afascreenings.org

Issued by R3

About this certificate

This digital certificate with serial number 03:0f:7f:ab:a0:cd:ef:34:02:69:26:88:2b:59:92:3c:10:fd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afascreenings.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:7f:ab:a0:cd:ef:34:02:69:26:88:2b:59:92:3c:10:fd
Serial Number (int): 266610796398823650355771375911294205694205
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:0a:3c:f8:6e:e7:66:c4:50:ec:6a:ee:86:b2:c4:d3:08:20:66:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:0f:95:57:f3:33:ef:99:22:2f:c6:c7:a6:f4:bd:77:8c:2f:e7:90
Fingerprint (sha256): 28:07:61:8e:33:75:d1:c3:50:0e:c7:1f:6f:e6:2d:b5:30:17:68:9f:1c:58:2e:ab:7b:bc:54:6a:9b:6f:00:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate afascreenings.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afascreenings.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abuhamad.com
*.adisorclient.com
*.afascreenings.org
*.auctronica.de
*.autmatensuche.de
*.bahunek.com
*.begir.com
*.besthomedesign.com
*.buklet.com
*.cacharro.com
*.cofres.com
*.control-center-1und1.de
*.dochub.cm
*.engleza.biz
*.halkett.com
*.hartlage.com
*.hdmovies.ch
*.jiufen.com
*.konveksi.com
*.lassee.com
*.maneja.com
*.matraque.com
*.milliondishpromo.com
*.moreed.com
*.motionapex.com
*.nameplates.org
*.offroadcenter.biz
*.osterhagen.com
*.ostroski.com
*.patiodepot.us
*.pictonline.org
*.quern.com
*.realestateculburra.com.au
*.realestaterainbowbeach.com.au
*.reoccur.com
*.riverbendjigs.com
*.rosimo.com
*.simplyfloors.com
*.sirts.com
*.sojah.com
*.sopata.com
*.tataaig.cm
*.tewes.com
*.thesores.com
*.tibe.org
*.toleron.com
*.underweatherpods.com
*.wesc-japan.org
*.yourwap.com
*.zango.net
abuhamad.com
adisorclient.com
afascreenings.org
auctronica.de
autmatensuche.de
bahunek.com
begir.com
besthomedesign.com
buklet.com
cacharro.com
cofres.com
control-center-1und1.de
dochub.cm
engleza.biz
halkett.com
hartlage.com
hdmovies.ch
jiufen.com
konveksi.com
lassee.com
maneja.com
matraque.com
milliondishpromo.com
moreed.com
motionapex.com
nameplates.org
offroadcenter.biz
osterhagen.com
ostroski.com
patiodepot.us
pictonline.org
quern.com
realestateculburra.com.au
realestaterainbowbeach.com.au
reoccur.com
riverbendjigs.com
rosimo.com
simplyfloors.com
sirts.com
sojah.com
sopata.com
tataaig.cm
tewes.com
thesores.com
tibe.org
toleron.com
underweatherpods.com
wesc-japan.org
yourwap.com
zango.net

Other certificates including the domain name afascreenings.org

(limited to 100 certificates)
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org

Certificate

The complete raw certificate details for afascreenings.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMXTCCC0WgAwIBAgISAw9/q6DN7zQCaSaIK1mSPBD9MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MjAyMTI4NDBaFw0yMzA4MTgyMTI4MzlaMBwxGjAYBgNVBAMT
EWFmYXNjcmVlbmluZ3Mub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEArkb26GRq91wiYVPjWHCOcmhKo0Iei0KatGeRq/zOG78i17QziTAZZyte2nqU
/8oz7TVuAbNzFO7ll4brC80CyGT+UQ5Q1emaKm4zNx7SDyQ1GFypvcTfcj0hopFd
/ptQOUI+zuJVbp/2nbVyMjbttVrMhyBw/C80wVUc4+jb84N4dEFvz/qBXPdn7QIN
2Naotg6DiSZVufEkCg9GI4suQetSiRfVVWm0j+D5RG9Iz4ELDBwO2z3IYPzFDgOr
Gu8CAinie+1kYrc8qKXVXGOlmqQXNlTyjhfRvv7vIObewwFjJg/IP7bJeW498hB4
ip+849lQ5nsBHEz7vpKc5x9a+ZSZETaVxAmvdpJje0WgYgbTBOtEgAgJJgYEDw/o
u7aBYAnS5f+MI/0hEgpce8kkyaqYyNIrQroBlCzUL6BOI0kXl7McmVUxMH+5/Lk9
v/XneK1RkGcbCO7MkE2oGCyGXYHriddKplCajZtPBT6MWOjkKn53OM2NXwaIl431
jmq40666lkKU8xdVXnzuZJVk2rGAyKIQX9AowIx1Zzfjh8dRMVeKDN6wfnhrItVm
m4RO1b5tFEUJCVepwdXQORBLWmgGCG/NrDOgxXe4c1dZATAlINSJRJEcqI9K6W9o
2H0YSatQGZEt8lGbLLk+EwraPL8+HjBQrCf94tV4ZZ431XUCAwEAAaOCCIEwggh9
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUogo8+G7nZsRQ7GruhrLE0wggZjwwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggZRBgNVHREEggZIMIIGRIIOKi5hYnVoYW1h
ZC5jb22CEiouYWRpc29yY2xpZW50LmNvbYITKi5hZmFzY3JlZW5pbmdzLm9yZ4IP
Ki5hdWN0cm9uaWNhLmRlghIqLmF1dG1hdGVuc3VjaGUuZGWCDSouYmFodW5lay5j
b22CCyouYmVnaXIuY29tghQqLmJlc3Rob21lZGVzaWduLmNvbYIMKi5idWtsZXQu
Y29tgg4qLmNhY2hhcnJvLmNvbYIMKi5jb2ZyZXMuY29tghkqLmNvbnRyb2wtY2Vu
dGVyLTF1bmQxLmRlggsqLmRvY2h1Yi5jbYINKi5lbmdsZXphLmJpeoINKi5oYWxr
ZXR0LmNvbYIOKi5oYXJ0bGFnZS5jb22CDSouaGRtb3ZpZXMuY2iCDCouaml1ZmVu
LmNvbYIOKi5rb252ZWtzaS5jb22CDCoubGFzc2VlLmNvbYIMKi5tYW5lamEuY29t
gg4qLm1hdHJhcXVlLmNvbYIWKi5taWxsaW9uZGlzaHByb21vLmNvbYIMKi5tb3Jl
ZWQuY29tghAqLm1vdGlvbmFwZXguY29tghAqLm5hbWVwbGF0ZXMub3JnghMqLm9m
ZnJvYWRjZW50ZXIuYml6ghAqLm9zdGVyaGFnZW4uY29tgg4qLm9zdHJvc2tpLmNv
bYIPKi5wYXRpb2RlcG90LnVzghAqLnBpY3RvbmxpbmUub3JnggsqLnF1ZXJuLmNv
bYIbKi5yZWFsZXN0YXRlY3VsYnVycmEuY29tLmF1gh8qLnJlYWxlc3RhdGVyYWlu
Ym93YmVhY2guY29tLmF1gg0qLnJlb2NjdXIuY29tghMqLnJpdmVyYmVuZGppZ3Mu
Y29tggwqLnJvc2ltby5jb22CEiouc2ltcGx5Zmxvb3JzLmNvbYILKi5zaXJ0cy5j
b22CCyouc29qYWguY29tggwqLnNvcGF0YS5jb22CDCoudGF0YWFpZy5jbYILKi50
ZXdlcy5jb22CDioudGhlc29yZXMuY29tggoqLnRpYmUub3Jngg0qLnRvbGVyb24u
Y29tghYqLnVuZGVyd2VhdGhlcnBvZHMuY29tghAqLndlc2MtamFwYW4ub3Jngg0q
LnlvdXJ3YXAuY29tggsqLnphbmdvLm5ldIIMYWJ1aGFtYWQuY29tghBhZGlzb3Jj
bGllbnQuY29tghFhZmFzY3JlZW5pbmdzLm9yZ4INYXVjdHJvbmljYS5kZYIQYXV0
bWF0ZW5zdWNoZS5kZYILYmFodW5lay5jb22CCWJlZ2lyLmNvbYISYmVzdGhvbWVk
ZXNpZ24uY29tggpidWtsZXQuY29tggxjYWNoYXJyby5jb22CCmNvZnJlcy5jb22C
F2NvbnRyb2wtY2VudGVyLTF1bmQxLmRlgglkb2NodWIuY22CC2VuZ2xlemEuYml6
ggtoYWxrZXR0LmNvbYIMaGFydGxhZ2UuY29tggtoZG1vdmllcy5jaIIKaml1ZmVu
LmNvbYIMa29udmVrc2kuY29tggpsYXNzZWUuY29tggptYW5lamEuY29tggxtYXRy
YXF1ZS5jb22CFG1pbGxpb25kaXNocHJvbW8uY29tggptb3JlZWQuY29tgg5tb3Rp
b25hcGV4LmNvbYIObmFtZXBsYXRlcy5vcmeCEW9mZnJvYWRjZW50ZXIuYml6gg5v
c3RlcmhhZ2VuLmNvbYIMb3N0cm9za2kuY29tgg1wYXRpb2RlcG90LnVzgg5waWN0
b25saW5lLm9yZ4IJcXVlcm4uY29tghlyZWFsZXN0YXRlY3VsYnVycmEuY29tLmF1
gh1yZWFsZXN0YXRlcmFpbmJvd2JlYWNoLmNvbS5hdYILcmVvY2N1ci5jb22CEXJp
dmVyYmVuZGppZ3MuY29tggpyb3NpbW8uY29tghBzaW1wbHlmbG9vcnMuY29tgglz
aXJ0cy5jb22CCXNvamFoLmNvbYIKc29wYXRhLmNvbYIKdGF0YWFpZy5jbYIJdGV3
ZXMuY29tggx0aGVzb3Jlcy5jb22CCHRpYmUub3Jnggt0b2xlcm9uLmNvbYIUdW5k
ZXJ3ZWF0aGVycG9kcy5jb22CDndlc2MtamFwYW4ub3Jnggt5b3Vyd2FwLmNvbYIJ
emFuZ28ubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYB
BAHWeQIEAgSB8wSB8ADuAHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0G
vW4AAAGIO0d64gAABAMARjBEAiBraUA7UFnrLQSthvdx3tTaRs9mlGe78d7pFCg4
ScJgpgIgHEXkM7thqGhKl2wGqczn4czrig72VVl6GDHtvZzhYs0AdQC3Pvsk35xN
unXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYg7R3tLAAAEAwBGMEQCIBgqEETq
Xzxq0QI46ItcmzITRCWqZ4L8dG4dxnsCmnWoAiAcCv8XZS+XD0SrP9frlcunwRH1
2OMiwuk6TaB5E0OtJjANBgkqhkiG9w0BAQsFAAOCAQEAZWUFWqNOBmZF+WSosrGd
lLCzuA8PR3vEIvxw4v3tDxasICVs3aZ+M8LDCLGzkTaphJJPc2VDZkiwfe2DHwFT
h9u1e+9AKcLa0WqB1cjS45RxjjYmB0o++OrCHRYtxCX4hy+5CB5B5GnZ1F0oMRKr
+ta/SbsnFacZP59PXPcHhbsxWLvActNU6UcdnThTj1q9eA5zB7ATuv7wFFXdPRBC
CUP9CG81wccHcdBiAcImGZpI3ObioG2Z1PqwQvgTD2W6Q+LledPdKZNajj9w1Ceq
Z0GDLQUOVbCnsGd2S3hbC1hfcGRhpdCfdt5NUiTzJ62hPogkeyN0rLFWtCgGOpLe
dg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266610796398823650355771375911294205694205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-20 21:28:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 21:28:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afascreenings.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710988965625543348437203518912981170176760866332287512442859004255532631478751117981471461564603190240129848034859568137938086523126668687778791876724481271599505248584692811734256947804230629589835938614162155065629079741382554896143614502102074106479381510908295832134408445373492816028279452087098976402466052336959459759141321998741248949039736206822179539515071995490511234242011296205762524256782312955389371747936481852840308698047632052751338576166084666193581714654703390680695333279620427912225211793496735808864528182999341484697985863237321337564954854299994568156997448825844082604614479408340294277285540276649352360217538685544433876075664521847681963702161174357713041805231305629426193605396761804973156754431181472061423813904571513150651503393680291936995824595435330368415363473383640848154881341179827931948041289529560293763929564688587768169538393803900855251493152874370145617861269812413263326206041012626495534480657676942272322986339352052545192878023802896801455401770907029343682373531773633830157127464276007256716014894899419490142026666060140150683058892958488167209541735596191954245062162816425728945660627715239110822012488675873774900762174255704336118977252549637316479040187079343351071994533237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a20a3cf86ee766c450ec6aee86b2c4d30820663c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abuhamad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adisorclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afascreenings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctronica.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autmatensuche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bahunek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.begir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besthomedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buklet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cacharro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cofres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control-center-1und1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dochub.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engleza.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halkett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartlage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmovies.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiufen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konveksi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lassee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maneja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matraque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milliondishpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moreed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motionapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nameplates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offroadcenter.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osterhagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ostroski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patiodepot.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestateculburra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestaterainbowbeach.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reoccur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riverbendjigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplyfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sojah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sopata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tataaig.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tewes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tibe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toleron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.underweatherpods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wesc-japan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourwap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zango.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abuhamad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adisorclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afascreenings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctronica.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autmatensuche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahunek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besthomedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buklet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacharro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control-center-1und1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dochub.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engleza.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halkett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmovies.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiufen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konveksi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lassee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maneja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matraque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milliondishpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moreed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motionapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nameplates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offroadcenter.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osterhagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostroski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patiodepot.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateculburra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestaterainbowbeach.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reoccur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverbendjigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplyfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sojah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sopata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tataaig.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tewes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tibe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toleron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underweatherpods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesc-japan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourwap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zango.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001883b477ae2000004030046304402206b69403b5059eb2d04ad86f771ded4da46cf669467bbf1dee914283849c260a602201c45e433bb61a8684a976c06a9cce7e1cceb8a0ef655597a1831edbd9ce162cd007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001883b477b4b00000403004630440220182a1044ea5f3c6ad10238e88b5c9b32134425aa6782fc746e1dc67b029a75a802201c0aff17652f970f44ab3fd7eb95cba7c111f5d8e322c2e93a4da0791343ad26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006565055aa34e066645f964a8b2b19d94b0b3b80f0f477bc422fc70e2fded0f16ac20256cdda67e33c2c308b1b39136a984924f7365436648b07ded831f015387dbb57bef4029c2dad16a81d5c8d2e394718e3626074a3ef8eac21d162dc425f8872fb9081e41e469d9d45d283112abfad6bf49bb2715a7193f9f4f5cf70785bb3158bbc072d354e9471d9d38538f5abd780e7307b013bafef01455dd3d10420943fd086f35c1c70771d06201c226199a48dce6e2a06d99d4fab042f8130f65ba43e2e579d3dd29935a8e3f70d427aa6741832d050e55b0a7b067764b785b0b585f706461a5d09f76de4d5224f327ada13e88247b2374acb156b428063a92de76