elfqrin.co

Issued by R3

About this certificate

This digital certificate with serial number 04:29:84:f2:4e:4a:63:58:bc:23:4d:af:b1:92:2d:2b:0a:13 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=elfqrin.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:84:f2:4e:4a:63:58:bc:23:4d:af:b1:92:2d:2b:0a:13
Serial Number (int): 362577436990004417312789789836057162484243
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: af:6e:3c:19:de:a8:a7:d6:72:bb:54:ad:ff:0a:d4:d6:69:3a:2c:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:80:75:57:4d:9b:71:68:16:ba:00:b4:de:c0:85:06:53:f7:90:fd
Fingerprint (sha256): 1b:4e:ff:f1:e0:f8:d4:12:5c:06:f5:d9:0e:92:19:50:a8:8b:48:ad:83:33:71:e6:ba:e3:84:2f:67:13:55:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate elfqrin.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elfqrin.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airtexconstruction.com
*.beautyvibemaja.com
*.budidayaudangvaname.com
*.carl-bot.xyz
*.cjgtu.com
*.clinicasmultiodonto.com
*.crownpmtacademy.com
*.cryptobanter.co
*.dallascityhall.co
*.defiqubit.com
*.dragonballearth.net
*.education4sustainability.org
*.efortlessdate.com
*.elfqrin.co
*.etcstake.com
*.euvmoney.club
*.evergabe.online
*.genericrelief.com
*.gzlvtu.com
*.hancockwhitney.co
*.hirzadesalta.com
*.hjalpandeanglaralvsbyn.com
*.honorofkings.org
*.immibqto.com
*.itstimesunshine.com
*.kejiolabimtan.com
*.lavivavirtualassistant.biz
*.lawapka.pl
*.lawnzon.com
*.mahaheng.co
*.metalgearweb.net
*.mineshoppingcart.com
*.mlspin.co
*.motolitebatteryshop.com
*.mrnussbaum.co
*.nvelegancevip.com
*.orthovirginia.co
*.pcmallgov.biz
*.rachelpyper.com
*.redsmithaward.com
*.shopmissa.co
*.soundcityng.com
*.surgeglobalbakeries.com
*.taneann.com
*.tebaltefl.com
*.therverdeclower.com
*.ttc-service.biz
*.u1qo3e.com
*.vierramutelu.com
*.viewpointinspection.com
airtexconstruction.com
beautyvibemaja.com
budidayaudangvaname.com
carl-bot.xyz
cjgtu.com
clinicasmultiodonto.com
crownpmtacademy.com
cryptobanter.co
dallascityhall.co
defiqubit.com
dragonballearth.net
education4sustainability.org
efortlessdate.com
elfqrin.co
etcstake.com
euvmoney.club
evergabe.online
genericrelief.com
gzlvtu.com
hancockwhitney.co
hirzadesalta.com
hjalpandeanglaralvsbyn.com
honorofkings.org
immibqto.com
itstimesunshine.com
kejiolabimtan.com
lavivavirtualassistant.biz
lawapka.pl
lawnzon.com
mahaheng.co
metalgearweb.net
mineshoppingcart.com
mlspin.co
motolitebatteryshop.com
mrnussbaum.co
nvelegancevip.com
orthovirginia.co
pcmallgov.biz
rachelpyper.com
redsmithaward.com
shopmissa.co
soundcityng.com
surgeglobalbakeries.com
taneann.com
tebaltefl.com
therverdeclower.com
ttc-service.biz
u1qo3e.com
vierramutelu.com
viewpointinspection.com

Other certificates including the domain name elfqrin.co

(limited to 100 certificates)
goformative.co
elfqrin.co
elfqrin.co
elfqrin.co
elfqrin.co
elfqrin.co
pubclip.fr
elfqrin.co
paymycite.co
manvn.win
bestbuyclub.com

Certificate

The complete raw certificate details for elfqrin.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINWDCCDECgAwIBAgISBCmE8k5KY1i8I02vsZItKwoTMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMTYwODE0MjVaFw0yNDA1MTYwODE0MjRaMBUxEzARBgNVBAMT
CmVsZnFyaW4uY28wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCe59QO
6DcR/v9npvtmvHIBO6IYnohsoUJ7R977yKgcOWBN82O7eKPRrK0YGx4Ot03JIS1D
6UtWLnT9rPKeFgtufb/5iurw+OLwuiOLmjHmReZJnVXpgkyyZKMGw8Jeu4NDt6C7
y6pi+n9xfN2cluuRASHVObQnrF55mbPIzbXpU0IwFmIk5ljywKGtfi5mZZ0fQW+3
dPGbNvw31HEXdD6GVsghBrZQAAC7miVhyt4QD4vv6E2OpFTamGgzE8o7plZnWQ6f
L6xWaGzF1eujXDnk7S5b3Qnl1FzBy9ehzQZa6cZGzR+mhiChFLZJ9TXqnKFOz+Zi
R0oA8/b8AZeT153udSnuHaOc8cNHGcyIMIReuh/6E5rQSg/zLvq2aCoUlfwUXxJ7
9rgVQ7Yr837GpWbCd1EATMlVgMDxAwGGvCW1P96pKJGHbFsvgMqlrHX24rxWmW+S
xGHWWJF2JXM6eAnONx7+1nYW5IiFImWYjqXclnWDt/sNtWfljaldn/2H96YZ2Q6t
GIs4y5bcSWm0rp9LUweJmITGScq63LxO/VzIdVA5FWJMO4XEdCZmSvGAi+0N0Z07
NXTrKZVGwuPg5yr0MyA99HHGq6pgU7QlZNYO6hI7rK1TIPDyPk5Cz5oAoAkvhgp9
/AX1Krf7a9U2MrPePIOwHeq4aewgWNrd3yS12QIDAQABo4IJgzCCCX8wDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBSvbjwZ3qin1nK7VK3/CtTWaTos8zAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCB4sGA1UdEQSCB4Iwggd+ghgqLmFpcnRleGNvbnN0cnVj
dGlvbi5jb22CFCouYmVhdXR5dmliZW1hamEuY29tghkqLmJ1ZGlkYXlhdWRhbmd2
YW5hbWUuY29tgg4qLmNhcmwtYm90Lnh5eoILKi5jamd0dS5jb22CGSouY2xpbmlj
YXNtdWx0aW9kb250by5jb22CFSouY3Jvd25wbXRhY2FkZW15LmNvbYIRKi5jcnlw
dG9iYW50ZXIuY2+CEyouZGFsbGFzY2l0eWhhbGwuY2+CDyouZGVmaXF1Yml0LmNv
bYIVKi5kcmFnb25iYWxsZWFydGgubmV0gh4qLmVkdWNhdGlvbjRzdXN0YWluYWJp
bGl0eS5vcmeCEyouZWZvcnRsZXNzZGF0ZS5jb22CDCouZWxmcXJpbi5jb4IOKi5l
dGNzdGFrZS5jb22CDyouZXV2bW9uZXkuY2x1YoIRKi5ldmVyZ2FiZS5vbmxpbmWC
EyouZ2VuZXJpY3JlbGllZi5jb22CDCouZ3psdnR1LmNvbYITKi5oYW5jb2Nrd2hp
dG5leS5jb4ISKi5oaXJ6YWRlc2FsdGEuY29tghwqLmhqYWxwYW5kZWFuZ2xhcmFs
dnNieW4uY29tghIqLmhvbm9yb2ZraW5ncy5vcmeCDiouaW1taWJxdG8uY29tghUq
Lml0c3RpbWVzdW5zaGluZS5jb22CEyoua2VqaW9sYWJpbXRhbi5jb22CHCoubGF2
aXZhdmlydHVhbGFzc2lzdGFudC5iaXqCDCoubGF3YXBrYS5wbIINKi5sYXduem9u
LmNvbYINKi5tYWhhaGVuZy5jb4ISKi5tZXRhbGdlYXJ3ZWIubmV0ghYqLm1pbmVz
aG9wcGluZ2NhcnQuY29tggsqLm1sc3Bpbi5jb4IZKi5tb3RvbGl0ZWJhdHRlcnlz
aG9wLmNvbYIPKi5tcm51c3NiYXVtLmNvghMqLm52ZWxlZ2FuY2V2aXAuY29tghIq
Lm9ydGhvdmlyZ2luaWEuY2+CDyoucGNtYWxsZ292LmJpeoIRKi5yYWNoZWxweXBl
ci5jb22CEyoucmVkc21pdGhhd2FyZC5jb22CDiouc2hvcG1pc3NhLmNvghEqLnNv
dW5kY2l0eW5nLmNvbYIZKi5zdXJnZWdsb2JhbGJha2VyaWVzLmNvbYINKi50YW5l
YW5uLmNvbYIPKi50ZWJhbHRlZmwuY29tghUqLnRoZXJ2ZXJkZWNsb3dlci5jb22C
ESoudHRjLXNlcnZpY2UuYml6ggwqLnUxcW8zZS5jb22CEioudmllcnJhbXV0ZWx1
LmNvbYIZKi52aWV3cG9pbnRpbnNwZWN0aW9uLmNvbYIWYWlydGV4Y29uc3RydWN0
aW9uLmNvbYISYmVhdXR5dmliZW1hamEuY29tghdidWRpZGF5YXVkYW5ndmFuYW1l
LmNvbYIMY2FybC1ib3QueHl6ggljamd0dS5jb22CF2NsaW5pY2FzbXVsdGlvZG9u
dG8uY29tghNjcm93bnBtdGFjYWRlbXkuY29tgg9jcnlwdG9iYW50ZXIuY2+CEWRh
bGxhc2NpdHloYWxsLmNvgg1kZWZpcXViaXQuY29tghNkcmFnb25iYWxsZWFydGgu
bmV0ghxlZHVjYXRpb240c3VzdGFpbmFiaWxpdHkub3JnghFlZm9ydGxlc3NkYXRl
LmNvbYIKZWxmcXJpbi5jb4IMZXRjc3Rha2UuY29tgg1ldXZtb25leS5jbHVigg9l
dmVyZ2FiZS5vbmxpbmWCEWdlbmVyaWNyZWxpZWYuY29tggpnemx2dHUuY29tghFo
YW5jb2Nrd2hpdG5leS5jb4IQaGlyemFkZXNhbHRhLmNvbYIaaGphbHBhbmRlYW5n
bGFyYWx2c2J5bi5jb22CEGhvbm9yb2ZraW5ncy5vcmeCDGltbWlicXRvLmNvbYIT
aXRzdGltZXN1bnNoaW5lLmNvbYIRa2VqaW9sYWJpbXRhbi5jb22CGmxhdml2YXZp
cnR1YWxhc3Npc3RhbnQuYml6ggpsYXdhcGthLnBsggtsYXduem9uLmNvbYILbWFo
YWhlbmcuY2+CEG1ldGFsZ2VhcndlYi5uZXSCFG1pbmVzaG9wcGluZ2NhcnQuY29t
ggltbHNwaW4uY2+CF21vdG9saXRlYmF0dGVyeXNob3AuY29tgg1tcm51c3NiYXVt
LmNvghFudmVsZWdhbmNldmlwLmNvbYIQb3J0aG92aXJnaW5pYS5jb4INcGNtYWxs
Z292LmJpeoIPcmFjaGVscHlwZXIuY29tghFyZWRzbWl0aGF3YXJkLmNvbYIMc2hv
cG1pc3NhLmNvgg9zb3VuZGNpdHluZy5jb22CF3N1cmdlZ2xvYmFsYmFrZXJpZXMu
Y29tggt0YW5lYW5uLmNvbYINdGViYWx0ZWZsLmNvbYITdGhlcnZlcmRlY2xvd2Vy
LmNvbYIPdHRjLXNlcnZpY2UuYml6ggp1MXFvM2UuY29tghB2aWVycmFtdXRlbHUu
Y29tghd2aWV3cG9pbnRpbnNwZWN0aW9uLmNvbTATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ADtTd3U+LbmAToswWwb+QDtn2E/D
9Me9AA0tcm/h+tQXAAABjbEyE9cAAAQDAEYwRAIgfz3T19NmXVUPZY/VaO3j4Rvr
Ad6yHEEw+At6w6kaX3UCICcoEFncLDsVEeABqu+Nk7qlfIrmCjvfFXHHmsnKwFo5
AHYAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGNsTIT9AAABAMA
RzBFAiEA9UGUI4d5uNqzqb9TkQU+B8+Pgot3CzSUX5bfF+diJ8ACIF+HYqmWpHIl
PZybil+4eFnihKQZ/EpgdR6JBVhbBSdQMA0GCSqGSIb3DQEBCwUAA4IBAQCxlzzi
Dupl8BgKfeXDLuJRv4RTAaraf+LZv9f4pKsKGxIdI8rsOW9pBZnL75ulYvKHCzIt
36UFErqu/ibsHCPgXOh7gdV/ly2cWdLlSR0qZ9c9a50BP7bYX7rNPUGxkNUj+Mt2
U9Hc849JgNlhc8AmKBtam70VhhqAClO9qy5ubYPBOGHOM5LeNcHVNupvCNbCIzBl
+a2vMzu87Gs45rPsplTAe4LXGy4AN1UAZHc3GsgvNgfd403y0VayCamYg0hIqVTw
coE2JdDRRTIsk71cu+uNvhz28S68EOp7y2qHLiAH0mwVZHs9yqW7KprZMdBf5dvE
xcsUmjebjUyC17vK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362577436990004417312789789836057162484243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 08:14:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 08:14:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elfqrin.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648278204789872385066148984525461547349736370198511083843808140649556707386573113521890049285696030831390565438240612561248888591818485238781690185581067602951983271242691239906978128395834839369200597668102990728076065204308482288525151970799809742674144114344863555116563107598824559966525298477848220000743331527842706479619591507814522351806251581704312936450402946031199800754096069958534918657462732956085714486551758604006852218754946387649491272941531083292166322961971160070248767156649792395461516181743463759543693334443559017260583042666525150942527449441849015230569557123525035584287179347854645398152404018299300779602510479183898255893170747068237473988254102987190073206714660427067590256216977138669216099303823071352277736869656833831328612659886813058950413452775289731498026106644659061603755340122639520638247701487397906327162567903917325850956065181972498547044064375446190893733870691483425201316830555330127621293006443144513972241493040238923938832490023062158055935196598984095838510736424826697295360785509684166425503461205296053633661408420556694448284122499831179970753090650923735034636385066783932334955847896301747850433204287772433055954302047055352309450481300315805697934589620614110834864731609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af6e3c19dea8a7d672bb54adff0ad4d6693a2cf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1922 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airtexconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautyvibemaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budidayaudangvaname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carl-bot.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cjgtu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicasmultiodonto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crownpmtacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptobanter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dallascityhall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defiqubit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dragonballearth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.education4sustainability.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efortlessdate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elfqrin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etcstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euvmoney.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evergabe.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genericrelief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gzlvtu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hancockwhitney.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hirzadesalta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjalpandeanglaralvsbyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honorofkings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immibqto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itstimesunshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kejiolabimtan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavivavirtualassistant.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawapka.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawnzon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mahaheng.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metalgearweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mineshoppingcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlspin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motolitebatteryshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrnussbaum.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvelegancevip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orthovirginia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcmallgov.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rachelpyper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redsmithaward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopmissa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundcityng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surgeglobalbakeries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taneann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tebaltefl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therverdeclower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttc-service.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u1qo3e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vierramutelu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewpointinspection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airtexconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyvibemaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budidayaudangvaname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carl-bot.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjgtu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicasmultiodonto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crownpmtacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptobanter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallascityhall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defiqubit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragonballearth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education4sustainability.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efortlessdate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elfqrin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etcstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euvmoney.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergabe.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genericrelief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gzlvtu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hancockwhitney.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirzadesalta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjalpandeanglaralvsbyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honorofkings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immibqto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itstimesunshine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kejiolabimtan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavivavirtualassistant.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawapka.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawnzon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahaheng.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalgearweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineshoppingcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlspin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motolitebatteryshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrnussbaum.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvelegancevip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthovirginia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcmallgov.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rachelpyper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsmithaward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopmissa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundcityng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surgeglobalbakeries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taneann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tebaltefl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therverdeclower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttc-service.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u1qo3e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vierramutelu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpointinspection.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db13213d7000004030046304402207f3dd3d7d3665d550f658fd568ede3e11beb01deb21c4130f80b7ac3a91a5f75022027281059dc2c3b1511e001aaef8d93baa57c8ae60a3bdf1571c79ac9cac05a39007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018db13213f40000040300473045022100f54194238779b8dab3a9bf5391053e07cf8f828b770b34945f96df17e76227c002205f8762a996a472253d9c9b8a5fb87859e284a419fc4a60751e8905585b052750
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b1973ce20eea65f0180a7de5c32ee251bf845301aada7fe2d9bfd7f8a4ab0a1b121d23caec396f690599cbef9ba562f2870b322ddfa50512baaefe26ec1c23e05ce87b81d57f972d9c59d2e5491d2a67d73d6b9d013fb6d85fbacd3d41b190d523f8cb7653d1dcf38f4980d96173c026281b5a9bbd15861a800a53bdab2e6e6d83c13861ce3392de35c1d536ea6f08d6c2233065f9adaf333bbcec6b38e6b3eca654c07b82d71b2e003755006477371ac82f3607dde34df2d156b209a998834848a954f072813625d0d145322c93bd5cbbeb8dbe1cf6f12ebc10ea7bcb6a872e2007d26c15647b3dcaa5bb2a9ad931d05fe5dbc4c5cb149a379b8d4c82d7bbca