betterdomainname.com

Issued by R3

About this certificate

This digital certificate with serial number 04:30:93:22:64:6e:c0:f8:1a:7e:70:7b:c9:dd:48:52:00:ed was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=betterdomainname.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:30:93:22:64:6e:c0:f8:1a:7e:70:7b:c9:dd:48:52:00:ed
Serial Number (int): 364978272429735384952532814654642175738093
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d5:9a:ea:69:27:ba:da:4e:7c:66:e2:32:1b:19:67:ec:a6:06:a7:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:2d:05:e8:cd:24:4b:5c:21:0e:77:93:7f:0d:34:b6:54:db:3e:79
Fingerprint (sha256): 14:3c:92:c1:cc:19:ab:20:38:44:ce:67:2e:de:7d:29:25:95:57:93:e1:bf:02:7c:4b:84:02:28:80:26:4e:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate betterdomainname.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for betterdomainname.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alisma.com
*.arzobispado.com
*.betterdomainname.com
*.caraman.com
*.centry21homes.com
*.chengguang.com
*.collaboratories.com
*.comfortapparel.com
*.cosemo.com
*.darria.com
*.dentistsofchisholm.com
*.entiti.com
*.eurosketchcad.com
*.fallsriver.com
*.fijat.com
*.fogueres.com
*.fyndall.com
*.giatoc.com
*.housekeepingwithlove.com
*.jalinan.com
*.jrnyl.com
*.korangi.com
*.kresses.com
*.lajagua.com
*.lehai.com
*.mccarraher.com
*.meerschaert.com
*.muabanvn.com
*.muter.com
*.mytalquin.com
*.new2youshoppe.com
*.nnets.com
*.noexperienceneededjobs.com
*.notlongago.com
*.nuevafm.com
*.oguni.com
*.online-eggtimer.com
*.palottety.com
*.rayyans.com
*.realfutons.com.au
*.rougerv.com
*.sanjuanhousing.com
*.shower-curtain.co
*.styan.com
*.sugai.com
*.travelhistory.com
*.truelson.com
*.usdtt20.com
*.washingtonnews1.xyz
*.xfinitychat.com
alisma.com
arzobispado.com
betterdomainname.com
caraman.com
centry21homes.com
chengguang.com
collaboratories.com
comfortapparel.com
cosemo.com
darria.com
dentistsofchisholm.com
entiti.com
eurosketchcad.com
fallsriver.com
fijat.com
fogueres.com
fyndall.com
giatoc.com
housekeepingwithlove.com
jalinan.com
jrnyl.com
korangi.com
kresses.com
lajagua.com
lehai.com
mccarraher.com
meerschaert.com
muabanvn.com
muter.com
mytalquin.com
new2youshoppe.com
nnets.com
noexperienceneededjobs.com
notlongago.com
nuevafm.com
oguni.com
online-eggtimer.com
palottety.com
rayyans.com
realfutons.com.au
rougerv.com
sanjuanhousing.com
shower-curtain.co
styan.com
sugai.com
travelhistory.com
truelson.com
usdtt20.com
washingtonnews1.xyz
xfinitychat.com

Other certificates including the domain name betterdomainname.com

(limited to 100 certificates)
www.showitaly.com
betterdomainname.com
www.hagelin.com
betterdomainname.com
mossing.com
betterdomainname.com
betterdomainname.com
betterdomainname.com
assisting.info
dentistsofchisholm.com
bcause.com.au
betterdomainname.com
skexhers.com
ricedeshow.com

Certificate

The complete raw certificate details for betterdomainname.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMZDCCC0ygAwIBAgISBDCTImRuwPgafnB7yd1IUgDtMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTMxMDAzMjBaFw0yNDA2MTExMDAzMTlaMB8xHTAbBgNVBAMT
FGJldHRlcmRvbWFpbm5hbWUuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAvr2EAinf2s8nHKDsZ2DeD3ItKlds5wtZgOPE8y7dHiH4Vyq23RQqyXrp
Q3ysDsSO4R0l18oTYPxcP/W2oGf7rJyVqvgDC4wEWNSWN7gRf/TF5gsBakXo12Jd
9nQQP3qVrbtqCkltmoCV0rAjbmEQdj+fPtdurRSWN4DeQuMrlTwjtwCVXW6cXa6x
TnyKtDuIXfzw3WEU9II4fMtzoTlbQe+TfrDAD5Wo1jOBlbxctm4a7he1K4F/7GoF
Qgoz7ZmApGXWifgt2fswfb1AeDbYyZ9PNd8iBuOcsMbkiPnUbUhnjT1NtdVAagdK
G6ApMd9O7IF3+0fB4WZSOwZ3KRfL4EMhHEP1Fu4gGJ71Hsyn6/eFntqFWkpbNGDw
EzH2TgQyQP/O6VWw5NLeWHoho6SCiUScB4A3AskGxcfq16q/a8jvbUFfH87JqsX+
tir5vgD3S4KCLt9ILs/04QtqzP/3ldEr6Hw19MQvj7Lwd0Y4/EJaD/ifkBBJC35N
VMcf/b+v9xXlo1+7p0T3oYXCBDDFYhL7hjcRvJuYIVxmXJjgJayhbteKv8OE12hh
BLGF+mW1i8eGnB2ZJqj2JQ2gpplif3A8qK6Kmsf5/OYe4gg2bs7d8cnwSkYrnBeh
dWIMcb0E2etpH5LaZBA6uakBesAV/OejV+wvbLyU2zOPLREaMUUCAwEAAaOCCIUw
ggiBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU1ZrqaSe62k58ZuIyGxln7KYGp08w
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggaNBgNVHREEggaEMIIGgIIMKi5hbGlz
bWEuY29tghEqLmFyem9iaXNwYWRvLmNvbYIWKi5iZXR0ZXJkb21haW5uYW1lLmNv
bYINKi5jYXJhbWFuLmNvbYITKi5jZW50cnkyMWhvbWVzLmNvbYIQKi5jaGVuZ2d1
YW5nLmNvbYIVKi5jb2xsYWJvcmF0b3JpZXMuY29tghQqLmNvbWZvcnRhcHBhcmVs
LmNvbYIMKi5jb3NlbW8uY29tggwqLmRhcnJpYS5jb22CGCouZGVudGlzdHNvZmNo
aXNob2xtLmNvbYIMKi5lbnRpdGkuY29tghMqLmV1cm9za2V0Y2hjYWQuY29tghAq
LmZhbGxzcml2ZXIuY29tggsqLmZpamF0LmNvbYIOKi5mb2d1ZXJlcy5jb22CDSou
ZnluZGFsbC5jb22CDCouZ2lhdG9jLmNvbYIaKi5ob3VzZWtlZXBpbmd3aXRobG92
ZS5jb22CDSouamFsaW5hbi5jb22CCyouanJueWwuY29tgg0qLmtvcmFuZ2kuY29t
gg0qLmtyZXNzZXMuY29tgg0qLmxhamFndWEuY29tggsqLmxlaGFpLmNvbYIQKi5t
Y2NhcnJhaGVyLmNvbYIRKi5tZWVyc2NoYWVydC5jb22CDioubXVhYmFudm4uY29t
ggsqLm11dGVyLmNvbYIPKi5teXRhbHF1aW4uY29tghMqLm5ldzJ5b3VzaG9wcGUu
Y29tggsqLm5uZXRzLmNvbYIcKi5ub2V4cGVyaWVuY2VuZWVkZWRqb2JzLmNvbYIQ
Ki5ub3Rsb25nYWdvLmNvbYINKi5udWV2YWZtLmNvbYILKi5vZ3VuaS5jb22CFSou
b25saW5lLWVnZ3RpbWVyLmNvbYIPKi5wYWxvdHRldHkuY29tgg0qLnJheXlhbnMu
Y29tghMqLnJlYWxmdXRvbnMuY29tLmF1gg0qLnJvdWdlcnYuY29tghQqLnNhbmp1
YW5ob3VzaW5nLmNvbYITKi5zaG93ZXItY3VydGFpbi5jb4ILKi5zdHlhbi5jb22C
Cyouc3VnYWkuY29tghMqLnRyYXZlbGhpc3RvcnkuY29tgg4qLnRydWVsc29uLmNv
bYINKi51c2R0dDIwLmNvbYIVKi53YXNoaW5ndG9ubmV3czEueHl6ghEqLnhmaW5p
dHljaGF0LmNvbYIKYWxpc21hLmNvbYIPYXJ6b2Jpc3BhZG8uY29tghRiZXR0ZXJk
b21haW5uYW1lLmNvbYILY2FyYW1hbi5jb22CEWNlbnRyeTIxaG9tZXMuY29tgg5j
aGVuZ2d1YW5nLmNvbYITY29sbGFib3JhdG9yaWVzLmNvbYISY29tZm9ydGFwcGFy
ZWwuY29tggpjb3NlbW8uY29tggpkYXJyaWEuY29tghZkZW50aXN0c29mY2hpc2hv
bG0uY29tggplbnRpdGkuY29tghFldXJvc2tldGNoY2FkLmNvbYIOZmFsbHNyaXZl
ci5jb22CCWZpamF0LmNvbYIMZm9ndWVyZXMuY29tggtmeW5kYWxsLmNvbYIKZ2lh
dG9jLmNvbYIYaG91c2VrZWVwaW5nd2l0aGxvdmUuY29tggtqYWxpbmFuLmNvbYIJ
anJueWwuY29tggtrb3JhbmdpLmNvbYILa3Jlc3Nlcy5jb22CC2xhamFndWEuY29t
gglsZWhhaS5jb22CDm1jY2FycmFoZXIuY29tgg9tZWVyc2NoYWVydC5jb22CDG11
YWJhbnZuLmNvbYIJbXV0ZXIuY29tgg1teXRhbHF1aW4uY29tghFuZXcyeW91c2hv
cHBlLmNvbYIJbm5ldHMuY29tghpub2V4cGVyaWVuY2VuZWVkZWRqb2JzLmNvbYIO
bm90bG9uZ2Fnby5jb22CC251ZXZhZm0uY29tgglvZ3VuaS5jb22CE29ubGluZS1l
Z2d0aW1lci5jb22CDXBhbG90dGV0eS5jb22CC3JheXlhbnMuY29tghFyZWFsZnV0
b25zLmNvbS5hdYILcm91Z2Vydi5jb22CEnNhbmp1YW5ob3VzaW5nLmNvbYIRc2hv
d2VyLWN1cnRhaW4uY2+CCXN0eWFuLmNvbYIJc3VnYWkuY29tghF0cmF2ZWxoaXN0
b3J5LmNvbYIMdHJ1ZWxzb24uY29tggt1c2R0dDIwLmNvbYITd2FzaGluZ3Rvbm5l
d3MxLnh5eoIPeGZpbml0eWNoYXQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
2bu/qznYhHMAAAGON3sj4wAABAMARzBFAiBtUwrHjz9IinXh5f5yjzkpwqlCdFNf
QC2ylItMnKHmeAIhAIDEplVTdA3H35yM0QuhRvmNC6KXJeO2Er20Rc9vK2KEAHUA
O1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGON3smFwAABAMARjBE
AiA8cE9OLNoyAvK01rRLDrmR1XE0u/BQdHAKwXLDxYN29wIgbH1Y/CWKlS4kU51t
gtPuqQwDIZXEWIFfa3QHKZW+N2QwDQYJKoZIhvcNAQELBQADggEBAFSO3pAm4TaP
AvY+ytCin1W0dMiv8p4nb4XiYr4n5LPfeVk93vLtwVKM2l7gwdQqidkEiAnZSQw1
0MMTDtw3zWJYm4RB7Q124GIfY829IsIrzhT+xiUh879vOSpNmwqgALHpU5C0ejzR
DiNlTwnG94kQZnbOvghH6qeeJ8AzmHaNF8KptMeuLBGgKDboQQvw+7dZIqI/lfoM
e+FdsXQLnCjeFGM3S9895y91RzkcpAC8BzgQDglGAFRl8x0HQ+0qurbgTL0u7W12
QIOixu6jw0MS+gajpQxtycJDNYmw/IMJ+EIEZ7qzDUnUoH/IUto1eoXYXFw2Mhu9
OuKG541dnaE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364978272429735384952532814654642175738093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 10:03:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 10:03:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'betterdomainname.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778152515228557175377218476927015545812010642636386402983197899572719133053824300924147400659738867130289888384530016349789716641945295193649455689349640691003322886777182224760828800839981865461366356808028410296398461867855425990872722400180911617194989238769422507756611356795128357671363642185099249344410530164269693678776949080246969698740478437099354832863437764585625088357769658598920582034416407891171600457667107781032822689690861513280338975238314133696265933857616700589024024539142529666704832746677534180197196872293771961856517120039087085776820924651653415497834605754731883704257716342287106928347583688086897030751946755017702373001311205970813408131175456894501058576019582265580714670976608060027496826675618137330060539465633577285544577566476582228799800190493332652961837253507005032001911117222954862480016778971604970946506174439492027967250001779363798641974535397688198087920627584396501689277603740811367110751607563870063134975822403114729901808490088237778532327577874459020172227675458562837098594756922707246219320797984555225521269021726308969859588712957335717234194359790323860225711067609536340742445561145904847394881449631683672491767257183212927949031452159821538055992121131578451443729445189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d59aea6927bada4e7c66e2321b1967eca606a74f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1668 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alisma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arzobispado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterdomainname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caraman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centry21homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chengguang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collaboratories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentistsofchisholm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosketchcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fallsriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fijat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fogueres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fyndall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giatoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housekeepingwithlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jalinan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jrnyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.korangi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lajagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lehai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mccarraher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meerschaert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muabanvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytalquin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.new2youshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noexperienceneededjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notlongago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuevafm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oguni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.online-eggtimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palottety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rayyans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realfutons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rougerv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanjuanhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shower-curtain.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.styan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truelson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usdtt20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.washingtonnews1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfinitychat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alisma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arzobispado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterdomainname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caraman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centry21homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chengguang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboratories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistsofchisholm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurosketchcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallsriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fogueres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyndall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giatoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housekeepingwithlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jalinan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrnyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korangi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccarraher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meerschaert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muabanvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytalquin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new2youshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noexperienceneededjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notlongago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuevafm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oguni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-eggtimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palottety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayyans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realfutons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rougerv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shower-curtain.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truelson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdtt20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonnews1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfinitychat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e377b23e3000004030047304502206d530ac78f3f488a75e1e5fe728f3929c2a94274535f402db2948b4c9ca1e67802210080c4a65553740dc7df9c8cd10ba146f98d0ba29725e3b612bdb445cf6f2b62840075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e377b2617000004030046304402203c704f4e2cda3202f2b4d6b44b0eb991d57134bbf05074700ac172c3c58376f702206c7d58fc258a952e24539d6d82d3eea90c032195c458815f6b74072995be3764
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00548ede9026e1368f02f63ecad0a29f55b474c8aff29e276f85e262be27e4b3df79593ddef2edc1528cda5ee0c1d42a89d9048809d9490c35d0c3130edc37cd62589b8441ed0d76e0621f63cdbd22c22bce14fec62521f3bf6f392a4d9b0aa000b1e95390b47a3cd10e23654f09c6f789106676cebe0847eaa79e27c03398768d17c2a9b4c7ae2c11a02836e8410bf0fbb75922a23f95fa0c7be15db1740b9c28de1463374bdf3de72f7547391ca400bc0738100e0946005465f31d0743ed2abab6e04cbd2eed6d764083a2c6eea3c34312fa06a3a50c6dc9c2433589b0fc8309f8420467bab30d49d4a07fc852da357a85d85c5c36321bbd3ae286e78d5d9da1