kenyawi.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d0:2f:e7:da:d2:08:f9:95:33:f5:5e:99:05:49:f3:cb:0a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kenyawi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:2f:e7:da:d2:08:f9:95:33:f5:5e:99:05:49:f3:cb:0a
Serial Number (int): 419291553621178384909344574583554394278666
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 72:24:a4:fa:31:ec:8c:53:24:6c:96:2d:dd:5f:d0:4c:c0:4d:85:28
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5d:9f:6d:dd:e5:0f:c9:f7:fa:3f:d2:ca:e6:73:3c:17:12:eb:72:37
Fingerprint (sha256): 27:bb:1c:23:58:1a:fd:f2:c0:2b:2c:fa:80:14:ff:96:02:d9:2f:48:a4:9c:d6:31:cf:68:f7:c9:b3:f0:83:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kenyawi.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kenyawi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.0uhw.com
*.7civil.com
*.alniaciklar.com
*.approdo.com
*.atmosphericwater.com
*.cajabamba.com
*.campingbbq92.com
*.commoditiesprices.com
*.competitivemetering.com.au
*.danikaamori.co
*.decofrance59.com
*.dephp.com
*.dewberryfashion.com
*.diaperschool.com
*.digitalplates.au
*.dokyusei.com
*.domainleasecontract.com
*.dublintraveller.com
*.episson.com
*.erickherrera-zohobookings.com
*.fireworksperformance.com
*.globalcommoditytraders.com
*.gtmaustralia.com.au
*.hepsen.com
*.hsbookkeepingsolutions.com
*.kenyawi.com
*.kochiieucalyptusoil.com.au
*.melbourneskeptics.com.au
*.metododinerogratis.co
*.michaelsons.com
*.mobelvision.com
*.msixbundle.com
*.myrushcart.com
*.narrowroadconversions.com
*.nepfer.com
*.oneless.com.au
*.palacemediterranean.com
*.prettysmile.club
*.rationalsurvivor.com
*.rtgn.com
*.srstravels.com
*.superalimento.com
*.tammaro.com
*.tapersonline.com
*.toonkor108.com
*.toonkor109.com
*.uventure.com
*.visadropbox.com
*.wholoveumi.com
*.yce1myomcu.us
0uhw.com
7civil.com
alniaciklar.com
approdo.com
atmosphericwater.com
cajabamba.com
campingbbq92.com
commoditiesprices.com
competitivemetering.com.au
danikaamori.co
decofrance59.com
dephp.com
dewberryfashion.com
diaperschool.com
digitalplates.au
dokyusei.com
domainleasecontract.com
dublintraveller.com
episson.com
erickherrera-zohobookings.com
fireworksperformance.com
globalcommoditytraders.com
gtmaustralia.com.au
hepsen.com
hsbookkeepingsolutions.com
kenyawi.com
kochiieucalyptusoil.com.au
melbourneskeptics.com.au
metododinerogratis.co
michaelsons.com
mobelvision.com
msixbundle.com
myrushcart.com
narrowroadconversions.com
nepfer.com
oneless.com.au
palacemediterranean.com
prettysmile.club
rationalsurvivor.com
rtgn.com
srstravels.com
superalimento.com
tammaro.com
tapersonline.com
toonkor108.com
toonkor109.com
uventure.com
visadropbox.com
wholoveumi.com
yce1myomcu.us

Other certificates including the domain name kenyawi.com

(limited to 100 certificates)
kenyawi.com
laautosalellc.com
kenyawi.com
boloeina.com
kenyawi.com
kenyawi.com
boloeina.com
kenyawi.com
kenyawi.com
kenyawi.com

Certificate

The complete raw certificate details for kenyawi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINeTCCDGGgAwIBAgISBNAv59rSCPmVM/VemQVJ88sKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMTUwNjEzNThaFw0yNDA1MTUwNjEzNTdaMBYxFDASBgNVBAMT
C2tlbnlhd2kuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Ev0
JBGJhOPaUKCMlJfr7+ioItIg1JFOIn9AxyY1ecOZw3K/v7Kdm62+EGCOTdbltyxH
NI7e6r9DLetCPZlKUjh0N6/8wyeLS/4YwILHDV6E5fY1Esn7Be2VwqaZzqlLo8rN
69QaaZWCY+LKpQPyR8KFrlXKhkHBsaH/XVce+oe6d6s0HVtXMPcHX/GJqKVy+H67
KdZV9gHnETx105EULJXWl4akVPzCjev8WMNj/wR4R/a9nrcCtbtTKktC+9DjA1HU
pLcvir0RikrJ0d09p8Exdg7ym4C+4GYQ5jAwMuz95XFAxPlWByIVSQCuEyhtxvgo
4s+ujbouJMywBATFsoOFVaohT1SiqpPxA4xid9nWrtwkUbvN3GOME704WSjkWQ2v
QQZZak360oLmWL0latbiMMbT5H9MyMXg8fdcMCRPpik9Yiqm9Fby6lk2HCqBVhiu
/CFdim5tt5v839fqtKg2IUVR8NrzwhYHxp3yBk5W064D20DzjBy2dx0w5QMNu/94
p3MWujLe072qhpmdPLM6DEnJZS413cD/CAuwc7RDOst4pCKdHZTuRtbdLDNX1Kmh
tID6zcbMfz4cjDLbSvJLbvFI1eLFmo+sm5O/cJ5sUICb8JAYvUoM10AHUrc7WaTD
T96UsDU1ac9lFlmLskYWG8zeyal0Icd9ejrpMfcCAwEAAaOCCaMwggmfMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUciSk+jHsjFMkbJYt3V/QTMBNhSgwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggerBgNVHREEggeiMIIHnoIKKi4wdWh3LmNvbYIMKi43
Y2l2aWwuY29tghEqLmFsbmlhY2lrbGFyLmNvbYINKi5hcHByb2RvLmNvbYIWKi5h
dG1vc3BoZXJpY3dhdGVyLmNvbYIPKi5jYWphYmFtYmEuY29tghIqLmNhbXBpbmdi
YnE5Mi5jb22CFyouY29tbW9kaXRpZXNwcmljZXMuY29tghwqLmNvbXBldGl0aXZl
bWV0ZXJpbmcuY29tLmF1ghAqLmRhbmlrYWFtb3JpLmNvghIqLmRlY29mcmFuY2U1
OS5jb22CCyouZGVwaHAuY29tghUqLmRld2JlcnJ5ZmFzaGlvbi5jb22CEiouZGlh
cGVyc2Nob29sLmNvbYISKi5kaWdpdGFscGxhdGVzLmF1gg4qLmRva3l1c2VpLmNv
bYIZKi5kb21haW5sZWFzZWNvbnRyYWN0LmNvbYIVKi5kdWJsaW50cmF2ZWxsZXIu
Y29tgg0qLmVwaXNzb24uY29tgh8qLmVyaWNraGVycmVyYS16b2hvYm9va2luZ3Mu
Y29tghoqLmZpcmV3b3Jrc3BlcmZvcm1hbmNlLmNvbYIcKi5nbG9iYWxjb21tb2Rp
dHl0cmFkZXJzLmNvbYIVKi5ndG1hdXN0cmFsaWEuY29tLmF1ggwqLmhlcHNlbi5j
b22CHCouaHNib29ra2VlcGluZ3NvbHV0aW9ucy5jb22CDSoua2VueWF3aS5jb22C
HCoua29jaGlpZXVjYWx5cHR1c29pbC5jb20uYXWCGioubWVsYm91cm5lc2tlcHRp
Y3MuY29tLmF1ghcqLm1ldG9kb2RpbmVyb2dyYXRpcy5jb4IRKi5taWNoYWVsc29u
cy5jb22CESoubW9iZWx2aXNpb24uY29tghAqLm1zaXhidW5kbGUuY29tghAqLm15
cnVzaGNhcnQuY29tghsqLm5hcnJvd3JvYWRjb252ZXJzaW9ucy5jb22CDCoubmVw
ZmVyLmNvbYIQKi5vbmVsZXNzLmNvbS5hdYIZKi5wYWxhY2VtZWRpdGVycmFuZWFu
LmNvbYISKi5wcmV0dHlzbWlsZS5jbHVighYqLnJhdGlvbmFsc3Vydml2b3IuY29t
ggoqLnJ0Z24uY29tghAqLnNyc3RyYXZlbHMuY29tghMqLnN1cGVyYWxpbWVudG8u
Y29tgg0qLnRhbW1hcm8uY29tghIqLnRhcGVyc29ubGluZS5jb22CECoudG9vbmtv
cjEwOC5jb22CECoudG9vbmtvcjEwOS5jb22CDioudXZlbnR1cmUuY29tghEqLnZp
c2Fkcm9wYm94LmNvbYIQKi53aG9sb3ZldW1pLmNvbYIPKi55Y2UxbXlvbWN1LnVz
gggwdWh3LmNvbYIKN2NpdmlsLmNvbYIPYWxuaWFjaWtsYXIuY29tggthcHByb2Rv
LmNvbYIUYXRtb3NwaGVyaWN3YXRlci5jb22CDWNhamFiYW1iYS5jb22CEGNhbXBp
bmdiYnE5Mi5jb22CFWNvbW1vZGl0aWVzcHJpY2VzLmNvbYIaY29tcGV0aXRpdmVt
ZXRlcmluZy5jb20uYXWCDmRhbmlrYWFtb3JpLmNvghBkZWNvZnJhbmNlNTkuY29t
gglkZXBocC5jb22CE2Rld2JlcnJ5ZmFzaGlvbi5jb22CEGRpYXBlcnNjaG9vbC5j
b22CEGRpZ2l0YWxwbGF0ZXMuYXWCDGRva3l1c2VpLmNvbYIXZG9tYWlubGVhc2Vj
b250cmFjdC5jb22CE2R1YmxpbnRyYXZlbGxlci5jb22CC2VwaXNzb24uY29tgh1l
cmlja2hlcnJlcmEtem9ob2Jvb2tpbmdzLmNvbYIYZmlyZXdvcmtzcGVyZm9ybWFu
Y2UuY29tghpnbG9iYWxjb21tb2RpdHl0cmFkZXJzLmNvbYITZ3RtYXVzdHJhbGlh
LmNvbS5hdYIKaGVwc2VuLmNvbYIaaHNib29ra2VlcGluZ3NvbHV0aW9ucy5jb22C
C2tlbnlhd2kuY29tghprb2NoaWlldWNhbHlwdHVzb2lsLmNvbS5hdYIYbWVsYm91
cm5lc2tlcHRpY3MuY29tLmF1ghVtZXRvZG9kaW5lcm9ncmF0aXMuY2+CD21pY2hh
ZWxzb25zLmNvbYIPbW9iZWx2aXNpb24uY29tgg5tc2l4YnVuZGxlLmNvbYIObXly
dXNoY2FydC5jb22CGW5hcnJvd3JvYWRjb252ZXJzaW9ucy5jb22CCm5lcGZlci5j
b22CDm9uZWxlc3MuY29tLmF1ghdwYWxhY2VtZWRpdGVycmFuZWFuLmNvbYIQcHJl
dHR5c21pbGUuY2x1YoIUcmF0aW9uYWxzdXJ2aXZvci5jb22CCHJ0Z24uY29tgg5z
cnN0cmF2ZWxzLmNvbYIRc3VwZXJhbGltZW50by5jb22CC3RhbW1hcm8uY29tghB0
YXBlcnNvbmxpbmUuY29tgg50b29ua29yMTA4LmNvbYIOdG9vbmtvcjEwOS5jb22C
DHV2ZW50dXJlLmNvbYIPdmlzYWRyb3Bib3guY29tgg53aG9sb3ZldW1pLmNvbYIN
eWNlMW15b21jdS51czATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB
jaudcaQAAAQDAEcwRQIhAOCWH2MeEYd8p2mx0hLVbScxnH5RhfzWMU+wvaxNhRo8
AiAo59LBH2HLHwGM/FzlB8zlDZ2N99jkU4G9CFC9FM0xPAB1AKLiv9Ye3i8vB6DW
Tm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjaudcYcAAAQDAEYwRAIgINz8vnLtqYcS
d8Z6OYdlkfWYhws3t9hOa+mmmE66voQCIHPOq2rIbB0ChcYWvwI5OhDJTYR6/jqh
4J1B9Zbgodh/MA0GCSqGSIb3DQEBCwUAA4IBAQAgTyZXnbh/Wb6+w9jiMmo3JFOp
ScVY3vZ0r0q3talBOjNUFXhXmCn4vfge9vBVR4stmJDbrUhoWpuiJMdXPdti1Q30
z4gRWHN/+y1VJhCiA1XkKYrLeEI8NxFMyPakMir6alONvE9JrVPDWsyC8K3oz8vX
NrQDgoksAveMpfA20q4scpXXoRFlI+d2+d8ykGlW36SW3WyYGL84Gli/AwFALYa7
liCRKAWDfnPV/QohbnSzEmL4RaX6aHLjp41gbGhr8pvkYRLjGt6Ft3Jf1FTI5wkK
4D9IxkL9A+DiHxnWKd3pkqWCXwxdsZopnoNSgSn5ynUrHXRhPjVqcQSSYzaL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419291553621178384909344574583554394278666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 06:13:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 06:13:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kenyawi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866094948518445441770019804529547146082097507858659277135868634710191824734957234317771072377241033082827045376953033657119050180483377959404154823152765991299788866072600491781672194611997338446164656257193720964539932459722648652341348306225960902084456436062628011859807929091716254321738897905431727143161150948790639991220563167489626931148136027540707477630382571986670664124159404903025744615947721599068548981181223342704724182687959006463118598998671176867730071989342254641907487276727965619543661467376991894564826593142509527158273171908910058995755933988071489145585570281713950422612917538385460885310004215900279721991516772714577710334806230472657595175398142691322193881039764906570811023366966944133214649374979895891231445148653813675545190748605217254793111135226058977697830726935163577298777717176439604331400898619760787085880035364491479726874627572818779607760793246695421525511196870444500690187693516260666378118019664642968055876256285448884911272385215847953216325741095585630802686104514094377465283163408660341456158868079873953663097663265123109848227879397218544961148873551201699844553643065659422725200569580270101073432478944359456670237869303121566680112480603853825368877957620274254652623106551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7224a4fa31ec8c53246c962ddd5fd04cc04d8528
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.0uhw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7civil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alniaciklar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.approdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atmosphericwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cajabamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campingbbq92.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commoditiesprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.competitivemetering.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danikaamori.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decofrance59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dephp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dewberryfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diaperschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalplates.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dokyusei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainleasecontract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dublintraveller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.episson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erickherrera-zohobookings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireworksperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalcommoditytraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtmaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hepsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbookkeepingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenyawi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kochiieucalyptusoil.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melbourneskeptics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metododinerogratis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaelsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobelvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msixbundle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrushcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narrowroadconversions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nepfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneless.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palacemediterranean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prettysmile.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rationalsurvivor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtgn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srstravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superalimento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tammaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapersonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toonkor108.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toonkor109.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visadropbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholoveumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yce1myomcu.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0uhw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7civil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alniaciklar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atmosphericwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cajabamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campingbbq92.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditiesprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competitivemetering.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danikaamori.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decofrance59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dephp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewberryfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diaperschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalplates.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokyusei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainleasecontract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dublintraveller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'episson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erickherrera-zohobookings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireworksperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcommoditytraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtmaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbookkeepingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenyawi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kochiieucalyptusoil.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbourneskeptics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metododinerogratis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobelvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msixbundle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrushcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narrowroadconversions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nepfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneless.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palacemediterranean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prettysmile.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rationalsurvivor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtgn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srstravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superalimento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tammaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapersonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toonkor108.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toonkor109.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visadropbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholoveumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yce1myomcu.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dab9d71a40000040300473045022100e0961f631e11877ca769b1d212d56d27319c7e5185fcd6314fb0bdac4d851a3c022028e7d2c11f61cb1f018cfc5ce507cce50d9d8df7d8e45381bd0850bd14cd313c007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dab9d71870000040300463044022020dcfcbe72eda9871277c67a39876591f598870b37b7d84e6be9a6984ebabe84022073ceab6ac86c1d0285c616bf02393a10c94d847afe3aa1e09d41f596e0a1d87f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00204f26579db87f59bebec3d8e2326a372453a949c558def674af4ab7b5a9413a33541578579829f8bdf81ef6f055478b2d9890dbad48685a9ba224c7573ddb62d50df4cf881158737ffb2d552610a20355e4298acb78423c37114cc8f6a4322afa6a538dbc4f49ad53c35acc82f0ade8cfcbd736b40382892c02f78ca5f036d2ae2c7295d7a1116523e776f9df32906956dfa496dd6c9818bf381a58bf0301402d86bb9620912805837e73d5fd0a216e74b31262f845a5fa6872e3a78d606c686bf29be46112e31ade85b7725fd454c8e7090ae03f48c642fd03e0e21f19d629dde992a5825f0c5db19a299e83528129f9ca752b1d74613e356a71049263368b