internetfitness.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d8:a9:82:fa:28:38:38:ba:dc:e5:b9:d5:36:bc:6f:e3:5e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=internetfitness.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:a9:82:fa:28:38:38:ba:dc:e5:b9:d5:36:bc:6f:e3:5e
Serial Number (int): 422175454585631882161016041813046264324958
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:3a:af:82:68:68:d2:cf:f6:32:4e:27:d5:00:2c:84:fc:a6:84:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:68:cb:d7:a2:c1:41:77:c1:87:38:e8:7f:e3:3e:68:fb:7c:49:a3
Fingerprint (sha256): 0b:aa:cf:71:a4:2d:df:c2:65:a4:48:ae:b4:b3:e3:2f:6e:ff:4e:0c:9c:86:d6:2c:d9:a0:bd:ce:cb:e3:0f:91

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate internetfitness.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for internetfitness.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2ndliar.com
*.abnews.com
*.apollosite.ml
*.deflorated.com
*.delnghi.com
*.desjardinlifeinsurance.com
*.easyreadyweb.com
*.erorne.co
*.erotohs.co
*.erticalbrands.co
*.escobarvipclub.co
*.estate-salefinder.co
*.estoytantriste.co
*.ethgoerli.co
*.gonegirlaudiobook.com
*.hndbsw.com
*.ih2q.com
*.internetfitness.com
*.ipadwireless.it
*.jjill.cm
*.jwtuba.com
*.k04sv.com
*.kiranzahid.com
*.lasvegas-used-cars.com
*.logowares.com.au
*.mortgage-calculating.us
*.motelesenmatamoros.com
*.nairbet.com
*.nhathom.com
*.nourpublishing.co
*.nugreenhomechef.com
*.nurhdfilme.com
*.primeclass.co
*.pyexercise.com
*.safewebsearches.com
*.shawpropertysolutions-sherwinwilliams.com
*.shoeout.co
*.storythattouch.com
*.stylestitch.co
*.surgestream.net
*.thankyouforthemusic.co
*.thesohobox.co
*.timearmed.com
*.tizermedias.com
*.vlphimsex.com
*.vsgbs.com
*.westburymusicfair.com
*.westhighwaterloo1950.com
*.wolfibound.net
*.worldpakcers.com
2ndliar.com
abnews.com
apollosite.ml
deflorated.com
delnghi.com
desjardinlifeinsurance.com
easyreadyweb.com
erorne.co
erotohs.co
erticalbrands.co
escobarvipclub.co
estate-salefinder.co
estoytantriste.co
ethgoerli.co
gonegirlaudiobook.com
hndbsw.com
ih2q.com
internetfitness.com
ipadwireless.it
jjill.cm
jwtuba.com
k04sv.com
kiranzahid.com
lasvegas-used-cars.com
logowares.com.au
mortgage-calculating.us
motelesenmatamoros.com
nairbet.com
nhathom.com
nourpublishing.co
nugreenhomechef.com
nurhdfilme.com
primeclass.co
pyexercise.com
safewebsearches.com
shawpropertysolutions-sherwinwilliams.com
shoeout.co
storythattouch.com
stylestitch.co
surgestream.net
thankyouforthemusic.co
thesohobox.co
timearmed.com
tizermedias.com
vlphimsex.com
vsgbs.com
westburymusicfair.com
westhighwaterloo1950.com
wolfibound.net
worldpakcers.com

Other certificates including the domain name internetfitness.com

(limited to 100 certificates)
internetfitness.com
musicnotess.com
aceflreaccount.com
internetfitness.com
gentlemenspapattaya.com
fortivacteditcard.com
internetfitness.com
aeporn.com
howare.com
duckseasonnyc.com
kalucreativo.com
internetfitness.com

Certificate

The complete raw certificate details for internetfitness.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINHzCCDAegAwIBAgISBNipgvooODi63OW51Ta8b+NeMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjEwODQ0NDRaFw0yNDAzMjAwODQ0NDNaMB4xHDAaBgNVBAMT
E2ludGVybmV0Zml0bmVzcy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCsR+PFaeHk2FIn1IorsxRRANEhxSHujiatZzm+mJRHGh3ht+xC+lAaq4Pt
nhMNF94Pg38JxEtUsbnOi9xKIeskd6QL16fopOvvwUyWtQBal2+PznEk/hg9uV1h
58YeG5PIj3da/upASrgXh6azu83u+1DVAzLyEjM+HaaIv5yD1OQoMxGEt4eRfnIE
jN2SpHVvdaMCw7+JPeuFe41uNkMazjzgCMlAM4nv59rPK9WSGLI7gsOt+Y885s6v
GsYHhKSqbJaRxdPuWIijQ7kjNF2XCt6Xhei1SrgxkkkGnPEOO8wIqi/LcG1p4MtL
gzoWlkX9vWGBy7guZ+XN8VPTERav/3C7/Rp+ghze46qzzN/O4tTIbcJIrjHVsKas
eMBFJ4PSjEb+teB4f4WBHtoXX0z2D+Z4CqtGUcKywYrHnTjY7sWlEtbySvDqekuq
MLpWC4N9gCUclgBqZkb8JdRV4XgM5hgfn+DdJZ85j5q1CWNwmH9rZFphB8C+Twlt
rpb7ZCcdFYn2zjbwQt0tM3rrofbI7ysDrzbn64KA8W+9gDK7KdVY/HyrZeVWcXk+
m8fxIPLyS3JSB/P9KUl/9ltjXT19IfyPdw+9FGO9JhXmtulhkvBMrUhVEiSd5yjT
/uoDQoNL6hSDa2tsPXA4KXL0vsuT8Uf6G2WzbtxiKRFxxr9HZwIDAQABo4IJQTCC
CT0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQkOq+CaGjSz/YyTifVACyE/KaE7DAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCB0cGA1UdEQSCBz4wggc6gg0qLjJuZGxp
YXIuY29tggwqLmFibmV3cy5jb22CDyouYXBvbGxvc2l0ZS5tbIIQKi5kZWZsb3Jh
dGVkLmNvbYINKi5kZWxuZ2hpLmNvbYIcKi5kZXNqYXJkaW5saWZlaW5zdXJhbmNl
LmNvbYISKi5lYXN5cmVhZHl3ZWIuY29tggsqLmVyb3JuZS5jb4IMKi5lcm90b2hz
LmNvghIqLmVydGljYWxicmFuZHMuY2+CEyouZXNjb2JhcnZpcGNsdWIuY2+CFiou
ZXN0YXRlLXNhbGVmaW5kZXIuY2+CEyouZXN0b3l0YW50cmlzdGUuY2+CDiouZXRo
Z29lcmxpLmNvghcqLmdvbmVnaXJsYXVkaW9ib29rLmNvbYIMKi5obmRic3cuY29t
ggoqLmloMnEuY29tghUqLmludGVybmV0Zml0bmVzcy5jb22CESouaXBhZHdpcmVs
ZXNzLml0ggoqLmpqaWxsLmNtggwqLmp3dHViYS5jb22CCyouazA0c3YuY29tghAq
LmtpcmFuemFoaWQuY29tghgqLmxhc3ZlZ2FzLXVzZWQtY2Fycy5jb22CEioubG9n
b3dhcmVzLmNvbS5hdYIZKi5tb3J0Z2FnZS1jYWxjdWxhdGluZy51c4IYKi5tb3Rl
bGVzZW5tYXRhbW9yb3MuY29tgg0qLm5haXJiZXQuY29tgg0qLm5oYXRob20uY29t
ghMqLm5vdXJwdWJsaXNoaW5nLmNvghUqLm51Z3JlZW5ob21lY2hlZi5jb22CECou
bnVyaGRmaWxtZS5jb22CDyoucHJpbWVjbGFzcy5jb4IQKi5weWV4ZXJjaXNlLmNv
bYIVKi5zYWZld2Vic2VhcmNoZXMuY29tgisqLnNoYXdwcm9wZXJ0eXNvbHV0aW9u
cy1zaGVyd2lud2lsbGlhbXMuY29tggwqLnNob2VvdXQuY2+CFCouc3Rvcnl0aGF0
dG91Y2guY29tghAqLnN0eWxlc3RpdGNoLmNvghEqLnN1cmdlc3RyZWFtLm5ldIIY
Ki50aGFua3lvdWZvcnRoZW11c2ljLmNvgg8qLnRoZXNvaG9ib3guY2+CDyoudGlt
ZWFybWVkLmNvbYIRKi50aXplcm1lZGlhcy5jb22CDyoudmxwaGltc2V4LmNvbYIL
Ki52c2dicy5jb22CFyoud2VzdGJ1cnltdXNpY2ZhaXIuY29tghoqLndlc3RoaWdo
d2F0ZXJsb28xOTUwLmNvbYIQKi53b2xmaWJvdW5kLm5ldIISKi53b3JsZHBha2Nl
cnMuY29tggsybmRsaWFyLmNvbYIKYWJuZXdzLmNvbYINYXBvbGxvc2l0ZS5tbIIO
ZGVmbG9yYXRlZC5jb22CC2RlbG5naGkuY29tghpkZXNqYXJkaW5saWZlaW5zdXJh
bmNlLmNvbYIQZWFzeXJlYWR5d2ViLmNvbYIJZXJvcm5lLmNvggplcm90b2hzLmNv
ghBlcnRpY2FsYnJhbmRzLmNvghFlc2NvYmFydmlwY2x1Yi5jb4IUZXN0YXRlLXNh
bGVmaW5kZXIuY2+CEWVzdG95dGFudHJpc3RlLmNvggxldGhnb2VybGkuY2+CFWdv
bmVnaXJsYXVkaW9ib29rLmNvbYIKaG5kYnN3LmNvbYIIaWgycS5jb22CE2ludGVy
bmV0Zml0bmVzcy5jb22CD2lwYWR3aXJlbGVzcy5pdIIIamppbGwuY22CCmp3dHVi
YS5jb22CCWswNHN2LmNvbYIOa2lyYW56YWhpZC5jb22CFmxhc3ZlZ2FzLXVzZWQt
Y2Fycy5jb22CEGxvZ293YXJlcy5jb20uYXWCF21vcnRnYWdlLWNhbGN1bGF0aW5n
LnVzghZtb3RlbGVzZW5tYXRhbW9yb3MuY29tggtuYWlyYmV0LmNvbYILbmhhdGhv
bS5jb22CEW5vdXJwdWJsaXNoaW5nLmNvghNudWdyZWVuaG9tZWNoZWYuY29tgg5u
dXJoZGZpbG1lLmNvbYINcHJpbWVjbGFzcy5jb4IOcHlleGVyY2lzZS5jb22CE3Nh
ZmV3ZWJzZWFyY2hlcy5jb22CKXNoYXdwcm9wZXJ0eXNvbHV0aW9ucy1zaGVyd2lu
d2lsbGlhbXMuY29tggpzaG9lb3V0LmNvghJzdG9yeXRoYXR0b3VjaC5jb22CDnN0
eWxlc3RpdGNoLmNvgg9zdXJnZXN0cmVhbS5uZXSCFnRoYW5reW91Zm9ydGhlbXVz
aWMuY2+CDXRoZXNvaG9ib3guY2+CDXRpbWVhcm1lZC5jb22CD3RpemVybWVkaWFz
LmNvbYINdmxwaGltc2V4LmNvbYIJdnNnYnMuY29tghV3ZXN0YnVyeW11c2ljZmFp
ci5jb22CGHdlc3RoaWdod2F0ZXJsb28xOTUwLmNvbYIOd29sZmlib3VuZC5uZXSC
EHdvcmxkcGFrY2Vycy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEE
AdZ5AgQCBIH2BIHzAPEAdwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX
2AAAAYyLw1qmAAAEAwBIMEYCIQDQRAF1acSqGGwizXGrfstkWl1kODAc/tkJqRmp
M5xyZgIhAOCBXD8rDC5AUOuY2HnJbDY6XCuuRuACMU609qIcopoZAHYA7s3QZNXb
Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMi8Na5AAABAMARzBFAiAIrMHn
C4CXJchlQl4uFYJM/NDGJPpXFqnsuwAQ9LtshgIhAPcVamgE1bijQJH8c7KcK1ln
zfLzJqKU3xiYLUnFq4wRMA0GCSqGSIb3DQEBCwUAA4IBAQCPyvOtFxbpJAxwCFSj
+nnlHmmUut3a1qqmNfbuIyqs2yFiOh3d8yc4ygKebBOiNjh4Pehqvx/JPcYizGur
XlLkOnLWDtRRdkDXx4/gx/OkjEvGOxqxRh/af4WgMFv0ixqmymsEEzM3r8QF5cTu
yyHGw+C64YtfteA+xj3sOOhRTkk4L9QVwC8DpBtpgNOQYV9lQk3bfojTUqw4E3W3
GMoPLtxpKEwplg0XO45pzOH2x7kQOGGRnPtfr76BaKyoe33kHANBN5an2aPkOA9B
beNDXMbt4RYXIHmAX8CHmcx6JAh0LNytriqMSGB/CvphLUbvFcpPqYa0404jCWLb
ibm/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArEfjxWnh5NhSJ9SKK7MU
UQDRIcUh7o4mrWc5vpiURxod4bfsQvpQGquD7Z4TDRfeD4N/CcRLVLG5zovcSiHr
JHekC9en6KTr78FMlrUAWpdvj85xJP4YPbldYefGHhuTyI93Wv7qQEq4F4ems7vN
7vtQ1QMy8hIzPh2miL+cg9TkKDMRhLeHkX5yBIzdkqR1b3WjAsO/iT3rhXuNbjZD
Gs484AjJQDOJ7+fazyvVkhiyO4LDrfmPPObOrxrGB4SkqmyWkcXT7liIo0O5IzRd
lwrel4XotUq4MZJJBpzxDjvMCKovy3BtaeDLS4M6FpZF/b1hgcu4LmflzfFT0xEW
r/9wu/0afoIc3uOqs8zfzuLUyG3CSK4x1bCmrHjARSeD0oxG/rXgeH+FgR7aF19M
9g/meAqrRlHCssGKx5042O7FpRLW8krw6npLqjC6VguDfYAlHJYAamZG/CXUVeF4
DOYYH5/g3SWfOY+atQljcJh/a2RaYQfAvk8Jba6W+2QnHRWJ9s428ELdLTN666H2
yO8rA6825+uCgPFvvYAyuynVWPx8q2XlVnF5PpvH8SDy8ktyUgfz/SlJf/ZbY109
fSH8j3cPvRRjvSYV5rbpYZLwTK1IVRIkneco0/7qA0KDS+oUg2trbD1wOCly9L7L
k/FH+htls27cYikRcca/R2cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422175454585631882161016041813046264324958
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 08:44:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 08:44:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'internetfitness.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702844422335396261939869852698365932828292075333727874420275603547840947999565646669668513106220788674648306464918041430948020404419865966601025229927629831920555974076327878384184826830476268441361763467329152297319820829326387313878522788505011898109936664624755715681294337027296195206788035076895250902782093526588965817471061323458281073409920667460489986248783435785154472916794900461614533359781781764453893883712312337300680822442641373812871747587513182985009849820409044779728149704994899080863946756832415716942617724879928203967358094150714141565176729457472168944080991628724204718431451280491378534672845226822880405857694979429924689142892227955202344800576485520995623519502497826069520471434970164288133026285899681260808918943837355551019953904567242294136908448290922073388760847377895811306382312432921439735066474812118363552555227430355067936070347066480094209348833595954577846713752191610168488875929835409583911594189560459744979791682634747629961221297765873459157350153593061508566227484941795354651630826381753024101343254939454596982103863286919032170203442889140536196764646028078490417371495086358259771777473938989419783986092792401973821790885061214498082689340829945346602399202586331378678239283047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							243aaf826868d2cff6324e27d5002c84fca684ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2ndliar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apollosite.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deflorated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delnghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desjardinlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyreadyweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotohs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erticalbrands.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escobarvipclub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estate-salefinder.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estoytantriste.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethgoerli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gonegirlaudiobook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hndbsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ih2q.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internetfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipadwireless.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjill.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwtuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k04sv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiranzahid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasvegas-used-cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logowares.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgage-calculating.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motelesenmatamoros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nairbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhathom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nourpublishing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nugreenhomechef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nurhdfilme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primeclass.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyexercise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safewebsearches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shawpropertysolutions-sherwinwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoeout.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storythattouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stylestitch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surgestream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thankyouforthemusic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesohobox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timearmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tizermedias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vlphimsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vsgbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westburymusicfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westhighwaterloo1950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfibound.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldpakcers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2ndliar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollosite.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deflorated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delnghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desjardinlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyreadyweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erorne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotohs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erticalbrands.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escobarvipclub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estate-salefinder.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estoytantriste.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethgoerli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonegirlaudiobook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hndbsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ih2q.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadwireless.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjill.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwtuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k04sv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiranzahid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegas-used-cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logowares.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgage-calculating.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motelesenmatamoros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nairbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhathom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nourpublishing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nugreenhomechef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurhdfilme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeclass.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyexercise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safewebsearches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shawpropertysolutions-sherwinwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoeout.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storythattouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylestitch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surgestream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thankyouforthemusic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesohobox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timearmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tizermedias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlphimsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsgbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westburymusicfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westhighwaterloo1950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfibound.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpakcers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c8bc35aa60000040300483046022100d044017569c4aa186c22cd71ab7ecb645a5d6438301cfed909a919a9339c7266022100e0815c3f2b0c2e4050eb98d879c96c363a5c2bae46e002314eb4f6a21ca29a19007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c8bc35ae40000040300473045022008acc1e70b809725c865425e2e15824cfcd0c624fa5716a9ecbb0010f4bb6c86022100f7156a6804d5b8a34091fc73b29c2b5967cdf2f326a294df18982d49c5ab8c11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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