paqja.com

Issued by R3

About this certificate

This digital certificate with serial number 04:31:db:c8:b6:74:6e:07:93:59:7a:eb:52:a3:6c:e5:c7:10 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=paqja.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:31:db:c8:b6:74:6e:07:93:59:7a:eb:52:a3:6c:e5:c7:10
Serial Number (int): 365415122797238642063550849667321322391312
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:34:49:7c:27:78:49:ed:e2:e3:1c:25:29:ec:45:d7:e1:b9:51:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): be:b1:10:7f:29:d1:c1:5d:53:72:96:91:16:bf:c6:ea:b7:7b:65:f5
Fingerprint (sha256): 1d:43:ee:bc:19:fe:08:56:96:8e:64:f9:98:48:61:55:3b:3f:2c:83:61:e1:ed:93:95:e0:8c:2a:0c:2b:a8:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate paqja.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paqja.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.205x.xyz
*.adorebrand.com
*.appliancesalesandservice.com
*.bestrents.com
*.bey-simit-haus.de
*.cadjj.com
*.camillejuzeau.com
*.certeko.com
*.disneyintern.com
*.edmc.com
*.elderpoint.com
*.everydayworth.com
*.hindicomics4u.com
*.horturl.at
*.jefferspetsupply.com
*.jegswork.com
*.kakri.co
*.kanagi.me
*.kmaa20.com
*.linneagroup.com
*.mantimeter.com
*.newtorrentz.org
*.nichedigital.com
*.paqja.com
*.perez.ly
*.photogetme.com
*.pizzeriavesuvius.com
*.por.la
*.purehealthyfun.com
*.puttgen.com
*.raisingcodeblog.com
*.rapidmi.com
*.rollershuttercompany.co.uk
*.shoesmen.shop
*.siscounttire.com
*.sopankbang.com
*.southesttexas.com
*.spectrummonile.com
*.spokanebackpage.com
*.spunkyhoe.com
*.staedtereisen-24.de
*.swinglifestytle.com
*.telegraphonline.co.uk
*.ticktackticket.com
*.vanillaprepaid.co
*.vidreel.com
*.vietforum.vn
*.warthuder.com
*.weldingwheels.es
*.youigo.com
205x.xyz
adorebrand.com
appliancesalesandservice.com
bestrents.com
bey-simit-haus.de
cadjj.com
camillejuzeau.com
certeko.com
disneyintern.com
edmc.com
elderpoint.com
everydayworth.com
hindicomics4u.com
horturl.at
jefferspetsupply.com
jegswork.com
kakri.co
kanagi.me
kmaa20.com
linneagroup.com
mantimeter.com
newtorrentz.org
nichedigital.com
paqja.com
perez.ly
photogetme.com
pizzeriavesuvius.com
por.la
purehealthyfun.com
puttgen.com
raisingcodeblog.com
rapidmi.com
rollershuttercompany.co.uk
shoesmen.shop
siscounttire.com
sopankbang.com
southesttexas.com
spectrummonile.com
spokanebackpage.com
spunkyhoe.com
staedtereisen-24.de
swinglifestytle.com
telegraphonline.co.uk
ticktackticket.com
vanillaprepaid.co
vidreel.com
vietforum.vn
warthuder.com
weldingwheels.es
youigo.com

Other certificates including the domain name paqja.com

(limited to 100 certificates)
paqja.com
petsbenefits.com

Certificate

The complete raw certificate details for paqja.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMsjCCC5qgAwIBAgISBDHbyLZ0bgeTWXrrUqNs5ccQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTQwNzIyMDdaFw0yNDA2MTIwNzIyMDZaMBQxEjAQBgNVBAMT
CXBhcWphLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMXGNH/B
wN0OopVAOvIF4Ivr/9kPyLEHolRUbCNzlrvd0nshWVODP5XH2zTXLZT0biv+bGdG
6q1LafJsfmqQA5A/PDl8/eI4sYxbO2a6TxXpcZjCQlgYPksVqvBeNsMC6INkJVVx
gHLqfis3uiQwCmihEIbnBwsbOEjfylzqwagYFvSuwD/TITnpniOkMmgPBBF7T7FF
xOBJOeW3yEkvLAKdQKKbwq0qVh6JOh1ZSqCImNWPHiiyhXROy8k3z/exDQtkO+xq
F0BvyprIKFHDzdnS4JPWTWUamjvHeKFpKnaAhCZZYKfu1Ngtyb3rhpRYO9Cp0Dk4
4p1TRdysn9QLQ00R3pTqLxbox8GT1lamR/KsZDhbSD3aCgKK4+Q1LHj13gq+daZw
OcrnYHvns1tYlYJCiMQOOSBvfZCCjCJjRG617zH5IV9DJzGbrcPic96ruRehNF5S
Q9YV+FqFx1At9t/jEzQBRYyhIS1flD+NWMaVDNsVrYINs6gzeJZe4eGqMBwGmwMX
kYxXG0NqStGBpBY7L0dU24fvNAo+Le/BozXgUBeStUP2/IfB/qZ7dp03TUYc/rXu
7RICVvXdTc50Ex5BAYV1UHx5WpsJtwJ2uZ96/x6fckNkG/3dnxgITMXjXHHtI9R4
vWzSIHFKqpxDCsEG8Sy33gR+sy5loPhZEWA5AgMBAAGjggjeMIII2jAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFFI0SXwneEnt4uMcJSnsRdfhuVE/MB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIG5QYDVR0RBIIG3DCCBtiCCiouMjA1eC54eXqCECouYWRv
cmVicmFuZC5jb22CHiouYXBwbGlhbmNlc2FsZXNhbmRzZXJ2aWNlLmNvbYIPKi5i
ZXN0cmVudHMuY29tghMqLmJleS1zaW1pdC1oYXVzLmRlggsqLmNhZGpqLmNvbYIT
Ki5jYW1pbGxlanV6ZWF1LmNvbYINKi5jZXJ0ZWtvLmNvbYISKi5kaXNuZXlpbnRl
cm4uY29tggoqLmVkbWMuY29tghAqLmVsZGVycG9pbnQuY29tghMqLmV2ZXJ5ZGF5
d29ydGguY29tghMqLmhpbmRpY29taWNzNHUuY29tggwqLmhvcnR1cmwuYXSCFiou
amVmZmVyc3BldHN1cHBseS5jb22CDiouamVnc3dvcmsuY29tggoqLmtha3JpLmNv
ggsqLmthbmFnaS5tZYIMKi5rbWFhMjAuY29tghEqLmxpbm5lYWdyb3VwLmNvbYIQ
Ki5tYW50aW1ldGVyLmNvbYIRKi5uZXd0b3JyZW50ei5vcmeCEioubmljaGVkaWdp
dGFsLmNvbYILKi5wYXFqYS5jb22CCioucGVyZXoubHmCECoucGhvdG9nZXRtZS5j
b22CFioucGl6emVyaWF2ZXN1dml1cy5jb22CCCoucG9yLmxhghQqLnB1cmVoZWFs
dGh5ZnVuLmNvbYINKi5wdXR0Z2VuLmNvbYIVKi5yYWlzaW5nY29kZWJsb2cuY29t
gg0qLnJhcGlkbWkuY29tghwqLnJvbGxlcnNodXR0ZXJjb21wYW55LmNvLnVrgg8q
LnNob2VzbWVuLnNob3CCEiouc2lzY291bnR0aXJlLmNvbYIQKi5zb3BhbmtiYW5n
LmNvbYITKi5zb3V0aGVzdHRleGFzLmNvbYIUKi5zcGVjdHJ1bW1vbmlsZS5jb22C
FSouc3Bva2FuZWJhY2twYWdlLmNvbYIPKi5zcHVua3lob2UuY29tghUqLnN0YWVk
dGVyZWlzZW4tMjQuZGWCFSouc3dpbmdsaWZlc3R5dGxlLmNvbYIXKi50ZWxlZ3Jh
cGhvbmxpbmUuY28udWuCFCoudGlja3RhY2t0aWNrZXQuY29tghMqLnZhbmlsbGFw
cmVwYWlkLmNvgg0qLnZpZHJlZWwuY29tgg4qLnZpZXRmb3J1bS52boIPKi53YXJ0
aHVkZXIuY29tghIqLndlbGRpbmd3aGVlbHMuZXOCDCoueW91aWdvLmNvbYIIMjA1
eC54eXqCDmFkb3JlYnJhbmQuY29tghxhcHBsaWFuY2VzYWxlc2FuZHNlcnZpY2Uu
Y29tgg1iZXN0cmVudHMuY29tghFiZXktc2ltaXQtaGF1cy5kZYIJY2FkamouY29t
ghFjYW1pbGxlanV6ZWF1LmNvbYILY2VydGVrby5jb22CEGRpc25leWludGVybi5j
b22CCGVkbWMuY29tgg5lbGRlcnBvaW50LmNvbYIRZXZlcnlkYXl3b3J0aC5jb22C
EWhpbmRpY29taWNzNHUuY29tggpob3J0dXJsLmF0ghRqZWZmZXJzcGV0c3VwcGx5
LmNvbYIMamVnc3dvcmsuY29tgghrYWtyaS5jb4IJa2FuYWdpLm1lggprbWFhMjAu
Y29tgg9saW5uZWFncm91cC5jb22CDm1hbnRpbWV0ZXIuY29tgg9uZXd0b3JyZW50
ei5vcmeCEG5pY2hlZGlnaXRhbC5jb22CCXBhcWphLmNvbYIIcGVyZXoubHmCDnBo
b3RvZ2V0bWUuY29tghRwaXp6ZXJpYXZlc3V2aXVzLmNvbYIGcG9yLmxhghJwdXJl
aGVhbHRoeWZ1bi5jb22CC3B1dHRnZW4uY29tghNyYWlzaW5nY29kZWJsb2cuY29t
ggtyYXBpZG1pLmNvbYIacm9sbGVyc2h1dHRlcmNvbXBhbnkuY28udWuCDXNob2Vz
bWVuLnNob3CCEHNpc2NvdW50dGlyZS5jb22CDnNvcGFua2JhbmcuY29tghFzb3V0
aGVzdHRleGFzLmNvbYISc3BlY3RydW1tb25pbGUuY29tghNzcG9rYW5lYmFja3Bh
Z2UuY29tgg1zcHVua3lob2UuY29tghNzdGFlZHRlcmVpc2VuLTI0LmRlghNzd2lu
Z2xpZmVzdHl0bGUuY29tghV0ZWxlZ3JhcGhvbmxpbmUuY28udWuCEnRpY2t0YWNr
dGlja2V0LmNvbYIRdmFuaWxsYXByZXBhaWQuY2+CC3ZpZHJlZWwuY29tggx2aWV0
Zm9ydW0udm6CDXdhcnRodWRlci5jb22CEHdlbGRpbmd3aGVlbHMuZXOCCnlvdWln
by5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY48DeVfAAAE
AwBHMEUCIHDIxEfDFmiRgCr+f/NQepStQcZ6lxnLnT8tiqVznXKUAiEA/wOrtw4x
fnbQe8EdKIRZiljR9sQBNPkakZGJ0UaH5FYAdgDuzdBk1dsazsVct520zROiModG
fLzs3sNRSFlGcR+1mwAAAY48DeVVAAAEAwBHMEUCIQCDCfvq0pWbTtyySyr45VhN
TwWhaQnuEZoXJGguMfXnFAIgJnvGabcPwgC5nCpQTH/dFmLDGWR1Hw9aemVZGEEb
XYAwDQYJKoZIhvcNAQELBQADggEBAEVkjb1DH+DuOXy/7ADo/0dA0AgXVTincimO
1OFyLtMDNJUKZSbXn6Fz2me/Yf2juvspvgFH+BPsPpsILH9AX3HahamdaXgz9gkG
8mg5qPQgiQosT5IETSRyEimuZk/CS17kDpzeRz/y5MHJrRYpp+7cmdqVMzhdOZuh
qI05aXZkjQwkFyCQ4S9VYoakEYRDJz3/Cpn/Xaa6qvMEeVSctMbVyEC+sdL4SwaX
b36wSF4jJtKNb1096+03DfdeKaEL1uRcnRweClxkn11KosEQHHxuwvBlyMHETmeN
unizA5ZboKGdSLlvJ8N36LzT3p3pOMkdXDnWPya8LNNUzyJ6fjg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxcY0f8HA3Q6ilUA68gXg
i+v/2Q/IsQeiVFRsI3OWu93SeyFZU4M/lcfbNNctlPRuK/5sZ0bqrUtp8mx+apAD
kD88OXz94jixjFs7ZrpPFelxmMJCWBg+SxWq8F42wwLog2QlVXGAcup+Kze6JDAK
aKEQhucHCxs4SN/KXOrBqBgW9K7AP9MhOemeI6QyaA8EEXtPsUXE4Ek55bfISS8s
Ap1AopvCrSpWHok6HVlKoIiY1Y8eKLKFdE7LyTfP97ENC2Q77GoXQG/KmsgoUcPN
2dLgk9ZNZRqaO8d4oWkqdoCEJllgp+7U2C3JveuGlFg70KnQOTjinVNF3Kyf1AtD
TRHelOovFujHwZPWVqZH8qxkOFtIPdoKAorj5DUsePXeCr51pnA5yudge+ezW1iV
gkKIxA45IG99kIKMImNEbrXvMfkhX0MnMZutw+Jz3qu5F6E0XlJD1hX4WoXHUC32
3+MTNAFFjKEhLV+UP41YxpUM2xWtgg2zqDN4ll7h4aowHAabAxeRjFcbQ2pK0YGk
FjsvR1Tbh+80Cj4t78GjNeBQF5K1Q/b8h8H+pnt2nTdNRhz+te7tEgJW9d1NznQT
HkEBhXVQfHlamwm3Ana5n3r/Hp9yQ2Qb/d2fGAhMxeNcce0j1Hi9bNIgcUqqnEMK
wQbxLLfeBH6zLmWg+FkRYDkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365415122797238642063550849667321322391312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 07:22:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 07:22:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paqja.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806848499197183277656757836206552692994792201933871621450272694940627928383487459428844981309019340540789505112979098459434288114994466242320304712407472938193509214000051478686790585666057094469597543178323274855568188460263745504810924835207205953612478629531043709387633003381567001928967939659503914892570184540265692996124094991024729057295832735042343383184119267232482061146814393323271298924689513248580255596920944072920667093544475956020522548698708660809618037418739952647746585232607709509534362457348902539958750821210040996715240777939133226318904036859851093758705538265699203836882515075984329414884890397846144358697964688095305742735706205398086412409369829139773143873863758399575820135250625304950652953634580554781620874817662362924517495613372536923509642529072580504625145252963966428209294189859774291193335286480586617299742138892738821516897753215290256286321711066112226496370756332732271899312970296236521626230435276559155806274979767457079947084365520787026866813124258750624583912088315747101891540483745324115473132802934014221433833556758429716991643128639723455551474294019574528607796684020206669368439506477880603623767931982221821571887830029547084200080476679909899112075343521606890178902843449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5234497c277849ede2e31c2529ec45d7e1b9513f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1756 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.205x.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adorebrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appliancesalesandservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestrents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bey-simit-haus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cadjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camillejuzeau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certeko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneyintern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elderpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everydayworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hindicomics4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jefferspetsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jegswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kakri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanagi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmaa20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linneagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mantimeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newtorrentz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nichedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paqja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perez.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photogetme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizzeriavesuvius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.por.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purehealthyfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puttgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raisingcodeblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollershuttercompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoesmen.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siscounttire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sopankbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southesttexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrummonile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spokanebackpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spunkyhoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staedtereisen-24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swinglifestytle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telegraphonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticktackticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanillaprepaid.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidreel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietforum.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warthuder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weldingwheels.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '205x.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adorebrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliancesalesandservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bey-simit-haus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camillejuzeau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certeko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneyintern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elderpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydayworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindicomics4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferspetsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jegswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kakri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanagi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmaa20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linneagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantimeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtorrentz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nichedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paqja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perez.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photogetme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzeriavesuvius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'por.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purehealthyfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puttgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisingcodeblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollershuttercompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoesmen.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siscounttire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sopankbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southesttexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrummonile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spokanebackpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spunkyhoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staedtereisen-24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swinglifestytle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telegraphonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticktackticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanillaprepaid.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidreel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietforum.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warthuder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weldingwheels.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e3c0de55f0000040300473045022070c8c447c3166891802afe7ff3507a94ad41c67a9719cb9d3f2d8aa5739d7294022100ff03abb70e317e76d07bc11d2884598a58d1f6c40134f91a919189d14687e456007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e3c0de55500000403004730450221008309fbead2959b4edcb24b2af8e5584d4f05a16909ee119a1724682e31f5e7140220267bc669b70fc200b99c2a504c7fdd1662c31964751f0f5a7a655918411b5d80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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