saffmark.com

Issued by R3

About this certificate

This digital certificate with serial number 03:aa:fa:3d:20:ee:ac:7f:54:8f:ce:e2:de:e1:0f:1a:69:a1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=saffmark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:fa:3d:20:ee:ac:7f:54:8f:ce:e2:de:e1:0f:1a:69:a1
Serial Number (int): 319517484568841673671204978906011518265761
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:be:ee:f5:69:ae:f2:24:1d:23:22:6e:27:b9:87:7a:92:f7:e6:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:33:48:21:c4:dc:05:d1:df:1a:c5:77:d6:fd:cb:19:ec:92:47:ac
Fingerprint (sha256): 2b:24:5b:c1:10:12:c0:5a:e9:35:64:15:c2:ad:4f:9c:0b:c2:89:e9:a1:c6:02:3b:02:bd:7d:4b:ff:70:4d:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saffmark.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saffmark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aarbonne.com
*.allagiant.com
*.appleseedcon.com
*.awesomesite.club
*.chillum.online
*.chuyendong24h.club
*.doisprocedimentos.club
*.drifire.io
*.einthuan.com
*.evy.au
*.henryfirearms.com
*.hoehoehoe.com
*.ipeds.com
*.ir-partner.com
*.iranjib.com
*.irensuchocki.com
*.ironboundrentals.com
*.ironsidepc.com
*.irrisistibleme.com
*.iscrapfloors.com
*.itcomestics.com
*.itemsnow.com
*.itkeepsakes.com
*.itmarta.com
*.itpwheels.com
*.jacquesvert.com
*.jakprint.com
*.japanesecosplayers.com
*.jdbyriders.com
*.jeepcheep.com
*.jeonesseglobal.com
*.jerybaker.com
*.learningwithhomer.com
*.lineaprevenciontv.com
*.longfordgenealogy.com
*.omihotels.com
*.onlyinmystate.com
*.oshundidunappearal.com
*.rute303.org
*.saffmark.com
*.samsura.com
*.samtown.com
*.swflamis.com
*.tennmarks.com
*.threadcypher.com
*.tweentribute.com
*.twekstore.me
*.wingdesignsoftware.net
*.xn--pgb2a1a0al.com
*.yatzee.com
aarbonne.com
allagiant.com
appleseedcon.com
awesomesite.club
chillum.online
chuyendong24h.club
doisprocedimentos.club
drifire.io
einthuan.com
evy.au
henryfirearms.com
hoehoehoe.com
ipeds.com
ir-partner.com
iranjib.com
irensuchocki.com
ironboundrentals.com
ironsidepc.com
irrisistibleme.com
iscrapfloors.com
itcomestics.com
itemsnow.com
itkeepsakes.com
itmarta.com
itpwheels.com
jacquesvert.com
jakprint.com
japanesecosplayers.com
jdbyriders.com
jeepcheep.com
jeonesseglobal.com
jerybaker.com
learningwithhomer.com
lineaprevenciontv.com
longfordgenealogy.com
omihotels.com
onlyinmystate.com
oshundidunappearal.com
rute303.org
saffmark.com
samsura.com
samtown.com
swflamis.com
tennmarks.com
threadcypher.com
tweentribute.com
twekstore.me
wingdesignsoftware.net
xn--pgb2a1a0al.com
yatzee.com

Other certificates including the domain name saffmark.com

(limited to 100 certificates)
saffmark.com
ipeds.com
irensuchocki.com
iranmotors.com
jeepcheep.com
safarbank.com
yatzee.com
yatzee.com
saffmark.com
safarbank.com
isotecacustica.com
ceyptobubbles.net

Certificate

The complete raw certificate details for saffmark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM0DCCC7igAwIBAgISA6r6PSDurH9Uj87i3uEPGmmhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMDcxMTQ3NDlaFw0yNDA2MDUxMTQ3NDhaMBcxFTATBgNVBAMT
DHNhZmZtYXJrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANao
j/9I7V0VOqBX6QLkSMJuQ+/vsx9K9smfqSic4IaN0vRW61FsNjWxcneB3bPoA8pO
UCcmzRO3sm4v+WznQk2aqIiq2lMxYd1CWYvNMjLhEPNdgMhg6F8KBgjoiZYkNpdk
/7L1F7MfeCsWgEEqD4l/yfT1FU/0t36OfqepxKBlv62a5+4sgqrOq/wYG1KqjhUh
U3Xpvh4uO93pVRD0BDmC1lT32ddCHS33Mwe0cey5q4Zx+baSRbDg9XdgizTCle5O
EtANxAjHTAgXmKQuqDsJo8BNZtsp8KLdMRh8B/197eEaHQDeDq2W0PgA78GsfSiJ
3Ju75l5SiovJSYL1cIdYOPOwuZhGi+TqEhdM0NyMRJgfBPTL52ZpZBvQwzgldBSn
9Wzs4/oLd5YcpHLku9NOa2jjxD6PR7L4Wh6bng7/Bj6VGfezzEPXKaNCReWfahhk
82rSTiOcfvR/3ZPKNfGlSgO8SoZSPzidOT5dUM2qGHvhxVAv+phjwkXy3IEFGf4g
3gvuDEGdHQtxK/TRZ7C1ZETfLUV/9A5asRAfnARo1ibiql+8m6f5Ll/kzRAmmGLQ
vPcSf1lLIwDuSqI0yOcgt6enTRJPZM8FeiTGJrIMP8vsTVuTzP+S4XMlLmi+KMBi
uGFdyJDj3jbLPKFW9wftanLJkElJ8rrZdBeopE73AgMBAAGjggj5MIII9TAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFBC+7vVprvIkHSMibie5h3qS9+aWMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIG/wYDVR0RBIIG9jCCBvKCDiouYWFyYm9ubmUuY29t
gg8qLmFsbGFnaWFudC5jb22CEiouYXBwbGVzZWVkY29uLmNvbYISKi5hd2Vzb21l
c2l0ZS5jbHVighAqLmNoaWxsdW0ub25saW5lghQqLmNodXllbmRvbmcyNGguY2x1
YoIYKi5kb2lzcHJvY2VkaW1lbnRvcy5jbHViggwqLmRyaWZpcmUuaW+CDiouZWlu
dGh1YW4uY29tgggqLmV2eS5hdYITKi5oZW5yeWZpcmVhcm1zLmNvbYIPKi5ob2Vo
b2Vob2UuY29tggsqLmlwZWRzLmNvbYIQKi5pci1wYXJ0bmVyLmNvbYINKi5pcmFu
amliLmNvbYISKi5pcmVuc3VjaG9ja2kuY29tghYqLmlyb25ib3VuZHJlbnRhbHMu
Y29tghAqLmlyb25zaWRlcGMuY29tghQqLmlycmlzaXN0aWJsZW1lLmNvbYISKi5p
c2NyYXBmbG9vcnMuY29tghEqLml0Y29tZXN0aWNzLmNvbYIOKi5pdGVtc25vdy5j
b22CESouaXRrZWVwc2FrZXMuY29tgg0qLml0bWFydGEuY29tgg8qLml0cHdoZWVs
cy5jb22CESouamFjcXVlc3ZlcnQuY29tgg4qLmpha3ByaW50LmNvbYIYKi5qYXBh
bmVzZWNvc3BsYXllcnMuY29tghAqLmpkYnlyaWRlcnMuY29tgg8qLmplZXBjaGVl
cC5jb22CFCouamVvbmVzc2VnbG9iYWwuY29tgg8qLmplcnliYWtlci5jb22CFyou
bGVhcm5pbmd3aXRoaG9tZXIuY29tghcqLmxpbmVhcHJldmVuY2lvbnR2LmNvbYIX
Ki5sb25nZm9yZGdlbmVhbG9neS5jb22CDyoub21paG90ZWxzLmNvbYITKi5vbmx5
aW5teXN0YXRlLmNvbYIYKi5vc2h1bmRpZHVuYXBwZWFyYWwuY29tgg0qLnJ1dGUz
MDMub3Jngg4qLnNhZmZtYXJrLmNvbYINKi5zYW1zdXJhLmNvbYINKi5zYW10b3du
LmNvbYIOKi5zd2ZsYW1pcy5jb22CDyoudGVubm1hcmtzLmNvbYISKi50aHJlYWRj
eXBoZXIuY29tghIqLnR3ZWVudHJpYnV0ZS5jb22CDioudHdla3N0b3JlLm1lghgq
LndpbmdkZXNpZ25zb2Z0d2FyZS5uZXSCFCoueG4tLXBnYjJhMWEwYWwuY29tggwq
LnlhdHplZS5jb22CDGFhcmJvbm5lLmNvbYINYWxsYWdpYW50LmNvbYIQYXBwbGVz
ZWVkY29uLmNvbYIQYXdlc29tZXNpdGUuY2x1YoIOY2hpbGx1bS5vbmxpbmWCEmNo
dXllbmRvbmcyNGguY2x1YoIWZG9pc3Byb2NlZGltZW50b3MuY2x1YoIKZHJpZmly
ZS5pb4IMZWludGh1YW4uY29tggZldnkuYXWCEWhlbnJ5ZmlyZWFybXMuY29tgg1o
b2Vob2Vob2UuY29tgglpcGVkcy5jb22CDmlyLXBhcnRuZXIuY29tggtpcmFuamli
LmNvbYIQaXJlbnN1Y2hvY2tpLmNvbYIUaXJvbmJvdW5kcmVudGFscy5jb22CDmly
b25zaWRlcGMuY29tghJpcnJpc2lzdGlibGVtZS5jb22CEGlzY3JhcGZsb29ycy5j
b22CD2l0Y29tZXN0aWNzLmNvbYIMaXRlbXNub3cuY29tgg9pdGtlZXBzYWtlcy5j
b22CC2l0bWFydGEuY29tgg1pdHB3aGVlbHMuY29tgg9qYWNxdWVzdmVydC5jb22C
DGpha3ByaW50LmNvbYIWamFwYW5lc2Vjb3NwbGF5ZXJzLmNvbYIOamRieXJpZGVy
cy5jb22CDWplZXBjaGVlcC5jb22CEmplb25lc3NlZ2xvYmFsLmNvbYINamVyeWJh
a2VyLmNvbYIVbGVhcm5pbmd3aXRoaG9tZXIuY29tghVsaW5lYXByZXZlbmNpb250
di5jb22CFWxvbmdmb3JkZ2VuZWFsb2d5LmNvbYINb21paG90ZWxzLmNvbYIRb25s
eWlubXlzdGF0ZS5jb22CFm9zaHVuZGlkdW5hcHBlYXJhbC5jb22CC3J1dGUzMDMu
b3JnggxzYWZmbWFyay5jb22CC3NhbXN1cmEuY29tggtzYW10b3duLmNvbYIMc3dm
bGFtaXMuY29tgg10ZW5ubWFya3MuY29tghB0aHJlYWRjeXBoZXIuY29tghB0d2Vl
bnRyaWJ1dGUuY29tggx0d2Vrc3RvcmUubWWCFndpbmdkZXNpZ25zb2Z0d2FyZS5u
ZXSCEnhuLS1wZ2IyYTFhMGFsLmNvbYIKeWF0emVlLmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABjhj0ocYAAAQDAEgwRgIhAMBGrXWlYOEvplkq
b11N6ZJu8VUZPrwGZXyXmcqul+1rAiEAxi9MS8bgEQ0yd+iXi/AKkIEhkLQuv/wt
p6iXZ2HBP9QAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY4Y
9KHOAAAEAwBHMEUCIQDYBUHeXaUoly4qw3UEgBI0GC5tchyKJjBZJk51C8OKeQIg
YX8NQT5Fajmb64UrwU+uLEDanTl1evdXj4FRbioYbAowDQYJKoZIhvcNAQELBQAD
ggEBAFboV4SifIiySeIBVToplKvngAkInuflvwdBMbv51GtgtW0bmUEUB3VG2wNi
uZvOfqLoNnrdVTDLcYjTt0A4QNUKtHBQjevPJry0PIEMwMUlYzXZvG1Nie77oBP8
cVlDDekwzicY64ND8qbfOEb6lom4FuAt11crGjOb506XNtSdBS9qUExkhwOvMmWw
Qrs8Uo7NrNFCIgre3AfsOCITpirTFw6PIgt0IEhX+vDol5334jTZToSAHcgsGhoo
w35lU/KBoCy3qsXk02ECtTer9PslVzjIgdKW2dCRYcFM9xXt9jwQL8QSl8KzRnr/
nwDKfxKe1K1UqambNW+tZbVNgQk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319517484568841673671204978906011518265761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 11:47:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 11:47:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saffmark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875730060863723622701798214134663816331187571630277309416763189282920424406596553857896303841258028020898935786721412790949078423272131416449959079205895735501402460218914310621758794845986600223567081184831621708325824637048633960687860494645051846502897280891919070002990439681143679904433696626763885079858884768326958226827384469645599686686699789466955683554320486576877307584269021668923547264468590504936439583632915991892319452085081153931952810350619327043500386640120021052502334428770693334176121563170671815102971461872429204527649169038586499974868408743045520464030561061520083529403532325068072233076299446611863312237481433688317057213133984116020206144515623610457706936062761118748823504001447095225042418239345919167164588024992247499193731130565288106213547397533139768254110709441821069967859728009566022635226599448055644438036064683427878876260761282612363577050886140783914287258332119428901640030039513073208698847646873207464340446880955942494650532600568643427263606892906090559304084024249334801302010011437455342564220395132557391491973311735423755707164739503371118017213277858569666462502643421352135039301339931576647076400348117855354795910056826108937611700561009514263864236896511092933498067242743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10beeef569aef2241d23226e27b9877a92f7e696
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aarbonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allagiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appleseedcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awesomesite.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chillum.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuyendong24h.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doisprocedimentos.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drifire.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.einthuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henryfirearms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoehoehoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ir-partner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iranjib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irensuchocki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ironboundrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ironsidepc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irrisistibleme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iscrapfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itcomestics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itemsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itkeepsakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itmarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itpwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacquesvert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jakprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanesecosplayers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jdbyriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeepcheep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeonesseglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerybaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learningwithhomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lineaprevenciontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longfordgenealogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omihotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlyinmystate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oshundidunappearal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rute303.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saffmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swflamis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threadcypher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tweentribute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twekstore.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wingdesignsoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pgb2a1a0al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yatzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarbonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allagiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleseedcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awesomesite.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillum.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuyendong24h.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doisprocedimentos.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drifire.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einthuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henryfirearms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoehoehoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-partner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iranjib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irensuchocki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironboundrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironsidepc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irrisistibleme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscrapfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcomestics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itemsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkeepsakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itmarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itpwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacquesvert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jakprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanesecosplayers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdbyriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeepcheep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeonesseglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerybaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningwithhomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lineaprevenciontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfordgenealogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omihotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyinmystate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshundidunappearal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rute303.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saffmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swflamis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threadcypher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tweentribute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twekstore.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingdesignsoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pgb2a1a0al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yatzee.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e18f4a1c60000040300483046022100c046ad75a560e12fa6592a6f5d4de9926ef155193ebc06657c9799caae97ed6b022100c62f4c4bc6e0110d3277e8978bf00a90812190b42ebffc2da7a8976761c13fd4007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e18f4a1ce0000040300473045022100d80541de5da528972e2ac37504801234182e6d721c8a263059264e750bc38a790220617f0d413e456a399beb852bc14fae2c40da9d39757af7578f81516e2a186c0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0056e85784a27c88b249e201553a2994abe78009089ee7e5bf074131bbf9d46b60b56d1b994114077546db0362b99bce7ea2e8367add5530cb7188d3b7403840d50ab470508debcf26bcb43c810cc0c5256335d9bc6d4d89eefba013fc7159430de930ce2718eb8343f2a6df3846fa9689b816e02dd7572b1a339be74e9736d49d052f6a504c648703af3265b042bb3c528ecdacd142220adedc07ec382213a62ad3170e8f220b74204857faf0e8979df7e234d94e84801dc82c1a1a28c37e6553f281a02cb7aac5e4d36102b537abf4fb255738c881d296d9d09161c14cf715edf63c102fc41297c2b3467aff9f00ca7f129ed4ad54a9a99b356fad65b54d8109