klgtp.cn

Issued by R3

About this certificate

This digital certificate with serial number 04:a2:f8:50:05:cb:04:49:e0:ef:87:b1:c5:8d:2c:c0:30:10 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=klgtp.cn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a2:f8:50:05:cb:04:49:e0:ef:87:b1:c5:8d:2c:c0:30:10
Serial Number (int): 403904951212433051852759482714056533487632
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 44:46:3f:dd:88:60:9b:1d:07:4a:e1:4f:a1:9d:6c:b8:b2:65:5c:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c3:6c:9b:73:e8:bf:96:bc:54:3a:ce:07:41:ef:71:de:6b:fc:63:d2
Fingerprint (sha256): 27:92:12:48:63:e0:cd:a2:b2:66:0f:fb:08:c5:27:ac:76:d2:df:49:23:fb:bf:17:43:fa:f2:c8:9b:f9:44:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate klgtp.cn

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for klgtp.cn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.allenuniversity.com
*.amzphotobooth.com
*.arkansasdepartmentofeducation.com
*.autionnation.com
*.bellme.com
*.bestforkids.com
*.bigpicureloans.com
*.binunce.com
*.buzzfeedtasty.com
*.chesterhotel.com
*.cigarette.com.au
*.circlrk.com
*.clearance2021.ru
*.collageunad.com
*.enhancedmobility.com
*.fashioninthebox.com
*.fathamevents.com
*.gaigoi88.pro
*.gameboost.pro
*.greatlakesstudentloan.com
*.ilvllkdwwjejpj.com
*.joliescartes.com
*.karibik-traum.org
*.klgtp.cn
*.lawbroker.com.au
*.lawfind.com.au
*.mattressbyappoinment.com
*.mythityone.com
*.newyorkcitysaves.com
*.oregonabis.com
*.otsprtvhc.info
*.outbakc.com
*.pjcpenney.com
*.questdiagnositc.com
*.seafoodtrade.asia
*.shopforce.com.au
*.skipladded.com
*.successforce.com.au
*.symphonycredit.com
*.thaiobrien.net
*.tilleys.com
*.txmyt.com
*.typebased.com
*.viktorgino.me
*.wageworls.com
*.whyamiwrong.com
*.wwmusic.com
*.xhamsterlibe.com
*.zelten.de
*.zipforeclosure.com
allenuniversity.com
amzphotobooth.com
arkansasdepartmentofeducation.com
autionnation.com
bellme.com
bestforkids.com
bigpicureloans.com
binunce.com
buzzfeedtasty.com
chesterhotel.com
cigarette.com.au
circlrk.com
clearance2021.ru
collageunad.com
enhancedmobility.com
fashioninthebox.com
fathamevents.com
gaigoi88.pro
gameboost.pro
greatlakesstudentloan.com
ilvllkdwwjejpj.com
joliescartes.com
karibik-traum.org
klgtp.cn
lawbroker.com.au
lawfind.com.au
mattressbyappoinment.com
mythityone.com
newyorkcitysaves.com
oregonabis.com
otsprtvhc.info
outbakc.com
pjcpenney.com
questdiagnositc.com
seafoodtrade.asia
shopforce.com.au
skipladded.com
successforce.com.au
symphonycredit.com
thaiobrien.net
tilleys.com
txmyt.com
typebased.com
viktorgino.me
wageworls.com
whyamiwrong.com
wwmusic.com
xhamsterlibe.com
zelten.de
zipforeclosure.com

Other certificates including the domain name klgtp.cn

(limited to 100 certificates)
klgtp.cn

Certificate

The complete raw certificate details for klgtp.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINHTCCDAWgAwIBAgISBKL4UAXLBEng74exxY0swDAQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjMxMTA4MzRaFw0yNDA2MjExMTA4MzNaMBMxETAPBgNVBAMT
CGtsZ3RwLmNuMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo1ZMxS8h
Kth56Dwy1cVchdh+ktNOOMUJJo9+dZZWpfpI/BOQkQWsbXEhxah0+FPvE3R1L9A+
81hMP4jiPUxW5r8362uGIwn8+slPk8HsmkjHs/r6Cxdz9nbu7LhPIMGLOtreYRep
ZcSjK6gG9hzQUqXxzcPnOBou95P7ZOCn0M1OPFlTjiiM0P0aYEOR0RcGMIBeaZP5
SGNZitOo4+fXYStSVMrMLwtvyHu6s/JlzNAsGtcf/ja9Q95CQ8VGOok5wi8R6tVc
b3rMu+ocwKyTqJyYeLfSllweE1vJmWAmL5yisNRguPyrfPxr7MGtYffRYUxEoNdU
WxFzLG5aHOk5nlzdm/OUf771nfiSJNElIoEs+a1RtgQcJoqASJtx0g4vgesoNBKN
K8lmx4RGqPoWE+NhfEKSR1UzJyQXYv3xuK0s8Pyg1dNPoi9SbrUFFMO/pRoO2QB3
O41dWKsZ4641Bybzkdp92S2D9N+jReEg0qO7r8aUrAvTktM2+fZ8odpQfXc/Wgd2
bccMvrR+kuw2zIGHV/7lQeGsSHKdpeu6sizKwIjjmSsnkHyVCk8YqbnfOj70VYeG
rek/LnKcXrp/kf+tUI/b4hdy8irG86+rUBDsQ2xKE2eOfwMeGRgJr7zWE6jq+N7i
p1aUwylYrL9+gHrsMXZyhQ/gQoBHwn+gABsCAwEAAaOCCUowgglGMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUREY/3Yhgmx0HSuFPoZ1suLJlXJUwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggdPBgNVHREEggdGMIIHQoIVKi5hbGxlbnVuaXZlcnNpdHku
Y29tghMqLmFtenBob3RvYm9vdGguY29tgiMqLmFya2Fuc2FzZGVwYXJ0bWVudG9m
ZWR1Y2F0aW9uLmNvbYISKi5hdXRpb25uYXRpb24uY29tggwqLmJlbGxtZS5jb22C
ESouYmVzdGZvcmtpZHMuY29tghQqLmJpZ3BpY3VyZWxvYW5zLmNvbYINKi5iaW51
bmNlLmNvbYITKi5idXp6ZmVlZHRhc3R5LmNvbYISKi5jaGVzdGVyaG90ZWwuY29t
ghIqLmNpZ2FyZXR0ZS5jb20uYXWCDSouY2lyY2xyay5jb22CEiouY2xlYXJhbmNl
MjAyMS5ydYIRKi5jb2xsYWdldW5hZC5jb22CFiouZW5oYW5jZWRtb2JpbGl0eS5j
b22CFSouZmFzaGlvbmludGhlYm94LmNvbYISKi5mYXRoYW1ldmVudHMuY29tgg4q
LmdhaWdvaTg4LnByb4IPKi5nYW1lYm9vc3QucHJvghsqLmdyZWF0bGFrZXNzdHVk
ZW50bG9hbi5jb22CFCouaWx2bGxrZHd3amVqcGouY29tghIqLmpvbGllc2NhcnRl
cy5jb22CEyoua2FyaWJpay10cmF1bS5vcmeCCioua2xndHAuY26CEioubGF3YnJv
a2VyLmNvbS5hdYIQKi5sYXdmaW5kLmNvbS5hdYIaKi5tYXR0cmVzc2J5YXBwb2lu
bWVudC5jb22CECoubXl0aGl0eW9uZS5jb22CFioubmV3eW9ya2NpdHlzYXZlcy5j
b22CECoub3JlZ29uYWJpcy5jb22CECoub3RzcHJ0dmhjLmluZm+CDSoub3V0YmFr
Yy5jb22CDyoucGpjcGVubmV5LmNvbYIVKi5xdWVzdGRpYWdub3NpdGMuY29tghMq
LnNlYWZvb2R0cmFkZS5hc2lhghIqLnNob3Bmb3JjZS5jb20uYXWCECouc2tpcGxh
ZGRlZC5jb22CFSouc3VjY2Vzc2ZvcmNlLmNvbS5hdYIUKi5zeW1waG9ueWNyZWRp
dC5jb22CECoudGhhaW9icmllbi5uZXSCDSoudGlsbGV5cy5jb22CCyoudHhteXQu
Y29tgg8qLnR5cGViYXNlZC5jb22CDyoudmlrdG9yZ2luby5tZYIPKi53YWdld29y
bHMuY29tghEqLndoeWFtaXdyb25nLmNvbYINKi53d211c2ljLmNvbYISKi54aGFt
c3RlcmxpYmUuY29tggsqLnplbHRlbi5kZYIUKi56aXBmb3JlY2xvc3VyZS5jb22C
E2FsbGVudW5pdmVyc2l0eS5jb22CEWFtenBob3RvYm9vdGguY29tgiFhcmthbnNh
c2RlcGFydG1lbnRvZmVkdWNhdGlvbi5jb22CEGF1dGlvbm5hdGlvbi5jb22CCmJl
bGxtZS5jb22CD2Jlc3Rmb3JraWRzLmNvbYISYmlncGljdXJlbG9hbnMuY29tggti
aW51bmNlLmNvbYIRYnV6emZlZWR0YXN0eS5jb22CEGNoZXN0ZXJob3RlbC5jb22C
EGNpZ2FyZXR0ZS5jb20uYXWCC2NpcmNscmsuY29tghBjbGVhcmFuY2UyMDIxLnJ1
gg9jb2xsYWdldW5hZC5jb22CFGVuaGFuY2VkbW9iaWxpdHkuY29tghNmYXNoaW9u
aW50aGVib3guY29tghBmYXRoYW1ldmVudHMuY29tggxnYWlnb2k4OC5wcm+CDWdh
bWVib29zdC5wcm+CGWdyZWF0bGFrZXNzdHVkZW50bG9hbi5jb22CEmlsdmxsa2R3
d2planBqLmNvbYIQam9saWVzY2FydGVzLmNvbYIRa2FyaWJpay10cmF1bS5vcmeC
CGtsZ3RwLmNughBsYXdicm9rZXIuY29tLmF1gg5sYXdmaW5kLmNvbS5hdYIYbWF0
dHJlc3NieWFwcG9pbm1lbnQuY29tgg5teXRoaXR5b25lLmNvbYIUbmV3eW9ya2Np
dHlzYXZlcy5jb22CDm9yZWdvbmFiaXMuY29tgg5vdHNwcnR2aGMuaW5mb4ILb3V0
YmFrYy5jb22CDXBqY3Blbm5leS5jb22CE3F1ZXN0ZGlhZ25vc2l0Yy5jb22CEXNl
YWZvb2R0cmFkZS5hc2lhghBzaG9wZm9yY2UuY29tLmF1gg5za2lwbGFkZGVkLmNv
bYITc3VjY2Vzc2ZvcmNlLmNvbS5hdYISc3ltcGhvbnljcmVkaXQuY29tgg50aGFp
b2JyaWVuLm5ldIILdGlsbGV5cy5jb22CCXR4bXl0LmNvbYINdHlwZWJhc2VkLmNv
bYINdmlrdG9yZ2luby5tZYINd2FnZXdvcmxzLmNvbYIPd2h5YW1pd3JvbmcuY29t
ggt3d211c2ljLmNvbYIQeGhhbXN0ZXJsaWJlLmNvbYIJemVsdGVuLmRlghJ6aXBm
b3JlY2xvc3VyZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5
AgQCBIH3BIH0APIAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAA
AY5rNnbAAAAEAwBIMEYCIQCFIusHiaYG8FeVKz6FE40pYfxGt2IL6aMdLVnvCkVh
4AIhAMYAnDr33b0Wg7WkrIU8KWITuQVWoOZ5Wl94q0GUnSFOAHcA7s3QZNXbGs7F
XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGOazZ+oQAABAMASDBGAiEAqH6neqAD
nbB8eoFzDSMhjrudy1H7XVDyfAob2rZXdEwCIQDQ5kvP7Ojpq+y5BCJusFdASIAZ
IwX7EhX1dMPjfP86jjANBgkqhkiG9w0BAQsFAAOCAQEADiyGI1mxAmzW5Q27Lzrx
WiTTTgPa8xG7uneKV+xh3IZB0cEp/GzBPkY72ZLkgp1QqonDNV7xDoMSWTyRjvGb
tzcXqojrKuLNSfiZThn0h3HvZZXkD05iZwD+ZoVI42EV5GMeC2Q5daizCtpQ0szw
0mp1c9F1cNoLKfuMVYpIGwm0Nww1ZIZX6rkY9GMeKt94ffB9DLTylRALFJLLnCq6
QgIcLCHsRUfomhba/XFlNwM8mzpzj85ZphKRbZmFV2ws/OGOla5ExMbuzlHkMKvE
uFnHxrlHkWakpY7QPP5fNCNjf6UdsCcsqr6UPqF8RNjzIaZkAf67myCcwzJxCc7d
GQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403904951212433051852759482714056533487632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 11:08:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 11:08:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'klgtp.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 666357267497347457264504556659848551410215727656879078638481024603278955040530979650720996099629503510971798478117754787290683373533028796684286291355163076059765168752141864032249930070900545920423718471425573497730696387311596890341523776911444107962316025494383445875450200677476153925242362512449119551002520009685546743500387519819841399548729291265605236371745721389353134516206076496332098816145940537363962076719619022544294434480057545180479054212107302981741768960758560251424652006249870759571963544264269317790445289861015899921304588382735736539703807432494521771034569876049173818571264697794242739707594792428883546813782219108025619700974966609627595689530130083364889093162659578377887565876218511356958177686797570265906155605979517030016947931355961678608720898268725215173625872337311304216332167441618303843695927630860494215285158060295388470028553596827319222519653919234010764559232821724344357612810410930021706065829905320678395025708049588621710380653368551503693071953408544979814960032396724952472319648879035082490609057340905173255535202682094939227101697607803405508407267935257504773182698356202226599351578106779437267481370941413157092887485740499366857495361420199152015603213422278899999979864091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44463fdd88609b1d074ae14fa19d6cb8b2655c95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allenuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amzphotobooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkansasdepartmentofeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autionnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigpicureloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binunce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfeedtasty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chesterhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cigarette.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circlrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearance2021.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collageunad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enhancedmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashioninthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fathamevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaigoi88.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gameboost.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatlakesstudentloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilvllkdwwjejpj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joliescartes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karibik-traum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klgtp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawbroker.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawfind.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mattressbyappoinment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mythityone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newyorkcitysaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oregonabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otsprtvhc.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outbakc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pjcpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.questdiagnositc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seafoodtrade.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopforce.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skipladded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.successforce.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symphonycredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thaiobrien.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tilleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txmyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.typebased.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viktorgino.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wageworls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whyamiwrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xhamsterlibe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zelten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zipforeclosure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amzphotobooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasdepartmentofeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autionnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigpicureloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binunce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeedtasty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesterhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigarette.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearance2021.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collageunad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhancedmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashioninthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fathamevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaigoi88.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameboost.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakesstudentloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilvllkdwwjejpj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joliescartes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karibik-traum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klgtp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawbroker.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawfind.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattressbyappoinment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythityone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkcitysaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregonabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otsprtvhc.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outbakc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjcpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questdiagnositc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafoodtrade.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopforce.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skipladded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'successforce.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symphonycredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaiobrien.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txmyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typebased.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viktorgino.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wageworls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whyamiwrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xhamsterlibe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zelten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipforeclosure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e6b3676c000000403004830460221008522eb0789a606f057952b3e85138d2961fc46b7620be9a31d2d59ef0a4561e0022100c6009c3af7ddbd1683b5a4ac853c296213b90556a0e6795a5f78ab41949d214e007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e6b367ea10000040300483046022100a87ea77aa0039db07c7a81730d23218ebb9dcb51fb5d50f27c0a1bdab657744c022100d0e64bcfece8e9abecb904226eb057404880192305fb1215f574c3e37cff3a8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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