bayridgeequestrian.org

Issued by R3

About this certificate

This digital certificate with serial number 04:f6:04:e6:3d:3e:e5:a7:5c:66:8a:88:35:dc:82:5e:9a:19 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bayridgeequestrian.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:04:e6:3d:3e:e5:a7:5c:66:8a:88:35:dc:82:5e:9a:19
Serial Number (int): 432165118372062657565178443743455671654937
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c1:7d:c9:c8:f6:9c:78:ab:92:b8:b7:24:8a:c9:09:b6:b8:7c:41:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:9b:95:c0:d0:0f:20:21:b9:6d:e2:00:ce:f9:61:0d:bf:26:4d:63
Fingerprint (sha256): 03:12:f7:36:f0:88:95:92:f2:15:e7:4e:3e:1e:fa:86:e5:ff:58:17:8b:a6:bb:fc:71:a6:d8:d2:4a:31:4d:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bayridgeequestrian.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bayridgeequestrian.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4chwn.co
*.acca-family.com
*.amdbet99.me
*.aships.co
*.bayridgeequestrian.org
*.byhkbook.com
*.chat2night.com
*.cibeindia.com
*.ckmm.club
*.columbiaiceskatingpark.com
*.comsquarespace.com
*.deafnow-bg.org
*.directorycup.com
*.drivinglicenseindia.org
*.fernandoalonso.us
*.fixmie.com
*.gefitnessup.com
*.googlefile.com
*.hennyhq.com
*.hugemortgages.com
*.iphonetopic.com
*.its-time.me
*.joinaspa.com
*.kylepetty.net
*.lensavers.com
*.lochaberfarmshop.com
*.maggieboxey.com
*.metaliteind.com
*.opgani12.co
*.over60datingonline.com
*.panendeism.org
*.qhealthandwellness.com
*.rakkodoblog.com
*.regifa.com
*.renewspachicago.com
*.reverendojoaobatista.com
*.seifee.biz
*.sethsventura.com
*.siempredelgada.com
*.silverelectricca.com
*.studyofplace.info
*.torbaskorzana.pl
*.trancendentreportto-glancetoday.info
*.urbanduka.com
*.wandasbargainbarn.com
*.wsdsb.net
*.wtflivetv.com
*.wwworegonlive.com
*.zbitr.co
4chwn.co
acca-family.com
amdbet99.me
aships.co
bayridgeequestrian.org
byhkbook.com
chat2night.com
cibeindia.com
ckmm.club
columbiaiceskatingpark.com
comsquarespace.com
deafnow-bg.org
directorycup.com
drivinglicenseindia.org
fernandoalonso.us
fixmie.com
gefitnessup.com
googlefile.com
hennyhq.com
hugemortgages.com
iphonetopic.com
its-time.me
joinaspa.com
kylepetty.net
lensavers.com
lochaberfarmshop.com
maggieboxey.com
metaliteind.com
opgani12.co
over60datingonline.com
panendeism.org
qhealthandwellness.com
rakkodoblog.com
regifa.com
renewspachicago.com
reverendojoaobatista.com
seifee.biz
sethsventura.com
siempredelgada.com
silverelectricca.com
studyofplace.info
torbaskorzana.pl
trancendentreportto-glancetoday.info
urbanduka.com
wandasbargainbarn.com
wsdsb.net
wtflivetv.com
wwworegonlive.com
zbitr.co

Other certificates including the domain name bayridgeequestrian.org

(limited to 100 certificates)
bayridgeequestrian.org
rentalblog.com
bayridgeequestrian.org
rydel-seiffer-stimmgabel.de
bindegewebsentzuendung.de
rentalblog.com
bayridgeequestrian.org

Certificate

The complete raw certificate details for bayridgeequestrian.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM/TCCC+WgAwIBAgISBPYE5j0+5adcZoqINdyCXpoZMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTQxODEyNTRaFw0yNDAyMTIxODEyNTNaMCExHzAdBgNVBAMT
FmJheXJpZGdlZXF1ZXN0cmlhbi5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQDN6UJ2FPd5RxWD+5yw5+xn/nHAeow007TcB3LYTsQlLpxAa9Ybk5rj
uia7OawacSqsH+kIqUyiMOdmCg4S2HKoc0eILjD9mghDMiLbwlboeRYDveD0NGNs
BhYKUzem+9hDpqoJUEtSR5a2QrZE9w1NtYRDa5sPUpXfcZ93cexuxBNKwfVbjqQf
z8snDp4T6hziUKH47+1D2AMUSEbRN8M2vpgIBJqC4699tPzTn1SWG/LL6p8I3PJK
vna6UqkpnjI7Iwx++Y+CAQasXhHmtq55Kth4uy4/Ym8rCvPjG+qqHQrnrDgbvSWe
uFSmkLyOVrI+NiKdHDlypE0oScshxXjSZOM3QGu4iaj89oEOH2bH3GQlDwFeTa85
LHw9wjWjqu1NWdzkZ4I8cKFPvJNH/Y/L0/eGiYval07lYH91/VYdFUPdffLdG9kA
mgGyV3EROKt6rrpcwx0HxO0UXcGgdrjnHy6h4ZHKu+pv9edZVTCVGTLTJP2m82gK
suvNDpuopNQDN0ppGoUC3R7SbqK09PGXr4tNK+51Z/kafhPdKobgD72cdZQwcVUA
kdeZVoOHYhx5PJ42AUO8uu7jnUj+f9fHzjgasJVV2xvJPD0BROtXjIrOlAug3pHK
GP2+5NS/dUCd/RGLjTot/M/Zuy+zjYKnIQ3oWsGh8wB8a2B1BzIOAwIDAQABo4IJ
HDCCCRgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTBfcnI9px4q5K4tySKyQm2uHxB
PTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ
MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw
AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCByEGA1UdEQSCBxgwggcUggoqLjRj
aHduLmNvghEqLmFjY2EtZmFtaWx5LmNvbYINKi5hbWRiZXQ5OS5tZYILKi5hc2hp
cHMuY2+CGCouYmF5cmlkZ2VlcXVlc3RyaWFuLm9yZ4IOKi5ieWhrYm9vay5jb22C
ECouY2hhdDJuaWdodC5jb22CDyouY2liZWluZGlhLmNvbYILKi5ja21tLmNsdWKC
HCouY29sdW1iaWFpY2Vza2F0aW5ncGFyay5jb22CFCouY29tc3F1YXJlc3BhY2Uu
Y29tghAqLmRlYWZub3ctYmcub3JnghIqLmRpcmVjdG9yeWN1cC5jb22CGSouZHJp
dmluZ2xpY2Vuc2VpbmRpYS5vcmeCEyouZmVybmFuZG9hbG9uc28udXOCDCouZml4
bWllLmNvbYIRKi5nZWZpdG5lc3N1cC5jb22CECouZ29vZ2xlZmlsZS5jb22CDSou
aGVubnlocS5jb22CEyouaHVnZW1vcnRnYWdlcy5jb22CESouaXBob25ldG9waWMu
Y29tgg0qLml0cy10aW1lLm1lgg4qLmpvaW5hc3BhLmNvbYIPKi5reWxlcGV0dHku
bmV0gg8qLmxlbnNhdmVycy5jb22CFioubG9jaGFiZXJmYXJtc2hvcC5jb22CESou
bWFnZ2llYm94ZXkuY29tghEqLm1ldGFsaXRlaW5kLmNvbYINKi5vcGdhbmkxMi5j
b4IYKi5vdmVyNjBkYXRpbmdvbmxpbmUuY29tghAqLnBhbmVuZGVpc20ub3Jnghgq
LnFoZWFsdGhhbmR3ZWxsbmVzcy5jb22CESoucmFra29kb2Jsb2cuY29tggwqLnJl
Z2lmYS5jb22CFSoucmVuZXdzcGFjaGljYWdvLmNvbYIaKi5yZXZlcmVuZG9qb2Fv
YmF0aXN0YS5jb22CDCouc2VpZmVlLmJpeoISKi5zZXRoc3ZlbnR1cmEuY29tghQq
LnNpZW1wcmVkZWxnYWRhLmNvbYIWKi5zaWx2ZXJlbGVjdHJpY2NhLmNvbYITKi5z
dHVkeW9mcGxhY2UuaW5mb4ISKi50b3JiYXNrb3J6YW5hLnBsgiYqLnRyYW5jZW5k
ZW50cmVwb3J0dG8tZ2xhbmNldG9kYXkuaW5mb4IPKi51cmJhbmR1a2EuY29tghcq
LndhbmRhc2JhcmdhaW5iYXJuLmNvbYILKi53c2RzYi5uZXSCDyoud3RmbGl2ZXR2
LmNvbYITKi53d3dvcmVnb25saXZlLmNvbYIKKi56Yml0ci5jb4IINGNod24uY2+C
D2FjY2EtZmFtaWx5LmNvbYILYW1kYmV0OTkubWWCCWFzaGlwcy5jb4IWYmF5cmlk
Z2VlcXVlc3RyaWFuLm9yZ4IMYnloa2Jvb2suY29tgg5jaGF0Mm5pZ2h0LmNvbYIN
Y2liZWluZGlhLmNvbYIJY2ttbS5jbHVighpjb2x1bWJpYWljZXNrYXRpbmdwYXJr
LmNvbYISY29tc3F1YXJlc3BhY2UuY29tgg5kZWFmbm93LWJnLm9yZ4IQZGlyZWN0
b3J5Y3VwLmNvbYIXZHJpdmluZ2xpY2Vuc2VpbmRpYS5vcmeCEWZlcm5hbmRvYWxv
bnNvLnVzggpmaXhtaWUuY29tgg9nZWZpdG5lc3N1cC5jb22CDmdvb2dsZWZpbGUu
Y29tggtoZW5ueWhxLmNvbYIRaHVnZW1vcnRnYWdlcy5jb22CD2lwaG9uZXRvcGlj
LmNvbYILaXRzLXRpbWUubWWCDGpvaW5hc3BhLmNvbYINa3lsZXBldHR5Lm5ldIIN
bGVuc2F2ZXJzLmNvbYIUbG9jaGFiZXJmYXJtc2hvcC5jb22CD21hZ2dpZWJveGV5
LmNvbYIPbWV0YWxpdGVpbmQuY29tggtvcGdhbmkxMi5jb4IWb3ZlcjYwZGF0aW5n
b25saW5lLmNvbYIOcGFuZW5kZWlzbS5vcmeCFnFoZWFsdGhhbmR3ZWxsbmVzcy5j
b22CD3Jha2tvZG9ibG9nLmNvbYIKcmVnaWZhLmNvbYITcmVuZXdzcGFjaGljYWdv
LmNvbYIYcmV2ZXJlbmRvam9hb2JhdGlzdGEuY29tggpzZWlmZWUuYml6ghBzZXRo
c3ZlbnR1cmEuY29tghJzaWVtcHJlZGVsZ2FkYS5jb22CFHNpbHZlcmVsZWN0cmlj
Y2EuY29tghFzdHVkeW9mcGxhY2UuaW5mb4IQdG9yYmFza29yemFuYS5wbIIkdHJh
bmNlbmRlbnRyZXBvcnR0by1nbGFuY2V0b2RheS5pbmZvgg11cmJhbmR1a2EuY29t
ghV3YW5kYXNiYXJnYWluYmFybi5jb22CCXdzZHNiLm5ldIINd3RmbGl2ZXR2LmNv
bYIRd3d3b3JlZ29ubGl2ZS5jb22CCHpiaXRyLmNvMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAO1N3dT4tuYBOizBbBv5AO2fY
T8P0x70ADS1yb+H61BcAAAGLz0A4EgAABAMASDBGAiEAovqdXBOjLesyKFwV/piY
DJHDq/612Uj/HYv9N/tzzCkCIQCFZ28o/WkztdHZ3USr8zxhGUfSIDW478ItDoFz
zHcYuwB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi89AOFAA
AAQDAEgwRgIhAJn/Ep0pVvS6UYC1WAI5+ZE+63cqLum9ABPuky2odZPeAiEA9+8R
LIZvtYwvAeXySc34XJDV/24TznwVDDuQ3vWd6JcwDQYJKoZIhvcNAQELBQADggEB
AK/woXk6TvMXl3XhAsGgf9UBaZv6rVz1Cpf3ytYCVj6gD84hfRF4o41Dk/hNBH4z
EybJnpXXWDR87WxBnAy856rkALYxIzB15cSl/lpJQ59ZB3lek6OiXJ3FCQOZD6cM
jwzeum688ZtfnMV4SoS1sxvFlTDR8nxLSxuqgo0xWvNFgCguJJaoeITGdegM16mq
dyoUxunBoPx3E3r769rbL90loBbB2asqFB8GRK1+C7efUsy5aULil5AFuIPZS0Yg
yyDKl12pEFgUeRR49vpGAkYJ+qc1cdwfIWvrV4kAtKd4g9qgZtRzHBzvpIBkr0Df
RuWgxh0VbL1NTwcP/OjHVZc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432165118372062657565178443743455671654937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 18:12:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 18:12:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bayridgeequestrian.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840044284732149058785260426333994546529890366144778880866075374903534410340783167977190904564321217458894406861638997202921961827805801202233748383797040972627576547804061597878271308408833612713682696402246267970554511801033042071511432075822287268666741269935506075077121524689016896168304624952291109953484051351919939878036678489509262602893790724897355481500562840344038392669094340229212906971642719814158662614198572816071005381869761192208991243589980115773971310446507809421722323049220120769971623913381638290214598806018160513593169619312915051279526746240479702771751029925313592683075304472620371390101153261642152520439685918132011120812196736772486696553895494088713343966031708456039849037941126685747709607851242973999332595344234093700802131188661467590660418231201569288178819759487877385230209204290363687050563718080273668617252411601644374995480847260681712518741141124549712644821934497518646653618487685644237923513365692504269517265609233190292590117813481317553151745140892613552203267369075875378227101389830588085839341945158822018628569591328045117294986528295010283923012250455613863633188703568439130351019009418864472387654723619756690029458616745639526861871212030767429128337521286050984791207185923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c17dc9c8f69c78ab92b8b7248ac909b6b87c413d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1816 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4chwn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acca-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amdbet99.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aships.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayridgeequestrian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byhkbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chat2night.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cibeindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ckmm.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiaiceskatingpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comsquarespace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deafnow-bg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directorycup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drivinglicenseindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fernandoalonso.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixmie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gefitnessup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googlefile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hennyhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hugemortgages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iphonetopic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.its-time.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joinaspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kylepetty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lensavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lochaberfarmshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maggieboxey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metaliteind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opgani12.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.over60datingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panendeism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qhealthandwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rakkodoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regifa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renewspachicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reverendojoaobatista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seifee.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sethsventura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siempredelgada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silverelectricca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studyofplace.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torbaskorzana.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trancendentreportto-glancetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanduka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wandasbargainbarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsdsb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtflivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwworegonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zbitr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4chwn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acca-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdbet99.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aships.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayridgeequestrian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byhkbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat2night.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibeindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckmm.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaiceskatingpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsquarespace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deafnow-bg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directorycup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivinglicenseindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernandoalonso.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixmie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gefitnessup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlefile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hennyhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugemortgages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonetopic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-time.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinaspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kylepetty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lensavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lochaberfarmshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maggieboxey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaliteind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opgani12.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'over60datingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panendeism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhealthandwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakkodoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regifa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewspachicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reverendojoaobatista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seifee.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sethsventura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siempredelgada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverelectricca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studyofplace.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaskorzana.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trancendentreportto-glancetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanduka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandasbargainbarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsdsb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtflivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwworegonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbitr.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcf4038120000040300483046022100a2fa9d5c13a32deb32285c15fe98980c91c3abfeb5d948ff1d8bfd37fb73cc2902210085676f28fd6933b5d1d9dd44abf33c611947d22035b8efc22d0e8173cc7718bb00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bcf403850000004030048304602210099ff129d2956f4ba5180b5580239f9913eeb772a2ee9bd0013ee932da87593de022100f7ef112c866fb58c2f01e5f249cdf85c90d5ff6e13ce7c150c3b90def59de897
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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