ouijaboard.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:4e:e8:43:d8:d8:57:3a:c0:c6:de:c2:50:70:b7:3f:d4:8b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ouijaboard.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:e8:43:d8:d8:57:3a:c0:c6:de:c2:50:70:b7:3f:d4:8b
Serial Number (int): 288187615592166316121736487348831279633547
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:42:39:a4:3b:6c:97:a8:f5:d2:7f:ff:c2:80:a5:1d:18:bd:24:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:14:19:da:dc:e6:e9:64:2e:54:03:2e:4e:53:a5:cd:51:a6:fc:ba
Fingerprint (sha256): 0a:32:0f:77:cf:b6:e3:94:7d:ab:d7:26:76:05:74:b9:17:df:7d:9c:f7:86:87:76:25:bd:c3:61:f0:9e:d6:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ouijaboard.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ouijaboard.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3dtouching.com
*.5nk.xyz
*.ageofgaming.net
*.aicollectives.com
*.bamazon.es
*.bedbathandbeuond.com
*.caominhtuan.com
*.comunicacionesautomaticas.com
*.crookedsticbows.com
*.douglaa.de
*.elmalimarketonline.com
*.fishables.com
*.freedoge.cc
*.gemefun.com
*.governments.com.au
*.hasebank.com
*.hqbitt.com
*.hrz.com.au
*.jecpenney.com
*.johnlewis.co
*.kasyde.com
*.landining.com.au
*.leblanc-dental.com
*.lilect.net
*.longpaintstores.com
*.meadowseshop.co
*.melbournecowsave.com
*.myfantasyleaque.com
*.mykohlscharge.us
*.neo-capital.com
*.nordwest.xyz
*.oddstudio.org
*.onesourceled.com
*.ouijaboard.com.au
*.ourhome2.co
*.oxydiveclub.info
*.pagesorganics.com
*.secondarybrieftoglancetoday.info
*.sliy.cc
*.slotmainia.com
*.symantecendpoint.com
*.taboofamily.ru
*.tandenborstel.co
*.toulouse.com.au
*.uniteddefense.org
*.us04zoom.us
*.visitwalgreens.com
*.wwwbioslim.es
*.xwvassal.info
*.zenyge.co
3dtouching.com
5nk.xyz
ageofgaming.net
aicollectives.com
bamazon.es
bedbathandbeuond.com
caominhtuan.com
comunicacionesautomaticas.com
crookedsticbows.com
douglaa.de
elmalimarketonline.com
fishables.com
freedoge.cc
gemefun.com
governments.com.au
hasebank.com
hqbitt.com
hrz.com.au
jecpenney.com
johnlewis.co
kasyde.com
landining.com.au
leblanc-dental.com
lilect.net
longpaintstores.com
meadowseshop.co
melbournecowsave.com
myfantasyleaque.com
mykohlscharge.us
neo-capital.com
nordwest.xyz
oddstudio.org
onesourceled.com
ouijaboard.com.au
ourhome2.co
oxydiveclub.info
pagesorganics.com
secondarybrieftoglancetoday.info
sliy.cc
slotmainia.com
symantecendpoint.com
taboofamily.ru
tandenborstel.co
toulouse.com.au
uniteddefense.org
us04zoom.us
visitwalgreens.com
wwwbioslim.es
xwvassal.info
zenyge.co

Other certificates including the domain name ouijaboard.com.au

(limited to 100 certificates)
xn--behindertenwerksttte-rzb.de
ouijaboard.com.au
ouijaboard.com.au
controllers.com.au
ouijaboard.com.au
ouijaboard.com.au
appraisers.com.au
seniorsingles.com.au
ouijaboard.com.au
appraisers.com.au
fishnfoolcharters.com
kitschmoog.com

Certificate

The complete raw certificate details for ouijaboard.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM5jCCC86gAwIBAgISA07oQ9jYVzrAxt7CUHC3P9SLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTQxNTQ5MDhaFw0yNDA2MTIxNTQ5MDdaMBwxGjAYBgNVBAMT
EW91aWphYm9hcmQuY29tLmF1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAvTx6XaqtZ2j2jLapzR1pQ6pRz0FdirEpazl7WiuwDh44mzdoFtP+RWTahzgl
uurRQlE6Kc689SY1Pq+njrLK1r135xMesYEamPd/lN1HyeKUEXHoqqrvVGX0n4+Z
9lT+UMUNyqzTi8xYCsql2jIEOoNRtHIwyNs/Tuj6yBk+egNZNuBuY5hzfYyx/0w8
G8oI1m1oXdL8jc5Y5Q79dCi0l+fVkHS9tY+mWVZHLRZVlzDKXnjVapR1SWhHnIfH
CDf+gLyVKFBHw0WU9PE204NJb2QTnnyWgJdNV/I6a2J/c6QzfKcMvCPhNJ5pPmcP
6x7YSj5Pc8Pg4BQ8tlHvxGKHCbrH0sjn4kG25GmSMrk2VniA8NlXkhQWxB51sWE7
hFn8wF7Yr5G2Uz3Wz6OSchBpuHDfoJHiyvUn52QIhh6t7IJjmHkThhQE+hg1zMRx
5Al1igeNFC6qcf0xaoqj5A3P9DnsIrt3Jm2VBwP5hyu+ANj3xaRNwaPabxh/fRQv
5Fv6nHFVg03efpw+1kqI2n+V4wr9P5XxhLKLfdLmIAY9sIU9VFwm4UQtr51KHy9V
yMWl3d5yKbb5ALdkLXwlQiwx3jfUA7iYSXpLjUaAAXO0XI8NkxyCQHkh0meu9Mcf
l/36p951v9IPr94iq4fD0MntVvKiVGsRHqwvFYAI1w79Uz0CAwEAAaOCCQowggkG
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhUI5pDtsl6j10n//woClHRi9JPcwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggcPBgNVHREEggcGMIIHAoIQKi4zZHRvdWNo
aW5nLmNvbYIJKi41bmsueHl6ghEqLmFnZW9mZ2FtaW5nLm5ldIITKi5haWNvbGxl
Y3RpdmVzLmNvbYIMKi5iYW1hem9uLmVzghYqLmJlZGJhdGhhbmRiZXVvbmQuY29t
ghEqLmNhb21pbmh0dWFuLmNvbYIfKi5jb211bmljYWNpb25lc2F1dG9tYXRpY2Fz
LmNvbYIVKi5jcm9va2Vkc3RpY2Jvd3MuY29tggwqLmRvdWdsYWEuZGWCGCouZWxt
YWxpbWFya2V0b25saW5lLmNvbYIPKi5maXNoYWJsZXMuY29tgg0qLmZyZWVkb2dl
LmNjgg0qLmdlbWVmdW4uY29tghQqLmdvdmVybm1lbnRzLmNvbS5hdYIOKi5oYXNl
YmFuay5jb22CDCouaHFiaXR0LmNvbYIMKi5ocnouY29tLmF1gg8qLmplY3Blbm5l
eS5jb22CDiouam9obmxld2lzLmNvggwqLmthc3lkZS5jb22CEioubGFuZGluaW5n
LmNvbS5hdYIUKi5sZWJsYW5jLWRlbnRhbC5jb22CDCoubGlsZWN0Lm5ldIIVKi5s
b25ncGFpbnRzdG9yZXMuY29tghEqLm1lYWRvd3Nlc2hvcC5jb4IWKi5tZWxib3Vy
bmVjb3dzYXZlLmNvbYIVKi5teWZhbnRhc3lsZWFxdWUuY29tghIqLm15a29obHNj
aGFyZ2UudXOCESoubmVvLWNhcGl0YWwuY29tgg4qLm5vcmR3ZXN0Lnh5eoIPKi5v
ZGRzdHVkaW8ub3JnghIqLm9uZXNvdXJjZWxlZC5jb22CEyoub3VpamFib2FyZC5j
b20uYXWCDSoub3VyaG9tZTIuY2+CEioub3h5ZGl2ZWNsdWIuaW5mb4ITKi5wYWdl
c29yZ2FuaWNzLmNvbYIiKi5zZWNvbmRhcnlicmllZnRvZ2xhbmNldG9kYXkuaW5m
b4IJKi5zbGl5LmNjghAqLnNsb3RtYWluaWEuY29tghYqLnN5bWFudGVjZW5kcG9p
bnQuY29tghAqLnRhYm9vZmFtaWx5LnJ1ghIqLnRhbmRlbmJvcnN0ZWwuY2+CESou
dG91bG91c2UuY29tLmF1ghMqLnVuaXRlZGRlZmVuc2Uub3Jngg0qLnVzMDR6b29t
LnVzghQqLnZpc2l0d2FsZ3JlZW5zLmNvbYIPKi53d3diaW9zbGltLmVzgg8qLnh3
dmFzc2FsLmluZm+CCyouemVueWdlLmNvgg4zZHRvdWNoaW5nLmNvbYIHNW5rLnh5
eoIPYWdlb2ZnYW1pbmcubmV0ghFhaWNvbGxlY3RpdmVzLmNvbYIKYmFtYXpvbi5l
c4IUYmVkYmF0aGFuZGJldW9uZC5jb22CD2Nhb21pbmh0dWFuLmNvbYIdY29tdW5p
Y2FjaW9uZXNhdXRvbWF0aWNhcy5jb22CE2Nyb29rZWRzdGljYm93cy5jb22CCmRv
dWdsYWEuZGWCFmVsbWFsaW1hcmtldG9ubGluZS5jb22CDWZpc2hhYmxlcy5jb22C
C2ZyZWVkb2dlLmNjggtnZW1lZnVuLmNvbYISZ292ZXJubWVudHMuY29tLmF1ggxo
YXNlYmFuay5jb22CCmhxYml0dC5jb22CCmhyei5jb20uYXWCDWplY3Blbm5leS5j
b22CDGpvaG5sZXdpcy5jb4IKa2FzeWRlLmNvbYIQbGFuZGluaW5nLmNvbS5hdYIS
bGVibGFuYy1kZW50YWwuY29tggpsaWxlY3QubmV0ghNsb25ncGFpbnRzdG9yZXMu
Y29tgg9tZWFkb3dzZXNob3AuY2+CFG1lbGJvdXJuZWNvd3NhdmUuY29tghNteWZh
bnRhc3lsZWFxdWUuY29tghBteWtvaGxzY2hhcmdlLnVzgg9uZW8tY2FwaXRhbC5j
b22CDG5vcmR3ZXN0Lnh5eoINb2Rkc3R1ZGlvLm9yZ4IQb25lc291cmNlbGVkLmNv
bYIRb3VpamFib2FyZC5jb20uYXWCC291cmhvbWUyLmNvghBveHlkaXZlY2x1Yi5p
bmZvghFwYWdlc29yZ2FuaWNzLmNvbYIgc2Vjb25kYXJ5YnJpZWZ0b2dsYW5jZXRv
ZGF5LmluZm+CB3NsaXkuY2OCDnNsb3RtYWluaWEuY29tghRzeW1hbnRlY2VuZHBv
aW50LmNvbYIOdGFib29mYW1pbHkucnWCEHRhbmRlbmJvcnN0ZWwuY2+CD3RvdWxv
dXNlLmNvbS5hdYIRdW5pdGVkZGVmZW5zZS5vcmeCC3VzMDR6b29tLnVzghJ2aXNp
dHdhbGdyZWVucy5jb22CDXd3d2Jpb3NsaW0uZXOCDXh3dmFzc2FsLmluZm+CCXpl
bnlnZS5jbzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcE
gfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjj3eFdMA
AAQDAEgwRgIhALfowABpHFe+f1Uj+utlfIwVDC3d0qaSmuLlQyP5IuO7AiEAglGK
66+ITFuXGoQLCjp5/5rl/m/LQX2rb5KGAEUA2yMAdwCi4r/WHt4vLweg1k5tN6fc
ZUOwxrUuotq3iviabfUX2AAAAY493hXRAAAEAwBIMEYCIQDil6UjMYUs4wOkhanc
bekJRx6lhixGrvsk1IKBvWE65QIhAIoOq1vd/Fig9XOIL35MI6BnpjSv2YtoYn3l
TD2d6NnAMA0GCSqGSIb3DQEBCwUAA4IBAQCXBjMOGXq+OknE5rvKsaQZ8PETiWWH
VTJ5aCGE1oYAEYO/wiz7KnzjeXSEtTcrMJNGEvI7yHtT1S84l+pWUIoT03Xx++KO
8LHk2cwMRrFJSMGBMDtF5PbBH30oRxSBLqCtQsOS4kDLjEsOhB5B5Q2UsLnsDHeC
l4Y0r2dqvi918pqzRNVrntG493bWkln3Um3vp4kXc5nVKPHzmF81misSg1kMG+vJ
vUYKDkpKYzkuuCFcORjAOMzwxIV5LAc2ZefCaUH1+mhwJzqn8jBPsl06WVYJTflQ
G0+tUFO7nZ33babjCKa+zhHj0vN2YeRIuNFT3b7yBsMR5rTS5F5lUxD6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288187615592166316121736487348831279633547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 15:49:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 15:49:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ouijaboard.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772016512763030910969428889977961337488851860806712977288306089986120013577665188437179255580064695801534671355553285827580873245287614156208006099217952013649027899580365439122857782864371278228977326954785662381596898446505345100807334864625339255356812933329643132115468551025788716926840377408833191862887395557992816183248116092786631508145178755313135007158991504532109475070785632565512613667475308573875921242139686998969461906837448850092527340222445928370650284564125565251568230866254165116424661810904717622493719037938080197339036868408634212672478046741646831656127795618071972311816672234882202207675550561200566170076653549756079696240567555807614222139011563727245616334729343150369764693309593734561600607637065250616403904747473633429298292898331562334252818005536818027238506562151190232598561601624009006213691630199877567881612032320548679252294712865410866566279900086027917917660422801425964631185236338994434005142395232739551002665040530458166968790521906918544395286205334447255997766586857947831097658299223340853545289580221375186783963844901834133499885845852990937108489610475581513639268259957107918611250583995471761338546423071948899279796417530993106776673250934892757553173595477897987800254206781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							854239a43b6c97a8f5d27fffc280a51d18bd24f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1798 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dtouching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5nk.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ageofgaming.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aicollectives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bamazon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedbathandbeuond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caominhtuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comunicacionesautomaticas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crookedsticbows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.douglaa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmalimarketonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedoge.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemefun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.governments.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqbitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jecpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnlewis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kasyde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leblanc-dental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lilect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longpaintstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meadowseshop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melbournecowsave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfantasyleaque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mykohlscharge.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neo-capital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordwest.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oddstudio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onesourceled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ouijaboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourhome2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxydiveclub.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pagesorganics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secondarybrieftoglancetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sliy.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slotmainia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symantecendpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taboofamily.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tandenborstel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toulouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniteddefense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us04zoom.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitwalgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbioslim.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xwvassal.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zenyge.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dtouching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5nk.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ageofgaming.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aicollectives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamazon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedbathandbeuond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caominhtuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicacionesautomaticas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crookedsticbows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douglaa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmalimarketonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedoge.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemefun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governments.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqbitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jecpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnlewis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasyde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leblanc-dental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longpaintstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadowseshop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbournecowsave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfantasyleaque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykohlscharge.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo-capital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordwest.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oddstudio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesourceled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourhome2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxydiveclub.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagesorganics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondarybrieftoglancetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sliy.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotmainia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symantecendpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taboofamily.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandenborstel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toulouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniteddefense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us04zoom.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitwalgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbioslim.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xwvassal.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenyge.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e3dde15d30000040300483046022100b7e8c000691c57be7f5523faeb657c8c150c2dddd2a6929ae2e54323f922e3bb02210082518aebaf884c5b971a840b0a3a79ff9ae5fe6fcb417dab6f9286004500db23007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e3dde15d10000040300483046022100e297a52331852ce303a485a9dc6de909471ea5862c46aefb24d48281bd613ae50221008a0eab5bddfc58a0f573882f7e4c23a067a634afd98b68627de54c3d9de8d9c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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