primeavideo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0d:cb:b0:81:24:09:52:25:98:0f:01:27:dd:ad:a3:34:8c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=primeavideo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0d:cb:b0:81:24:09:52:25:98:0f:01:27:dd:ad:a3:34:8c
Serial Number (int): 353143564243690564059498709609707659801740
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:9c:8a:1b:1c:2a:23:21:1e:be:2d:61:84:48:0d:86:01:2e:06:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0c:c0:3a:42:2c:38:b1:af:9d:03:9d:c9:f6:ee:df:b4:f7:01:04:83
Fingerprint (sha256): 06:dc:1f:08:7e:89:28:d2:18:4c:7b:7c:94:ae:d2:50:6f:2f:87:c6:8a:6e:3f:b6:d8:a2:c5:d0:5a:34:b5:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate primeavideo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primeavideo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aegi.live
*.altimake.com
*.antler.au
*.appsforiphone.us
*.astology.com
*.bandoffads.com
*.barronscommodity.com
*.blaircheesefest.com
*.bookofra-slot-play.com
*.cajueiro.me
*.campshepull3.live
*.consummatively.info
*.dashstudios.co
*.dfordatascience.com
*.dilusso.cc
*.dougireton.com
*.doxy.live
*.facebdook.com
*.flychanelle.pl
*.flyingtogetherual.com
*.gdy.au
*.gigasetmobileusa.com
*.globalverticalgardening.com
*.happycharli.co
*.henneart.com
*.hkhusuabi.net
*.httpbankofamerica.com
*.illusto.io
*.imatiothiki.com
*.josephurban.us
*.ken-o-do-ibaraki.com
*.matrixos.me
*.merawalapandit.com
*.mrcomputershop.com
*.neumaticosjsanchez.com
*.newseria.net
*.onlinemarketingagency.com.au
*.pamitnyalembur.com
*.plasergroup.com
*.premium-spirits.online
*.prestamospersonalesanetbra.com
*.prestocard.co
*.primeavideo.com
*.ramsinghsports.com
*.raywestfinance.com
*.suire.com
*.thestickytongue.org
*.tsmplay.com
*.twn5g.co
*.zerohwdge.com
aegi.live
altimake.com
antler.au
appsforiphone.us
astology.com
bandoffads.com
barronscommodity.com
blaircheesefest.com
bookofra-slot-play.com
cajueiro.me
campshepull3.live
consummatively.info
dashstudios.co
dfordatascience.com
dilusso.cc
dougireton.com
doxy.live
facebdook.com
flychanelle.pl
flyingtogetherual.com
gdy.au
gigasetmobileusa.com
globalverticalgardening.com
happycharli.co
henneart.com
hkhusuabi.net
httpbankofamerica.com
illusto.io
imatiothiki.com
josephurban.us
ken-o-do-ibaraki.com
matrixos.me
merawalapandit.com
mrcomputershop.com
neumaticosjsanchez.com
newseria.net
onlinemarketingagency.com.au
pamitnyalembur.com
plasergroup.com
premium-spirits.online
prestamospersonalesanetbra.com
prestocard.co
primeavideo.com
ramsinghsports.com
raywestfinance.com
suire.com
thestickytongue.org
tsmplay.com
twn5g.co
zerohwdge.com

Other certificates including the domain name primeavideo.com

(limited to 100 certificates)
primeavideo.com
endotherm.biz
primeavideo.com
endotherm.biz
endotherm.biz
endotherm.biz
endotherm.biz
endotherm.biz
primeavideo.com

Certificate

The complete raw certificate details for primeavideo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINLTCCDBWgAwIBAgISBA3LsIEkCVIlmA8BJ92tozSMMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MjcyMjIxMzNaFw0yNDA4MjUyMjIxMzJaMBoxGDAWBgNVBAMT
D3ByaW1lYXZpZGVvLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
ALmoGqy/ANmPwdFR8q2bVx5XN43FrnZe6JANcy5e8wnTiAidd0MTU5KAUXzc7JcP
vPawDFbS6nCNydx8kB6wgVk+67+1qJn7zEWJ7sUGndse2IvSQqSVoiDkul6lI1jd
2A0w0cmyCavkZOxBXtCGh1L7UrxKWAIH4NU3b662roOUE0uqe5ws71s6ay49VtOI
lnYP1mfhVkG/H3sq9+/rwtBodiE9/FNJY7nHhje2j+8na7E037EgsXPAufsVqgHj
TLme5eb5tTyLu0HYXDebBQ05cvnvC3iWNVJMaj+kfFx+sdOT4lu0CEMaiBeLCBqI
p6udjgNZ9GfkLFOlCRTvh/G+Eui4ahg8mBSm75JOoRF2ZL7I6Zvc5hTIP6XynM5n
FC5TMQ9jl4f130DnW6oh29iAEkrcpRtRW/HZXJrGNGWizW0XwqxvMNRvz2M8v4BW
LDc1mzwe+Qeb5km068oLUAIBDEGxSsZbFFJrw2iHaTzUCR+GYmr2Wq9MTUpBKwI7
kX4SVRUreLRz9AR0OxKIOA4lnYAGLYRzYhW2OrpIayuM70zFYeog5syoGA2ab7B3
R9oQkEYlvEthV6d9eesVhk3w0oxeI9geuLefr9AcA4d9h/wfpkECQg5B/thA1a+o
lt35utwZjlPhkjm0VsKKzDyeUKYeW9iAVPDHefCZ2Sg7AgMBAAGjgglTMIIJTzAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFICcihscKiMhHr4tYYRIDYYBLgYbMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMIIHWQYDVR0RBIIHUDCCB0yCCyouYWVnaS5saXZl
gg4qLmFsdGltYWtlLmNvbYILKi5hbnRsZXIuYXWCEiouYXBwc2ZvcmlwaG9uZS51
c4IOKi5hc3RvbG9neS5jb22CECouYmFuZG9mZmFkcy5jb22CFiouYmFycm9uc2Nv
bW1vZGl0eS5jb22CFSouYmxhaXJjaGVlc2VmZXN0LmNvbYIYKi5ib29rb2ZyYS1z
bG90LXBsYXkuY29tgg0qLmNhanVlaXJvLm1lghMqLmNhbXBzaGVwdWxsMy5saXZl
ghUqLmNvbnN1bW1hdGl2ZWx5LmluZm+CECouZGFzaHN0dWRpb3MuY2+CFSouZGZv
cmRhdGFzY2llbmNlLmNvbYIMKi5kaWx1c3NvLmNjghAqLmRvdWdpcmV0b24uY29t
ggsqLmRveHkubGl2ZYIPKi5mYWNlYmRvb2suY29tghAqLmZseWNoYW5lbGxlLnBs
ghcqLmZseWluZ3RvZ2V0aGVydWFsLmNvbYIIKi5nZHkuYXWCFiouZ2lnYXNldG1v
YmlsZXVzYS5jb22CHSouZ2xvYmFsdmVydGljYWxnYXJkZW5pbmcuY29tghAqLmhh
cHB5Y2hhcmxpLmNvgg4qLmhlbm5lYXJ0LmNvbYIPKi5oa2h1c3VhYmkubmV0ghcq
Lmh0dHBiYW5rb2ZhbWVyaWNhLmNvbYIMKi5pbGx1c3RvLmlvghEqLmltYXRpb3Ro
aWtpLmNvbYIQKi5qb3NlcGh1cmJhbi51c4IWKi5rZW4tby1kby1pYmFyYWtpLmNv
bYINKi5tYXRyaXhvcy5tZYIUKi5tZXJhd2FsYXBhbmRpdC5jb22CFCoubXJjb21w
dXRlcnNob3AuY29tghgqLm5ldW1hdGljb3Nqc2FuY2hlei5jb22CDioubmV3c2Vy
aWEubmV0gh4qLm9ubGluZW1hcmtldGluZ2FnZW5jeS5jb20uYXWCFCoucGFtaXRu
eWFsZW1idXIuY29tghEqLnBsYXNlcmdyb3VwLmNvbYIYKi5wcmVtaXVtLXNwaXJp
dHMub25saW5lgiAqLnByZXN0YW1vc3BlcnNvbmFsZXNhbmV0YnJhLmNvbYIPKi5w
cmVzdG9jYXJkLmNvghEqLnByaW1lYXZpZGVvLmNvbYIUKi5yYW1zaW5naHNwb3J0
cy5jb22CFCoucmF5d2VzdGZpbmFuY2UuY29tggsqLnN1aXJlLmNvbYIVKi50aGVz
dGlja3l0b25ndWUub3Jngg0qLnRzbXBsYXkuY29tggoqLnR3bjVnLmNvgg8qLnpl
cm9od2RnZS5jb22CCWFlZ2kubGl2ZYIMYWx0aW1ha2UuY29tgglhbnRsZXIuYXWC
EGFwcHNmb3JpcGhvbmUudXOCDGFzdG9sb2d5LmNvbYIOYmFuZG9mZmFkcy5jb22C
FGJhcnJvbnNjb21tb2RpdHkuY29tghNibGFpcmNoZWVzZWZlc3QuY29tghZib29r
b2ZyYS1zbG90LXBsYXkuY29tggtjYWp1ZWlyby5tZYIRY2FtcHNoZXB1bGwzLmxp
dmWCE2NvbnN1bW1hdGl2ZWx5LmluZm+CDmRhc2hzdHVkaW9zLmNvghNkZm9yZGF0
YXNjaWVuY2UuY29tggpkaWx1c3NvLmNjgg5kb3VnaXJldG9uLmNvbYIJZG94eS5s
aXZlgg1mYWNlYmRvb2suY29tgg5mbHljaGFuZWxsZS5wbIIVZmx5aW5ndG9nZXRo
ZXJ1YWwuY29tggZnZHkuYXWCFGdpZ2FzZXRtb2JpbGV1c2EuY29tghtnbG9iYWx2
ZXJ0aWNhbGdhcmRlbmluZy5jb22CDmhhcHB5Y2hhcmxpLmNvggxoZW5uZWFydC5j
b22CDWhraHVzdWFiaS5uZXSCFWh0dHBiYW5rb2ZhbWVyaWNhLmNvbYIKaWxsdXN0
by5pb4IPaW1hdGlvdGhpa2kuY29tgg5qb3NlcGh1cmJhbi51c4IUa2VuLW8tZG8t
aWJhcmFraS5jb22CC21hdHJpeG9zLm1lghJtZXJhd2FsYXBhbmRpdC5jb22CEm1y
Y29tcHV0ZXJzaG9wLmNvbYIWbmV1bWF0aWNvc2pzYW5jaGV6LmNvbYIMbmV3c2Vy
aWEubmV0ghxvbmxpbmVtYXJrZXRpbmdhZ2VuY3kuY29tLmF1ghJwYW1pdG55YWxl
bWJ1ci5jb22CD3BsYXNlcmdyb3VwLmNvbYIWcHJlbWl1bS1zcGlyaXRzLm9ubGlu
ZYIecHJlc3RhbW9zcGVyc29uYWxlc2FuZXRicmEuY29tgg1wcmVzdG9jYXJkLmNv
gg9wcmltZWF2aWRlby5jb22CEnJhbXNpbmdoc3BvcnRzLmNvbYIScmF5d2VzdGZp
bmFuY2UuY29tgglzdWlyZS5jb22CE3RoZXN0aWNreXRvbmd1ZS5vcmeCC3RzbXBs
YXkuY29tggh0d241Zy5jb4INemVyb2h3ZGdlLmNvbTATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AD8XS0/XIkdYlB1lHIS+DRLt
kDd/H4Vq68G/KIXs+GRuAAABj7xb890AAAQDAEgwRgIhAKCx4SW4XqQTPjfMLmeK
ucnkJdv+BeUVB/OMlJ0uK70eAiEAo8oUd7H0m7Sj8zKLhn/pgal9CHsXcBFNHRgr
i6xUU8UAdgDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHBO75SXAAAAY+8W/TQ
AAAEAwBHMEUCIQCDmUv+4IJOB4tSOIml2dkBohnwTuKDw/A7K5T6choTxwIgPAJK
f1pEGgrEz35U9lZMeERNS3u4k0wKP+mqXpRdbrowDQYJKoZIhvcNAQELBQADggEB
AFmfdO3fZzrkKlBW17S2ru2x6hlN0mOXNLubhVFAKUnQInAOZLmsrDTVFYD2Pax9
DT9wbrtPcJlgZzdNFT1ghjgm5nvGUJy03ewkkMO0f6l571ZzC2rxlkRB9QpL5Poi
0QGFPelWzQ6/95rNCap4DoN1Sa2DeHfymOQ3fQkQ7qCu49TY1mat3M/7jmgK21U7
kwGCr17WLRinf12bEZjOzKAaSSEWHxYIuucxHx1PLEjAbqRGWaPz3kDHVXLTg2DC
xHZvrAGRZaN8bu7cGpjFcc5v15TkPbtEmKlpbRsegFCLXvbLER1WRfvd2qAAZOt9
bxO7MJeR4OmNy5rfWSh1aMY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353143564243690564059498709609707659801740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 22:21:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-25 22:21:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primeavideo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757413079520431175521355242596862755030744644049432888080606720878480165360140383970992124790609802140211739814019343447228678412555325068828793086050689722285460664688639721792967622111186338662025719021736529112589991690725548996880206625908410607853700733712598513398057050504585791664304172358349082463298316614315951978896192603429199847029552038800841289323666925724847285780301232729922255913815535864446093251643663521109167362972384066782547978768561839087033326894441136102538539535050478016090085058692463528006920551997582288499626362530438773489250052431150134372429604731834916268735092918746182678105930984668339845977736164876370590943195990411160852173691372707130572557733251303361165928883175488335824114497011360588452465667509283502584761100296970201092816353471721342702129493719210508859397679281563536743461350161132499075489817287358205058064796565406854929016468947785528702817733305717649253055321630130094792096844250356834865598497121596028451307963691468565965808496903421068471222597191806362108183141639504669598834920302751420699569308326115874030165633862564363240335996651765769278141659794730039723021006245296406140516758110487233685010543289249177878443104290196862440457859320387686694821374011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							809c8a1b1c2a23211ebe2d6184480d86012e061b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aegi.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altimake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antler.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appsforiphone.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandoffads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barronscommodity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaircheesefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookofra-slot-play.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cajueiro.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campshepull3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consummatively.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dashstudios.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfordatascience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dilusso.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dougireton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doxy.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facebdook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flychanelle.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingtogetherual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gdy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigasetmobileusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalverticalgardening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happycharli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henneart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkhusuabi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.httpbankofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illusto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imatiothiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.josephurban.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ken-o-do-ibaraki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixos.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merawalapandit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrcomputershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neumaticosjsanchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newseria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinemarketingagency.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pamitnyalembur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plasergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premium-spirits.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prestamospersonalesanetbra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prestocard.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primeavideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ramsinghsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raywestfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thestickytongue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsmplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twn5g.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zerohwdge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegi.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altimake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antler.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsforiphone.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandoffads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barronscommodity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaircheesefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookofra-slot-play.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cajueiro.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campshepull3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consummatively.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashstudios.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfordatascience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilusso.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougireton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doxy.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebdook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flychanelle.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingtogetherual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigasetmobileusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalverticalgardening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happycharli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henneart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkhusuabi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpbankofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illusto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imatiothiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josephurban.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ken-o-do-ibaraki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixos.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merawalapandit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcomputershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neumaticosjsanchez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newseria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinemarketingagency.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamitnyalembur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium-spirits.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestamospersonalesanetbra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestocard.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeavideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramsinghsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raywestfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestickytongue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsmplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twn5g.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerohwdge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fbc5bf3dd0000040300483046022100a0b1e125b85ea4133e37cc2e678ab9c9e425dbfe05e51507f38c949d2e2bbd1e022100a3ca1477b1f49bb4a3f3328b867fe981a97d087b1770114d1d182b8bac5453c5007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fbc5bf4d0000004030047304502210083994bfee0824e078b523889a5d9d901a219f04ee283c3f03b2b94fa721a13c702203c024a7f5a441a0ac4cf7e54f6564c78444d4b7bb8934c0a3fe9aa5e945d6eba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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