afascreenings.org
Issued by R3
About this certificate
This digital certificate with serial number 04:a6:29:3c:50:dd:c4:af:6f:26:3b:d1:b2:e4:21:0f:51:2c was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=afascreenings.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:a6:29:3c:50:dd:c4:af:6f:26:3b:d1:b2:e4:21:0f:51:2cSerial Number (int): 404990828161718528518479985776927194435884
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 39:02:16:2d:f8:ba:20:cb:85:cd:80:96:01:88:c8:94:fc:57:81:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fa:14:82:e1:f7:56:bc:00:bb:5f:1f:fb:f5:f2:ca:9b:cf:eb:35:77
Fingerprint (sha256): 19:41:52:b7:d3:56:8e:47:42:f4:6a:fc:85:f4:d9:01:d9:e3:1a:7d:88:99:6d:bc:77:7c:23:07:6e:1e:7c:d0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate afascreenings.org
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for afascreenings.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.1337digital.de
*.14all41.de
*.afascreenings.org
*.africa-grid.org
*.airgatetech.com
*.allefirewalls.de
*.amsterdamunited.org
*.andarem.de
*.baclay.de
*.bellezadayspa.com
*.bither.co
*.booksee.co
*.catch-your-dreamlife.de
*.clideo.co
*.direitos.de
*.divaina.co
*.elslotscazinos.com
*.foods.com.sg
*.freshdsk.com
*.grove4life.de
*.gunbrooker.com
*.harrigan.tv
*.imovs.cc
*.kochbar.co
*.lancone.com
*.learn-digital-skills.online
*.mb-trans-wallduern.de
*.mister-sed.de
*.motelvistareal.com
*.moto-collet.de
*.motorradke.de
*.naturalnchicmakeup.com
*.nevadahealthlik.com
*.nickelodon.com
*.pictonline.org
*.rabatt-hai.de
*.radio-no-limits.de
*.rkf002.cc
*.roller-net.de
*.schlossberghotel-oberstaufen.de
*.siamha.co
*.strikebitclub.com
*.stringsnvoices.de
*.toyota-ahz-mannheim.de
*.tvteka.co
*.was-tun-gegen-blaehbauch.de
*.wednet.co
*.xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com
*.ybmex.co
*.zip-cloud.de
1337digital.de
14all41.de
afascreenings.org
africa-grid.org
airgatetech.com
allefirewalls.de
amsterdamunited.org
andarem.de
baclay.de
bellezadayspa.com
bither.co
booksee.co
catch-your-dreamlife.de
clideo.co
direitos.de
divaina.co
elslotscazinos.com
foods.com.sg
freshdsk.com
grove4life.de
gunbrooker.com
harrigan.tv
imovs.cc
kochbar.co
lancone.com
learn-digital-skills.online
mb-trans-wallduern.de
mister-sed.de
motelvistareal.com
moto-collet.de
motorradke.de
naturalnchicmakeup.com
nevadahealthlik.com
nickelodon.com
pictonline.org
rabatt-hai.de
radio-no-limits.de
rkf002.cc
roller-net.de
schlossberghotel-oberstaufen.de
siamha.co
strikebitclub.com
stringsnvoices.de
toyota-ahz-mannheim.de
tvteka.co
was-tun-gegen-blaehbauch.de
wednet.co
xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com
ybmex.co
zip-cloud.de
*.14all41.de
*.afascreenings.org
*.africa-grid.org
*.airgatetech.com
*.allefirewalls.de
*.amsterdamunited.org
*.andarem.de
*.baclay.de
*.bellezadayspa.com
*.bither.co
*.booksee.co
*.catch-your-dreamlife.de
*.clideo.co
*.direitos.de
*.divaina.co
*.elslotscazinos.com
*.foods.com.sg
*.freshdsk.com
*.grove4life.de
*.gunbrooker.com
*.harrigan.tv
*.imovs.cc
*.kochbar.co
*.lancone.com
*.learn-digital-skills.online
*.mb-trans-wallduern.de
*.mister-sed.de
*.motelvistareal.com
*.moto-collet.de
*.motorradke.de
*.naturalnchicmakeup.com
*.nevadahealthlik.com
*.nickelodon.com
*.pictonline.org
*.rabatt-hai.de
*.radio-no-limits.de
*.rkf002.cc
*.roller-net.de
*.schlossberghotel-oberstaufen.de
*.siamha.co
*.strikebitclub.com
*.stringsnvoices.de
*.toyota-ahz-mannheim.de
*.tvteka.co
*.was-tun-gegen-blaehbauch.de
*.wednet.co
*.xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com
*.ybmex.co
*.zip-cloud.de
1337digital.de
14all41.de
afascreenings.org
africa-grid.org
airgatetech.com
allefirewalls.de
amsterdamunited.org
andarem.de
baclay.de
bellezadayspa.com
bither.co
booksee.co
catch-your-dreamlife.de
clideo.co
direitos.de
divaina.co
elslotscazinos.com
foods.com.sg
freshdsk.com
grove4life.de
gunbrooker.com
harrigan.tv
imovs.cc
kochbar.co
lancone.com
learn-digital-skills.online
mb-trans-wallduern.de
mister-sed.de
motelvistareal.com
moto-collet.de
motorradke.de
naturalnchicmakeup.com
nevadahealthlik.com
nickelodon.com
pictonline.org
rabatt-hai.de
radio-no-limits.de
rkf002.cc
roller-net.de
schlossberghotel-oberstaufen.de
siamha.co
strikebitclub.com
stringsnvoices.de
toyota-ahz-mannheim.de
tvteka.co
was-tun-gegen-blaehbauch.de
wednet.co
xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com
ybmex.co
zip-cloud.de
Other certificates including the domain name afascreenings.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for afascreenings.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIM7jCCC9agAwIBAgISBKYpPFDdxK9vJjvRsuQhD1EsMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTQyMjAzMTRaFw0yNDA4MTIyMjAzMTNaMBwxGjAYBgNVBAMT EWFmYXNjcmVlbmluZ3Mub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAx3llfEmIc/tg74R9HlVXkX/kDDrfcRa39LwgZPQtNCxSpqgKyeo17pAZMzdO /mSz1cKU1oLsLsPVLOBg1+jhjdHyaG6LBIMRSZh+LREcaHphfessmIfR4oA+U2DC IsDC8Rrr0LYweLRLfzSoOU0KeSaVFBzybNe9bUwQv7D5izVUBKBHQVA0WXszkBb9 6sdPp8LVBFb27gMzuRwuA23YA6LrFatVKcpEuvGdRE9FvWQcZ7uwFsrYIq1MpIuM DCOuAJXPi7tUXIYoGcB1hSERdGI08NHLwl0FQYimc15+56FVC3hn2pZ5hWKgsrHq MJovTK3ehQhHwyK0qDCkDcrem2zoLW/hmh34cUgQJBdVO4G5MBy6gTTBPp5WNc3H gGOm9ITRwkBHJNRKCU6G0KIfBW9zAsz8Te+zn1f1AWUt0YZ4idbAPwpsZncvQFdV lzvswTz3fEu10qCJFWtbDU/LVXJUAhL1dHsftC3wdWPSAVMntCHkG4tkBtj6XtYa WF/m/x0orUrDCG9/lebMwRRA46DgO5OTGFbKdzlZ6rhLj57hJQVXo6I1QNP6sgnS mG/+C2G+KYn0yRHZBU8kNTSrT83xF02pkgzY1w7fPsHFEBPJBBwI865RDeQBTP+M hhGJur/Z2cbvk3KVuPJQky3XuRSMIkJNutL+ZdFGcTsxRLkCAwEAAaOCCRIwggkO MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUOQIWLfi6IMuFzYCWAYjIlPxXgcAwHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggcZBgNVHREEggcQMIIHDIIQKi4xMzM3ZGln aXRhbC5kZYIMKi4xNGFsbDQxLmRlghMqLmFmYXNjcmVlbmluZ3Mub3JnghEqLmFm cmljYS1ncmlkLm9yZ4IRKi5haXJnYXRldGVjaC5jb22CEiouYWxsZWZpcmV3YWxs cy5kZYIVKi5hbXN0ZXJkYW11bml0ZWQub3JnggwqLmFuZGFyZW0uZGWCCyouYmFj bGF5LmRlghMqLmJlbGxlemFkYXlzcGEuY29tggsqLmJpdGhlci5jb4IMKi5ib29r c2VlLmNvghkqLmNhdGNoLXlvdXItZHJlYW1saWZlLmRlggsqLmNsaWRlby5jb4IN Ki5kaXJlaXRvcy5kZYIMKi5kaXZhaW5hLmNvghQqLmVsc2xvdHNjYXppbm9zLmNv bYIOKi5mb29kcy5jb20uc2eCDiouZnJlc2hkc2suY29tgg8qLmdyb3ZlNGxpZmUu ZGWCECouZ3VuYnJvb2tlci5jb22CDSouaGFycmlnYW4udHaCCiouaW1vdnMuY2OC DCoua29jaGJhci5jb4INKi5sYW5jb25lLmNvbYIdKi5sZWFybi1kaWdpdGFsLXNr aWxscy5vbmxpbmWCFyoubWItdHJhbnMtd2FsbGR1ZXJuLmRlgg8qLm1pc3Rlci1z ZWQuZGWCFCoubW90ZWx2aXN0YXJlYWwuY29tghAqLm1vdG8tY29sbGV0LmRlgg8q Lm1vdG9ycmFka2UuZGWCGCoubmF0dXJhbG5jaGljbWFrZXVwLmNvbYIVKi5uZXZh ZGFoZWFsdGhsaWsuY29tghAqLm5pY2tlbG9kb24uY29tghAqLnBpY3RvbmxpbmUu b3Jngg8qLnJhYmF0dC1oYWkuZGWCFCoucmFkaW8tbm8tbGltaXRzLmRlggsqLnJr ZjAwMi5jY4IPKi5yb2xsZXItbmV0LmRlgiEqLnNjaGxvc3NiZXJnaG90ZWwtb2Jl cnN0YXVmZW4uZGWCCyouc2lhbWhhLmNvghMqLnN0cmlrZWJpdGNsdWIuY29tghMq LnN0cmluZ3Nudm9pY2VzLmRlghgqLnRveW90YS1haHotbWFubmhlaW0uZGWCCyou dHZ0ZWthLmNvgh0qLndhcy10dW4tZ2VnZW4tYmxhZWhiYXVjaC5kZYILKi53ZWRu ZXQuY2+CKioueG4tLTQyYzNhZG5sYTZhbnJlY2JnNWMzam5iMGY4aDRlOWJtLmNv bYIKKi55Ym1leC5jb4IOKi56aXAtY2xvdWQuZGWCDjEzMzdkaWdpdGFsLmRlggox NGFsbDQxLmRlghFhZmFzY3JlZW5pbmdzLm9yZ4IPYWZyaWNhLWdyaWQub3Jngg9h aXJnYXRldGVjaC5jb22CEGFsbGVmaXJld2FsbHMuZGWCE2Ftc3RlcmRhbXVuaXRl ZC5vcmeCCmFuZGFyZW0uZGWCCWJhY2xheS5kZYIRYmVsbGV6YWRheXNwYS5jb22C CWJpdGhlci5jb4IKYm9va3NlZS5jb4IXY2F0Y2gteW91ci1kcmVhbWxpZmUuZGWC CWNsaWRlby5jb4ILZGlyZWl0b3MuZGWCCmRpdmFpbmEuY2+CEmVsc2xvdHNjYXpp bm9zLmNvbYIMZm9vZHMuY29tLnNnggxmcmVzaGRzay5jb22CDWdyb3ZlNGxpZmUu ZGWCDmd1bmJyb29rZXIuY29tggtoYXJyaWdhbi50doIIaW1vdnMuY2OCCmtvY2hi YXIuY2+CC2xhbmNvbmUuY29tghtsZWFybi1kaWdpdGFsLXNraWxscy5vbmxpbmWC FW1iLXRyYW5zLXdhbGxkdWVybi5kZYINbWlzdGVyLXNlZC5kZYISbW90ZWx2aXN0 YXJlYWwuY29tgg5tb3RvLWNvbGxldC5kZYINbW90b3JyYWRrZS5kZYIWbmF0dXJh bG5jaGljbWFrZXVwLmNvbYITbmV2YWRhaGVhbHRobGlrLmNvbYIObmlja2Vsb2Rv bi5jb22CDnBpY3RvbmxpbmUub3Jngg1yYWJhdHQtaGFpLmRlghJyYWRpby1uby1s aW1pdHMuZGWCCXJrZjAwMi5jY4INcm9sbGVyLW5ldC5kZYIfc2NobG9zc2Jlcmdo b3RlbC1vYmVyc3RhdWZlbi5kZYIJc2lhbWhhLmNvghFzdHJpa2ViaXRjbHViLmNv bYIRc3RyaW5nc252b2ljZXMuZGWCFnRveW90YS1haHotbWFubmhlaW0uZGWCCXR2 dGVrYS5jb4Ibd2FzLXR1bi1nZWdlbi1ibGFlaGJhdWNoLmRlggl3ZWRuZXQuY2+C KHhuLS00MmMzYWRubGE2YW5yZWNiZzVjM2puYjBmOGg0ZTlibS5jb22CCHlibWV4 LmNvggx6aXAtY2xvdWQuZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0 ygAAAY95WISeAAAEAwBHMEUCIQCfxE9KVNIADxH/TkLBgCAu1CIvUCpXc3p/Xg/x xhnl3wIgZ50CeudZlmN4UsTxCGcgzBC8bih8k3id2EvcshOwfD8AdgDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY95WISZAAAEAwBHMEUCIQDT8lWJ /f8hasS/nLwcbtrKE4oINgemyTnhInhnpVKixwIgBVhiTiPeQ9ivGLauv39I9Hoe TzsXgiiMMhM++T/Lk/cwDQYJKoZIhvcNAQELBQADggEBAJYDlCbK1fSLj3Dd/hPU OjTLY1rVNyvg36tVAuKBEPB8C66w1C1WpPsTnq6l2DZlFlO8APPVun4IWS4j9nmy ynPrBRsr5rOhwh68z3FBoX56acezFLQaY4Trzgc0eT7EYadC407u+eqAId5QV1Ib HWTwxY+2XAsnFyxp9n52tInr3VzJTnZkVQUFMz+yDqGy8aj19nkjp+Jhc9LOjfaQ jTwb0bY3gRmo8MigojhA/SBl2FwfumgxrDGifMArG9Llvu26wBnScahZmbPLnpv4 cdCzQfFLe08c+gJf9Ob4BOtIctrwc9bBgtOQPuKoQn+dHP01xcRzJGaLjzsNK5/N v7g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx3llfEmIc/tg74R9HlVX kX/kDDrfcRa39LwgZPQtNCxSpqgKyeo17pAZMzdO/mSz1cKU1oLsLsPVLOBg1+jh jdHyaG6LBIMRSZh+LREcaHphfessmIfR4oA+U2DCIsDC8Rrr0LYweLRLfzSoOU0K eSaVFBzybNe9bUwQv7D5izVUBKBHQVA0WXszkBb96sdPp8LVBFb27gMzuRwuA23Y A6LrFatVKcpEuvGdRE9FvWQcZ7uwFsrYIq1MpIuMDCOuAJXPi7tUXIYoGcB1hSER dGI08NHLwl0FQYimc15+56FVC3hn2pZ5hWKgsrHqMJovTK3ehQhHwyK0qDCkDcre m2zoLW/hmh34cUgQJBdVO4G5MBy6gTTBPp5WNc3HgGOm9ITRwkBHJNRKCU6G0KIf BW9zAsz8Te+zn1f1AWUt0YZ4idbAPwpsZncvQFdVlzvswTz3fEu10qCJFWtbDU/L VXJUAhL1dHsftC3wdWPSAVMntCHkG4tkBtj6XtYaWF/m/x0orUrDCG9/lebMwRRA 46DgO5OTGFbKdzlZ6rhLj57hJQVXo6I1QNP6sgnSmG/+C2G+KYn0yRHZBU8kNTSr T83xF02pkgzY1w7fPsHFEBPJBBwI865RDeQBTP+MhhGJur/Z2cbvk3KVuPJQky3X uRSMIkJNutL+ZdFGcTsxRLkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 404990828161718528518479985776927194435884 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 22:03:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 22:03:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afascreenings.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813783756318184817602124233789922846436731557043694069653355240725845184625647978868785481795201527382239381312776744578816569209633664539687721946309150270673790970395982504295494222070512805784729731698631083498109009464097789161971015212953664033571459463670306005023153408357914971644629337731475628217094119960218333504953115989995387352277358761733781696211345032701595150170570754154121117836694085861984094772363882947173371655656399189972901036967592849684296758084654009748645553251717474338384307090477588360679600084513317778462851661523399894254859543693128984286509844033672822114376562355229171233524383917533757916936976993748286285730344212038218049777706870245945516640517343633051915540571125878917772534267062947926081442815365156785190797793455639007605633625311919267118789689095253812276528977869819095605683086924691452243711294729027815850558786886830766389239865029092081767004997710606308543032925215714183455269009803559441623636898228755971770605845502540390797137153723847622093908540238548474116170286653740733320584582429750858951856139149948415046143950673195593568059832978791204427870878060517026046277705108000260010378584207190771204586062240754999504742526813430810820979201454608818117882758329 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3902162df8ba20cb85cd80960188c894fc5781c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1808 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1337digital.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.14all41.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afascreenings.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africa-grid.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airgatetech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allefirewalls.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amsterdamunited.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andarem.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baclay.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellezadayspa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bither.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.booksee.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catch-your-dreamlife.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clideo.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.direitos.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divaina.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elslotscazinos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foods.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshdsk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grove4life.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gunbrooker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrigan.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imovs.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kochbar.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learn-digital-skills.online' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mb-trans-wallduern.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mister-sed.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motelvistareal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moto-collet.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorradke.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalnchicmakeup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nevadahealthlik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickelodon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictonline.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rabatt-hai.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio-no-limits.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rkf002.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roller-net.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlossberghotel-oberstaufen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siamha.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strikebitclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stringsnvoices.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota-ahz-mannheim.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvteka.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.was-tun-gegen-blaehbauch.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wednet.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ybmex.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zip-cloud.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1337digital.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '14all41.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afascreenings.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa-grid.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airgatetech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allefirewalls.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamunited.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andarem.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baclay.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellezadayspa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bither.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksee.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catch-your-dreamlife.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clideo.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direitos.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divaina.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elslotscazinos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foods.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshdsk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grove4life.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunbrooker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrigan.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imovs.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kochbar.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn-digital-skills.online' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb-trans-wallduern.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mister-sed.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motelvistareal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moto-collet.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorradke.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalnchicmakeup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevadahealthlik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickelodon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictonline.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabatt-hai.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio-no-limits.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkf002.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roller-net.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlossberghotel-oberstaufen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siamha.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strikebitclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stringsnvoices.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota-ahz-mannheim.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvteka.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'was-tun-gegen-blaehbauch.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wednet.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybmex.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zip-cloud.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f7958849e00000403004730450221009fc44f4a54d2000f11ff4e42c180202ed4222f502a57737a7f5e0ff1c619e5df0220679d027ae75996637852c4f1086720cc10bc6e287c93789dd84bdcb213b07c3f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f795884990000040300473045022100d3f25589fdff216ac4bf9cbc1c6edaca138a083607a6c939e1227867a552a2c702200558624e23de43d8af18b6aebf7f48f47a1e4f3b1782288c32133ef93fcb93f7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0096039426cad5f48b8f70ddfe13d43a34cb635ad5372be0dfab5502e28110f07c0baeb0d42d56a4fb139eaea5d836651653bc00f3d5ba7e08592e23f679b2ca73eb051b2be6b3a1c21ebccf7141a17e7a69c7b314b41a6384ebce0734793ec461a742e34eeef9ea8021de5057521b1d64f0c58fb65c0b27172c69f67e76b489ebdd5cc94e7664550505333fb20ea1b2f1a8f5f67923a7e26173d2ce8df6908d3c1bd1b6378119a8f0c8a0a23840fd2065d85c1fba6831ac31a27cc02b1bd2e5beedbac019d271a85999b3cb9e9bf871d0b341f14b7b4f1cfa025ff4e6f804eb4872daf073d6c182d3903ee2a8427f9d1cfd35c5c47324668b8f3b0d2b9fcdbfb8