underwatersurveys.org

Issued by R3

About this certificate

This digital certificate with serial number 04:81:25:36:bb:1c:e5:27:f7:c5:74:a0:e4:32:4f:3b:e8:df was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=underwatersurveys.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:81:25:36:bb:1c:e5:27:f7:c5:74:a0:e4:32:4f:3b:e8:df
Serial Number (int): 392395034674816355959945061418024459561183
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: df:d7:25:84:25:3f:5a:26:56:f2:d8:61:81:2e:7c:9d:ed:4c:2d:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:b6:c5:6a:07:56:1d:18:8d:a2:2f:30:b8:0f:9d:18:eb:63:cc:fe
Fingerprint (sha256): 00:25:05:ec:cb:52:1e:e3:0e:1e:5b:02:0e:41:a7:12:ef:0f:b0:c2:c3:c0:1d:d7:45:66:32:cc:2f:0b:06:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate underwatersurveys.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for underwatersurveys.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

28radio.com
absroller.org
algorithmdeveloper.net
angolaenergy.org
arttomsk.com
bitcoinagence.org
brazillivetv.com
caymanhouses.com
chainelectrical.com
chinaafricadevelopmentfund.org
connaisance.org
deeplearningguide.com
delhiorganic.com
dresdenfinance.com
energydelhi.com
energykarachi.com
entertainmind.com
eximprivatebank.com
footballfinance.org
fresnostudio.com
gayanatural.com
generateelectricity.net
grupobitcoinfinance.com
heavytransportship.com
hollywoodrevolution.org
illinoisconference.com
impactsociety.net
insuranceafrica.org
jazzmusicians.org
kazakhstanrepublic.com
moscowpicture.com
mythicalheroes.org
nighttrade.org
offshoreingenuity.org
paleolithicage.org
palosverdespreschool.com
performinghiphop.com
portcapacity.net
punjabiconference.com
rigoffshore.com
screeningblock.com
sexismandthecity.net
sexisminthecity.net
theilliad.org
togodefi.com
troypreschool.com
underseamining.org
underwatersurveys.org
vietnamlivetv.com
www.28radio.com
www.absroller.org
www.artistpublicity.net
www.arttomsk.com
www.bangaloreoffshore.com
www.brazillivetv.com
www.caymanhouses.com
www.chinaafricadevelopmentfund.org
www.connaisance.org
www.continentalleasing.org
www.copyrightcinema.com
www.deeplearningguide.com
www.delhiorganic.com
www.dieselengine.com
www.edmontonstudio.com
www.energydelhi.com
www.energykarachi.com
www.exchangechennai.com
www.eximprivatebank.com
www.footballfinance.org
www.gayanatural.com
www.generateelectricity.net
www.heavytransportship.com
www.hellenicshipbrokers.org
www.hollywoodrevolution.org
www.hotmaharashtra.com
www.illinoisconference.com
www.impactsociety.net
www.insuranceafrica.org
www.jazzmusicians.org
www.landesbankgirozentrale.org
www.movieworldguide.com
www.mythicalheroes.org
www.newsphoenix.org
www.offshoreingenuity.org
www.paleolithicage.org
www.palosverdespreschool.com
www.performinghiphop.com
www.portcapacity.net
www.punjabiconference.com
www.sanjuanfinance.com
www.screeningblock.com
www.sexismandthecity.net
www.sexisminthecity.net
www.theilliad.org
www.togodefi.com
www.troypreschool.com
www.undergroundfrance.com
www.underseamining.org
www.vietnamlivetv.com
www.writingfinance.com

Other certificates including the domain name underwatersurveys.org

(limited to 100 certificates)
underwatersurveys.org
palosverdespreschool.com
www.gregchat.org
www.incombat.org
www.performinghiphop.com
www.copyrightcinema.com
deeplearningguide.com
changeisgreat.org
www.writingfinance.com
changeisgreat.org
theilliad.org
www.makechat.org
recordedat.org
www.sachat.org
changeisgreat.org
www.wastekazakhstan.com
www.dieselengine.com
changeisgreat.org
photo-chat.org
radiolatino.com
sergeidiaghilev.org
www.lagoslaw.net
www.makechat.org
www.reggaechat.org
www.gregchat.org
boogiewoogiebugleboys.org
www.shahjahlegal.org
troypreschool.com
underwatersurveys.org
www.offshoremininglicence.com
www.love-chat.org
www.blackworldaward.com
tokenizedcarbonfinance.org
www.chinacharisma.com
www.drilled.org
www.arabworldclub.com
www.dieselengine.com
wn-chat.org
congotravelguide.com
www.dieselengine.com
changeisgreat.org
carlicahnbuys.org
berlinboerse.com
underwatersurveys.org
sergeidiaghilev.org
loajanan.com
www.dieselengine.com
revolutionwholefood.com
sachat.org

Certificate

The complete raw certificate details for underwatersurveys.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINnzCCDIegAwIBAgISBIElNrsc5Sf3xXSg5DJPO+jfMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDYxMTMzMTlaFw0yNDA1MDYxMTMzMThaMCAxHjAcBgNVBAMT
FXVuZGVyd2F0ZXJzdXJ2ZXlzLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALAPZlWBuDk+4QmdB1oC5jglscYBoQ0sw21UPYXJPO03WkTzUPUyd5Qd
//0kjmzK4IKLcRh66mvOPML6pELQz3YzPQJQOzYs8e5bjVmNcYBWitCKzv/r7qHY
cUae1zkQzwbCwqEDhR49/ayxGL/4m/KGgxTIBflKwFh8NGhJ3dfcnHtmNLOj8m2b
T2asZjRdO3r7Bc3u6YlDokYUwDClRpDa3Q1G/Ls+c1DucRjn2Oxj6gcF1BwylPUb
R1i57UdSDcOab50aF92apb+XzVycX1HiGkNjHRJiNzp5VaXfaQqQnm/noCt2Ohfc
Rq662QX/P6aGL+FhIdPErre0eVRTWMUCAwEAAaOCCr8wggq7MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQU39clhCU/WiZW8thhgS58ne1MLcswHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wggjGBgNVHREEggi9MIIIuYILMjhyYWRpby5jb22CDWFic3JvbGxl
ci5vcmeCFmFsZ29yaXRobWRldmVsb3Blci5uZXSCEGFuZ29sYWVuZXJneS5vcmeC
DGFydHRvbXNrLmNvbYIRYml0Y29pbmFnZW5jZS5vcmeCEGJyYXppbGxpdmV0di5j
b22CEGNheW1hbmhvdXNlcy5jb22CE2NoYWluZWxlY3RyaWNhbC5jb22CHmNoaW5h
YWZyaWNhZGV2ZWxvcG1lbnRmdW5kLm9yZ4IPY29ubmFpc2FuY2Uub3JnghVkZWVw
bGVhcm5pbmdndWlkZS5jb22CEGRlbGhpb3JnYW5pYy5jb22CEmRyZXNkZW5maW5h
bmNlLmNvbYIPZW5lcmd5ZGVsaGkuY29tghFlbmVyZ3lrYXJhY2hpLmNvbYIRZW50
ZXJ0YWlubWluZC5jb22CE2V4aW1wcml2YXRlYmFuay5jb22CE2Zvb3RiYWxsZmlu
YW5jZS5vcmeCEGZyZXNub3N0dWRpby5jb22CD2dheWFuYXR1cmFsLmNvbYIXZ2Vu
ZXJhdGVlbGVjdHJpY2l0eS5uZXSCF2dydXBvYml0Y29pbmZpbmFuY2UuY29tghZo
ZWF2eXRyYW5zcG9ydHNoaXAuY29tghdob2xseXdvb2RyZXZvbHV0aW9uLm9yZ4IW
aWxsaW5vaXNjb25mZXJlbmNlLmNvbYIRaW1wYWN0c29jaWV0eS5uZXSCE2luc3Vy
YW5jZWFmcmljYS5vcmeCEWphenptdXNpY2lhbnMub3JnghZrYXpha2hzdGFucmVw
dWJsaWMuY29tghFtb3Njb3dwaWN0dXJlLmNvbYISbXl0aGljYWxoZXJvZXMub3Jn
gg5uaWdodHRyYWRlLm9yZ4IVb2Zmc2hvcmVpbmdlbnVpdHkub3JnghJwYWxlb2xp
dGhpY2FnZS5vcmeCGHBhbG9zdmVyZGVzcHJlc2Nob29sLmNvbYIUcGVyZm9ybWlu
Z2hpcGhvcC5jb22CEHBvcnRjYXBhY2l0eS5uZXSCFXB1bmphYmljb25mZXJlbmNl
LmNvbYIPcmlnb2Zmc2hvcmUuY29tghJzY3JlZW5pbmdibG9jay5jb22CFHNleGlz
bWFuZHRoZWNpdHkubmV0ghNzZXhpc21pbnRoZWNpdHkubmV0gg10aGVpbGxpYWQu
b3Jnggx0b2dvZGVmaS5jb22CEXRyb3lwcmVzY2hvb2wuY29tghJ1bmRlcnNlYW1p
bmluZy5vcmeCFXVuZGVyd2F0ZXJzdXJ2ZXlzLm9yZ4IRdmlldG5hbWxpdmV0di5j
b22CD3d3dy4yOHJhZGlvLmNvbYIRd3d3LmFic3JvbGxlci5vcmeCF3d3dy5hcnRp
c3RwdWJsaWNpdHkubmV0ghB3d3cuYXJ0dG9tc2suY29tghl3d3cuYmFuZ2Fsb3Jl
b2Zmc2hvcmUuY29tghR3d3cuYnJhemlsbGl2ZXR2LmNvbYIUd3d3LmNheW1hbmhv
dXNlcy5jb22CInd3dy5jaGluYWFmcmljYWRldmVsb3BtZW50ZnVuZC5vcmeCE3d3
dy5jb25uYWlzYW5jZS5vcmeCGnd3dy5jb250aW5lbnRhbGxlYXNpbmcub3Jnghd3
d3cuY29weXJpZ2h0Y2luZW1hLmNvbYIZd3d3LmRlZXBsZWFybmluZ2d1aWRlLmNv
bYIUd3d3LmRlbGhpb3JnYW5pYy5jb22CFHd3dy5kaWVzZWxlbmdpbmUuY29tghZ3
d3cuZWRtb250b25zdHVkaW8uY29tghN3d3cuZW5lcmd5ZGVsaGkuY29tghV3d3cu
ZW5lcmd5a2FyYWNoaS5jb22CF3d3dy5leGNoYW5nZWNoZW5uYWkuY29tghd3d3cu
ZXhpbXByaXZhdGViYW5rLmNvbYIXd3d3LmZvb3RiYWxsZmluYW5jZS5vcmeCE3d3
dy5nYXlhbmF0dXJhbC5jb22CG3d3dy5nZW5lcmF0ZWVsZWN0cmljaXR5Lm5ldIIa
d3d3LmhlYXZ5dHJhbnNwb3J0c2hpcC5jb22CG3d3dy5oZWxsZW5pY3NoaXBicm9r
ZXJzLm9yZ4Ibd3d3LmhvbGx5d29vZHJldm9sdXRpb24ub3JnghZ3d3cuaG90bWFo
YXJhc2h0cmEuY29tghp3d3cuaWxsaW5vaXNjb25mZXJlbmNlLmNvbYIVd3d3Lmlt
cGFjdHNvY2lldHkubmV0ghd3d3cuaW5zdXJhbmNlYWZyaWNhLm9yZ4IVd3d3Lmph
enptdXNpY2lhbnMub3Jngh53d3cubGFuZGVzYmFua2dpcm96ZW50cmFsZS5vcmeC
F3d3dy5tb3ZpZXdvcmxkZ3VpZGUuY29tghZ3d3cubXl0aGljYWxoZXJvZXMub3Jn
ghN3d3cubmV3c3Bob2VuaXgub3Jnghl3d3cub2Zmc2hvcmVpbmdlbnVpdHkub3Jn
ghZ3d3cucGFsZW9saXRoaWNhZ2Uub3Jnghx3d3cucGFsb3N2ZXJkZXNwcmVzY2hv
b2wuY29tghh3d3cucGVyZm9ybWluZ2hpcGhvcC5jb22CFHd3dy5wb3J0Y2FwYWNp
dHkubmV0ghl3d3cucHVuamFiaWNvbmZlcmVuY2UuY29tghZ3d3cuc2FuanVhbmZp
bmFuY2UuY29tghZ3d3cuc2NyZWVuaW5nYmxvY2suY29tghh3d3cuc2V4aXNtYW5k
dGhlY2l0eS5uZXSCF3d3dy5zZXhpc21pbnRoZWNpdHkubmV0ghF3d3cudGhlaWxs
aWFkLm9yZ4IQd3d3LnRvZ29kZWZpLmNvbYIVd3d3LnRyb3lwcmVzY2hvb2wuY29t
ghl3d3cudW5kZXJncm91bmRmcmFuY2UuY29tghZ3d3cudW5kZXJzZWFtaW5pbmcu
b3JnghV3d3cudmlldG5hbWxpdmV0di5jb22CFnd3dy53cml0aW5nZmluYW5jZS5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY1+aJb5AAAEAwBI
MEYCIQDX/M1tkRP8osT7C8X3fbIKJjtEqhW2oZRCN+0kNj0NbAIhAIAex6zOkId5
zu2963AZKC3jIZbpa/i4UcFVnfuI85jRAHUAouK/1h7eLy8HoNZObTen3GVDsMa1
LqLat4r4mm31F9gAAAGNfmiW9AAABAMARjBEAiATsDTYqaxAyfkG1omUa4Bdu/5E
wcloTnLFoGdYxbnElQIgEqBUzs683qB1USdERgEcaELobE1JfNUkPsqaUQxUddAw
DQYJKoZIhvcNAQELBQADggEBAIu41uiT4ab1/dgdVe3ytB90a8X1gCkp/d001WwP
IrGpHwcJXO3Gh2OLO+BC/O4QOxr/Sc+PblY3bqceSQeh5DXyUh9hlCiBzN6m4X5w
uq+kLUHFT6kD4xsms8l44NrkXpmWetBqlIO5lG7cy8NhkMfMV/5x94nCA50cehVF
SAuFD8lJCCcICxmWoVKXX1yabW2z5382x/vzah2ZqPoJg9sVpAW8xFZQOJqmL/6n
I/IR/OJ2Vic8k+ScL31X8Q96dK0LWaDN1ca65k4ca4gkLsorH0v/n+pXPZ1xtdcq
YwVLFak1t57182uP+UZIRQtucHivhV7EoGtCRAkEvCrs2AU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA9mVYG4OT7hCZ0HWgLm
OCWxxgGhDSzDbVQ9hck87TdaRPNQ9TJ3lB3//SSObMrggotxGHrqa848wvqkQtDP
djM9AlA7Nizx7luNWY1xgFaK0IrO/+vuodhxRp7XORDPBsLCoQOFHj39rLEYv/ib
8oaDFMgF+UrAWHw0aEnd19yce2Y0s6PybZtPZqxmNF07evsFze7piUOiRhTAMKVG
kNrdDUb8uz5zUO5xGOfY7GPqBwXUHDKU9RtHWLntR1INw5pvnRoX3Zqlv5fNXJxf
UeIaQ2MdEmI3OnlVpd9pCpCeb+egK3Y6F9xGrrrZBf8/poYv4WEh08Sut7R5VFNY
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392395034674816355959945061418024459561183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 11:33:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 11:33:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'underwatersurveys.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22225535569947795822951142799712112108404320179635198849030555003426955977597108083574546420211221947036308381896131993664923708467636283394972916490840677688735385452923660040614582463230321993174764590075146335588797981191465131975757466804510242046270164193240365237722213451636876440502586892787562080827074915653736622077791258716749965012427871710820108452314676865559116782886196284267969231765048339686509663302926901317925532078794421044396036330807406284284245582634854845484443520211189334935325509650577744383132030429323210849344535746033094256911980225223563572873166843657555748635356991354299737135301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfd72584253f5a2656f2d861812e7c9ded4c2dcb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '28radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absroller.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algorithmdeveloper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angolaenergy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arttomsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinagence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazillivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caymanhouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chainelectrical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaafricadevelopmentfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connaisance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplearningguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delhiorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresdenfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energydelhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energykarachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eximprivatebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnostudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayanatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generateelectricity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupobitcoinfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavytransportship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywoodrevolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impactsociety.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzmusicians.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazakhstanrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moscowpicture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythicalheroes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nighttrade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreingenuity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleolithicage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palosverdespreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performinghiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portcapacity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punjabiconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screeningblock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexismandthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexisminthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theilliad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togodefi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troypreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underseamining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwatersurveys.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnamlivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absroller.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artistpublicity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arttomsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bangaloreoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazillivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caymanhouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaafricadevelopmentfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connaisance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.continentalleasing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copyrightcinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deeplearningguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delhiorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dieselengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edmontonstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energydelhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energykarachi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchangechennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eximprivatebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gayanatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generateelectricity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heavytransportship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellenicshipbrokers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollywoodrevolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotmaharashtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illinoisconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impactsociety.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insuranceafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jazzmusicians.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landesbankgirozentrale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movieworldguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mythicalheroes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsphoenix.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoreingenuity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paleolithicage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palosverdespreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performinghiphop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portcapacity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punjabiconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.screeningblock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexismandthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexisminthecity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theilliad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togodefi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.troypreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undergroundfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.underseamining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnamlivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writingfinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7e6896f90000040300483046022100d7fccd6d9113fca2c4fb0bc5f77db20a263b44aa15b6a1944237ed24363d0d6c022100801ec7acce908779ceedbdeb7019282de32196e96bf8b851c1559dfb88f398d1007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d7e6896f40000040300463044022013b034d8a9ac40c9f906d689946b805dbbfe44c1c9684e72c5a06758c5b9c495022012a054cecebcdea07551274446011c6842e86c4d497cd5243eca9a510c5475d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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