goldsikver.com

Issued by R3

About this certificate

This digital certificate with serial number 03:45:f9:29:6d:68:5a:2d:aa:44:7d:21:b9:c4:e0:91:95:bc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=goldsikver.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:45:f9:29:6d:68:5a:2d:aa:44:7d:21:b9:c4:e0:91:95:bc
Serial Number (int): 285147533986997422455257432540262490543548
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:67:b8:1a:e7:3c:95:30:21:6d:29:76:36:fa:c7:0c:a8:b8:8b:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:95:4c:90:f8:fc:28:93:9f:45:e4:69:2b:e3:f3:77:c1:6b:84:13
Fingerprint (sha256): 16:17:6c:e3:ff:2e:89:a8:c9:44:1a:b8:8a:5d:65:2d:4e:c4:24:50:2c:43:78:60:40:db:2d:f1:c4:7c:be:cc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate goldsikver.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goldsikver.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aiwhamti.com
*.appfor.me
*.azweiglaws.com
*.bitchesbelosers.com
*.brainypennyautosave.com
*.cabacinho.com
*.cardvdbuy.com
*.charleshinesphotography.com
*.creditkingz.co
*.darsenaclub.com
*.dowcants-celarted.com
*.dreamlifepossibilities.com
*.e-superfeet.com
*.essentialoilrating.com
*.fbobpxneuuu.com
*.finans-1.com
*.finistairshow.net
*.fredforlagunaniguel.com
*.goldsikver.com
*.handloadingsupply.com
*.hispam.info
*.ka-font-awesome.com
*.kids4trends.com
*.lexsitedesign.com
*.lfwbrogfhi.com
*.liveture.com
*.luxecreativedev.com
*.marcosmoran.com
*.masalavideos.net
*.miliwish.com
*.mydancecostumes.com
*.neginshop.me
*.nikwax.uk
*.outriggerpaddleshop.com
*.ovstars.com
*.payment-statementguard1.com
*.pitcure.com
*.plantparadoxgirl.com
*.rachida.com
*.relanso.com
*.rndr-prottect.com
*.sankhuyenmai.me
*.scratchprojects.com
*.speedtaken.com
*.thecomfortcloset.com
*.thermarest.uk
*.thrivenarket.com
*.topinsurancediscounts.com
*.vulcannstore.com
*.webaccessquick.com
aiwhamti.com
appfor.me
azweiglaws.com
bitchesbelosers.com
brainypennyautosave.com
cabacinho.com
cardvdbuy.com
charleshinesphotography.com
creditkingz.co
darsenaclub.com
dowcants-celarted.com
dreamlifepossibilities.com
e-superfeet.com
essentialoilrating.com
fbobpxneuuu.com
finans-1.com
finistairshow.net
fredforlagunaniguel.com
goldsikver.com
handloadingsupply.com
hispam.info
ka-font-awesome.com
kids4trends.com
lexsitedesign.com
lfwbrogfhi.com
liveture.com
luxecreativedev.com
marcosmoran.com
masalavideos.net
miliwish.com
mydancecostumes.com
neginshop.me
nikwax.uk
outriggerpaddleshop.com
ovstars.com
payment-statementguard1.com
pitcure.com
plantparadoxgirl.com
rachida.com
relanso.com
rndr-prottect.com
sankhuyenmai.me
scratchprojects.com
speedtaken.com
thecomfortcloset.com
thermarest.uk
thrivenarket.com
topinsurancediscounts.com
vulcannstore.com
webaccessquick.com

Other certificates including the domain name goldsikver.com

(limited to 100 certificates)
grservicing.com
goldsikver.com
goldsikver.com
*.a-cool.name
goldsikver.com
aopoge.info
goldsikver.com
goldsikver.com
vtraker.org

Certificate

The complete raw certificate details for goldsikver.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINdjCCDF6gAwIBAgISA0X5KW1oWi2qRH0hucTgkZW8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjUxNzM2MTNaFw0yNDA3MjQxNzM2MTJaMBkxFzAVBgNVBAMT
DmdvbGRzaWt2ZXIuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
3G6+af4O+I7/d2kZ2F12AHUK3cGPMTx9B9a8k3oXcVyJuahHEjtb82UIrP9lTRnw
aRI+8CfGYi+PeM73I2XNJN7ixbsI/5N+hOBaBfWWzfawHQ44XNL0Ql19w2JQPV/L
SYLthf+Ytt0zEGgQH1ftwyXQ9URiU9t+nLhrwgCbfbS9SOMgh/r/nbowDRrKqY0E
SOG4UJX8UA16imBZOs8fk4gNxxM/pHyUbLC36okEHxsCJ6Jy+R2caKX0sseyXmeT
sL5s+ztnisjwFrCTeH9s/X6qRtuZateuRgKbCEypSgHxDihgLtTQHHzhUqz6waN9
XeHNuFtASepm8vPGDchalxZC5nu+ExoveVWSgMmlJLM1npG6crm7WVr+MM1Dplqs
Wm//jwvHzlQmtf7/h66hG/i49gBW3CBDUUz+9/+Uj4BlJss4lbBLgbWNhKYl1ujk
ZSohPY/G6tTQiETSzKq4nQiQQRgQCdM7zZxuUftHxMy7IXQ0chMSu0vaqOls2uwt
PCDZJeM7V5BPY7CnSz2oSHSo7EkHE+XF0TCRljKee1s0wF6QdxQPH7wUPKFiMprc
qLNF2XZifk+3T+xWhsP6Halo+DRoOBXXjSsp6kpfmqCGXQae0EOJb941kHaN5AWm
lFHST+A9FFgDXwgz6OJFtRhHMbWcR8YTDOe2fSLaTgECAwEAAaOCCZ0wggmZMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUH2e4Guc8lTAhbSl2NvrHDKi4i5owHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggelBgNVHREEggecMIIHmIIOKi5haXdoYW10aS5j
b22CCyouYXBwZm9yLm1lghAqLmF6d2VpZ2xhd3MuY29tghUqLmJpdGNoZXNiZWxv
c2Vycy5jb22CGSouYnJhaW55cGVubnlhdXRvc2F2ZS5jb22CDyouY2FiYWNpbmhv
LmNvbYIPKi5jYXJkdmRidXkuY29tgh0qLmNoYXJsZXNoaW5lc3Bob3RvZ3JhcGh5
LmNvbYIQKi5jcmVkaXRraW5nei5jb4IRKi5kYXJzZW5hY2x1Yi5jb22CFyouZG93
Y2FudHMtY2VsYXJ0ZWQuY29tghwqLmRyZWFtbGlmZXBvc3NpYmlsaXRpZXMuY29t
ghEqLmUtc3VwZXJmZWV0LmNvbYIYKi5lc3NlbnRpYWxvaWxyYXRpbmcuY29tghEq
LmZib2JweG5ldXV1LmNvbYIOKi5maW5hbnMtMS5jb22CEyouZmluaXN0YWlyc2hv
dy5uZXSCGSouZnJlZGZvcmxhZ3VuYW5pZ3VlbC5jb22CECouZ29sZHNpa3Zlci5j
b22CFyouaGFuZGxvYWRpbmdzdXBwbHkuY29tgg0qLmhpc3BhbS5pbmZvghUqLmth
LWZvbnQtYXdlc29tZS5jb22CESoua2lkczR0cmVuZHMuY29tghMqLmxleHNpdGVk
ZXNpZ24uY29tghAqLmxmd2Jyb2dmaGkuY29tgg4qLmxpdmV0dXJlLmNvbYIVKi5s
dXhlY3JlYXRpdmVkZXYuY29tghEqLm1hcmNvc21vcmFuLmNvbYISKi5tYXNhbGF2
aWRlb3MubmV0gg4qLm1pbGl3aXNoLmNvbYIVKi5teWRhbmNlY29zdHVtZXMuY29t
gg4qLm5lZ2luc2hvcC5tZYILKi5uaWt3YXgudWuCGSoub3V0cmlnZ2VycGFkZGxl
c2hvcC5jb22CDSoub3ZzdGFycy5jb22CHSoucGF5bWVudC1zdGF0ZW1lbnRndWFy
ZDEuY29tgg0qLnBpdGN1cmUuY29tghYqLnBsYW50cGFyYWRveGdpcmwuY29tgg0q
LnJhY2hpZGEuY29tgg0qLnJlbGFuc28uY29tghMqLnJuZHItcHJvdHRlY3QuY29t
ghEqLnNhbmtodXllbm1haS5tZYIVKi5zY3JhdGNocHJvamVjdHMuY29tghAqLnNw
ZWVkdGFrZW4uY29tghYqLnRoZWNvbWZvcnRjbG9zZXQuY29tgg8qLnRoZXJtYXJl
c3QudWuCEioudGhyaXZlbmFya2V0LmNvbYIbKi50b3BpbnN1cmFuY2VkaXNjb3Vu
dHMuY29tghIqLnZ1bGNhbm5zdG9yZS5jb22CFCoud2ViYWNjZXNzcXVpY2suY29t
ggxhaXdoYW10aS5jb22CCWFwcGZvci5tZYIOYXp3ZWlnbGF3cy5jb22CE2JpdGNo
ZXNiZWxvc2Vycy5jb22CF2JyYWlueXBlbm55YXV0b3NhdmUuY29tgg1jYWJhY2lu
aG8uY29tgg1jYXJkdmRidXkuY29tghtjaGFybGVzaGluZXNwaG90b2dyYXBoeS5j
b22CDmNyZWRpdGtpbmd6LmNvgg9kYXJzZW5hY2x1Yi5jb22CFWRvd2NhbnRzLWNl
bGFydGVkLmNvbYIaZHJlYW1saWZlcG9zc2liaWxpdGllcy5jb22CD2Utc3VwZXJm
ZWV0LmNvbYIWZXNzZW50aWFsb2lscmF0aW5nLmNvbYIPZmJvYnB4bmV1dXUuY29t
ggxmaW5hbnMtMS5jb22CEWZpbmlzdGFpcnNob3cubmV0ghdmcmVkZm9ybGFndW5h
bmlndWVsLmNvbYIOZ29sZHNpa3Zlci5jb22CFWhhbmRsb2FkaW5nc3VwcGx5LmNv
bYILaGlzcGFtLmluZm+CE2thLWZvbnQtYXdlc29tZS5jb22CD2tpZHM0dHJlbmRz
LmNvbYIRbGV4c2l0ZWRlc2lnbi5jb22CDmxmd2Jyb2dmaGkuY29tggxsaXZldHVy
ZS5jb22CE2x1eGVjcmVhdGl2ZWRldi5jb22CD21hcmNvc21vcmFuLmNvbYIQbWFz
YWxhdmlkZW9zLm5ldIIMbWlsaXdpc2guY29tghNteWRhbmNlY29zdHVtZXMuY29t
ggxuZWdpbnNob3AubWWCCW5pa3dheC51a4IXb3V0cmlnZ2VycGFkZGxlc2hvcC5j
b22CC292c3RhcnMuY29tghtwYXltZW50LXN0YXRlbWVudGd1YXJkMS5jb22CC3Bp
dGN1cmUuY29tghRwbGFudHBhcmFkb3hnaXJsLmNvbYILcmFjaGlkYS5jb22CC3Jl
bGFuc28uY29tghFybmRyLXByb3R0ZWN0LmNvbYIPc2Fua2h1eWVubWFpLm1lghNz
Y3JhdGNocHJvamVjdHMuY29tgg5zcGVlZHRha2VuLmNvbYIUdGhlY29tZm9ydGNs
b3NldC5jb22CDXRoZXJtYXJlc3QudWuCEHRocml2ZW5hcmtldC5jb22CGXRvcGlu
c3VyYW5jZWRpc2NvdW50cy5jb22CEHZ1bGNhbm5zdG9yZS5jb22CEndlYmFjY2Vz
c3F1aWNrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjxaL
NvoAAAQDAEYwRAIgGCnm4Lfl2D/hSnDSKGCSmT68GpEuLP7YqkVr9d8jmukCIHGq
gWLoJRpMtXFLaN5CH+i6xCQo1a93h+Fq4Hw3eU8mAHYASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGPFos27wAABAMARzBFAiAlpgR2UXljK9f3MO3W
RU7Cr9qGx5ZKjb08hqEyf0rFrgIhAPaa2sreD3d/WGYa/a+G8y0nzXnq47RJfWZS
q72UMWg1MA0GCSqGSIb3DQEBCwUAA4IBAQBqKu+ZaGLNbiT7N0X04UeWpaQDbEbX
r4r4urCwqnKZ0uc4rVLlBMPVmRdecE76xZDsawJ/ECKCm4ihnH8FfAu3aCD/TEVF
Gf7o/v92jfby+2TPBx30Iv0j+06JY/2SlKSPH+811wWZ1CBLE6XByyRdXbUD/FMF
BBa7KXkQIooYa5RjADZfcq3LsfKJ9Ma1BeGpSqmXkZULAqx10b1+OCb9TdhoXBCa
zlcTYiYXRN/MfHsSkAzwBWr/QZGs0wFIKneYsMFTR8WnRTLpHi7Ua4pmThoBMwDa
qoJNvQZYFTbdR8vhDfh2cDVQLCXHta3ZoLu36Vg9knTrrbI6sIHM1wXw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285147533986997422455257432540262490543548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 17:36:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 17:36:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goldsikver.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899286520380003070868562188725346333657552111231273777257233997126773768694342116052546884645809415482482041523636924787381600516227670200538406613619927586939406665251198840569147622414089674602886686196271163623346312060100343132169199311258150009344235250474805008546725556034866750025827987843303801432395896756903076434795740855478992748962206145711913330470679447434904778137887782379350274885769383382987604870685720034747472746796548323919548090847405129284016340111173593416118241208067227456478496066295520038312138742385793701212468678869139705410294005932765801780181650693471147425503172378101793840395901063538144005717305848272386962911487929855588178094888255561234066157052034595471462136765363194871871772255584891194974176041136091580038473893700372048710095740205902288352940603905140299803381277017147390835601832421044068153208776257244684860177159180693714931579708982474743091747249596959954480602161529786391365933534332955381676418449544435362695197728590175129307901388957493872322539075079929372831455215623075934517291367561126041648518791215045213869561005801474055211487621452620973347035238259891620463937450075018581839519170786560750746519513413156590805331617371177511858894902608552059804526988801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f67b81ae73c9530216d297636fac70ca8b88b9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1948 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiwhamti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appfor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azweiglaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitchesbelosers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brainypennyautosave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabacinho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardvdbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charleshinesphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditkingz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darsenaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dowcants-celarted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamlifepossibilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-superfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essentialoilrating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fbobpxneuuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finans-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finistairshow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fredforlagunaniguel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldsikver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handloadingsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hispam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ka-font-awesome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kids4trends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexsitedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lfwbrogfhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxecreativedev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcosmoran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masalavideos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miliwish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydancecostumes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neginshop.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikwax.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outriggerpaddleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payment-statementguard1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pitcure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plantparadoxgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rachida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relanso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rndr-prottect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sankhuyenmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scratchprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedtaken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecomfortcloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thermarest.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thrivenarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topinsurancediscounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vulcannstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webaccessquick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiwhamti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appfor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azweiglaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitchesbelosers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainypennyautosave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabacinho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardvdbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charleshinesphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditkingz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darsenaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dowcants-celarted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamlifepossibilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-superfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialoilrating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbobpxneuuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finans-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finistairshow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredforlagunaniguel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldsikver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handloadingsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hispam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ka-font-awesome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids4trends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexsitedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfwbrogfhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxecreativedev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcosmoran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masalavideos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miliwish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydancecostumes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neginshop.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikwax.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outriggerpaddleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment-statementguard1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitcure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantparadoxgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rachida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relanso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rndr-prottect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankhuyenmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scratchprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedtaken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecomfortcloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermarest.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrivenarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topinsurancediscounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vulcannstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccessquick.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f168b36fa000004030046304402201829e6e0b7e5d83fe14a70d2286092993ebc1a912e2cfed8aa456bf5df239ae9022071aa8162e8251a4cb5714b68de421fe8bac42428d5af7787e16ae07c37794f2600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f168b36ef0000040300473045022025a604765179632bd7f730edd6454ec2afda86c7964a8dbd3c86a1327f4ac5ae022100f69adacade0f777f58661afdaf86f32d27cd79eae3b4497d6652abbd94316835
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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