shoptime.au

Issued by R3

About this certificate

This digital certificate with serial number 04:14:ae:50:1a:55:2b:0f:47:6b:1b:51:80:76:35:4c:98:cf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shoptime.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:14:ae:50:1a:55:2b:0f:47:6b:1b:51:80:76:35:4c:98:cf
Serial Number (int): 355486492654565383839087937197822744238287
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:1d:eb:9c:3d:7e:e1:62:18:a8:3b:84:3b:1e:24:3d:4c:d8:39:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:de:31:93:5f:2d:62:54:2e:e1:92:09:94:bc:6f:94:0d:fa:e4:36
Fingerprint (sha256): 17:94:fa:6d:eb:d0:1f:e6:13:7e:63:0e:78:ab:05:b2:14:90:be:30:b9:fd:61:75:00:30:75:75:b6:f0:ac:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shoptime.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shoptime.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3a4z5.us
*.7911.au
*.alusedparts.com
*.armmonia.com
*.baltimorewholesaleproperty.com
*.bizz.net.au
*.blv.au
*.brasfieldsepticservice.com
*.carcollection.com
*.cartanddrop.com
*.chinakingkingofprussia.com
*.cij.au
*.controle-bxl.be
*.doctoralia.au
*.donsappraisals.com
*.edingburg.de
*.entitlementcard.org
*.folsomcrescentschool.com
*.galleryflowers.com.au
*.globalportfoliomanagement.be
*.gsn.au
*.guitarandpickup.com
*.hargif.com
*.hints.au
*.hvacelevate.net
*.ipsaya.co
*.languagelab.com.au
*.lifeseledtor.com
*.lotofacilnocomando.com
*.magentbrains.com
*.manueletricidadeservicos.com
*.mistralsiberians.com
*.mpcproducts.com
*.multilingualspeeches.tv
*.myinimcloud.com
*.nrsports.ga
*.packagetracker.nl
*.pimsolutions.nl
*.rkvm.org
*.shoptime.au
*.silicon.au
*.spent.tv
*.telefonbuchz.de
*.todoxmega.ga
*.umv.au
*.vimeoto.com
*.xn--dnengras-65a.de
*.xn--lederbezge-heb.de
*.yaoimanfaonline.com
*.yktv0c335e1a76a64f94.com
3a4z5.us
7911.au
alusedparts.com
armmonia.com
baltimorewholesaleproperty.com
bizz.net.au
blv.au
brasfieldsepticservice.com
carcollection.com
cartanddrop.com
chinakingkingofprussia.com
cij.au
controle-bxl.be
doctoralia.au
donsappraisals.com
edingburg.de
entitlementcard.org
folsomcrescentschool.com
galleryflowers.com.au
globalportfoliomanagement.be
gsn.au
guitarandpickup.com
hargif.com
hints.au
hvacelevate.net
ipsaya.co
languagelab.com.au
lifeseledtor.com
lotofacilnocomando.com
magentbrains.com
manueletricidadeservicos.com
mistralsiberians.com
mpcproducts.com
multilingualspeeches.tv
myinimcloud.com
nrsports.ga
packagetracker.nl
pimsolutions.nl
rkvm.org
shoptime.au
silicon.au
spent.tv
telefonbuchz.de
todoxmega.ga
umv.au
vimeoto.com
xn--dnengras-65a.de
xn--lederbezge-heb.de
yaoimanfaonline.com
yktv0c335e1a76a64f94.com

Other certificates including the domain name shoptime.au

(limited to 100 certificates)
shoptime.au
shoptime.au
shoptime.au
shoptime.au
shoptime.au
shoptime.au
cij.au
shoptime.au
shoptime.au

Certificate

The complete raw certificate details for shoptime.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINGTCCDAGgAwIBAgISBBSuUBpVKw9HaxtRgHY1TJjPMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MTAwNTQxMDdaFw0yNDA3MDkwNTQxMDZaMBYxFDASBgNVBAMT
C3Nob3B0aW1lLmF1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0/KB
J0+1OtnZnZEybra3ZHLd192JidLrjwic6dwKsHh6lum/DOjea+yQEv/x47qefemE
a5gV3e1iiOoEBm1ia1AfM16sQJHehRC5cRlX++ipo19eaishCAU4iaIMQITxCpze
iYFhyhNeLAcAUn+KxMMYVl4TuML2rQayS622aPkvkdRyU75fqLr/zKT3IO17/YOt
WRGOKAeLHrdfJX/jlDBxEO91ebV8YPNf9pNS/msCGkd+g4R1C0itroc1DpbhFq7z
zVIN6N2emUsuvMzg5CsUdM1xSpugMN0R8NrzXsvxTA+dMoztaZ5BJTCm1ypATM2u
NY7+I4WWGzmcC8UfU3yz6+oox52P4Eyj77pdLWS2glILGar9PlsNPWooksQ+YDiV
gWJINVhwaS+GYL/7KRz6hbgoB7g4PPac/0HQKZ/2q4KW5AHZTZfNuUAIad9ST4ha
+CbhgpO2i12WOfXKU6PkHck6yA+ydKuEBPp6w+KrGXMJkwGCLLpfLFbuTVMt91ho
f0jndJh4DkPOfHcRSnrYi39YEKKkQJhQFoWhDQEV2r/jtWNdrZADtK9qXeAekzKd
TRxcC8d6lDxViXajHtBMwhA03GzitygBnBAunkNUebjg0VUG1AyDOtHcy1Q297SI
v92943HdJlos7WKsbD2Rr/WoP1KqddHZFQolSnUCAwEAAaOCCUMwggk/MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUMB3rnD1+4WIYqDuEOx4kPUzYOUgwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggdJBgNVHREEggdAMIIHPIIKKi4zYTR6NS51c4IJKi43
OTExLmF1ghEqLmFsdXNlZHBhcnRzLmNvbYIOKi5hcm1tb25pYS5jb22CICouYmFs
dGltb3Jld2hvbGVzYWxlcHJvcGVydHkuY29tgg0qLmJpenoubmV0LmF1gggqLmJs
di5hdYIcKi5icmFzZmllbGRzZXB0aWNzZXJ2aWNlLmNvbYITKi5jYXJjb2xsZWN0
aW9uLmNvbYIRKi5jYXJ0YW5kZHJvcC5jb22CHCouY2hpbmFraW5na2luZ29mcHJ1
c3NpYS5jb22CCCouY2lqLmF1ghEqLmNvbnRyb2xlLWJ4bC5iZYIPKi5kb2N0b3Jh
bGlhLmF1ghQqLmRvbnNhcHByYWlzYWxzLmNvbYIOKi5lZGluZ2J1cmcuZGWCFSou
ZW50aXRsZW1lbnRjYXJkLm9yZ4IaKi5mb2xzb21jcmVzY2VudHNjaG9vbC5jb22C
FyouZ2FsbGVyeWZsb3dlcnMuY29tLmF1gh4qLmdsb2JhbHBvcnRmb2xpb21hbmFn
ZW1lbnQuYmWCCCouZ3NuLmF1ghUqLmd1aXRhcmFuZHBpY2t1cC5jb22CDCouaGFy
Z2lmLmNvbYIKKi5oaW50cy5hdYIRKi5odmFjZWxldmF0ZS5uZXSCCyouaXBzYXlh
LmNvghQqLmxhbmd1YWdlbGFiLmNvbS5hdYISKi5saWZlc2VsZWR0b3IuY29tghgq
LmxvdG9mYWNpbG5vY29tYW5kby5jb22CEioubWFnZW50YnJhaW5zLmNvbYIeKi5t
YW51ZWxldHJpY2lkYWRlc2Vydmljb3MuY29tghYqLm1pc3RyYWxzaWJlcmlhbnMu
Y29tghEqLm1wY3Byb2R1Y3RzLmNvbYIZKi5tdWx0aWxpbmd1YWxzcGVlY2hlcy50
doIRKi5teWluaW1jbG91ZC5jb22CDSoubnJzcG9ydHMuZ2GCEyoucGFja2FnZXRy
YWNrZXIubmyCESoucGltc29sdXRpb25zLm5sggoqLnJrdm0ub3Jngg0qLnNob3B0
aW1lLmF1ggwqLnNpbGljb24uYXWCCiouc3BlbnQudHaCESoudGVsZWZvbmJ1Y2h6
LmRlgg4qLnRvZG94bWVnYS5nYYIIKi51bXYuYXWCDSoudmltZW90by5jb22CFSou
eG4tLWRuZW5ncmFzLTY1YS5kZYIXKi54bi0tbGVkZXJiZXpnZS1oZWIuZGWCFSou
eWFvaW1hbmZhb25saW5lLmNvbYIaKi55a3R2MGMzMzVlMWE3NmE2NGY5NC5jb22C
CDNhNHo1LnVzggc3OTExLmF1gg9hbHVzZWRwYXJ0cy5jb22CDGFybW1vbmlhLmNv
bYIeYmFsdGltb3Jld2hvbGVzYWxlcHJvcGVydHkuY29tggtiaXp6Lm5ldC5hdYIG
Ymx2LmF1ghpicmFzZmllbGRzZXB0aWNzZXJ2aWNlLmNvbYIRY2FyY29sbGVjdGlv
bi5jb22CD2NhcnRhbmRkcm9wLmNvbYIaY2hpbmFraW5na2luZ29mcHJ1c3NpYS5j
b22CBmNpai5hdYIPY29udHJvbGUtYnhsLmJlgg1kb2N0b3JhbGlhLmF1ghJkb25z
YXBwcmFpc2Fscy5jb22CDGVkaW5nYnVyZy5kZYITZW50aXRsZW1lbnRjYXJkLm9y
Z4IYZm9sc29tY3Jlc2NlbnRzY2hvb2wuY29tghVnYWxsZXJ5Zmxvd2Vycy5jb20u
YXWCHGdsb2JhbHBvcnRmb2xpb21hbmFnZW1lbnQuYmWCBmdzbi5hdYITZ3VpdGFy
YW5kcGlja3VwLmNvbYIKaGFyZ2lmLmNvbYIIaGludHMuYXWCD2h2YWNlbGV2YXRl
Lm5ldIIJaXBzYXlhLmNvghJsYW5ndWFnZWxhYi5jb20uYXWCEGxpZmVzZWxlZHRv
ci5jb22CFmxvdG9mYWNpbG5vY29tYW5kby5jb22CEG1hZ2VudGJyYWlucy5jb22C
HG1hbnVlbGV0cmljaWRhZGVzZXJ2aWNvcy5jb22CFG1pc3RyYWxzaWJlcmlhbnMu
Y29tgg9tcGNwcm9kdWN0cy5jb22CF211bHRpbGluZ3VhbHNwZWVjaGVzLnR2gg9t
eWluaW1jbG91ZC5jb22CC25yc3BvcnRzLmdhghFwYWNrYWdldHJhY2tlci5ubIIP
cGltc29sdXRpb25zLm5sgghya3ZtLm9yZ4ILc2hvcHRpbWUuYXWCCnNpbGljb24u
YXWCCHNwZW50LnR2gg90ZWxlZm9uYnVjaHouZGWCDHRvZG94bWVnYS5nYYIGdW12
LmF1ggt2aW1lb3RvLmNvbYITeG4tLWRuZW5ncmFzLTY1YS5kZYIVeG4tLWxlZGVy
YmV6Z2UtaGViLmRlghN5YW9pbWFuZmFvbmxpbmUuY29tghh5a3R2MGMzMzVlMWE3
NmE2NGY5NC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY7G
vSRmAAAEAwBIMEYCIQCD4dTJfy8ammgOVAhV4TostVK0y513Xkjd2/qGZ5LdigIh
ALPgYCN4WAQ6BBck2NJhUhyoSSr1sLS5aQ9rEhgUT9lWAHYA7s3QZNXbGs7FXLed
tM0TojKHRny87N7DUUhZRnEftZsAAAGOxr0kYQAABAMARzBFAiBZfVm29BKrgpbT
e/lMKH9W5kPWbhslVe+DzW41Fgrl/AIhALk+Xbw4WqV3CAsT1sqyPA61I/+1x2qq
VfmmRG2q6Ge3MA0GCSqGSIb3DQEBCwUAA4IBAQAa9LOWir6WzuB/4ulzgFb3bGgk
UziZCz8vhzmQyj4EQLTRNaL4kEjEaIozDg9bMhW6Fimv9u0FkREDKO8rhM3PyXBp
Ggf6mLvO/eSye/Ole6T+vujUb11/FRrk2KIzeJhViMNU/2BqJ6c7uzkPxKnQcHP2
E3eaGYvuaZ2lhrbXSnQtj3oA1FqRPWGMy/vesyf5S8InzBlJn1AyvwZtl11tDITh
QMNMhkssXmTukup0A6xuKFqv3xtJYMJZFSGWeD6taOdXdUY3Tfy9i8zjigJ1YVVV
89GH6d8KQdutmO2Wwr0xcoCHeydpP4l0LJ218UHsGGMrhX/8EpOXqDm5e/ZT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355486492654565383839087937197822744238287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 05:41:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 05:41:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shoptime.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864669476749721252823062471665487513880167187431515092747140280352392222878634242056879384837808262397400023212099229758400024776303624790219388590960864198846160635324907586871894320758037147676017548808567148176929687238027714045484234897834891347174473871130329583637542539446192232257736397486683218889662687205878333850425005975765740320734494467588556705227828901761856237155402589366270321926135149711819897557084456865933035966338345106758086841513469382285835194654623896370220872704625293093319458716442090079980331782724736747444885874283772488691343341086105781394423771798171784054581896882749000114729675507684229606634368985378868256974431996839692974564439232595431525575927179536538720215184452488005076536970496668021697913655912207886141087018959783232166910077397514526366395581120926084104852996335079866203322094489792128464928476271706763125426762175749156447536826597247681705354477439342740813918722402631819393027329142463492597872420642810802156924300782472313036273526937903434089425074587712902773791412101448018668906139868133580608621368052389385128383412416731327632549649599978095062270814376566844867180962431171589970230403634763305144997184662498006538708839636934749589474263551222897296068135541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							301deb9c3d7ee16218a83b843b1e243d4cd83948
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1856 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3a4z5.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7911.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alusedparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armmonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baltimorewholesaleproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bizz.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasfieldsepticservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartanddrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinakingkingofprussia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cij.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controle-bxl.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctoralia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donsappraisals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edingburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entitlementcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.folsomcrescentschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galleryflowers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalportfoliomanagement.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guitarandpickup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hargif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hints.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacelevate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipsaya.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.languagelab.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeseledtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotofacilnocomando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magentbrains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manueletricidadeservicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mistralsiberians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpcproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multilingualspeeches.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myinimcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrsports.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packagetracker.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimsolutions.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rkvm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoptime.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silicon.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spent.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telefonbuchz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todoxmega.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vimeoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dnengras-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lederbezge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaoimanfaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yktv0c335e1a76a64f94.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3a4z5.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7911.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alusedparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armmonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltimorewholesaleproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizz.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasfieldsepticservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartanddrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinakingkingofprussia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cij.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controle-bxl.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctoralia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donsappraisals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edingburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entitlementcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folsomcrescentschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galleryflowers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalportfoliomanagement.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitarandpickup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hargif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hints.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacelevate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipsaya.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'languagelab.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeseledtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotofacilnocomando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentbrains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manueletricidadeservicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistralsiberians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multilingualspeeches.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinimcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrsports.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packagetracker.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimsolutions.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkvm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoptime.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silicon.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spent.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefonbuchz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todoxmega.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dnengras-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lederbezge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaoimanfaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yktv0c335e1a76a64f94.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ec6bd2466000004030048304602210083e1d4c97f2f1a9a680e540855e13a2cb552b4cb9d775e48dddbfa866792dd8a022100b3e060237858043a041724d8d261521ca8492af5b0b4b9690f6b1218144fd956007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ec6bd246100000403004730450220597d59b6f412ab8296d37bf94c287f56e643d66e1b2555ef83cd6e35160ae5fc022100b93e5dbc385aa577080b13d6cab23c0eb523ffb5c76aaa55f9a6446daae867b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001af4b3968abe96cee07fe2e9738056f76c68245338990b3f2f873990ca3e0440b4d135a2f89048c4688a330e0f5b3215ba1629aff6ed0591110328ef2b84cdcfc970691a07fa98bbcefde4b27bf3a57ba4febee8d46f5d7f151ae4d8a23378985588c354ff606a27a73bbb390fc4a9d07073f613779a198bee699da586b6d74a742d8f7a00d45a913d618ccbfbdeb327f94bc227cc19499f5032bf066d975d6d0c84e140c34c864b2c5e64ee92ea7403ac6e285aafdf1b4960c259152196783ead68e7577546374dfcbd8bcce38a0275615555f3d187e9df0a41dbad98ed96c2bd317280877b27693f89742c9db5f141ec18632b857ffc129397a839b97bf653