNlLmNvbYIPbXkuc2l4bGlua3MuY29tghZt
eWFwcC5hdGVsaWVydWxkZWl0LnJvghVuZXB0dW5lLnJvdGFyb2QuY28udWuCFW5v
dmEudHV0b3JzdW5pdGVkLm9yZ4ITcGFydG5lci5iaWxseWFyZC5kZYIZcGFydG5l
cnNoaXAuY29oZXJlbnplLmNvbYIUcGF0LmFjZWdhc2Fwc2FtZ2EuaXSCG3Blcm1p
c3Npb25zLmdlbmVzaXMtdGVjLmNvbYIgcG9ydGFhbC5kYW1lbnNoaXBsZWFzZWZp
bmFuY2UubmyCFXBvcnRhbC5hdmF0YXJqby5jby51a4IYcG9ydGFsLmJhdGhwaWxh
dGVzLmNvLnVrgh9wb3J0YWwuZGFtZW5zaGlwbGVhc2VmaW5hbmNlLm5sghVwb3J0
YWwuZXppcmV0dXJucy5jb22CI3BvcnRhbC50b25icmlkZ2VkYW5jZWZlc3RpdmFs
LmNvLnVrghFwcml2YWN5LmFwcHpjby51a4IacmljaGllc3RlLmFjZWdhc2Fwc2Ft
Z2EuaXSCIHJ0ZWFwcHJvdmFsLmNvbnZlcmdlLWRpZ2l0YWwuY29tghtzZWxlY3Qu
Y29udmVyZ2UtZGlnaXRhbC5jb22CGXNpZ25hdHVyZS5nZW5lc2lzLXRlYy5jb22C
E3NzaW9mb3Jtcy5ldXZyZy5jb22CH3N0YXJ0ZXJzbGVhdmVycy5nZW5lc2lzLXRl
Yy5jb22CInRlbmRlcnMuZHVuc3RvbmJ1c2luZXNzdmlsbGFnZS5jb22CFXRyYWRl
cy53aW5lb3duZXJzLmNvbYIgdHYzYXBwcm92YWwuY29udmVyZ2UtZGlnaXRhbC5j
b22CFnYyLmRpZXNjaHJhbmtoZWxkZW4uZGWCHXZlaGljbGVjaGVja3MuZ2VuZXNp
cy10ZWMuY29tghp2aXJ0dWFsdmRhLmludGVsYXV0by5jby51a4IVd2FuYXBwdGVz
dC53b3JrYXBwLmJlggx3d3cuZjJiMi5vcmeCEXd3dy5mZXJub3h3cXQuY29tghx3
d3cuaXNwLXByb29mLW9mLWNvbmNlcHQuY29tghh3d3cuc292ZXJlaWdudGVzdGlu
Zy5jb22CFHd3dy5zd2FsZXRlc3RpbmcuY29tghd3d3cudGVzdC5zZW5jb250cm9s
LmNvbYIQd3d3LnlmY21lZGxlbS5kazBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AF6nc/nfVsDntTZIfdBJ4DJ6
kZoMhKESEoQYdZaBcUVYAAABbttMHZ8AAAQDAEcwRQIgV2SnMCr93nwHO+MdaPth
0gjvDDj8wYp4tXyV/vFI/wQCIQDZorXWS3p5IMMnGZZn1Y63w6WVd8XYB9YCLJPI
H9hwiwB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbttMHYwA
AAQDAEgwRgIhAKvgrlHwDBf+uLbrjF00gSgPpS49tmKA0ONyyTdWrrUOAiEAqJHH
q5usauWHjPWNs5oshL1VGjY0kit9lgpi87uh9cUwDQYJKoZIhvcNAQELBQADggEB
ABYolXQE+g43DI1pCOkuYginK1LzZWDTb00jLOvUB7Iv1FBx8pykF44gLy0DyfRD
WBzv3SxqpbBwekgn4vHlm1a8wdvz3VnTfnfmzDZbzZ6mtP+oB+ChGrDob5OCbb56
Ee2owoQr1eOIFck6iHiY7GDvT7wRZef9RHLBVJHGHIFxNZ8qXoMm8NlK5csmEBPS
ubN0BNYWNQCnjQn0/wBZn7VX3cuBJ22qIk4fckNaDMcpCCcnWCJOU6b45p1CUklM
1mjmgOi+5Eqh8WqIVPoRXuQuCUWKDrDVGl6n2nxsFlBthobrSDexMpp8d1bWBpjm
vwgPly7kB5LKSrk94ZutUp4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7beCF7ysfTGYiAWwnT6m
r70w1P6uzbyjMsj27nFR2jP2qYv9hcQ7dppx2A3wIsRfHBUr9BVUIZkZlll0yOMT
E96wcOWJf/YFD7k/jNIwZIBCtlygDkplJIqxKyIIBcwHyhWzBZQqaqA3InPmkJYh
S4YSnRtfx0L5lAI7lSmmHk7NCakx7M3BRC8AUZvwtyse3+XVLVnsgKjdrYa3eW2B
P7RVKzMjWX6AOnNYh0TSVesJJprgrErUu3ou2E7KbJoypXJ5qYCHIFZhvuU5BP7i
0JonXN3x95/EtVeWFCUbABPK9bPyqDFrniYLxzo/YXE1lgiqRSPT6Okcy261zmSt
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342825469315809227757960753445471636645034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 12:00:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 12:00:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pat.acegasapsamga.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30008969530554677319159480628939812782860365128208973269734190806722478165142709804405045973894685679900785950687692012742423733980598140473877924323791790222302693363856922614270476027024789496496807636983522187174344681495110537187289302324238767004565306844289055825786801742409990229806240042762959986799321998918346887981694599892193724824429052983200442026739736155151818983423526099548478804434218751629239441884505991959546123496944703854842407212704627673619363159076066240433097860631777015551371765672944522477448306561794415581984661078189799795796747278935828537130232102625416211459243142759699863350617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							237ff0386d031817ed73b3bc3121b529cb2d08fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventure.tyf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammonia.3bz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tryspecter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4approval.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'check.ticketpay.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.lesbottes.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractor.captivatesolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coty.asecca.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditduediligence.polymathandboffinrems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.weconnectminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designer.captivatesolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grc.orangeoaks.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.oblonet.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inhus.dsst.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itbytesize.euvrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunden-portal.ccsys.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aimloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.icssweep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.answerbee.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.orgavoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.sixlinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapp.atelieruldeit.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neptune.rotarod.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nova.tutorsunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.billyard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnership.coherenze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.acegasapsamga.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permissions.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaal.damenshipleasefinance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.avatarjo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bathpilates.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.damenshipleasefinance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ezireturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.tonbridgedancefestival.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.appzco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richieste.acegasapsamga.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rteapproval.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'select.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssioforms.euvrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startersleavers.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenders.dunstonbusinessvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trades.wineowners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv3approval.converge-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.dieschrankhelden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiclechecks.genesis-tec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualvda.intelauto.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanapptest.workapp.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f2b2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fernoxwqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isp-proof-of-concept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sovereigntesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swaletesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.sencontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yfcmedlem.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016edb4c1d9f000004030047304502205764a7302afdde7c073be31d68fb61d208ef0c38fcc18a78b57c95fef148ff04022100d9a2b5d64b7a7920c327199667d58eb7c3a59577c5d807d6022c93c81fd8708b007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016edb4c1d8c0000040300483046022100abe0ae51f00c17feb8b6eb8c5d3481280fa52e3db66280d0e372c93756aeb50e022100a891c7ab9bac6ae5878cf58db39a2c84bd551a3634922b7d960a62f3bba1f5c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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