curspan.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0b:4f:5f:75:d8:fa:00:e8:18:cf:60:70:66:34:bb:2f:58 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=curspan.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0b:4f:5f:75:d8:fa:00:e8:18:cf:60:70:66:34:bb:2f:58
Serial Number (int): 352297754433272457926005391586683218767704
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dc:d0:00:19:c1:97:d7:4d:a4:94:e7:da:eb:08:86:44:21:89:1a:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 53:39:fa:52:ae:46:c5:0b:3d:b5:c0:f7:c2:45:04:6c:0e:46:bd:17
Fingerprint (sha256): 03:f1:33:93:1b:a6:f9:08:48:88:06:13:0d:9a:f0:e1:fd:50:10:c5:71:92:99:89:0c:60:5e:22:36:71:bd:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate curspan.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curspan.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2resepta.com
*.aapphub.club
*.amitodigital.com
*.anoticia.online
*.aseanpinay.com
*.autoguns.com
*.auxnsssforyou.com
*.basah.us
*.bollyflix.store
*.budgetwebsite.com.au
*.californiastate.com
*.charliedumont.com
*.clswpay.com
*.crispad.com
*.curspan.com
*.elsazonmexicanfood.com
*.fishgems.online
*.flordiasoccercamp.com
*.freashcoal.com
*.freshfreshseafoodbaltimore.com
*.glyff.io
*.goodhealth-goodlife.com
*.graphicskreator.com
*.gurkhatandooriliskeard.co.uk
*.healthwealthjoy.com
*.ineb.net
*.inkscribe.com
*.inturism.com
*.invguide.info
*.irezumitattoo.co.uk
*.jacobowong.com
*.kantotflex.com
*.kochupholsteryrockford.com
*.lsbcorp.com
*.macrorolekism-macrocugabern-underafopudom.info
*.mypetshop.com
*.naijadownload.com
*.notjustoverbroke.com
*.rejuvenation-spa.com
*.rivershoreused.com
*.rotapower.com
*.rotatemysoft.ru
*.scottanthonysalon.com
*.sportsinfotv.com
*.strettodimessina.com
*.thecitydinerkansascity.com
*.tradingcard.com
*.travelchsnnel.com
*.vidhunt.com
*.welcometoletterville.com
2resepta.com
aapphub.club
amitodigital.com
anoticia.online
aseanpinay.com
autoguns.com
auxnsssforyou.com
basah.us
bollyflix.store
budgetwebsite.com.au
californiastate.com
charliedumont.com
clswpay.com
crispad.com
curspan.com
elsazonmexicanfood.com
fishgems.online
flordiasoccercamp.com
freashcoal.com
freshfreshseafoodbaltimore.com
glyff.io
goodhealth-goodlife.com
graphicskreator.com
gurkhatandooriliskeard.co.uk
healthwealthjoy.com
ineb.net
inkscribe.com
inturism.com
invguide.info
irezumitattoo.co.uk
jacobowong.com
kantotflex.com
kochupholsteryrockford.com
lsbcorp.com
macrorolekism-macrocugabern-underafopudom.info
mypetshop.com
naijadownload.com
notjustoverbroke.com
rejuvenation-spa.com
rivershoreused.com
rotapower.com
rotatemysoft.ru
scottanthonysalon.com
sportsinfotv.com
strettodimessina.com
thecitydinerkansascity.com
tradingcard.com
travelchsnnel.com
vidhunt.com
welcometoletterville.com

Other certificates including the domain name curspan.com

(limited to 100 certificates)
curspan.com
alliedtrust.com
331668.com
curspan.com
myarmc.org
curspan.com
cheatsroom.com
xhamsterxxx.xyz
*.acufitworld.com
bushexpores.com
produksi.com
curspan.com

Certificate

The complete raw certificate details for curspan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINrjCCDJagAwIBAgISBAtPX3XY+gDoGM9gcGY0uy9YMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjQxMzIyMzZaFw0yNDA0MjMxMzIyMzVaMBYxFDASBgNVBAMT
C2N1cnNwYW4uY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtugt
iI6tHxcuMcMDDQ4C+k4/lVR7/Y0OiYwM1q3ebG2Ulx3sqQLPtOyqz9xAEbTSEvxR
jCxMtvUnhzwN2K3lIXdqB7Szmg3K/eQkB36O8yK7ULouHowPETKtaMr4b6P/9M4W
1hmFDzORzwdZ8Lj7dMNiryAcoSyTYADa+mbv+CUVsZO0Y+6e3kV/kf8xIGQ2h+qO
FOwPhlz3gofmi8oq/h/EsaNRfJ7fUBY5J31XIozDUsq1mXTluUHMP+zGYPDto5Qj
JjdyFPdr68baoS22zoIF3ohbH0x1XZ5eAOizs3QYz3uUU0hTgTvucsSUHm/kcMAv
B2Fz2Tx6Ilop1ggj1xlq0VXs0jjPs+B0c76TrOTKTU+Wf9u90+D1AthbJ2p5ccwd
+PMv4Alp9WYnswZfgmjKJ7a2hMke/0aO53zNm6Scu/5900m2I9808rzGDf3pvxqf
guO7On8JoATyHPxfHwoxlLnkdCwbmUgNNRg3HIXcixSe6QvDXY43Zi0YnvOQv7oU
eI4wqzYV8lNdCPoA/4Zygn3RNixwvc6VMapV/Mp6j1yj43FvIZShpUvgOrx+lBvx
V81FlZUOUIEC/FZOrsCa5x0mJTiRWn3c7dRYzHJ79MbeOOchPiRZJ8i/8xd2t9s9
ZILmc9ouN2hHPv1UmXp/P1Jc10rFn6Nv/rjjBB0CAwEAAaOCCdgwggnUMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQU3NAAGcGX102klOfa6wiGRCGJGkAwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggffBgNVHREEggfWMIIH0oIOKi4ycmVzZXB0YS5jb22C
DiouYWFwcGh1Yi5jbHVighIqLmFtaXRvZGlnaXRhbC5jb22CESouYW5vdGljaWEu
b25saW5lghAqLmFzZWFucGluYXkuY29tgg4qLmF1dG9ndW5zLmNvbYITKi5hdXhu
c3NzZm9yeW91LmNvbYIKKi5iYXNhaC51c4IRKi5ib2xseWZsaXguc3RvcmWCFiou
YnVkZ2V0d2Vic2l0ZS5jb20uYXWCFSouY2FsaWZvcm5pYXN0YXRlLmNvbYITKi5j
aGFybGllZHVtb250LmNvbYINKi5jbHN3cGF5LmNvbYINKi5jcmlzcGFkLmNvbYIN
Ki5jdXJzcGFuLmNvbYIYKi5lbHNhem9ubWV4aWNhbmZvb2QuY29tghEqLmZpc2hn
ZW1zLm9ubGluZYIXKi5mbG9yZGlhc29jY2VyY2FtcC5jb22CECouZnJlYXNoY29h
bC5jb22CICouZnJlc2hmcmVzaHNlYWZvb2RiYWx0aW1vcmUuY29tggoqLmdseWZm
LmlvghkqLmdvb2RoZWFsdGgtZ29vZGxpZmUuY29tghUqLmdyYXBoaWNza3JlYXRv
ci5jb22CHiouZ3Vya2hhdGFuZG9vcmlsaXNrZWFyZC5jby51a4IVKi5oZWFsdGh3
ZWFsdGhqb3kuY29tggoqLmluZWIubmV0gg8qLmlua3NjcmliZS5jb22CDiouaW50
dXJpc20uY29tgg8qLmludmd1aWRlLmluZm+CFSouaXJlenVtaXRhdHRvby5jby51
a4IQKi5qYWNvYm93b25nLmNvbYIQKi5rYW50b3RmbGV4LmNvbYIcKi5rb2NodXBo
b2xzdGVyeXJvY2tmb3JkLmNvbYINKi5sc2Jjb3JwLmNvbYIwKi5tYWNyb3JvbGVr
aXNtLW1hY3JvY3VnYWJlcm4tdW5kZXJhZm9wdWRvbS5pbmZvgg8qLm15cGV0c2hv
cC5jb22CEyoubmFpamFkb3dubG9hZC5jb22CFioubm90anVzdG92ZXJicm9rZS5j
b22CFioucmVqdXZlbmF0aW9uLXNwYS5jb22CFCoucml2ZXJzaG9yZXVzZWQuY29t
gg8qLnJvdGFwb3dlci5jb22CESoucm90YXRlbXlzb2Z0LnJ1ghcqLnNjb3R0YW50
aG9ueXNhbG9uLmNvbYISKi5zcG9ydHNpbmZvdHYuY29tghYqLnN0cmV0dG9kaW1l
c3NpbmEuY29tghwqLnRoZWNpdHlkaW5lcmthbnNhc2NpdHkuY29tghEqLnRyYWRp
bmdjYXJkLmNvbYITKi50cmF2ZWxjaHNubmVsLmNvbYINKi52aWRodW50LmNvbYIa
Ki53ZWxjb21ldG9sZXR0ZXJ2aWxsZS5jb22CDDJyZXNlcHRhLmNvbYIMYWFwcGh1
Yi5jbHVighBhbWl0b2RpZ2l0YWwuY29tgg9hbm90aWNpYS5vbmxpbmWCDmFzZWFu
cGluYXkuY29tggxhdXRvZ3Vucy5jb22CEWF1eG5zc3Nmb3J5b3UuY29tgghiYXNh
aC51c4IPYm9sbHlmbGl4LnN0b3JlghRidWRnZXR3ZWJzaXRlLmNvbS5hdYITY2Fs
aWZvcm5pYXN0YXRlLmNvbYIRY2hhcmxpZWR1bW9udC5jb22CC2Nsc3dwYXkuY29t
ggtjcmlzcGFkLmNvbYILY3Vyc3Bhbi5jb22CFmVsc2F6b25tZXhpY2FuZm9vZC5j
b22CD2Zpc2hnZW1zLm9ubGluZYIVZmxvcmRpYXNvY2NlcmNhbXAuY29tgg5mcmVh
c2hjb2FsLmNvbYIeZnJlc2hmcmVzaHNlYWZvb2RiYWx0aW1vcmUuY29tgghnbHlm
Zi5pb4IXZ29vZGhlYWx0aC1nb29kbGlmZS5jb22CE2dyYXBoaWNza3JlYXRvci5j
b22CHGd1cmtoYXRhbmRvb3JpbGlza2VhcmQuY28udWuCE2hlYWx0aHdlYWx0aGpv
eS5jb22CCGluZWIubmV0gg1pbmtzY3JpYmUuY29tggxpbnR1cmlzbS5jb22CDWlu
dmd1aWRlLmluZm+CE2lyZXp1bWl0YXR0b28uY28udWuCDmphY29ib3dvbmcuY29t
gg5rYW50b3RmbGV4LmNvbYIaa29jaHVwaG9sc3Rlcnlyb2NrZm9yZC5jb22CC2xz
YmNvcnAuY29tgi5tYWNyb3JvbGVraXNtLW1hY3JvY3VnYWJlcm4tdW5kZXJhZm9w
dWRvbS5pbmZvgg1teXBldHNob3AuY29tghFuYWlqYWRvd25sb2FkLmNvbYIUbm90
anVzdG92ZXJicm9rZS5jb22CFHJlanV2ZW5hdGlvbi1zcGEuY29tghJyaXZlcnNo
b3JldXNlZC5jb22CDXJvdGFwb3dlci5jb22CD3JvdGF0ZW15c29mdC5ydYIVc2Nv
dHRhbnRob255c2Fsb24uY29tghBzcG9ydHNpbmZvdHYuY29tghRzdHJldHRvZGlt
ZXNzaW5hLmNvbYIadGhlY2l0eWRpbmVya2Fuc2FzY2l0eS5jb22CD3RyYWRpbmdj
YXJkLmNvbYIRdHJhdmVsY2hzbm5lbC5jb22CC3ZpZGh1bnQuY29tghh3ZWxjb21l
dG9sZXR0ZXJ2aWxsZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frU
FwAAAY072faiAAAEAwBHMEUCIQCk773dDsH87TAXMZaX6ao31bwGYnMtzrNhCzKM
21RP/AIgRbwEwE4cNuzh8fuUZDjFCX01/uK9TFkjDBJY/ZRVn84AdgBIsONr2qZH
NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY072fakAAAEAwBHMEUCICKFHoFb
90IffmiM4YFM0gMtmdXUggkH1MO+6j/5EfBmAiEA6qhD7fdAo+KdP0o1/gyD8Pfw
itvqnXNqrJLQeIXAzEswDQYJKoZIhvcNAQELBQADggEBADTHpenU8hity105HbyT
Y6quHUcEWm3jYcjLkGA2a8bT/cZF+nlok89125f+BQiJODR1CG8jD6aiymi/7gp0
6ehBJ1TqUyeyRVPyPtE0P+kqpH+7SFU+jofytmCfZLslrNPAtLlGye1W/byG1snF
GVbtrgnSMlEmFVujPovN3jQc8pPsOFMTF841BnafOU17tf22FAAcpWMlUQl9E8im
G3Seq5lnvxqQxXDReJlk7FJGiby1J7RPRpOO8U78TAQ4zdZptkiIPdsn7IeWe5lZ
esA8LM+B70PxDVsD0yOnu/LRzc5dp3sUg7PxlUhM5PTG0GBuPgkq3vBaDRarVHGB
JAQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352297754433272457926005391586683218767704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 13:22:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 13:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curspan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746195232291642502367669529716231880867708030134501351290519361746978249595516765919969689037958396378078921422840310582749016372527514466091781813873968612862089060575233816572166441965709319750690956100624216746791896772200752535762590901625325064333809076016483775485623035749684048950115938576227978372047395946788384550332264380729949626895293168308632429045004778986453131668364839924781467777974201565893607496828316330304651581728430999508982483852309720841536422703587986747112365481432653217444319463197410621017884094560714475403805081227236606494834832680541020706827415961196267017672817359238976648291250211192903787930595053680022803211803750355690862572581730036996577213986870973563471153226323547975625241142658491041569440277270274782223643948966882021036723417108155403133397663650759497178197193778197197371739235479042988464888786746053111467832076875821353073689547462994439398066182453661267778394084729064830655620133626445535840353055637385022350738950325380735450636831143573819673278843484400091029580922197429579073966223541323759664595326026362747449623581529529252757542777075636440101630090595573175014668963843547832576410089375314048448058451031219030073142967260493948568904895308561313166000325661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcd00019c197d74da494e7daeb08864421891a40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2006 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2resepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aapphub.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amitodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anoticia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aseanpinay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoguns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auxnsssforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basah.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bollyflix.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgetwebsite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiastate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charliedumont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clswpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crispad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsazonmexicanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishgems.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flordiasoccercamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freashcoal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshfreshseafoodbaltimore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glyff.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhealth-goodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphicskreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurkhatandooriliskeard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthwealthjoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ineb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inturism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invguide.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irezumitattoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacobowong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kantotflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kochupholsteryrockford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lsbcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macrorolekism-macrocugabern-underafopudom.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naijadownload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notjustoverbroke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rejuvenation-spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivershoreused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotapower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotatemysoft.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottanthonysalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsinfotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strettodimessina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecitydinerkansascity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradingcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelchsnnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidhunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welcometoletterville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2resepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aapphub.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anoticia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aseanpinay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoguns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auxnsssforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basah.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bollyflix.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgetwebsite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiastate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charliedumont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clswpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crispad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsazonmexicanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishgems.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flordiasoccercamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freashcoal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshfreshseafoodbaltimore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glyff.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhealth-goodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphicskreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurkhatandooriliskeard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthwealthjoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ineb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inturism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invguide.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irezumitattoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacobowong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kantotflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kochupholsteryrockford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsbcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrorolekism-macrocugabern-underafopudom.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naijadownload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notjustoverbroke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejuvenation-spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivershoreused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotapower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotatemysoft.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottanthonysalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsinfotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strettodimessina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecitydinerkansascity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradingcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelchsnnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidhunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometoletterville.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3bd9f6a20000040300473045022100a4efbddd0ec1fced3017319697e9aa37d5bc0662732dceb3610b328cdb544ffc022045bc04c04e1c36ece1f1fb946438c5097d35fee2bd4c59230c1258fd94559fce00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d3bd9f6a40000040300473045022022851e815bf7421f7e688ce1814cd2032d99d5d4820907d4c3beea3ff911f066022100eaa843edf740a3e29d3f4a35fe0c83f0f7f08adbea9d736aac92d07885c0cc4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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