architecturehd.com

Issued by R3

About this certificate

This digital certificate with serial number 04:90:8e:82:ee:32:6b:74:8c:09:c6:4a:d4:7d:a6:c9:c8:e7 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=architecturehd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:8e:82:ee:32:6b:74:8c:09:c6:4a:d4:7d:a6:c9:c8:e7
Serial Number (int): 397639234768857342494333944810666336045287
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:27:f7:0e:55:70:4c:20:b8:9d:24:17:28:47:01:48:5c:27:0b:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:7c:f4:51:78:bb:ee:33:d8:57:80:66:36:49:3b:3f:01:44:6c:63
Fingerprint (sha256): 03:46:2e:99:14:65:49:ae:31:f8:12:c9:b1:0f:e8:47:ff:c4:23:12:9e:23:1a:7f:cd:38:1b:a7:2e:88:29:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate architecturehd.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for architecturehd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9hanycwn2.co
*.aantanderbank.com
*.aarpmedicareplans.co
*.adamali.net
*.aess-ohio.com
*.aksana.net
*.allingame121.com
*.alternativecardiology.net
*.amsakorea.net
*.angelkizz.net
*.architecturehd.com
*.banglades.net
*.barbi.au
*.belleso.co
*.bestgiftforpeoplewhoworkinretail.com
*.bmhrw.net
*.boysinboys.net
*.brokenvesselministries.net
*.btpremium.com
*.bukuhijaucerebrum.online
*.coralcommunity.net
*.cupu.ga
*.datsun-avtomir-yar.ru
*.dearnodern.com
*.fencerjiji.xyz
*.fetishjav.com
*.filmbioskop21.bz
*.flatmatefinder.com
*.germanytreesremoval.site
*.gratisonlinesex.com
*.hlj06.net
*.jbcam.cc
*.jblinks.net
*.laeatingwell.com
*.live-ch.com
*.loginvoya.com
*.morelandfamilymedicine.com
*.muncrat.com
*.narezka.net
*.ns-anpi.com
*.old-fidelity.de
*.poppics.ga
*.sitonmybits.co.uk
*.thetraff.ru
*.tveduca.com
*.u7ncasiofanmag.com
*.vyn.fyi
*.watermountain.com
*.wipykid.com
9hanycwn2.co
aantanderbank.com
aarpmedicareplans.co
adamali.net
aess-ohio.com
aksana.net
allingame121.com
alternativecardiology.net
amsakorea.net
angelkizz.net
architecturehd.com
banglades.net
barbi.au
belleso.co
bestgiftforpeoplewhoworkinretail.com
bmhrw.net
boysinboys.net
brokenvesselministries.net
btpremium.com
bukuhijaucerebrum.online
coralcommunity.net
cupu.ga
datsun-avtomir-yar.ru
dearnodern.com
fencerjiji.xyz
fetishjav.com
filmbioskop21.bz
flatmatefinder.com
germanytreesremoval.site
gratisonlinesex.com
hlj06.net
jbcam.cc
jblinks.net
laeatingwell.com
live-ch.com
loginvoya.com
morelandfamilymedicine.com
muncrat.com
narezka.net
ns-anpi.com
old-fidelity.de
poppics.ga
sitonmybits.co.uk
thetraff.ru
tveduca.com
u7ncasiofanmag.com
vyn.fyi
watermountain.com
wipykid.com

Other certificates including the domain name architecturehd.com

(limited to 100 certificates)
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
architecturehd.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
architecturehd.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
architecturehd.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
architecturehd.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
architecturehd.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com
sni228501.cloudflaressl.com

Certificate

The complete raw certificate details for architecturehd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMuzCCC6OgAwIBAgISBJCOgu4ya3SMCcZK1H2mycjnMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTcxMTA4MTNaFw0yNDAyMTUxMTA4MTJaMB0xGzAZBgNVBAMT
EmFyY2hpdGVjdHVyZWhkLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBALQLQ9rYhdI2trJ7pznZU+Xlmzax/nbAH0+3d0BiOlq38FBlAKxOJc1mrSFk
X97TyoHgFBn/mCo7j3oL7S3ClD2O/+TsI+Jrtywm1BsM9dlENqlrEBkTT4SIXw7N
21/Zd5L7WhWjDHDbpPMKxg8MhkXHzAKNr3vlWV5FsUWD7Kt/Jr+H4By6ws0uZz1/
xeQO7zxo0oVXqeaCrHryPVKdFmtPWpurLfsaqmnzLQ1OSIavOxS10M3fwM8XKTGy
ScKrVklWEKHtjMvcop2edMPeJILmRDQqOSFNWByaAM9CZz0KTNACjSg3KWc07Z43
dBm340CZi+GyQGruVnQ3V1s2/M5VaWxDL2cC3/vf/ZwvtGtggcP1OAm1XH0mrkyn
veflI7VeISfb6gHNpCE8CySax61yeKMjgpHvPiD4f9yR2kdUvegPYTJWnp9BKWR4
ZAC4Gyw8+4MQ2bgsTbAL614JzWOjReGeMdzNQfGM9uCU21J6IfFZJVyHOIBO6srN
StHYoN4PHHr+38qpCI9UWcEyXdzkWtxlzNs+a0g4N2qYCitCLhdxwBr48FjD+A9H
vPaZfcJArpJqJA23T9anqHrwiH/OWTQllB3de3PwDZ6K+tv6XJY8r8Wgo0WZ93ya
57aJPSr2v4vMZIKPRIMHkiO35NcRbPLiKcmT3fma0CqtyKZvAgMBAAGjggjeMIII
2jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLUn9w5VcEwguJ0kFyhHAUhcJwvTMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIG5QYDVR0RBIIG3DCCBtiCDiouOWhhbnlj
d24yLmNvghMqLmFhbnRhbmRlcmJhbmsuY29tghYqLmFhcnBtZWRpY2FyZXBsYW5z
LmNvgg0qLmFkYW1hbGkubmV0gg8qLmFlc3Mtb2hpby5jb22CDCouYWtzYW5hLm5l
dIISKi5hbGxpbmdhbWUxMjEuY29tghsqLmFsdGVybmF0aXZlY2FyZGlvbG9neS5u
ZXSCDyouYW1zYWtvcmVhLm5ldIIPKi5hbmdlbGtpenoubmV0ghQqLmFyY2hpdGVj
dHVyZWhkLmNvbYIPKi5iYW5nbGFkZXMubmV0ggoqLmJhcmJpLmF1ggwqLmJlbGxl
c28uY2+CJiouYmVzdGdpZnRmb3JwZW9wbGV3aG93b3JraW5yZXRhaWwuY29tggsq
LmJtaHJ3Lm5ldIIQKi5ib3lzaW5ib3lzLm5ldIIcKi5icm9rZW52ZXNzZWxtaW5p
c3RyaWVzLm5ldIIPKi5idHByZW1pdW0uY29tghoqLmJ1a3VoaWphdWNlcmVicnVt
Lm9ubGluZYIUKi5jb3JhbGNvbW11bml0eS5uZXSCCSouY3VwdS5nYYIXKi5kYXRz
dW4tYXZ0b21pci15YXIucnWCECouZGVhcm5vZGVybi5jb22CECouZmVuY2Vyamlq
aS54eXqCDyouZmV0aXNoamF2LmNvbYISKi5maWxtYmlvc2tvcDIxLmJ6ghQqLmZs
YXRtYXRlZmluZGVyLmNvbYIaKi5nZXJtYW55dHJlZXNyZW1vdmFsLnNpdGWCFSou
Z3JhdGlzb25saW5lc2V4LmNvbYILKi5obGowNi5uZXSCCiouamJjYW0uY2OCDSou
amJsaW5rcy5uZXSCEioubGFlYXRpbmd3ZWxsLmNvbYINKi5saXZlLWNoLmNvbYIP
Ki5sb2dpbnZveWEuY29tghwqLm1vcmVsYW5kZmFtaWx5bWVkaWNpbmUuY29tgg0q
Lm11bmNyYXQuY29tgg0qLm5hcmV6a2EubmV0gg0qLm5zLWFucGkuY29tghEqLm9s
ZC1maWRlbGl0eS5kZYIMKi5wb3BwaWNzLmdhghMqLnNpdG9ubXliaXRzLmNvLnVr
gg0qLnRoZXRyYWZmLnJ1gg0qLnR2ZWR1Y2EuY29tghQqLnU3bmNhc2lvZmFubWFn
LmNvbYIJKi52eW4uZnlpghMqLndhdGVybW91bnRhaW4uY29tgg0qLndpcHlraWQu
Y29tggw5aGFueWN3bjIuY2+CEWFhbnRhbmRlcmJhbmsuY29tghRhYXJwbWVkaWNh
cmVwbGFucy5jb4ILYWRhbWFsaS5uZXSCDWFlc3Mtb2hpby5jb22CCmFrc2FuYS5u
ZXSCEGFsbGluZ2FtZTEyMS5jb22CGWFsdGVybmF0aXZlY2FyZGlvbG9neS5uZXSC
DWFtc2Frb3JlYS5uZXSCDWFuZ2Vsa2l6ei5uZXSCEmFyY2hpdGVjdHVyZWhkLmNv
bYINYmFuZ2xhZGVzLm5ldIIIYmFyYmkuYXWCCmJlbGxlc28uY2+CJGJlc3RnaWZ0
Zm9ycGVvcGxld2hvd29ya2lucmV0YWlsLmNvbYIJYm1ocncubmV0gg5ib3lzaW5i
b3lzLm5ldIIaYnJva2VudmVzc2VsbWluaXN0cmllcy5uZXSCDWJ0cHJlbWl1bS5j
b22CGGJ1a3VoaWphdWNlcmVicnVtLm9ubGluZYISY29yYWxjb21tdW5pdHkubmV0
ggdjdXB1LmdhghVkYXRzdW4tYXZ0b21pci15YXIucnWCDmRlYXJub2Rlcm4uY29t
gg5mZW5jZXJqaWppLnh5eoINZmV0aXNoamF2LmNvbYIQZmlsbWJpb3Nrb3AyMS5i
eoISZmxhdG1hdGVmaW5kZXIuY29tghhnZXJtYW55dHJlZXNyZW1vdmFsLnNpdGWC
E2dyYXRpc29ubGluZXNleC5jb22CCWhsajA2Lm5ldIIIamJjYW0uY2OCC2pibGlu
a3MubmV0ghBsYWVhdGluZ3dlbGwuY29tggtsaXZlLWNoLmNvbYINbG9naW52b3lh
LmNvbYIabW9yZWxhbmRmYW1pbHltZWRpY2luZS5jb22CC211bmNyYXQuY29tggtu
YXJlemthLm5ldIILbnMtYW5waS5jb22CD29sZC1maWRlbGl0eS5kZYIKcG9wcGlj
cy5nYYIRc2l0b25teWJpdHMuY28udWuCC3RoZXRyYWZmLnJ1ggt0dmVkdWNhLmNv
bYISdTduY2FzaW9mYW5tYWcuY29tggd2eW4uZnlpghF3YXRlcm1vdW50YWluLmNv
bYILd2lweWtpZC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA
AYvdLn/AAAAEAwBHMEUCIC3VMOcR8R6y6CV9hzQiuXjQDln4NNyPRhPuVZBXs5Sk
AiEAgQZA7/zvmKK11/O8/OYWOgs6uoYpWUMEOA8ajqgwLwkAdgDuzdBk1dsazsVc
t520zROiModGfLzs3sNRSFlGcR+1mwAAAYvdLn/EAAAEAwBHMEUCIHLl4DXmzESA
FMA8033bIL8pIryplKPtBCNaT23YjzYiAiEAoImKnieysfFELDoz5RmUZkj39Q2D
rD8prKdWcCyJW0cwDQYJKoZIhvcNAQELBQADggEBAIHae3FrhJ0qBEte1Vmgvb/3
3iqJSYA+KPDKFr1mhZvjaeO/ddoP4wmiCRbHGGHLZNlbKbnBP5oBjaDE4HIOKZzZ
XkUviuO90TZZQ9MAJiLx2UGdpnHqWCsRNTb9bAbJ5XCWoWgvKBd7MaY1m/ryy4VD
mKA36kzeY/ZjDrBu176Gq0YWYGFCkF6IrlwpezY6BFW6UW6VTsY+HekB9RquEv+s
xOadwDMFyc+e0b/Sc/LoCPSlsHm6nfV2DHlIJ6vuEEmGvUTlE8+tmAUxd+r2jyR3
JT3N2q3uCo9U4BUwzBWk2PHR4tcR1AGZOH+FKLXeesQUJFpQNElAhhTs5mo0Cjw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397639234768857342494333944810666336045287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 11:08:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 11:08:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'architecturehd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734515453444163580854681800325648003744015072786812572799707147837641730737818441310205138864596117290769022815849805143679740028071711141055546343204080104640105544409908883414755271413129260890578542578884696322282224936104024596920674807268845485370348826326783443074773238063961821851236445313389595326003701547984714399515393145108884584738166495268044788555202349909086765328029850255668370436465117229509415354315084043451149435843147530341875658418758478511367986656107601680801752962487384240369461004955415239197036916439209632039837056964727253472432348671977637708799945284249564863525945801977783611807902747759287695312039720800740679153777750973674570908895885214694747704248736036670544576754772215223389826815261316390833842466723568871865237494038580422873373989728411505658574276962235320271402620075945214201587317686027519906882079404120453477745789715836710660498230235944285291784552048826514274150853565080495180357104575760277435807247914549590239399164569417271379155089853528634100863355293262975568687787025193930934699159794735172200992931440732854109996620876259492390052973641676318809664641168099575354645068440983322732425360540302893263502989825441148664140227057335831563344316560643740003654477423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b527f70e55704c20b89d2417284701485c270bd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1756 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9hanycwn2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aantanderbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aarpmedicareplans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamali.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aess-ohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aksana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allingame121.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alternativecardiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amsakorea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelkizz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.architecturehd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banglades.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbi.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belleso.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestgiftforpeoplewhoworkinretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmhrw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boysinboys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokenvesselministries.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btpremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukuhijaucerebrum.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coralcommunity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cupu.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datsun-avtomir-yar.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dearnodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fencerjiji.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetishjav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmbioskop21.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flatmatefinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.germanytreesremoval.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gratisonlinesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlj06.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbcam.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jblinks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laeatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-ch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loginvoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morelandfamilymedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muncrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narezka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ns-anpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.old-fidelity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poppics.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitonmybits.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetraff.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tveduca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u7ncasiofanmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vyn.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watermountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wipykid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9hanycwn2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aantanderbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarpmedicareplans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamali.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aess-ohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aksana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allingame121.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativecardiology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsakorea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelkizz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecturehd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banglades.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbi.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belleso.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestgiftforpeoplewhoworkinretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmhrw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boysinboys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokenvesselministries.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btpremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukuhijaucerebrum.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coralcommunity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupu.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datsun-avtomir-yar.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dearnodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fencerjiji.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetishjav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmbioskop21.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatmatefinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'germanytreesremoval.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratisonlinesex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlj06.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbcam.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jblinks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laeatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginvoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morelandfamilymedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muncrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narezka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-anpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old-fidelity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poppics.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitonmybits.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetraff.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tveduca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u7ncasiofanmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyn.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wipykid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bdd2e7fc0000004030047304502202dd530e711f11eb2e8257d873422b978d00e59f834dc8f4613ee559057b394a4022100810640effcef98a2b5d7f3bcfce6163a0b3aba8629594304380f1a8ea8302f09007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bdd2e7fc40000040300473045022072e5e035e6cc448014c03cd37ddb20bf2922bca994a3ed04235a4f6dd88f3622022100a0898a9e27b2b1f1442c3a33e519946648f7f50d83ac3f29aca756702c895b47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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