venters.co.za

Issued by R11

About this certificate

This digital certificate with serial number 03:d2:c8:e1:40:16:11:1c:5a:15:12:66:b9:82:b8:21:31:5e was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=venters.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d2:c8:e1:40:16:11:1c:5a:15:12:66:b9:82:b8:21:31:5e
Serial Number (int): 333063170014450500507489872512394079580510
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:63:31:1e:1b:c0:b6:69:9b:24:a5:b5:57:c7:16:98:dd:86:a2:ba
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): e6:62:67:a7:6b:a4:37:b7:bf:98:a5:a7:da:77:d5:9d:8b:60:b6:cf
Fingerprint (sha256): 31:29:22:df:17:c7:b7:e6:c7:51:af:e6:b6:67:eb:97:f0:94:85:21:f6:8f:ae:dd:bf:4f:3a:8a:da:cf:a3:7a

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate venters.co.za

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for venters.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahandyloan.com
airusacharters.com
ak.cosfacts.org
alltacos.com
amilca.com
apedup.com
arbitrageds.com
artyouswim.com
aspectiom.com
bankruptcyschool.com
bereanbaptistportcharlotte.org
biblefalseprophet.com
biglyrich.com
bigsoundstages.com
bitchute.ambaalamps.com
bitsummoner.com
blokkr.com
brandingblogs.com
capsilocybintesting.com
casting8k.com
chewfamilyfarm.com
chrisjahnforaaco.com
colossic.org
counselingg.com
covingtondomains.com
cretefd.com
desolationgame.com
didleysquat.com
dummy.survivable.com
easybannerads.com
floridapumpout.com
gardensofnewport.org
gilsum.com
handmadehemp.com
hempfordepression.com
hemphoppers.com
homeofthe24inchpizza.com
huntingtonchristmaslightinstallers.com
ifthedecalfits.com
ihatethispodcast.com
iheartcannabis.com
ihemptoday.com
jaredcummingsvideo.org
jobpry.com
jualsepeda.com
kcadams.com
lawcomplete.com
lesbian4k.com
logistikausa.com
meatmanpets.com
mentor-on-the-lake.com
militaryorderofthestarsandbars.org
mythologicallandscape.com
nftabc.org
nigdeemlak.com
nisafoundation.com
ohiobirthinjurylawyers.com
pamplico.com
passoverdeception.com
picocloudsystems.com
pimagua.com
pornolivecams.com
profoundstrategy.me
readymixaustin.com
rencontres.website
rxfoodasmedicine.com
rximmuno.com
rxincretins.com
rxsugarsugarcontrol.com
rxsugarswealthybitez.com
safcoe.com
sanantoniorestaurantsdirectory.com
savemoneyonmobilehomeinsurance.com
scheduletroy.com
sendmyresume.com
sewbakersfield.com
shipwreckrewards.com
syllabus.software
symiyachtclub.com
theconsumersactionplan.org
turntable-needle.com
uandme.com
usa-precisionfirearms.com
usacorporate.com
venters.co.za
voteno4weed.com
walthamvintage.com
whencredit.com
whitbyontariohomesforsale.com
woodfordcounty.com
workflowprocesses.com
wrestlingfunkmd.com
www.kbondsloans.com
www.resumetemplatesword.com
www.sharperpoint.com
xrname.com
yarrowpointland.com
youngtraders.com
zziioo.com

Other certificates including the domain name venters.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for venters.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMjDCCC3SgAwIBAgISA9LI4UAWERxaFRJmuYK4ITFeMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjA3MDcxMzA4WhcNMjQwOTA1MDcxMzA3WjAYMRYwFAYDVQQD
Ew12ZW50ZXJzLmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
uLPRcqM6TcZMa+EBJSKWJYlvO5gd/ADLVxIvXLU51sSDsq1S2goMYSeWOsHw/4/o
jX0dNHP9xOLmK9jovR7d3t9Mr3emqW5ALap8cbSUPjHE5A3ziihBIo0oa5ppLVz1
gPYGXBnFMfYH9xeZAzsgdpfSJTTE8pF3cXR0pUjtLzWy4esvzxE3GBRhzlepvk+P
YlCiiKqQQYWRVSztEfD947h0JgUsxQ5fS9kzLzNu+dD7M++dK4DwlYRrfAuCfw/a
aA5KTh40ydlxuLYwjxn9ieDgJUdg+SiRRjWAQJ6OsEvmWVvcmxSLDICdy7VqgwAx
cQWEOX3s/rZWZLsCPohe1wIDAQABo4IJszCCCa8wDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQ4YzEeG8C2aZskpbVXxxaY3YaiujAfBgNVHSMEGDAWgBTFz0ak6vTDwHps
lcQtsF6SLybjuTBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGGFmh0dHA6Ly9y
MTEuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTEuaS5sZW5jci5v
cmcvMIIHtwYDVR0RBIIHrjCCB6qCDmFoYW5keWxvYW4uY29tghJhaXJ1c2FjaGFy
dGVycy5jb22CD2FrLmNvc2ZhY3RzLm9yZ4IMYWxsdGFjb3MuY29tggphbWlsY2Eu
Y29tggphcGVkdXAuY29tgg9hcmJpdHJhZ2Vkcy5jb22CDmFydHlvdXN3aW0uY29t
gg1hc3BlY3Rpb20uY29tghRiYW5rcnVwdGN5c2Nob29sLmNvbYIeYmVyZWFuYmFw
dGlzdHBvcnRjaGFybG90dGUub3JnghViaWJsZWZhbHNlcHJvcGhldC5jb22CDWJp
Z2x5cmljaC5jb22CEmJpZ3NvdW5kc3RhZ2VzLmNvbYIXYml0Y2h1dGUuYW1iYWFs
YW1wcy5jb22CD2JpdHN1bW1vbmVyLmNvbYIKYmxva2tyLmNvbYIRYnJhbmRpbmdi
bG9ncy5jb22CF2NhcHNpbG9jeWJpbnRlc3RpbmcuY29tgg1jYXN0aW5nOGsuY29t
ghJjaGV3ZmFtaWx5ZmFybS5jb22CFGNocmlzamFobmZvcmFhY28uY29tggxjb2xv
c3NpYy5vcmeCD2NvdW5zZWxpbmdnLmNvbYIUY292aW5ndG9uZG9tYWlucy5jb22C
C2NyZXRlZmQuY29tghJkZXNvbGF0aW9uZ2FtZS5jb22CD2RpZGxleXNxdWF0LmNv
bYIUZHVtbXkuc3Vydml2YWJsZS5jb22CEWVhc3liYW5uZXJhZHMuY29tghJmbG9y
aWRhcHVtcG91dC5jb22CFGdhcmRlbnNvZm5ld3BvcnQub3JnggpnaWxzdW0uY29t
ghBoYW5kbWFkZWhlbXAuY29tghVoZW1wZm9yZGVwcmVzc2lvbi5jb22CD2hlbXBo
b3BwZXJzLmNvbYIYaG9tZW9mdGhlMjRpbmNocGl6emEuY29tgiZodW50aW5ndG9u
Y2hyaXN0bWFzbGlnaHRpbnN0YWxsZXJzLmNvbYISaWZ0aGVkZWNhbGZpdHMuY29t
ghRpaGF0ZXRoaXNwb2RjYXN0LmNvbYISaWhlYXJ0Y2FubmFiaXMuY29tgg5paGVt
cHRvZGF5LmNvbYIWamFyZWRjdW1taW5nc3ZpZGVvLm9yZ4IKam9icHJ5LmNvbYIO
anVhbHNlcGVkYS5jb22CC2tjYWRhbXMuY29tgg9sYXdjb21wbGV0ZS5jb22CDWxl
c2JpYW40ay5jb22CEGxvZ2lzdGlrYXVzYS5jb22CD21lYXRtYW5wZXRzLmNvbYIW
bWVudG9yLW9uLXRoZS1sYWtlLmNvbYIibWlsaXRhcnlvcmRlcm9mdGhlc3RhcnNh
bmRiYXJzLm9yZ4IZbXl0aG9sb2dpY2FsbGFuZHNjYXBlLmNvbYIKbmZ0YWJjLm9y
Z4IObmlnZGVlbWxhay5jb22CEm5pc2Fmb3VuZGF0aW9uLmNvbYIab2hpb2JpcnRo
aW5qdXJ5bGF3eWVycy5jb22CDHBhbXBsaWNvLmNvbYIVcGFzc292ZXJkZWNlcHRp
b24uY29tghRwaWNvY2xvdWRzeXN0ZW1zLmNvbYILcGltYWd1YS5jb22CEXBvcm5v
bGl2ZWNhbXMuY29tghNwcm9mb3VuZHN0cmF0ZWd5Lm1lghJyZWFkeW1peGF1c3Rp
bi5jb22CEnJlbmNvbnRyZXMud2Vic2l0ZYIUcnhmb29kYXNtZWRpY2luZS5jb22C
DHJ4aW1tdW5vLmNvbYIPcnhpbmNyZXRpbnMuY29tghdyeHN1Z2Fyc3VnYXJjb250
cm9sLmNvbYIYcnhzdWdhcnN3ZWFsdGh5Yml0ZXouY29tggpzYWZjb2UuY29tgiJz
YW5hbnRvbmlvcmVzdGF1cmFudHNkaXJlY3RvcnkuY29tgiJzYXZlbW9uZXlvbm1v
YmlsZWhvbWVpbnN1cmFuY2UuY29tghBzY2hlZHVsZXRyb3kuY29tghBzZW5kbXly
ZXN1bWUuY29tghJzZXdiYWtlcnNmaWVsZC5jb22CFHNoaXB3cmVja3Jld2FyZHMu
Y29tghFzeWxsYWJ1cy5zb2Z0d2FyZYIRc3ltaXlhY2h0Y2x1Yi5jb22CGnRoZWNv
bnN1bWVyc2FjdGlvbnBsYW4ub3JnghR0dXJudGFibGUtbmVlZGxlLmNvbYIKdWFu
ZG1lLmNvbYIZdXNhLXByZWNpc2lvbmZpcmVhcm1zLmNvbYIQdXNhY29ycG9yYXRl
LmNvbYINdmVudGVycy5jby56YYIPdm90ZW5vNHdlZWQuY29tghJ3YWx0aGFtdmlu
dGFnZS5jb22CDndoZW5jcmVkaXQuY29tgh13aGl0YnlvbnRhcmlvaG9tZXNmb3Jz
YWxlLmNvbYISd29vZGZvcmRjb3VudHkuY29tghV3b3JrZmxvd3Byb2Nlc3Nlcy5j
b22CE3dyZXN0bGluZ2Z1bmttZC5jb22CE3d3dy5rYm9uZHNsb2Fucy5jb22CG3d3
dy5yZXN1bWV0ZW1wbGF0ZXN3b3JkLmNvbYIUd3d3LnNoYXJwZXJwb2ludC5jb22C
CnhybmFtZS5jb22CE3lhcnJvd3BvaW50bGFuZC5jb22CEHlvdW5ndHJhZGVycy5j
b22CCnp6aWlvby5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5
AgQCBIH2BIHzAPEAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA
AY/xwjebAAAEAwBHMEUCIQD1XRIwosAAyMsDJZxPxigQiiZ+djlqJU/peQtGvMzV
yAIgD4iNm5+wmADAmxCCYOOVDRvDdj+F6BOoE8n6fR5Y9q4AdwDuzdBk1dsazsVc
t520zROiModGfLzs3sNRSFlGcR+1mwAAAY/xwjebAAAEAwBIMEYCIQDVbeSnnA+F
X5mPs5tD6CMZzFPsxMx7JWQIigGV4wrQSQIhAKPAgpUywft7ofKWQr1B5Hs0YO5d
iy2V8mFlUDd8fXJhMA0GCSqGSIb3DQEBCwUAA4IBAQBsfaE7TDcqmxtqIj/h06fn
7dvgcE1LR7oBdZgBx/0LmkeKY+BtkoRsJnwEZZ6fHPigl2iq2cZYeU6ekzbg2ytx
rkTB0TrKdjMLrZ3fknDDy4pFNXK8vy5sX+TO9lmsJc/VfmHgNwogLnkZhdjEFGSM
QV7ikmZOvBlJsrWd7eqcbmYr8pglciUXb7ZV5WeTeSRhjHvI7/n9eXTbSmiggC0f
ZNG6EU/3ON3/FHDko2GBAqboaJMqL9TOcTAR5SYy6Vwp2mnRIQJr/nlopnXQLcz1
6Ba4fglbGKA+PbcoU0uH950atyANxptXvMdAj0CVeq9iCBqOBftUXqNtJKtc5r2Y
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLPRcqM6TcZMa+EBJSKW
JYlvO5gd/ADLVxIvXLU51sSDsq1S2goMYSeWOsHw/4/ojX0dNHP9xOLmK9jovR7d
3t9Mr3emqW5ALap8cbSUPjHE5A3ziihBIo0oa5ppLVz1gPYGXBnFMfYH9xeZAzsg
dpfSJTTE8pF3cXR0pUjtLzWy4esvzxE3GBRhzlepvk+PYlCiiKqQQYWRVSztEfD9
47h0JgUsxQ5fS9kzLzNu+dD7M++dK4DwlYRrfAuCfw/aaA5KTh40ydlxuLYwjxn9
ieDgJUdg+SiRRjWAQJ6OsEvmWVvcmxSLDICdy7VqgwAxcQWEOX3s/rZWZLsCPohe
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333063170014450500507489872512394079580510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 07:13:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 07:13:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'venters.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23316519751059690291257378886847639208370097730936978281318871654720882806415951160893961573896871531652327005307908020804693418128456028748975895274998200480549593091413737546484764875877087680786378853095425241297129325354733412517531366658961786024747921414553433527606659701986075961141590284717405839626331898481679024147627730678419050495582759354473338159347767672513109764444242655266458616648836435349888473837721577455391167025528181749921018941593595800510870533806204050351021981573031811900815384784231675323752210482738304333739513596560289636244086831713921178616996548841495898813838501131014631874263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3863311e1bc0b6699b24a5b557c71698dd86a2ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahandyloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airusacharters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alltacos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amilca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apedup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artyouswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanbaptistportcharlotte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblefalseprophet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biglyrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigsoundstages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitchute.ambaalamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitsummoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blokkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandingblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capsilocybintesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casting8k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewfamilyfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisjahnforaaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colossic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counselingg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covingtondomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cretefd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desolationgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'didleysquat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dummy.survivable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easybannerads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridapumpout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardensofnewport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilsum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handmadehemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempfordepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemphoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeofthe24inchpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonchristmaslightinstallers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifthedecalfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihatethispodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iheartcannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihemptoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaredcummingsvideo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobpry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jualsepeda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcadams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesbian4k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logistikausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatmanpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentor-on-the-lake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militaryorderofthestarsandbars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythologicallandscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nftabc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigdeemlak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nisafoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiobirthinjurylawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamplico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passoverdeception.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picocloudsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornolivecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundstrategy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readymixaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontres.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxfoodasmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rximmuno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxincretins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarsugarcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarswealthybitez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniorestaurantsdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savemoneyonmobilehomeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduletroy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendmyresume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewbakersfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipwreckrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syllabus.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symiyachtclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theconsumersactionplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turntable-needle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uandme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa-precisionfirearms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usacorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venters.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voteno4weed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walthamvintage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whencredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitbyontariohomesforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodfordcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflowprocesses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrestlingfunkmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbondsloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resumetemplatesword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharperpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarrowpointland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngtraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zziioo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff1c2379b0000040300473045022100f55d1230a2c000c8cb03259c4fc628108a267e76396a254fe9790b46bcccd5c802200f888d9b9fb09800c09b108260e3950d1bc3763f85e813a813c9fa7d1e58f6ae007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff1c2379b0000040300483046022100d56de4a79c0f855f998fb39b43e82319cc53ecc4cc7b2564088a0195e30ad049022100a3c0829532c1fb7ba1f29642bd41e47b3460ee5d8b2d95f2616550377c7d7261
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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