scomcast.net

Issued by R3

About this certificate

This digital certificate with serial number 04:c6:95:2b:83:d2:71:78:92:e3:75:cf:cc:fe:3a:88:f7:1d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=scomcast.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c6:95:2b:83:d2:71:78:92:e3:75:cf:cc:fe:3a:88:f7:1d
Serial Number (int): 416023333291192361592128373157860857149213
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:36:52:04:61:eb:40:ab:48:a9:89:a7:08:5c:d7:f5:3e:df:37:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:f7:32:93:d2:e8:d6:91:70:f2:84:45:02:9c:2d:82:5f:5a:bf:fa
Fingerprint (sha256): 1f:78:15:ef:10:86:b2:75:66:7f:c8:c7:9c:38:06:19:7e:b4:aa:4f:ff:ff:a4:22:03:e4:ca:3f:08:ed:0b:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate scomcast.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scomcast.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aaronrentalsbvi.com
*.aiu.in
*.aluminiumkurnia.com
*.bcxbasic.com
*.best10.tv
*.clinicadentariapiornais.com
*.dreamyproduct4us.net
*.easyparkbilbao.com
*.faceu.us
*.fantastika.online
*.fu-nyan-box.com
*.gardeningismypassion.com
*.geosemantica.net
*.getawaytent.com
*.ghps.org
*.gibraltar.de
*.hilltopbsc.org
*.hindilinks4u.io
*.instatakipcial.net
*.javng.com
*.jobsbyindia.com
*.jonasit.it
*.katmoviehd.to
*.kmwagri.com
*.lesoleilhaitianrestaurant.com
*.lippenbilder.de
*.loadvid.online
*.loj.au
*.newcatholiclandmovement.org
*.newportharborxc.com
*.nicknamenet.net
*.personapapay.com
*.pinkcoral.site
*.properback.com
*.protikdpo.org
*.robloxasset-copier.com
*.salespulls.online
*.salonjardinsoldes.com
*.scomcast.net
*.ssumcar.com
*.thaisexylive.com
*.tnnhis2012.com
*.torrentsee148.com
*.torrentsee150.com
*.torrentsee151.com
*.torrentsee152.com
*.torrentsee156.com
*.wwwsportal.de
*.wyfair.co.uk
*.xsmbnet.com
aaronrentalsbvi.com
aiu.in
aluminiumkurnia.com
bcxbasic.com
best10.tv
clinicadentariapiornais.com
dreamyproduct4us.net
easyparkbilbao.com
faceu.us
fantastika.online
fu-nyan-box.com
gardeningismypassion.com
geosemantica.net
getawaytent.com
ghps.org
gibraltar.de
hilltopbsc.org
hindilinks4u.io
instatakipcial.net
javng.com
jobsbyindia.com
jonasit.it
katmoviehd.to
kmwagri.com
lesoleilhaitianrestaurant.com
lippenbilder.de
loadvid.online
loj.au
newcatholiclandmovement.org
newportharborxc.com
nicknamenet.net
personapapay.com
pinkcoral.site
properback.com
protikdpo.org
robloxasset-copier.com
salespulls.online
salonjardinsoldes.com
scomcast.net
ssumcar.com
thaisexylive.com
tnnhis2012.com
torrentsee148.com
torrentsee150.com
torrentsee151.com
torrentsee152.com
torrentsee156.com
wwwsportal.de
wyfair.co.uk
xsmbnet.com

Other certificates including the domain name scomcast.net

(limited to 100 certificates)
skye.fr
scomcast.net
compraconreserve.info
worldoftile.us
puretubr.com
worldoftile.us
ww1.scomcast.net
*.arsivgazete.com
bestin.town
compraconreserve.info
proxyhelp.net
scomcast.net
scomcast.net

Certificate

The complete raw certificate details for scomcast.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINBDCCC+ygAwIBAgISBMaVK4PScXiS43XPzP46iPcdMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDExODM5MjhaFw0yNDA1MDExODM5MjdaMBcxFTATBgNVBAMT
DHNjb21jYXN0Lm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANui
xyWrdSWOkAaSEQ+GhNCbgpgE2eI4LvTraufx2TKOPqKa8Lof/umKEgZRo8QExOM2
rj7QriLo7LbXCGUDNPg/TO7x7RYMOWXxf5QxhAyY3rvJSBu28P4iRNE5zNdgqK+t
qOMzdAuLJxYOG/lr3xaB0E+kzYJAr6Y9omA4O64J6/4tev7NN5M0rpOK5Jri+EZO
tfRCCf2qH3CsNaAOsqeWD/PiI2+ozGkQNSOmF78SMVopiJeSsXMz8nVq+Tv+yINZ
RGhHMIEnealmfdfaNywY0fpgE7OHFF1Pu2LG7TmdH6eC+t4YfIvtvCXk3PbnB78N
PCr47Lr1fTFAC27nf+Nh0523QnOSXCKKMj9eZU8Orh+GIjeF7rHDnBv/kIw1WWJe
gIY6UMTI940V2pqyshfMP+63W0NktpZkNdPGPpOozuTWLo6cI63EJ4j3UdOtKmgp
QbAw4r7uleLBokhcH9xNHS1CfvCbfq2S0jAja+vXUckzgMWFrdd6HD116zPepl8u
3nAKgt/M0k5QlnyFjigY9coB/Y4l6jA+0mwruhvF4hS/ApI2ECySYE8KeIZzzHGP
XCG9XecHZAHy9rS822JNtTBvb62T9rhCprH1d4NDAq63sZxyXf1S38WbBIZSYxnt
6oYhkYwwRcjpUWLxdOT5kgq0lVTDq3Dr22uhKsp9AgMBAAGjggktMIIJKTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFDg2UgRh60CrSKmJpwhc1/U+3zfsMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIHNQYDVR0RBIIHLDCCByiCFSouYWFyb25yZW50YWxz
YnZpLmNvbYIIKi5haXUuaW6CFSouYWx1bWluaXVta3VybmlhLmNvbYIOKi5iY3hi
YXNpYy5jb22CCyouYmVzdDEwLnR2gh0qLmNsaW5pY2FkZW50YXJpYXBpb3JuYWlz
LmNvbYIWKi5kcmVhbXlwcm9kdWN0NHVzLm5ldIIUKi5lYXN5cGFya2JpbGJhby5j
b22CCiouZmFjZXUudXOCEyouZmFudGFzdGlrYS5vbmxpbmWCESouZnUtbnlhbi1i
b3guY29tghoqLmdhcmRlbmluZ2lzbXlwYXNzaW9uLmNvbYISKi5nZW9zZW1hbnRp
Y2EubmV0ghEqLmdldGF3YXl0ZW50LmNvbYIKKi5naHBzLm9yZ4IOKi5naWJyYWx0
YXIuZGWCECouaGlsbHRvcGJzYy5vcmeCESouaGluZGlsaW5rczR1LmlvghQqLmlu
c3RhdGFraXBjaWFsLm5ldIILKi5qYXZuZy5jb22CESouam9ic2J5aW5kaWEuY29t
ggwqLmpvbmFzaXQuaXSCDyoua2F0bW92aWVoZC50b4INKi5rbXdhZ3JpLmNvbYIf
Ki5sZXNvbGVpbGhhaXRpYW5yZXN0YXVyYW50LmNvbYIRKi5saXBwZW5iaWxkZXIu
ZGWCECoubG9hZHZpZC5vbmxpbmWCCCoubG9qLmF1gh0qLm5ld2NhdGhvbGljbGFu
ZG1vdmVtZW50Lm9yZ4IVKi5uZXdwb3J0aGFyYm9yeGMuY29tghEqLm5pY2tuYW1l
bmV0Lm5ldIISKi5wZXJzb25hcGFwYXkuY29tghAqLnBpbmtjb3JhbC5zaXRlghAq
LnByb3BlcmJhY2suY29tgg8qLnByb3Rpa2Rwby5vcmeCGCoucm9ibG94YXNzZXQt
Y29waWVyLmNvbYITKi5zYWxlc3B1bGxzLm9ubGluZYIXKi5zYWxvbmphcmRpbnNv
bGRlcy5jb22CDiouc2NvbWNhc3QubmV0gg0qLnNzdW1jYXIuY29tghIqLnRoYWlz
ZXh5bGl2ZS5jb22CECoudG5uaGlzMjAxMi5jb22CEyoudG9ycmVudHNlZTE0OC5j
b22CEyoudG9ycmVudHNlZTE1MC5jb22CEyoudG9ycmVudHNlZTE1MS5jb22CEyou
dG9ycmVudHNlZTE1Mi5jb22CEyoudG9ycmVudHNlZTE1Ni5jb22CDyoud3d3c3Bv
cnRhbC5kZYIOKi53eWZhaXIuY28udWuCDSoueHNtYm5ldC5jb22CE2Fhcm9ucmVu
dGFsc2J2aS5jb22CBmFpdS5pboITYWx1bWluaXVta3VybmlhLmNvbYIMYmN4YmFz
aWMuY29tggliZXN0MTAudHaCG2NsaW5pY2FkZW50YXJpYXBpb3JuYWlzLmNvbYIU
ZHJlYW15cHJvZHVjdDR1cy5uZXSCEmVhc3lwYXJrYmlsYmFvLmNvbYIIZmFjZXUu
dXOCEWZhbnRhc3Rpa2Eub25saW5lgg9mdS1ueWFuLWJveC5jb22CGGdhcmRlbmlu
Z2lzbXlwYXNzaW9uLmNvbYIQZ2Vvc2VtYW50aWNhLm5ldIIPZ2V0YXdheXRlbnQu
Y29tgghnaHBzLm9yZ4IMZ2licmFsdGFyLmRlgg5oaWxsdG9wYnNjLm9yZ4IPaGlu
ZGlsaW5rczR1LmlvghJpbnN0YXRha2lwY2lhbC5uZXSCCWphdm5nLmNvbYIPam9i
c2J5aW5kaWEuY29tggpqb25hc2l0Lml0gg1rYXRtb3ZpZWhkLnRvggtrbXdhZ3Jp
LmNvbYIdbGVzb2xlaWxoYWl0aWFucmVzdGF1cmFudC5jb22CD2xpcHBlbmJpbGRl
ci5kZYIObG9hZHZpZC5vbmxpbmWCBmxvai5hdYIbbmV3Y2F0aG9saWNsYW5kbW92
ZW1lbnQub3JnghNuZXdwb3J0aGFyYm9yeGMuY29tgg9uaWNrbmFtZW5ldC5uZXSC
EHBlcnNvbmFwYXBheS5jb22CDnBpbmtjb3JhbC5zaXRlgg5wcm9wZXJiYWNrLmNv
bYINcHJvdGlrZHBvLm9yZ4IWcm9ibG94YXNzZXQtY29waWVyLmNvbYIRc2FsZXNw
dWxscy5vbmxpbmWCFXNhbG9uamFyZGluc29sZGVzLmNvbYIMc2NvbWNhc3QubmV0
ggtzc3VtY2FyLmNvbYIQdGhhaXNleHlsaXZlLmNvbYIOdG5uaGlzMjAxMi5jb22C
EXRvcnJlbnRzZWUxNDguY29tghF0b3JyZW50c2VlMTUwLmNvbYIRdG9ycmVudHNl
ZTE1MS5jb22CEXRvcnJlbnRzZWUxNTIuY29tghF0b3JyZW50c2VlMTU2LmNvbYIN
d3d3c3BvcnRhbC5kZYIMd3lmYWlyLmNvLnVrggt4c21ibmV0LmNvbTATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ADtTd3U+LbmA
ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjWYu8KkAAAQDAEcwRQIgFmdb10gV
i4egGk9VTijpuQxoY2MdlAvL7WDrkO8TgyECIQCCicUyhzSXZTahK432yLgW8KYd
Yq21LmttR532SZ7pEAB1AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfY
AAABjWYu8LkAAAQDAEYwRAIgUg2N2tilS1HT3sHiUzgFOR4PvG73tZtqdNu2JhYo
wtECIBNIucvJLEwWwgizfQp3t/pUCrn83QyioNSXMkGNY3asMA0GCSqGSIb3DQEB
CwUAA4IBAQBGDnJEuiJ7/RxZYI92QEg7jbk6ye0MVFcRY+wPS0oX6X9ZSp9xYC1q
5lAGGaIpUsuPTYFGnP4B3oTRk94h/FC/lWTgW2oGAp5zVVx4fXk8MvXvrhv7j4BB
OlTKRmWBPU3MRbu5JO0+aTw+tYHR/8zqySjRapqOJxMAbwjXG09YljtyBpNr9gqx
keLUzdopIR9rCJr4j923AartcZoMzhs12HgWML3l8cf7Mucw838wyclx85WVIeAJ
mk/S2fDYsItTxAS3opFxG5mk3n2p3h2YyHoauAk7IfRYQ7ICqjqTJWF8+GO71HKC
gz9QoMHcPPVi4wUPObIwV5fn1JGZ4Aia
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416023333291192361592128373157860857149213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 18:39:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 18:39:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scomcast.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896036097653424298922467445417597617388736743313087511485170508673238450450961067521104566150424448546525916586540524914220739424934961128082758344272525414130562813051620225252449657940875695187864832693257830748165891353456212946798859913811563900153391511897934381590233437744158939576504247173029219348263051053890133954413593715922736409973298657496389145566735784248201083735243106367737584640349150031967508908787844090856266294579139394574194378407801194473621114418708859328049339622918680214707594094740882690561718222101881594493608973733312405201206436523090373049892187844160837764865184086646311252898442611201291452125065230486739039569298460537409414524170125952488124795372693879195339867705085898625568142051919033914947392699559913659422791446618578493295744232874188166956564905060891854608569981249211392934871007620682754215985827515807754416509569205219948298725763015214727503795406581912974336634108160566503663117886052902878531096782646252869804659697193691993470336254514471982171084193284396920565621011662385650340471557438020626961481800769959610736455760996568260830801196383670694325076347306128352784219343318708716903941831134496584301482932328330382155171911268648787253805581605399752360868891261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3836520461eb40ab48a989a7085cd7f53edf37ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1836 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaronrentalsbvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aluminiumkurnia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcxbasic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.best10.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicadentariapiornais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamyproduct4us.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyparkbilbao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faceu.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantastika.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fu-nyan-box.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardeningismypassion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geosemantica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getawaytent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gibraltar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilltopbsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hindilinks4u.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instatakipcial.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobsbyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jonasit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katmoviehd.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmwagri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesoleilhaitianrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lippenbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loadvid.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loj.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newcatholiclandmovement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newportharborxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicknamenet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personapapay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkcoral.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.properback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protikdpo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robloxasset-copier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salespulls.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salonjardinsoldes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scomcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssumcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thaisexylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnnhis2012.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentsee148.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentsee150.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentsee151.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentsee152.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentsee156.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyfair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsmbnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaronrentalsbvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluminiumkurnia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcxbasic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'best10.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicadentariapiornais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamyproduct4us.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyparkbilbao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceu.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantastika.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fu-nyan-box.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardeningismypassion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geosemantica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getawaytent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibraltar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilltopbsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindilinks4u.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instatakipcial.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsbyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonasit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katmoviehd.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmwagri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesoleilhaitianrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lippenbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadvid.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loj.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcatholiclandmovement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newportharborxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicknamenet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personapapay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkcoral.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'properback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protikdpo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robloxasset-copier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salespulls.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonjardinsoldes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scomcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssumcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaisexylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnnhis2012.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentsee148.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentsee150.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentsee151.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentsee152.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentsee156.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyfair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsmbnet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d662ef0a90000040300473045022016675bd748158b87a01a4f554e28e9b90c6863631d940bcbed60eb90ef1383210221008289c5328734976536a12b8df6c8b816f0a61d62adb52e6b6d479df6499ee910007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d662ef0b900000403004630440220520d8ddad8a54b51d3dec1e2533805391e0fbc6ef7b59b6a74dbb6261628c2d102201348b9cbc92c4c16c208b37d0a77b7fa540ab9fcdd0ca2a0d49732418d6376ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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