abeccousa.com

Issued by R3

About this certificate

This digital certificate with serial number 04:13:0c:f9:1b:a4:38:85:dd:cc:f1:f3:4e:33:a3:17:cb:5a was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abeccousa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:13:0c:f9:1b:a4:38:85:dd:cc:f1:f3:4e:33:a3:17:cb:5a
Serial Number (int): 354931752877041982500896085080883909348186
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:09:56:e1:36:31:3e:7e:7a:5d:57:8c:9c:5f:23:de:ab:fb:14:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:08:cf:51:f1:c3:20:db:22:b0:32:d0:1e:1a:90:2f:12:1f:f3:e3
Fingerprint (sha256): 0c:57:1d:28:b0:05:fd:b7:ce:bb:bc:78:90:61:ad:79:a9:da:ca:9a:9a:ad:7b:a1:c8:82:48:c2:3a:e4:10:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abeccousa.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abeccousa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.112sihu.com
*.aahan.net
*.abeccousa.com
*.ahmadyounis.com
*.amuni-ee.com
*.avrgenius.com
*.bankmobilevibr.com
*.belessa.com
*.bountiful.net
*.brzzars.com
*.buzeta.com
*.cavemanfitnessguide.com
*.cearco.com
*.cornerdirecto.tv
*.datinggusa.com
*.encombrantssurrendezvous.com
*.finecode.us
*.fmbfox.com
*.footfetishbooru.com
*.from-us.com
*.grayhr.com
*.grossetotragsressiva.it
*.handcrafted-usa.com
*.heporndude.com
*.hillingdonliteraryfestival.com
*.holleywoodcasino.com
*.homedepotgear.com
*.icepass.com
*.ipeds.org
*.jantesetpneus.com
*.jobsnewsusa.com
*.jskus.com
*.kinok.to
*.lancom-usa.com
*.livparkside.com
*.losbetos.com
*.myfreecamsa.com
*.nedwick.com
*.oldworldornaments.com
*.passivequeen.com
*.pasten.de
*.pnct.us
*.revvicreditcard.com
*.rooltide.com
*.tplinkligin.net
*.uggsusa.com
*.wwwtruecar.com
*.xn--o3cit6gb.com
*.yy-service.com
112sihu.com
aahan.net
abeccousa.com
ahmadyounis.com
amuni-ee.com
avrgenius.com
bankmobilevibr.com
belessa.com
bountiful.net
brzzars.com
buzeta.com
cavemanfitnessguide.com
cearco.com
cornerdirecto.tv
datinggusa.com
encombrantssurrendezvous.com
finecode.us
fmbfox.com
footfetishbooru.com
from-us.com
grayhr.com
grossetotragsressiva.it
handcrafted-usa.com
heporndude.com
hillingdonliteraryfestival.com
holleywoodcasino.com
homedepotgear.com
icepass.com
ipeds.org
jantesetpneus.com
jobsnewsusa.com
jskus.com
kinok.to
lancom-usa.com
livparkside.com
losbetos.com
myfreecamsa.com
nedwick.com
oldworldornaments.com
passivequeen.com
pasten.de
pnct.us
revvicreditcard.com
rooltide.com
tplinkligin.net
uggsusa.com
wwwtruecar.com
xn--o3cit6gb.com
yy-service.com

Other certificates including the domain name abeccousa.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for abeccousa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMgDCCC2igAwIBAgISBBMM+RukOIXdzPHzTjOjF8taMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTYyMjAyNDJaFw0yNDAyMTQyMjAyNDFaMBgxFjAUBgNVBAMT
DWFiZWNjb3VzYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDP
vTBHqnEkoMo2GwtyGmvhPM0SKfwtQIdehZ+u3I60vOdcuuzG36nRUg8IFuM8rmJV
zeWkx81Np8CiL8g6YU7PGSksds6toOzPT+N/P7Lhyfs3AjKScLryUJ/OH94q0zeL
hKo3eEh+etK8HJBLqA3SAgUd0Lt16m9e0yMdJVwUNM+hhhEubZvILuQWpOrQRnX8
RnFXaMNJrfrvM/mqZzirjJtfkUjRVoq0LmtcBlydtOwixtKhzGSovvpzDDqJlfCQ
b3VYL1L944tuPtQgJ479FSP/9LUc38+i/QW5kizc80vwYdik5d5UaHch8Tz1Woqs
Lm0gMyimXpxX+u3AJpgAeUhdlp9Q9FdyAN6CABOyureCLgqGMoc9Lp6onqDvI4+t
9Gnf1XOTR2WCbqhocC8PtTa0TWGR3aFYeYHSp7bsGU1Xvr7gW0FBS7f+u9at4s9v
giHoz6fKD1QqgDn9gywIgwTu/lBxp5fBSDyouCPTR5tLm2IQkUQxX1kShDkXWu0S
VyVQs5OCOv33pSJJfXCKiIDbaTM95yZJxE/g1e396VXa635cuMmphULFfEn1AwJw
+GxH1F+Mu7KBzNlN6bFtScjpptI2q5m/vyjXDMyubrFdqEtRpJHZm0Nfa9oj60q8
yaHkQJvzf++cbTNAukcBQjWhjh1ss+F15NZwGHKoFQIDAQABo4IIqDCCCKQwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBQ3CVbhNjE+fnpdV4ycXyPeq/sUMDAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBq0GA1UdEQSCBqQwggaggg0qLjExMnNpaHUuY29t
ggsqLmFhaGFuLm5ldIIPKi5hYmVjY291c2EuY29tghEqLmFobWFkeW91bmlzLmNv
bYIOKi5hbXVuaS1lZS5jb22CDyouYXZyZ2VuaXVzLmNvbYIUKi5iYW5rbW9iaWxl
dmlici5jb22CDSouYmVsZXNzYS5jb22CDyouYm91bnRpZnVsLm5ldIINKi5icnp6
YXJzLmNvbYIMKi5idXpldGEuY29tghkqLmNhdmVtYW5maXRuZXNzZ3VpZGUuY29t
ggwqLmNlYXJjby5jb22CEiouY29ybmVyZGlyZWN0by50doIQKi5kYXRpbmdndXNh
LmNvbYIeKi5lbmNvbWJyYW50c3N1cnJlbmRlenZvdXMuY29tgg0qLmZpbmVjb2Rl
LnVzggwqLmZtYmZveC5jb22CFSouZm9vdGZldGlzaGJvb3J1LmNvbYINKi5mcm9t
LXVzLmNvbYIMKi5ncmF5aHIuY29tghkqLmdyb3NzZXRvdHJhZ3NyZXNzaXZhLml0
ghUqLmhhbmRjcmFmdGVkLXVzYS5jb22CECouaGVwb3JuZHVkZS5jb22CICouaGls
bGluZ2RvbmxpdGVyYXJ5ZmVzdGl2YWwuY29tghYqLmhvbGxleXdvb2RjYXNpbm8u
Y29tghMqLmhvbWVkZXBvdGdlYXIuY29tgg0qLmljZXBhc3MuY29tggsqLmlwZWRz
Lm9yZ4ITKi5qYW50ZXNldHBuZXVzLmNvbYIRKi5qb2JzbmV3c3VzYS5jb22CCyou
anNrdXMuY29tggoqLmtpbm9rLnRvghAqLmxhbmNvbS11c2EuY29tghEqLmxpdnBh
cmtzaWRlLmNvbYIOKi5sb3NiZXRvcy5jb22CESoubXlmcmVlY2Ftc2EuY29tgg0q
Lm5lZHdpY2suY29tghcqLm9sZHdvcmxkb3JuYW1lbnRzLmNvbYISKi5wYXNzaXZl
cXVlZW4uY29tggsqLnBhc3Rlbi5kZYIJKi5wbmN0LnVzghUqLnJldnZpY3JlZGl0
Y2FyZC5jb22CDioucm9vbHRpZGUuY29tghEqLnRwbGlua2xpZ2luLm5ldIINKi51
Z2dzdXNhLmNvbYIQKi53d3d0cnVlY2FyLmNvbYISKi54bi0tbzNjaXQ2Z2IuY29t
ghAqLnl5LXNlcnZpY2UuY29tggsxMTJzaWh1LmNvbYIJYWFoYW4ubmV0gg1hYmVj
Y291c2EuY29tgg9haG1hZHlvdW5pcy5jb22CDGFtdW5pLWVlLmNvbYINYXZyZ2Vu
aXVzLmNvbYISYmFua21vYmlsZXZpYnIuY29tggtiZWxlc3NhLmNvbYINYm91bnRp
ZnVsLm5ldIILYnJ6emFycy5jb22CCmJ1emV0YS5jb22CF2NhdmVtYW5maXRuZXNz
Z3VpZGUuY29tggpjZWFyY28uY29tghBjb3JuZXJkaXJlY3RvLnR2gg5kYXRpbmdn
dXNhLmNvbYIcZW5jb21icmFudHNzdXJyZW5kZXp2b3VzLmNvbYILZmluZWNvZGUu
dXOCCmZtYmZveC5jb22CE2Zvb3RmZXRpc2hib29ydS5jb22CC2Zyb20tdXMuY29t
ggpncmF5aHIuY29tghdncm9zc2V0b3RyYWdzcmVzc2l2YS5pdIITaGFuZGNyYWZ0
ZWQtdXNhLmNvbYIOaGVwb3JuZHVkZS5jb22CHmhpbGxpbmdkb25saXRlcmFyeWZl
c3RpdmFsLmNvbYIUaG9sbGV5d29vZGNhc2luby5jb22CEWhvbWVkZXBvdGdlYXIu
Y29tggtpY2VwYXNzLmNvbYIJaXBlZHMub3JnghFqYW50ZXNldHBuZXVzLmNvbYIP
am9ic25ld3N1c2EuY29tgglqc2t1cy5jb22CCGtpbm9rLnRvgg5sYW5jb20tdXNh
LmNvbYIPbGl2cGFya3NpZGUuY29tggxsb3NiZXRvcy5jb22CD215ZnJlZWNhbXNh
LmNvbYILbmVkd2ljay5jb22CFW9sZHdvcmxkb3JuYW1lbnRzLmNvbYIQcGFzc2l2
ZXF1ZWVuLmNvbYIJcGFzdGVuLmRlggdwbmN0LnVzghNyZXZ2aWNyZWRpdGNhcmQu
Y29tggxyb29sdGlkZS5jb22CD3RwbGlua2xpZ2luLm5ldIILdWdnc3VzYS5jb22C
Dnd3d3RydWVjYXIuY29tghB4bi0tbzNjaXQ2Z2IuY29tgg55eS1zZXJ2aWNlLmNv
bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3
ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi9pfU/UAAAQDAEgw
RgIhAKZOIyVlH1EG8l7yjs4QFiAKe1/3cop71CTt0C7XgL29AiEA2q2URz0CW2lV
rK+gOa/dbmbRA9gU4IF/ad89QqDY7vYAdwDuzdBk1dsazsVct520zROiModGfLzs
3sNRSFlGcR+1mwAAAYvaX1QIAAAEAwBIMEYCIQDuqroafTRykHQuxs5YU61V2IWQ
S30BiWDt9SXK6GiGnAIhALxstGKtTmLZp4I2ey89o99ecvF7kZpDSPk1Kyi9oDlY
MA0GCSqGSIb3DQEBCwUAA4IBAQB0yQgeXhKFxUpVh2FBxe44mJ+0hc5grERYDnap
0Bjyxc54RhaiGLnIvSO4I5XDqNVjVcYewAnV1fVvpOT9e67mBbKNaFREwgMqOjS3
ddjh7LI3/6XJSP3+7cszj9fqOD9vgiE7ILt3E8D2sSjFpJF6rhUmY+P2ldzLWoNC
4iRQVypA8T/4N8xPJeAw/HEhmQwYQciHjFQbl9AmWAuMydIJDsHIbx+MMXXs9dBy
goWyT4hKA3cNr1F22YnnfknelumpjIzvq2AMljLZyrmhX1TszcAM17P+kbAK6QBL
mAkTXi4jx/QkMWo+M7A1aveK/0YYMmhQ3TE7lMfFKHK19Rde
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354931752877041982500896085080883909348186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 22:02:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 22:02:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abeccousa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847501252249481174355993511886963114561478164872604338445640843980741540801119899049212336390759561125745777945897963958715627027069133407631916229711223224154420746669708493395934124751975609498149854062029709605489972512926948178179885456021767419311273129389687340231295766122342033236883398639708360215038155739608263171250773632913855978326398595371619878249252799910371792743647637935286736091372904585732247308287553472354424188828103455785433556597186218207197563104830549904497778181339043925517860796520630743884408793943904657487930722511895633803429373444915211566230843161840774006097322928872085184757201394162871046621076569202014784336347099934734845439582748552926054110552927492837396822682163379212670125204772388935988940855945353556087276283648735336057460429397645482273625829313090045095258457410334056854033819717490593602448773167885871944617009337975087690579824187361223993351498713686680511558552398093594061008389207896585064494422608617358352485695212802202599369844139136277940520675460485922180204913442413471013171354886549278279711046898923854635714476641297540815532184135141497684848518801402385583433015157775210018513300790006263797593151786441489048492156944190880657938590291662829084677941269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							370956e136313e7e7a5d578c9c5f23deabfb1430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1700 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.112sihu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aahan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abeccousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahmadyounis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amuni-ee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avrgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankmobilevibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bountiful.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brzzars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cavemanfitnessguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cearco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cornerdirecto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datinggusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encombrantssurrendezvous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finecode.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmbfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footfetishbooru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.from-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grayhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grossetotragsressiva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handcrafted-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heporndude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hillingdonliteraryfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holleywoodcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homedepotgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icepass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipeds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jantesetpneus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobsnewsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinok.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancom-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livparkside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losbetos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfreecamsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nedwick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldworldornaments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passivequeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pnct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revvicreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rooltide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tplinkligin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uggsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwtruecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--o3cit6gb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yy-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '112sihu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aahan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abeccousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahmadyounis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amuni-ee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avrgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankmobilevibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bountiful.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brzzars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavemanfitnessguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cearco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornerdirecto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datinggusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encombrantssurrendezvous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finecode.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmbfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footfetishbooru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'from-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grayhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grossetotragsressiva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handcrafted-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heporndude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillingdonliteraryfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holleywoodcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedepotgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icepass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipeds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jantesetpneus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsnewsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinok.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancom-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livparkside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losbetos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfreecamsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedwick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldworldornaments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passivequeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revvicreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooltide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tplinkligin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uggsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtruecar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--o3cit6gb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yy-service.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bda5f53f50000040300483046022100a64e2325651f5106f25ef28ece1016200a7b5ff7728a7bd424edd02ed780bdbd022100daad94473d025b6955acafa039afdd6e66d103d814e0817f69df3d42a0d8eef6007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bda5f54080000040300483046022100eeaaba1a7d347290742ec6ce5853ad55d885904b7d018960edf525cae868869c022100bc6cb462ad4e62d9a782367b2f3da3df5e72f17b919a4348f9352b28bda03958
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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