afascreenings.org

Issued by R3

About this certificate

This digital certificate with serial number 04:f6:8f:a6:ce:cb:a4:07:bf:0f:c3:2d:54:4e:46:06:ec:f9 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=afascreenings.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:8f:a6:ce:cb:a4:07:bf:0f:c3:2d:54:4e:46:06:ec:f9
Serial Number (int): 432349551708578068598691301047769028291833
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e6:f2:39:70:e1:2b:ec:63:8a:bc:b3:0d:54:f1:23:a6:61:85:65:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:4d:f5:8a:ac:77:f3:6c:a8:64:23:62:27:c5:df:cf:84:cb:2f:53
Fingerprint (sha256): 2e:a0:7a:77:38:23:34:70:a3:37:8c:a3:7d:5e:40:22:ad:44:f2:71:c3:4e:25:cd:f2:8d:ef:d2:2e:45:e3:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate afascreenings.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afascreenings.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aarius.com
*.afascreenings.org
*.africa-grid.org
*.ahyoung.com
*.bellezadayspa.com
*.bither.co
*.booksee.co
*.charom.com
*.clideo.co
*.cofres.com
*.crowdsourcedcapital.com
*.cvsurvey.com
*.divaina.co
*.elslotscazinos.com
*.enumera.com
*.foods.com.sg
*.franga.com
*.freshdsk.com
*.furetto.com
*.fwdmail.com
*.goppodairyfarm.com
*.growvideos.com
*.hartlage.com
*.healthyhomeplans.com
*.imovs.cc
*.kochbar.co
*.lancone.com
*.manye.com
*.motionapex.com
*.nabam.com
*.naturalnchicmakeup.com
*.nickelodon.com
*.ostroski.com
*.paidloan.com
*.paraffine.com
*.pictonline.org
*.quern.com
*.rampagoe.com
*.rkf002.cc
*.siamha.co
*.simplyfloors.com
*.sirts.com
*.sopata.com
*.strikebitclub.com
*.tvteka.co
*.vehiculeselectriques.com
*.xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com
*.ybmex.co
*.zawajarab.com
*.zhuangde.com
aarius.com
afascreenings.org
africa-grid.org
ahyoung.com
bellezadayspa.com
bither.co
booksee.co
charom.com
clideo.co
cofres.com
crowdsourcedcapital.com
cvsurvey.com
divaina.co
elslotscazinos.com
enumera.com
foods.com.sg
franga.com
freshdsk.com
furetto.com
fwdmail.com
goppodairyfarm.com
growvideos.com
hartlage.com
healthyhomeplans.com
imovs.cc
kochbar.co
lancone.com
manye.com
motionapex.com
nabam.com
naturalnchicmakeup.com
nickelodon.com
ostroski.com
paidloan.com
paraffine.com
pictonline.org
quern.com
rampagoe.com
rkf002.cc
siamha.co
simplyfloors.com
sirts.com
sopata.com
strikebitclub.com
tvteka.co
vehiculeselectriques.com
xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com
ybmex.co
zawajarab.com
zhuangde.com

Other certificates including the domain name afascreenings.org

(limited to 100 certificates)
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org

Certificate

The complete raw certificate details for afascreenings.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMMTCCCxmgAwIBAgISBPaPps7LpAe/D8MtVE5GBuz5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTUyMDQ5NDdaFw0yNDA2MTMyMDQ5NDZaMBwxGjAYBgNVBAMT
EWFmYXNjcmVlbmluZ3Mub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA0IMZu3yFv2lFMIQE2GiQRCf9HK+6amNcYIUpec2G6uZsf927t3n/HJ9JMora
9BMrciez6AOZDML8TEpZeJ0zRRBf75hNFbzQmHzOGIFBXPuAi5J6Qd1wQrp5lUV9
8psmQHzSv7Gm2eWQbxAfHpjvE3Uky4FkanmlhBEAD+WaPt9K2InjoK0Pi497GDu5
riZWEYVgB6RTlP/LpefWmd9WoL3JVtNOX1lkemUnW6ycikcF1MYcA7esb6BWRHTW
uLYhsudy0ZDfTHVce0jwf2Wl2T1o4cCPh3G8w+mPwQ0ZUpEQW7WFIc4RoeTgnd5+
Ww7bszor+dJyfCoZnAUZvYngBhLlvxlOcV3jCS44Z2joD+fgU1j/cHWHkvfTcZrO
gGkTJfeRgbZd08UNIWWEEQ1YWQLAnwcf8AyakfwLaEOD3iIHoE5AL/JR3TEvMSFF
MNUH6+/+40cthjQQVv8lqCH1pHJ9A6+X2A6RYRFU70RWu5ha3arn4f8nI/Feo0v5
wWXkRwNywSBhsw4KmvkxApmV+mWJ18uVcqyzg4yUJsgey+sscMf72NX8wuXPH84p
J+e48Hi6AJDlhW9ZXu6G3Uxn7ehVr5olOCZ8hGmZNgw92fWOmF5XqqbkZZFEESAv
FbS+SFmu1MFPEkn9rVFzx3ing38Tq+ISn5BAKhGIpYHc82kCAwEAAaOCCFUwgghR
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU5vI5cOEr7GOKvLMNVPEjpmGFZYkwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggZbBgNVHREEggZSMIIGToIMKi5hYXJpdXMu
Y29tghMqLmFmYXNjcmVlbmluZ3Mub3JnghEqLmFmcmljYS1ncmlkLm9yZ4INKi5h
aHlvdW5nLmNvbYITKi5iZWxsZXphZGF5c3BhLmNvbYILKi5iaXRoZXIuY2+CDCou
Ym9va3NlZS5jb4IMKi5jaGFyb20uY29tggsqLmNsaWRlby5jb4IMKi5jb2ZyZXMu
Y29tghkqLmNyb3dkc291cmNlZGNhcGl0YWwuY29tgg4qLmN2c3VydmV5LmNvbYIM
Ki5kaXZhaW5hLmNvghQqLmVsc2xvdHNjYXppbm9zLmNvbYINKi5lbnVtZXJhLmNv
bYIOKi5mb29kcy5jb20uc2eCDCouZnJhbmdhLmNvbYIOKi5mcmVzaGRzay5jb22C
DSouZnVyZXR0by5jb22CDSouZndkbWFpbC5jb22CFCouZ29wcG9kYWlyeWZhcm0u
Y29tghAqLmdyb3d2aWRlb3MuY29tgg4qLmhhcnRsYWdlLmNvbYIWKi5oZWFsdGh5
aG9tZXBsYW5zLmNvbYIKKi5pbW92cy5jY4IMKi5rb2NoYmFyLmNvgg0qLmxhbmNv
bmUuY29tggsqLm1hbnllLmNvbYIQKi5tb3Rpb25hcGV4LmNvbYILKi5uYWJhbS5j
b22CGCoubmF0dXJhbG5jaGljbWFrZXVwLmNvbYIQKi5uaWNrZWxvZG9uLmNvbYIO
Ki5vc3Ryb3NraS5jb22CDioucGFpZGxvYW4uY29tgg8qLnBhcmFmZmluZS5jb22C
ECoucGljdG9ubGluZS5vcmeCCyoucXVlcm4uY29tgg4qLnJhbXBhZ29lLmNvbYIL
Ki5ya2YwMDIuY2OCCyouc2lhbWhhLmNvghIqLnNpbXBseWZsb29ycy5jb22CCyou
c2lydHMuY29tggwqLnNvcGF0YS5jb22CEyouc3RyaWtlYml0Y2x1Yi5jb22CCyou
dHZ0ZWthLmNvghoqLnZlaGljdWxlc2VsZWN0cmlxdWVzLmNvbYIqKi54bi0tNDJj
M2FkbmxhNmFucmVjYmc1YzNqbmIwZjhoNGU5Ym0uY29tggoqLnlibWV4LmNvgg8q
Lnphd2FqYXJhYi5jb22CDiouemh1YW5nZGUuY29tggphYXJpdXMuY29tghFhZmFz
Y3JlZW5pbmdzLm9yZ4IPYWZyaWNhLWdyaWQub3JnggthaHlvdW5nLmNvbYIRYmVs
bGV6YWRheXNwYS5jb22CCWJpdGhlci5jb4IKYm9va3NlZS5jb4IKY2hhcm9tLmNv
bYIJY2xpZGVvLmNvggpjb2ZyZXMuY29tghdjcm93ZHNvdXJjZWRjYXBpdGFsLmNv
bYIMY3ZzdXJ2ZXkuY29tggpkaXZhaW5hLmNvghJlbHNsb3RzY2F6aW5vcy5jb22C
C2VudW1lcmEuY29tggxmb29kcy5jb20uc2eCCmZyYW5nYS5jb22CDGZyZXNoZHNr
LmNvbYILZnVyZXR0by5jb22CC2Z3ZG1haWwuY29tghJnb3Bwb2RhaXJ5ZmFybS5j
b22CDmdyb3d2aWRlb3MuY29tggxoYXJ0bGFnZS5jb22CFGhlYWx0aHlob21lcGxh
bnMuY29tgghpbW92cy5jY4IKa29jaGJhci5jb4ILbGFuY29uZS5jb22CCW1hbnll
LmNvbYIObW90aW9uYXBleC5jb22CCW5hYmFtLmNvbYIWbmF0dXJhbG5jaGljbWFr
ZXVwLmNvbYIObmlja2Vsb2Rvbi5jb22CDG9zdHJvc2tpLmNvbYIMcGFpZGxvYW4u
Y29tgg1wYXJhZmZpbmUuY29tgg5waWN0b25saW5lLm9yZ4IJcXVlcm4uY29tggxy
YW1wYWdvZS5jb22CCXJrZjAwMi5jY4IJc2lhbWhhLmNvghBzaW1wbHlmbG9vcnMu
Y29tgglzaXJ0cy5jb22CCnNvcGF0YS5jb22CEXN0cmlrZWJpdGNsdWIuY29tggl0
dnRla2EuY2+CGHZlaGljdWxlc2VsZWN0cmlxdWVzLmNvbYIoeG4tLTQyYzNhZG5s
YTZhbnJlY2JnNWMzam5iMGY4aDRlOWJtLmNvbYIIeWJtZXguY2+CDXphd2FqYXJh
Yi5jb22CDHpodWFuZ2RlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisG
AQQB1nkCBAIEgfYEgfMA8QB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h
+tQXAAABjkQXtB0AAAQDAEgwRgIhAKBQ2VOK488/rgHNlfgFU2w4eR0n46JIJmMG
Hmy5EkGoAiEAmlLMg7bCBluJlXhCh6GVvBSO9HAj3m+jwtIdGj5udj0AdgDuzdBk
1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY5EF7QuAAAEAwBHMEUCIB8e
fiyi5GEoxifFePE9BXKt8QD+jwY4nfTAZEKQosyfAiEAhGoZLMPoIDstqh6/u38u
dzMi3XHV0QyKN9G+majLhu8wDQYJKoZIhvcNAQELBQADggEBACj04vQC5aah9enA
uuhL5UsRkoysJM3UpQwJk5kMkz3o0o0GGOcTx6Ea6L+G+SQtCprjynZrmd5HB7SA
iAkLRj1nIdSUj9ErPJb24FZZLKNh9kYjpas823BVn61K0e1Tzb0OD6Cnq+cqmusz
R4aIktkJOCP6J0Nub+qE8IfGdDkJA+0hgxsoBVQCJigalA9jkf8ICb+9btoOj3d+
I+ADRIJOa5i0EsLOYnDh0IVHCFf+FO0FjfTXhN0K7jWJPbUzG1bxZDx7KCV6/whK
1DC3tPpOYgV/nU/t2j8ewIwnj2DLrNmEJ2lU+vcFSzkLZXMST2zpBaofTtPYnR4z
BIr+cuk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432349551708578068598691301047769028291833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 20:49:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 20:49:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afascreenings.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850655198362097884132655865988620610848035949797254591581621142373248162833344634421345629933243367683350631985377581498266473159858383374879089142745511034138346185744802766861222817270598287223625811446356669068506256472840141620437241035657630291773211878920890641373872159952368127268808468126464751401627476342629084682773513881101236196816829361525203658304130776224641735596070851261690880326137327507821924982610218426359717397796528846799788663213009544895011739476990404669297106149551645033247044941108128233636502672004171975636570161253048593721310585723477988552083230023239629957427340416563677831925224645623360676833897359671733674264167338025686517497554257303406257602832476468905566109132439952361121168324582874199826280260701382227927713926996073455670988886999176090873720233859340258095408916873547797609872380645314326948134987260246647450071958932055862049780119645626870339673916681452202674788437334817778957384132522589865138674074440013436888100216357330685975348357729324865289709693613814083171357313527825187217988465356160063332893008411322318845221817414087094995927068774616847564527183270994447770249584063679241158773783015144382844793583568958747869293496201241884268321391392869851950040806249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6f23970e12bec638abcb30d54f123a661856589
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1618 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aarius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afascreenings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africa-grid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellezadayspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bither.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.booksee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clideo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cofres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crowdsourcedcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divaina.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elslotscazinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enumera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foods.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshdsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fwdmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goppodairyfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartlage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthyhomeplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imovs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kochbar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motionapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nabam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalnchicmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickelodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ostroski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paidloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paraffine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rampagoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rkf002.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siamha.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplyfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sopata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strikebitclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvteka.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vehiculeselectriques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ybmex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zawajarab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhuangde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afascreenings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa-grid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellezadayspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bither.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clideo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdsourcedcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divaina.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elslotscazinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enumera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foods.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshdsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwdmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goppodairyfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomeplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imovs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kochbar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motionapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalnchicmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickelodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostroski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paidloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paraffine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rampagoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkf002.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siamha.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplyfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sopata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strikebitclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvteka.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiculeselectriques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--42c3adnla6anrecbg5c3jnb0f8h4e9bm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybmex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zawajarab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhuangde.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4417b41d0000040300483046022100a050d9538ae3cf3fae01cd95f805536c38791d27e3a2482663061e6cb91241a80221009a52cc83b6c2065b8995784287a195bc148ef47023de6fa3c2d21d1a3e6e763d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e4417b42e000004030047304502201f1e7e2ca2e46128c627c578f13d0572adf100fe8f06389df4c0644290a2cc9f022100846a192cc3e8203b2daa1ebfbb7f2e773322dd71d5d10c8a37d1be99a8cb86ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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