sarungmangga.com

Issued by R3

About this certificate

This digital certificate with serial number 03:67:cb:5c:c3:69:d5:3c:17:3e:7d:55:ae:ac:02:f9:39:49 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sarungmangga.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:cb:5c:c3:69:d5:3c:17:3e:7d:55:ae:ac:02:f9:39:49
Serial Number (int): 296656256526047547531422350761647687678281
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:a8:59:92:b9:a0:78:1f:e7:f8:2a:df:28:f8:86:03:57:e2:51:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:72:e3:36:5f:ef:ea:57:b5:4b:91:61:43:f4:36:6d:2e:90:61:20
Fingerprint (sha256): 13:3b:47:6b:33:b6:c1:f6:7c:b9:2f:92:9d:ea:47:2f:92:61:49:c8:10:c0:60:d6:97:19:c8:cd:59:66:1a:3b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sarungmangga.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sarungmangga.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abien.com
*.addressed.com.au
*.b151.cc
*.bolock.com
*.brisia.com
*.broadcastingandcable.com
*.cariuang.co
*.casapaquita.com
*.curryhousekeywest.com
*.driby.es
*.elizardo.com
*.fedt.com
*.frizou.org
*.giacmongdem.com
*.grafiku.com
*.herrenring.com
*.jdskeychains.com
*.jordanriver.com
*.kalpli.com
*.kandaya.com
*.maxlrnd.com
*.mementism.net
*.mokir.com
*.moratuwa.com
*.muiznieks.com
*.mukilteochocolate.com
*.myonlinemarketing.com
*.oyunindirin.com
*.phoenixpharmaceuticals.com
*.ranferi.com
*.raphats.com
*.sailam.com
*.sangharsh.com
*.sarungmangga.com
*.scoregeneral.com
*.secundaria.com
*.sienkiewicz.com
*.signuplive.com
*.sixpacksabs.com
*.survance.com
*.survivalshake.com
*.swisscraft.eu
*.telefoonseks.com
*.threadingplace.com
*.tvorradio.com
*.unflash.com
*.verachtert.com
*.wettec.com
*.woodgamz.com
*.zuantan.com
abien.com
addressed.com.au
b151.cc
bolock.com
brisia.com
broadcastingandcable.com
cariuang.co
casapaquita.com
curryhousekeywest.com
driby.es
elizardo.com
fedt.com
frizou.org
giacmongdem.com
grafiku.com
herrenring.com
jdskeychains.com
jordanriver.com
kalpli.com
kandaya.com
maxlrnd.com
mementism.net
mokir.com
moratuwa.com
muiznieks.com
mukilteochocolate.com
myonlinemarketing.com
oyunindirin.com
phoenixpharmaceuticals.com
ranferi.com
raphats.com
sailam.com
sangharsh.com
sarungmangga.com
scoregeneral.com
secundaria.com
sienkiewicz.com
signuplive.com
sixpacksabs.com
survance.com
survivalshake.com
swisscraft.eu
telefoonseks.com
threadingplace.com
tvorradio.com
unflash.com
verachtert.com
wettec.com
woodgamz.com
zuantan.com

Other certificates including the domain name sarungmangga.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sarungmangga.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMVDCCCzygAwIBAgISA2fLXMNp1TwXPn1VrqwC+TlJMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTQwODQ1MzVaFw0yNDAyMTIwODQ1MzRaMBsxGTAXBgNVBAMT
EHNhcnVuZ21hbmdnYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDNWqiOZyYeLY7rWI302ZVvXbogy8m1gu/Hha8nkNdM6TfIGFBKil5+NKjS5onv
F2sOphD96H5LN2fgMW8ywy4WjVvPdVSNKWBEdI3N9NH0EtWC97Ld8uqbIOX58W1y
/rNBm/nlHJBy/laZPTUo9XFZHBzwpGFdDxTu56EiwPB/MPkPb7qEAYVzo8pd8cI6
XV2YnX1VzYHtQe4iP3dCEwrOWjyYj5jC6ec2VfYtWCIEsRRQi3E+dRhXaegn//QF
v55KrTBCEe76t9QGr71rJ58dKyNTWq3o4ouGsRWj0uaWfDq3/NkqpPyZVQl0rkRO
ouRuFLy52vAU3NF37nmyhYZr88IcpMJOpm2JJd7gzB/n+gjEaOLLQXNvKhkN/XXE
+T37HepKBoSC/0SSgejwpcm549QDWpB6fExDhFUNArLyZ8/YCefhpZgcMoQ00Tzx
1n7hSPr8RwEscvxWGFSIpW4wFikCkLy0jSghoUEpcqVsboS0OyQwv7aeXh4hJ5iN
NKberWPorZc6qxGAYtS4cgF5xsf5jSrMFRsMfWKPV66BZTPZZdTzVSj6MrJ9aqcp
tuS+AJPaiC9xZbVKkubhUiGXlqPoNtWtLETZK2uuRcOkOJ9r3K+H/hB+JBhACpfy
gRzHRHR2wuKIvVmDOQO7OFbNFjFF0VJdrxKy8TAfbVbe9wIDAQABo4IIeTCCCHUw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTyqFmSuaB4H+f4Kt8o+IYDV+JRzzAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCBoEGA1UdEQSCBngwggZ0ggsqLmFiaWVuLmNv
bYISKi5hZGRyZXNzZWQuY29tLmF1ggkqLmIxNTEuY2OCDCouYm9sb2NrLmNvbYIM
Ki5icmlzaWEuY29tghoqLmJyb2FkY2FzdGluZ2FuZGNhYmxlLmNvbYINKi5jYXJp
dWFuZy5jb4IRKi5jYXNhcGFxdWl0YS5jb22CFyouY3Vycnlob3VzZWtleXdlc3Qu
Y29tggoqLmRyaWJ5LmVzgg4qLmVsaXphcmRvLmNvbYIKKi5mZWR0LmNvbYIMKi5m
cml6b3Uub3JnghEqLmdpYWNtb25nZGVtLmNvbYINKi5ncmFmaWt1LmNvbYIQKi5o
ZXJyZW5yaW5nLmNvbYISKi5qZHNrZXljaGFpbnMuY29tghEqLmpvcmRhbnJpdmVy
LmNvbYIMKi5rYWxwbGkuY29tgg0qLmthbmRheWEuY29tgg0qLm1heGxybmQuY29t
gg8qLm1lbWVudGlzbS5uZXSCCyoubW9raXIuY29tgg4qLm1vcmF0dXdhLmNvbYIP
Ki5tdWl6bmlla3MuY29tghcqLm11a2lsdGVvY2hvY29sYXRlLmNvbYIXKi5teW9u
bGluZW1hcmtldGluZy5jb22CESoub3l1bmluZGlyaW4uY29tghwqLnBob2VuaXhw
aGFybWFjZXV0aWNhbHMuY29tgg0qLnJhbmZlcmkuY29tgg0qLnJhcGhhdHMuY29t
ggwqLnNhaWxhbS5jb22CDyouc2FuZ2hhcnNoLmNvbYISKi5zYXJ1bmdtYW5nZ2Eu
Y29tghIqLnNjb3JlZ2VuZXJhbC5jb22CECouc2VjdW5kYXJpYS5jb22CESouc2ll
bmtpZXdpY3ouY29tghAqLnNpZ251cGxpdmUuY29tghEqLnNpeHBhY2tzYWJzLmNv
bYIOKi5zdXJ2YW5jZS5jb22CEyouc3Vydml2YWxzaGFrZS5jb22CDyouc3dpc3Nj
cmFmdC5ldYISKi50ZWxlZm9vbnNla3MuY29tghQqLnRocmVhZGluZ3BsYWNlLmNv
bYIPKi50dm9ycmFkaW8uY29tgg0qLnVuZmxhc2guY29tghAqLnZlcmFjaHRlcnQu
Y29tggwqLndldHRlYy5jb22CDioud29vZGdhbXouY29tgg0qLnp1YW50YW4uY29t
gglhYmllbi5jb22CEGFkZHJlc3NlZC5jb20uYXWCB2IxNTEuY2OCCmJvbG9jay5j
b22CCmJyaXNpYS5jb22CGGJyb2FkY2FzdGluZ2FuZGNhYmxlLmNvbYILY2FyaXVh
bmcuY2+CD2Nhc2FwYXF1aXRhLmNvbYIVY3Vycnlob3VzZWtleXdlc3QuY29tgghk
cmlieS5lc4IMZWxpemFyZG8uY29tgghmZWR0LmNvbYIKZnJpem91Lm9yZ4IPZ2lh
Y21vbmdkZW0uY29tggtncmFmaWt1LmNvbYIOaGVycmVucmluZy5jb22CEGpkc2tl
eWNoYWlucy5jb22CD2pvcmRhbnJpdmVyLmNvbYIKa2FscGxpLmNvbYILa2FuZGF5
YS5jb22CC21heGxybmQuY29tgg1tZW1lbnRpc20ubmV0ggltb2tpci5jb22CDG1v
cmF0dXdhLmNvbYINbXVpem5pZWtzLmNvbYIVbXVraWx0ZW9jaG9jb2xhdGUuY29t
ghVteW9ubGluZW1hcmtldGluZy5jb22CD295dW5pbmRpcmluLmNvbYIacGhvZW5p
eHBoYXJtYWNldXRpY2Fscy5jb22CC3JhbmZlcmkuY29tggtyYXBoYXRzLmNvbYIK
c2FpbGFtLmNvbYINc2FuZ2hhcnNoLmNvbYIQc2FydW5nbWFuZ2dhLmNvbYIQc2Nv
cmVnZW5lcmFsLmNvbYIOc2VjdW5kYXJpYS5jb22CD3NpZW5raWV3aWN6LmNvbYIO
c2lnbnVwbGl2ZS5jb22CD3NpeHBhY2tzYWJzLmNvbYIMc3VydmFuY2UuY29tghFz
dXJ2aXZhbHNoYWtlLmNvbYINc3dpc3NjcmFmdC5ldYIQdGVsZWZvb25zZWtzLmNv
bYISdGhyZWFkaW5ncGxhY2UuY29tgg10dm9ycmFkaW8uY29tggt1bmZsYXNoLmNv
bYIOdmVyYWNodGVydC5jb22CCndldHRlYy5jb22CDHdvb2RnYW16LmNvbYILenVh
bnRhbi5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0
BIHxAO8AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYvNONYn
AAAEAwBGMEQCIDLsqu5CdoQMBb1TCVosJKE+hfg4uP+q3WW/WSYZpdDSAiAzm66p
U1C8OBFoUKguoghELpR8nWXmiV9VzB+PpVvZ9wB2AHb/iD8KtvuVUcJhzPWHujS0
pM27KdxoQgqf5mdMWjp0AAABi8041nAAAAQDAEcwRQIhALThZamy8J8BIP6zat4Q
JXGN+HXdvuGx/6pnd+1lFjINAiBPKt9Jpmzm0oQXdYlqvaqixBxoZFFGltjGToNH
DgK88TANBgkqhkiG9w0BAQsFAAOCAQEAcVcVtIirrvdqOMlhXvkXdndw5lCfipPY
22x2hf4Hrll7l4jDpXJAyJDdg1Wd5xbz8KlV42x6oPU1phrI/Ov6hq8bADyzZk4Q
7fXCXfd+xd1n51J2QbZif1XjMwOgNpZGAyXs5J5T4ovBsWH/HwGM3ZKIt8arPVoc
irngWFxvH9FzO3j6Wqy/o9UTNTagobukzuDYS6rHUNIyMhLnCtbpkC50XtS16aPQ
7hrjTc/m/or2RgS0fWeoDOqCKEaw/uo8T2B6j122siFjXMM2qK5pMu+kMKkIjeOh
mtMnk5/J8ICIrfnPeRAdc8dR8AfpWXg4NX/9K0GUrEQ0q0+S7Rr52A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzVqojmcmHi2O61iN9NmV
b126IMvJtYLvx4WvJ5DXTOk3yBhQSopefjSo0uaJ7xdrDqYQ/eh+Szdn4DFvMsMu
Fo1bz3VUjSlgRHSNzfTR9BLVgvey3fLqmyDl+fFtcv6zQZv55RyQcv5WmT01KPVx
WRwc8KRhXQ8U7uehIsDwfzD5D2+6hAGFc6PKXfHCOl1dmJ19Vc2B7UHuIj93QhMK
zlo8mI+YwunnNlX2LVgiBLEUUItxPnUYV2noJ//0Bb+eSq0wQhHu+rfUBq+9ayef
HSsjU1qt6OKLhrEVo9Lmlnw6t/zZKqT8mVUJdK5ETqLkbhS8udrwFNzRd+55soWG
a/PCHKTCTqZtiSXe4Mwf5/oIxGjiy0FzbyoZDf11xPk9+x3qSgaEgv9EkoHo8KXJ
uePUA1qQenxMQ4RVDQKy8mfP2Ann4aWYHDKENNE88dZ+4Uj6/EcBLHL8VhhUiKVu
MBYpApC8tI0oIaFBKXKlbG6EtDskML+2nl4eISeYjTSm3q1j6K2XOqsRgGLUuHIB
ecbH+Y0qzBUbDH1ij1eugWUz2WXU81Uo+jKyfWqnKbbkvgCT2ogvcWW1SpLm4VIh
l5aj6DbVrSxE2StrrkXDpDifa9yvh/4QfiQYQAqX8oEcx0R0dsLiiL1ZgzkDuzhW
zRYxRdFSXa8SsvEwH21W3vcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296656256526047547531422350761647687678281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 08:45:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 08:45:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sarungmangga.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837771776511253154209245695541564712343378552729755823509637081278443299433271899228158130854821353692858290678444587359836156549488824865643654594839921007699118770845059029772687617836462079933797794561271085787967283158290190234686502996789462697931776947917920358175152419234179654089183781283327168749938691320592549081555276959566354513044832554697407500730503854265154463431050963671275318394179493501755636708694802667082827126260834872921368616371171398576213377137831602873116346316715020542027163569354428698041294712317320025429865525220609664146070960410357251690232830498872190502576824089551294822655597295569184274119199978132067576302901862714417759870762395929716503834993533095451294830892330873643319353529954278378836839133382706469731277544154295590449172594670649627267014364177555007627526221607754083415856220562235718338671872737822251254375148383386820671030239042855121645154677711182823650253049933830939578590308996696723013975212332426235436723604187062702293744995887278310549543443115885474649000707070518126154247306552088806826710806140420505696755674361954375992848948505292355057008052722548577897394854780816208536030801909393939236254995229924217266607639880168729686607564836621602008079982327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2a85992b9a0781fe7f82adf28f8860357e251cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1656 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addressed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b151.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bolock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadcastingandcable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cariuang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casapaquita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curryhousekeywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elizardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frizou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giacmongdem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grafiku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herrenring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jdskeychains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jordanriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalpli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kandaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxlrnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mementism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mokir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moratuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muiznieks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mukilteochocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myonlinemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oyunindirin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phoenixpharmaceuticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ranferi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raphats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sailam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sangharsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarungmangga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoregeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secundaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sienkiewicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signuplive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixpacksabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survivalshake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swisscraft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telefoonseks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threadingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvorradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unflash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verachtert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wettec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodgamz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuantan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addressed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b151.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcastingandcable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariuang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casapaquita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curryhousekeywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frizou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giacmongdem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafiku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herrenring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdskeychains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordanriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalpli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kandaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxlrnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mementism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mokir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moratuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muiznieks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mukilteochocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myonlinemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyunindirin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixpharmaceuticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranferi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raphats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangharsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarungmangga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoregeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secundaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sienkiewicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signuplive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixpacksabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivalshake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisscraft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefoonseks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threadingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvorradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unflash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verachtert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wettec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodgamz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuantan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcd38d6270000040300463044022032ecaaee4276840c05bd53095a2c24a13e85f838b8ffaadd65bf592619a5d0d20220339baea95350bc38116850a82ea208442e947c9d65e6895f55cc1f8fa55bd9f700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bcd38d6700000040300473045022100b4e165a9b2f09f0120feb36ade1025718df875ddbee1b1ffaa6777ed6516320d02204f2adf49a66ce6d2841775896abdaaa2c41c6864514696d8c64e83470e02bcf1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00715715b488abaef76a38c9615ef917767770e6509f8a93d8db6c7685fe07ae597b9788c3a57240c890dd83559de716f3f0a955e36c7aa0f535a61ac8fcebfa86af1b003cb3664e10edf5c25df77ec5dd67e7527641b6627f55e33303a03696460325ece49e53e28bc1b161ff1f018cdd9288b7c6ab3d5a1c8ab9e0585c6f1fd1733b78fa5aacbfa3d5133536a0a1bba4cee0d84baac750d2323212e70ad6e9902e745ed4b5e9a3d0ee1ae34dcfe6fe8af64604b47d67a80cea822846b0feea3c4f607a8f5db6b221635cc336a8ae6932efa430a9088de3a19ad327939fc9f08088adf9cf79101d73c751f007e9597838357ffd2b4194ac4434ab4f92ed1af9d8