entdecke-scolaris-grundschule.de

Issued by R3

About this certificate

This digital certificate with serial number 04:84:2d:87:c2:48:d6:4e:86:9e:04:14:a6:71:c1:9c:f7:66 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=entdecke-scolaris-grundschule.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:2d:87:c2:48:d6:4e:86:9e:04:14:a6:71:c1:9c:f7:66
Serial Number (int): 393426936321049302713150349775187520321382
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:d4:99:fb:c0:6b:14:a6:a6:85:f0:74:97:1f:7d:9d:94:de:48:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:3e:d1:f3:1d:91:5a:54:cb:5b:16:3c:f4:8b:99:8c:23:4a:4c:12
Fingerprint (sha256): 27:a4:08:9c:d6:d2:20:ab:a9:23:b0:e6:fb:c0:b8:82:db:a5:2b:94:62:1e:b0:d1:12:8b:dc:6d:d3:04:5b:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate entdecke-scolaris-grundschule.de

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for entdecke-scolaris-grundschule.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amm.co.in
*.appraisalwizard.com.au
*.atemzeitvolumen.de
*.auctionlosmontesinos.com
*.betsmove209.tv
*.birthpose.com
*.businesschallenge.com.au
*.captialford.com
*.discovee.com
*.donnaslegshow.com
*.dougycenter.org
*.employeebridge.com
*.entdecke-scolaris-grundschule.de
*.evionproducts.com
*.extort.me
*.formsimplicty.com
*.freelanceconsultant.com.au
*.go-gay.com
*.groupmgnt.com
*.halfbakedpowdercoating.com
*.handy-coffee.co
*.hisoricaerials.com
*.icicipruelife.com
*.jcpennsy.com
*.keysvilleflowershop.com
*.lazosynudosmerch.com
*.lewy-koerperchen-demenz.de
*.magnicache.us
*.mcdlogin.com
*.microscopy-uk.org
*.mindreaderai.com
*.mlcal.com
*.movietriggers.com
*.nrplade.net
*.potenzgenerika.com
*.quickfile.net
*.rashigroupindia.com
*.rcketmail.com
*.rewardlocal.com.au
*.robloix.com
*.rrather.com
*.sasktell.net
*.sebecas.com
*.shouldisuejohnnyharris.com
*.twitwitter.com
*.ww2express.com
*.www-steuererklaerungen.de
*.xhamstwe.com
*.yahoioi.com
amm.co.in
appraisalwizard.com.au
atemzeitvolumen.de
auctionlosmontesinos.com
betsmove209.tv
birthpose.com
businesschallenge.com.au
captialford.com
discovee.com
donnaslegshow.com
dougycenter.org
employeebridge.com
entdecke-scolaris-grundschule.de
evionproducts.com
extort.me
formsimplicty.com
freelanceconsultant.com.au
go-gay.com
groupmgnt.com
halfbakedpowdercoating.com
handy-coffee.co
hisoricaerials.com
icicipruelife.com
jcpennsy.com
keysvilleflowershop.com
lazosynudosmerch.com
lewy-koerperchen-demenz.de
magnicache.us
mcdlogin.com
microscopy-uk.org
mindreaderai.com
mlcal.com
movietriggers.com
nrplade.net
potenzgenerika.com
quickfile.net
rashigroupindia.com
rcketmail.com
rewardlocal.com.au
robloix.com
rrather.com
sasktell.net
sebecas.com
shouldisuejohnnyharris.com
twitwitter.com
ww2express.com
www-steuererklaerungen.de
xhamstwe.com
yahoioi.com

Other certificates including the domain name entdecke-scolaris-grundschule.de

(limited to 100 certificates)
entdecke-scolaris-grundschule.de
handyrakten.de
le-conte.de
www.scolaris.de
entdecke-scolaris-grundschule.de
entdecke-scolaris-grundschule.de
www.scolaris.de
www.scolaris.de
entdecke-scolaris-grundschule.de
entdecke-scolaris-grundschule.de

Certificate

The complete raw certificate details for entdecke-scolaris-grundschule.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINYjCCDEqgAwIBAgISBIQth8JI1k6GngQUpnHBnPdmMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTMwNjIzMThaFw0yNDA0MTIwNjIzMTdaMCsxKTAnBgNVBAMT
IGVudGRlY2tlLXNjb2xhcmlzLWdydW5kc2NodWxlLmRlMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAloI46fvXfPpxa/UeO+JoPcLH/zsSNEmJKb+6k+CC
WjA/0e1qQ1qiONIxQdDmJE5Z6qCyk5skcP8QbPbAOkg5f1EvIqoJzOyPmRW9Q/8J
eSIo4IUdWQ9pT8e8JN06dyxT7XJIEyIVFpb4a6iutuCARAwmKQWIGA2YGRnHlK40
JFtRy6Zv6WDUCu1/3gYDqUvWBI5VfiV8N+TpM//LfW5eVohZrlLnH4ERywD8SgOT
TASxKXti4PboD/7LDUR3fGRUOAM40GiGgQ+oVcoGlvwW8vRsQjU0xqJSCRQkoSYL
NNsp5YBhXcbyuqUMpOA714qF3j5GgAJPp91//nGWDxlbG07we89fRZoojDtl4euv
qJj/xiAc/pxeq4esCYbPzKYMWz1UX3fo974EPLLEcyhVk/XIjHNizp2ICgj9KfsU
3xl0jdUIgB6AcCovVm20tTMQOIVLiCiZFcMzs9bs6eMSRx7/kytwVapSdHgQ4g7/
+278j39uBmYTz7Y7kzrKvUgAlivCl3/U093cfQ4Th7Se4luIoclfznAYkO4KriWT
fgJIm2HHdavv9PwBhQflFFmIXyUGTPwY7TYF3yGS9krgxQUCwkjDJgBksO+QlGYb
3a3CSXwgySrCZ2/6M2TULz6zLfjpt5y6PZv7KSSZni1E/ULvikAbuGzIzE4+8AKE
xaMCAwEAAaOCCXcwgglzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUytSZ+8BrFKam
hfB0lx99nZTeSMkwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYI
KwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcw
IgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggd9BgNVHREEggd0
MIIHcIILKi5hbW0uY28uaW6CGCouYXBwcmFpc2Fsd2l6YXJkLmNvbS5hdYIUKi5h
dGVtemVpdHZvbHVtZW4uZGWCGiouYXVjdGlvbmxvc21vbnRlc2lub3MuY29tghAq
LmJldHNtb3ZlMjA5LnR2gg8qLmJpcnRocG9zZS5jb22CGiouYnVzaW5lc3NjaGFs
bGVuZ2UuY29tLmF1ghEqLmNhcHRpYWxmb3JkLmNvbYIOKi5kaXNjb3ZlZS5jb22C
EyouZG9ubmFzbGVnc2hvdy5jb22CESouZG91Z3ljZW50ZXIub3JnghQqLmVtcGxv
eWVlYnJpZGdlLmNvbYIiKi5lbnRkZWNrZS1zY29sYXJpcy1ncnVuZHNjaHVsZS5k
ZYITKi5ldmlvbnByb2R1Y3RzLmNvbYILKi5leHRvcnQubWWCEyouZm9ybXNpbXBs
aWN0eS5jb22CHCouZnJlZWxhbmNlY29uc3VsdGFudC5jb20uYXWCDCouZ28tZ2F5
LmNvbYIPKi5ncm91cG1nbnQuY29tghwqLmhhbGZiYWtlZHBvd2RlcmNvYXRpbmcu
Y29tghEqLmhhbmR5LWNvZmZlZS5jb4IUKi5oaXNvcmljYWVyaWFscy5jb22CEyou
aWNpY2lwcnVlbGlmZS5jb22CDiouamNwZW5uc3kuY29tghkqLmtleXN2aWxsZWZs
b3dlcnNob3AuY29tghYqLmxhem9zeW51ZG9zbWVyY2guY29tghwqLmxld3kta29l
cnBlcmNoZW4tZGVtZW56LmRlgg8qLm1hZ25pY2FjaGUudXOCDioubWNkbG9naW4u
Y29tghMqLm1pY3Jvc2NvcHktdWsub3JnghIqLm1pbmRyZWFkZXJhaS5jb22CCyou
bWxjYWwuY29tghMqLm1vdmlldHJpZ2dlcnMuY29tgg0qLm5ycGxhZGUubmV0ghQq
LnBvdGVuemdlbmVyaWthLmNvbYIPKi5xdWlja2ZpbGUubmV0ghUqLnJhc2hpZ3Jv
dXBpbmRpYS5jb22CDyoucmNrZXRtYWlsLmNvbYIUKi5yZXdhcmRsb2NhbC5jb20u
YXWCDSoucm9ibG9peC5jb22CDSoucnJhdGhlci5jb22CDiouc2Fza3RlbGwubmV0
gg0qLnNlYmVjYXMuY29tghwqLnNob3VsZGlzdWVqb2hubnloYXJyaXMuY29tghAq
LnR3aXR3aXR0ZXIuY29tghAqLnd3MmV4cHJlc3MuY29tghsqLnd3dy1zdGV1ZXJl
cmtsYWVydW5nZW4uZGWCDioueGhhbXN0d2UuY29tgg0qLnlhaG9pb2kuY29tgglh
bW0uY28uaW6CFmFwcHJhaXNhbHdpemFyZC5jb20uYXWCEmF0ZW16ZWl0dm9sdW1l
bi5kZYIYYXVjdGlvbmxvc21vbnRlc2lub3MuY29tgg5iZXRzbW92ZTIwOS50doIN
YmlydGhwb3NlLmNvbYIYYnVzaW5lc3NjaGFsbGVuZ2UuY29tLmF1gg9jYXB0aWFs
Zm9yZC5jb22CDGRpc2NvdmVlLmNvbYIRZG9ubmFzbGVnc2hvdy5jb22CD2RvdWd5
Y2VudGVyLm9yZ4ISZW1wbG95ZWVicmlkZ2UuY29tgiBlbnRkZWNrZS1zY29sYXJp
cy1ncnVuZHNjaHVsZS5kZYIRZXZpb25wcm9kdWN0cy5jb22CCWV4dG9ydC5tZYIR
Zm9ybXNpbXBsaWN0eS5jb22CGmZyZWVsYW5jZWNvbnN1bHRhbnQuY29tLmF1ggpn
by1nYXkuY29tgg1ncm91cG1nbnQuY29tghpoYWxmYmFrZWRwb3dkZXJjb2F0aW5n
LmNvbYIPaGFuZHktY29mZmVlLmNvghJoaXNvcmljYWVyaWFscy5jb22CEWljaWNp
cHJ1ZWxpZmUuY29tggxqY3Blbm5zeS5jb22CF2tleXN2aWxsZWZsb3dlcnNob3Au
Y29tghRsYXpvc3ludWRvc21lcmNoLmNvbYIabGV3eS1rb2VycGVyY2hlbi1kZW1l
bnouZGWCDW1hZ25pY2FjaGUudXOCDG1jZGxvZ2luLmNvbYIRbWljcm9zY29weS11
ay5vcmeCEG1pbmRyZWFkZXJhaS5jb22CCW1sY2FsLmNvbYIRbW92aWV0cmlnZ2Vy
cy5jb22CC25ycGxhZGUubmV0ghJwb3RlbnpnZW5lcmlrYS5jb22CDXF1aWNrZmls
ZS5uZXSCE3Jhc2hpZ3JvdXBpbmRpYS5jb22CDXJja2V0bWFpbC5jb22CEnJld2Fy
ZGxvY2FsLmNvbS5hdYILcm9ibG9peC5jb22CC3JyYXRoZXIuY29tggxzYXNrdGVs
bC5uZXSCC3NlYmVjYXMuY29tghpzaG91bGRpc3Vlam9obm55aGFycmlzLmNvbYIO
dHdpdHdpdHRlci5jb22CDnd3MmV4cHJlc3MuY29tghl3d3ctc3RldWVyZXJrbGFl
cnVuZ2VuLmRlggx4aGFtc3R3ZS5jb22CC3lhaG9pb2kuY29tMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYASLDja9qmRzQP5WoC
+p0w6xxSActW3SyB2bu/qznYhHMAAAGNAbQggQAABAMARzBFAiAnhJvw+dVfd6Yk
oo6nUo+pw7a/SaX/WskgxodUtTS0yAIhAIeUgShRIXICnAy+55akUpIsFrGAtFV0
LgMW3En6PnkhAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGN
AbQg3AAABAMASDBGAiEAwTLq/ZIRI/MGwCy3rEalwTlRtdi7KejEk9/VQf9xlcUC
IQDTe76g8KioNmdpoKY8snWYWfZjihDQk/u3jcCHuStNNTANBgkqhkiG9w0BAQsF
AAOCAQEAh9rKEnsjtrUb/BjwmcWIqmfcyUA8Su40MzHjj99uCxKAlxkE7Km0pU/g
MX+D13zno7+v60xfoNWV6nr9k0iUhLOf1uDJQIAR5C3op/WSrBhKQ4cVSiRdtpJD
eVApRmtzxp90WtXlCb0+LFFF6kW/h3/2YgfioVZc4jZaA1dWhrPghZDK3fUGa850
cJNI2EFZkiRCOE3VP5BWsYw+JAH6n5faMVNOtJaL0M0A2zwv8Rfu41YOOyZ5jpJj
mjPfG3RolMEfclwRZwhG1S7E5VpJE0ZTP0Uv4H3jedxJqKzeEajzGZcH+gdZdtkL
bFV8WxaIbnQQ5W2JJw4vLXQDLhpYWQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393426936321049302713150349775187520321382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 06:23:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 06:23:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'entdecke-scolaris-grundschule.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 614021847377126744673938574394130823451401779115235124717874048083258845127571926070881931789265989136382462064169607137684935384725705979071361267977467723307055964153880943124972390037181787556918307940487072523693493868945403422670623445062253007969914144065906929799166133874700937872116755844061098006572658890109084109936951177861394921556051763476409107237646399248697822989457253949006891462022693057229603700455199314691973415872993119978742993522951530723557084828026114664036195776805098054800005919801653617674533461216886190977249767233372342757615419197969854577522426253196734595902879461951133524685573400427951749461047681018492228226173857318362856308414708545345388130921300047521822782711953650912622848188651207973870397940536239376209004575643234272850773511047276405303375623100121457295912386788390504448189054557619252667485774661397436306914109090003186026916088602769536307947382047784994962444142637223831706976975089737378897848677992664812584183847433661259680054215579897570661313146853708179514441154124265789916635444735156300557129873584197056611187453994196417391042761400251103831190066332210878104009302318259960484015783580648274888116096701685420160155059092581027719340122676765835059033064867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cad499fbc06b14a6a685f074971f7d9d94de48c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appraisalwizard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atemzeitvolumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctionlosmontesinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betsmove209.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birthpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesschallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.captialford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discovee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donnaslegshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dougycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employeebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entdecke-scolaris-grundschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evionproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extort.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formsimplicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freelanceconsultant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-gay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupmgnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halfbakedpowdercoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handy-coffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hisoricaerials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icicipruelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcpennsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keysvilleflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lazosynudosmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewy-koerperchen-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnicache.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microscopy-uk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindreaderai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlcal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movietriggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrplade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potenzgenerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickfile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rashigroupindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcketmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewardlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robloix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sasktell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sebecas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shouldisuejohnnyharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twitwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ww2express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-steuererklaerungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xhamstwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoioi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalwizard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atemzeitvolumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctionlosmontesinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betsmove209.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesschallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captialford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnaslegshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entdecke-scolaris-grundschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evionproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extort.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formsimplicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelanceconsultant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-gay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupmgnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfbakedpowdercoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handy-coffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hisoricaerials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icicipruelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpennsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvilleflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazosynudosmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewy-koerperchen-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnicache.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microscopy-uk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindreaderai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlcal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietriggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrplade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potenzgenerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickfile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rashigroupindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcketmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewardlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robloix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasktell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebecas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shouldisuejohnnyharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-steuererklaerungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xhamstwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoioi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d01b420810000040300473045022027849bf0f9d55f77a624a28ea7528fa9c3b6bf49a5ff5ac920c68754b534b4c802210087948128512172029c0cbee796a452922c16b180b455742e0316dc49fa3e792100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d01b420dc0000040300483046022100c132eafd921123f306c02cb7ac46a5c13951b5d8bb29e8c493dfd541ff7195c5022100d37bbea0f0a8a8366769a0a63cb2759859f6638a10d093fbb78dc087b92b4d35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0087daca127b23b6b51bfc18f099c588aa67dcc9403c4aee343331e38fdf6e0b1280971904eca9b4a54fe0317f83d77ce7a3bfafeb4c5fa0d595ea7afd93489484b39fd6e0c9408011e42de8a7f592ac184a4387154a245db69243795029466b73c69f745ad5e509bd3e2c5145ea45bf877ff66207e2a1565ce2365a03575686b3e08590caddf5066bce74709348d84159922442384dd53f9056b18c3e2401fa9f97da31534eb4968bd0cd00db3c2ff117eee3560e3b26798e92639a33df1b746894c11f725c11670846d52ec4e55a491346533f452fe07de379dc49a8acde11a8f3199707fa075976d90b6c557c5b16886e7410e56d89270e2f2d74032e1a5859