131.es

Issued by R3

About this certificate

This digital certificate with serial number 03:05:15:2f:02:e1:a1:c6:16:a7:6d:40:df:87:3c:db:0f:64 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=131.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:15:2f:02:e1:a1:c6:16:a7:6d:40:df:87:3c:db:0f:64
Serial Number (int): 263066427514190488961304970906795629023076
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:8c:4b:43:12:9f:de:0c:4b:97:0d:09:51:ad:2d:b7:0f:8c:65:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:0f:44:22:d6:e5:f8:52:4f:71:b2:67:51:46:42:09:ea:f9:e4:f4
Fingerprint (sha256): 31:7c:29:ce:70:db:34:83:0c:85:db:cb:60:a5:2a:89:16:e4:37:f8:a6:2a:7c:88:58:69:b0:7a:d1:f4:e8:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 131.es

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 131.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.131.es
*.bellwhether.online
*.bentonking.online
*.bestrimm.org
*.bestrimminggay.org
*.bestrimminggayp.org
*.biewer-terrier.de
*.bjpgujrat.org
*.businessgametrack.org
*.byzant.site
*.candineo.com
*.carte-de-visite.site
*.confessione.online
*.cubeworld.asia
*.directfactoryoutlets.com.au
*.elephantgifts.net
*.flowncreamth.site
*.fradiologie.de
*.frauenklamotten.de
*.funtests.de
*.gigabytes.com.au
*.hentaieorld.tv
*.hnczcyw.com
*.immmbilien.de
*.interclinica.com.br
*.kozlukebir.info
*.ldnresearch.org
*.medidas.site
*.michaelstevenson.us
*.outfittrey.de
*.qag.info
*.reishi.com.au
*.safetystart.online
*.saintxi.com
*.sanfrancesciassisi.org
*.schlauchkajak.de
*.selaluupdate-ragamberitaviral.xyz
*.shoots.com.au
*.singleholidays.com.au
*.solarschlauch.de
*.tarots-uninheritability-appenders.xyz
*.tevfik-fikret-pdf-mp3.site
*.triskilion.org
*.vendidoalas3.com.mx
*.wordreference.com.br
*.wwwbenenden.co.uk
*.xkso3.xyz
*.xn--wortbersetzung-jsb.de
*.zhaocili608.xyz
*.znrk1.xyz
131.es
bellwhether.online
bentonking.online
bestrimm.org
bestrimminggay.org
bestrimminggayp.org
biewer-terrier.de
bjpgujrat.org
businessgametrack.org
byzant.site
candineo.com
carte-de-visite.site
confessione.online
cubeworld.asia
directfactoryoutlets.com.au
elephantgifts.net
flowncreamth.site
fradiologie.de
frauenklamotten.de
funtests.de
gigabytes.com.au
hentaieorld.tv
hnczcyw.com
immmbilien.de
interclinica.com.br
kozlukebir.info
ldnresearch.org
medidas.site
michaelstevenson.us
outfittrey.de
qag.info
reishi.com.au
safetystart.online
saintxi.com
sanfrancesciassisi.org
schlauchkajak.de
selaluupdate-ragamberitaviral.xyz
shoots.com.au
singleholidays.com.au
solarschlauch.de
tarots-uninheritability-appenders.xyz
tevfik-fikret-pdf-mp3.site
triskilion.org
vendidoalas3.com.mx
wordreference.com.br
wwwbenenden.co.uk
xkso3.xyz
xn--wortbersetzung-jsb.de
zhaocili608.xyz
znrk1.xyz

Other certificates including the domain name 131.es

(limited to 100 certificates)

Certificate

The complete raw certificate details for 131.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINfjCCDGagAwIBAgISAwUVLwLhocYWp21A34c82w9kMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDgyMDIwMTRaFw0yNDAyMDYyMDIwMTNaMBExDzANBgNVBAMT
BjEzMS5lczCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMY7/iEIQ0bN
vtbju0y0p7KBd/PUMUZwtEsCt0+n21cNg4JP/mMWEJ9nkLyMv0iwb4lvaqX6om4L
GZvgZ8CfeazlwXYzwXyotrwEQgFv/kMGAn5gV5H6AjR+7XZUvGpWqtsb4Jxf3zW9
leYebxpPx7O9U1N/PRSF0bv0TExra8FipxhGq3qsAxBi20cXd1M5d4gvK/+wxVUF
cI+tfIsJf2xVLAwr1pU7lTv3QTkiwim1b45qP5vaagRRuskC+NGR6epI/3AObGu1
Wpcw5HfHz0c9Ou9hyTJ5s3Nxf6HpEQOAZREtJjU3gmuGb+PNOvYG7VM3wcQ/fsuy
JroMH74x7hr5EYlAWN612we2WTN2SIwxJRUEMxTCK/icBc4DkQb961jqvjLP8RLx
4AROE97oLR1he7IaoZTfQVEXQe08fZXGB9caSUrm5cZ5ln+eWeasMv0U8wo0OA/R
AQAn3zdj4eh5EAkjo1dWQfjy4b8k+A4tWyleYBwEd2ZjKnR6n0ooBtmiHKXV/tbt
7NLA5+2qxASUFCG+U3a6BWidBcv4hPma2uPWeBdcD9DKoE+Y6CnddNW7b8sqm7mZ
wi9DaF2Dt6pMH3oKiJj73uOKRoTXViCXwMcopNABGQ5OEuevOPuUP5X0TIlTobIN
XSuxI3Me/LlMdgCedydRRuvV3IrHxNEvAgMBAAGjggmtMIIJqTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFCmMS0MSn94MS5cNCVGtLbcPjGWnMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIIHswYDVR0RBIIHqjCCB6aCCCouMTMxLmVzghQqLmJlbGx3aGV0
aGVyLm9ubGluZYITKi5iZW50b25raW5nLm9ubGluZYIOKi5iZXN0cmltbS5vcmeC
FCouYmVzdHJpbW1pbmdnYXkub3JnghUqLmJlc3RyaW1taW5nZ2F5cC5vcmeCEyou
Ymlld2VyLXRlcnJpZXIuZGWCDyouYmpwZ3VqcmF0Lm9yZ4IXKi5idXNpbmVzc2dh
bWV0cmFjay5vcmeCDSouYnl6YW50LnNpdGWCDiouY2FuZGluZW8uY29tghYqLmNh
cnRlLWRlLXZpc2l0ZS5zaXRlghQqLmNvbmZlc3Npb25lLm9ubGluZYIQKi5jdWJl
d29ybGQuYXNpYYIdKi5kaXJlY3RmYWN0b3J5b3V0bGV0cy5jb20uYXWCEyouZWxl
cGhhbnRnaWZ0cy5uZXSCEyouZmxvd25jcmVhbXRoLnNpdGWCECouZnJhZGlvbG9n
aWUuZGWCFCouZnJhdWVua2xhbW90dGVuLmRlgg0qLmZ1bnRlc3RzLmRlghIqLmdp
Z2FieXRlcy5jb20uYXWCECouaGVudGFpZW9ybGQudHaCDSouaG5jemN5dy5jb22C
DyouaW1tbWJpbGllbi5kZYIVKi5pbnRlcmNsaW5pY2EuY29tLmJyghEqLmtvemx1
a2ViaXIuaW5mb4IRKi5sZG5yZXNlYXJjaC5vcmeCDioubWVkaWRhcy5zaXRlghUq
Lm1pY2hhZWxzdGV2ZW5zb24udXOCDyoub3V0Zml0dHJleS5kZYIKKi5xYWcuaW5m
b4IPKi5yZWlzaGkuY29tLmF1ghQqLnNhZmV0eXN0YXJ0Lm9ubGluZYINKi5zYWlu
dHhpLmNvbYIYKi5zYW5mcmFuY2VzY2lhc3Npc2kub3JnghIqLnNjaGxhdWNoa2Fq
YWsuZGWCIyouc2VsYWx1dXBkYXRlLXJhZ2FtYmVyaXRhdmlyYWwueHl6gg8qLnNo
b290cy5jb20uYXWCFyouc2luZ2xlaG9saWRheXMuY29tLmF1ghIqLnNvbGFyc2No
bGF1Y2guZGWCJyoudGFyb3RzLXVuaW5oZXJpdGFiaWxpdHktYXBwZW5kZXJzLnh5
eoIcKi50ZXZmaWstZmlrcmV0LXBkZi1tcDMuc2l0ZYIQKi50cmlza2lsaW9uLm9y
Z4IVKi52ZW5kaWRvYWxhczMuY29tLm14ghYqLndvcmRyZWZlcmVuY2UuY29tLmJy
ghMqLnd3d2JlbmVuZGVuLmNvLnVrggsqLnhrc28zLnh5eoIbKi54bi0td29ydGJl
cnNldHp1bmctanNiLmRlghEqLnpoYW9jaWxpNjA4Lnh5eoILKi56bnJrMS54eXqC
BjEzMS5lc4ISYmVsbHdoZXRoZXIub25saW5lghFiZW50b25raW5nLm9ubGluZYIM
YmVzdHJpbW0ub3JnghJiZXN0cmltbWluZ2dheS5vcmeCE2Jlc3RyaW1taW5nZ2F5
cC5vcmeCEWJpZXdlci10ZXJyaWVyLmRlgg1ianBndWpyYXQub3JnghVidXNpbmVz
c2dhbWV0cmFjay5vcmeCC2J5emFudC5zaXRlggxjYW5kaW5lby5jb22CFGNhcnRl
LWRlLXZpc2l0ZS5zaXRlghJjb25mZXNzaW9uZS5vbmxpbmWCDmN1YmV3b3JsZC5h
c2lhghtkaXJlY3RmYWN0b3J5b3V0bGV0cy5jb20uYXWCEWVsZXBoYW50Z2lmdHMu
bmV0ghFmbG93bmNyZWFtdGguc2l0ZYIOZnJhZGlvbG9naWUuZGWCEmZyYXVlbmts
YW1vdHRlbi5kZYILZnVudGVzdHMuZGWCEGdpZ2FieXRlcy5jb20uYXWCDmhlbnRh
aWVvcmxkLnR2ggtobmN6Y3l3LmNvbYINaW1tbWJpbGllbi5kZYITaW50ZXJjbGlu
aWNhLmNvbS5icoIPa296bHVrZWJpci5pbmZvgg9sZG5yZXNlYXJjaC5vcmeCDG1l
ZGlkYXMuc2l0ZYITbWljaGFlbHN0ZXZlbnNvbi51c4INb3V0Zml0dHJleS5kZYII
cWFnLmluZm+CDXJlaXNoaS5jb20uYXWCEnNhZmV0eXN0YXJ0Lm9ubGluZYILc2Fp
bnR4aS5jb22CFnNhbmZyYW5jZXNjaWFzc2lzaS5vcmeCEHNjaGxhdWNoa2FqYWsu
ZGWCIXNlbGFsdXVwZGF0ZS1yYWdhbWJlcml0YXZpcmFsLnh5eoINc2hvb3RzLmNv
bS5hdYIVc2luZ2xlaG9saWRheXMuY29tLmF1ghBzb2xhcnNjaGxhdWNoLmRlgiV0
YXJvdHMtdW5pbmhlcml0YWJpbGl0eS1hcHBlbmRlcnMueHl6ghp0ZXZmaWstZmlr
cmV0LXBkZi1tcDMuc2l0ZYIOdHJpc2tpbGlvbi5vcmeCE3ZlbmRpZG9hbGFzMy5j
b20ubXiCFHdvcmRyZWZlcmVuY2UuY29tLmJyghF3d3diZW5lbmRlbi5jby51a4IJ
eGtzbzMueHl6ghl4bi0td29ydGJlcnNldHp1bmctanNiLmRlgg96aGFvY2lsaTYw
OC54eXqCCXpucmsxLnh5ejATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz
AAABi7DOpowAAAQDAEcwRQIhAJ3MHItEhlRhcIngoJsoBOSCKKwyza0pS8IDTcA9
bBWpAiBzCMsaw9xI3fWsB4Hv3JYuN7BYtL7iVciv5zUFsFMzxgB3AHb/iD8KtvuV
UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi7DOpwQAAAQDAEgwRgIhANk6VsGJ
GXKKWyNFRZS3i0Iry2otGblZ4xPAHvFSDukjAiEArQ4fz/ehiChvhjk90crRqtQu
B4U9j59O8kXRUG45MVYwDQYJKoZIhvcNAQELBQADggEBAIMfZM6L1aom5mQSr18G
IttCyZvHUbPSBbkzEJa6PObbvZ+Bc6CQVFYgNiAYbScEJe/KOqN1h/momUoeV+Kv
/Sai2J+auCzReh9r+k7Wn3tA2IGN4C1SULUuleJpSnALMr802LRfFILtVQf7uuls
oWX4UvT+/x7LTebv6jdMMXDKZVH8uFEI/s/9A7oreK/9VEAx5rKQUdEV9ulNnI7I
qe3XvmHRQZtkU2aJVg+gGbNHTpOo6J+KMLSJe87tQFh/MU8hB9d9UdHXLxTc/wx3
yPXdlJkyUqF2yWxgGsRzahwDDP7Z9trlKKzOOA5fifm+JhK3KAsKyCGxa4OoBOnR
Sno=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263066427514190488961304970906795629023076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 20:20:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 20:20:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '131.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808725575577888615373837811948770087458132503142905654694451422227099355637078547585919247763422346549704363878973287212627502230179152155516616583664432903095239503372646056926073577991704297740300567301410222577463059749312485830873789739256163210342519742083784404250788410492613592932365908511659857424287001998805246187857541366406584873003012441261795271422414411824796613767075905176810405033484984690702798791672858031559844253566755818455682958366149762964045053312318534627230547342476845206880276935599870744587253540599801266591134082754942862880195718601135611343571150148899225952938414173564641700694114656715883826067176223732655040963503325448365956608607307399341234522175010422899985191780364799464719888110982999343059214697232226363407136332524671599716619473220808180501876451251747610773436812976350672793634374815662701732545470122571569865055113178111612759080200159263974752668031208570999739377651680719517703510375478420336280724033964004184302896255336809753010948818698917399281871964761730026975768092318704510064706724899486337766404813557005416280486902315624136010806209876969035267372548722804773590096939892288154175396715894760236740338436319764827326658360854838379978403803596425770434228965679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							298c4b43129fde0c4b970d0951ad2db70f8c65a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.131.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellwhether.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bentonking.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestrimm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestrimminggay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestrimminggayp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biewer-terrier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bjpgujrat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessgametrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byzant.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candineo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carte-de-visite.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.confessione.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cubeworld.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directfactoryoutlets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elephantgifts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowncreamth.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fradiologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frauenklamotten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funtests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigabytes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hentaieorld.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hnczcyw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immmbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interclinica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kozlukebir.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ldnresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medidas.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaelstevenson.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outfittrey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qag.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reishi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safetystart.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saintxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanfrancesciassisi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlauchkajak.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selaluupdate-ragamberitaviral.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoots.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.singleholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarschlauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarots-uninheritability-appenders.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tevfik-fikret-pdf-mp3.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triskilion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vendidoalas3.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordreference.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbenenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xkso3.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wortbersetzung-jsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhaocili608.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.znrk1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellwhether.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentonking.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrimm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrimminggay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrimminggayp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biewer-terrier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjpgujrat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessgametrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byzant.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candineo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carte-de-visite.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confessione.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubeworld.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directfactoryoutlets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elephantgifts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowncreamth.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fradiologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frauenklamotten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funtests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigabytes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hentaieorld.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnczcyw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immmbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interclinica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kozlukebir.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldnresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medidas.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelstevenson.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outfittrey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qag.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reishi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetystart.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfrancesciassisi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlauchkajak.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selaluupdate-ragamberitaviral.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoots.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singleholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarschlauch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarots-uninheritability-appenders.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tevfik-fikret-pdf-mp3.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triskilion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendidoalas3.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordreference.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbenenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xkso3.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wortbersetzung-jsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhaocili608.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'znrk1.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb0cea68c00000403004730450221009dcc1c8b448654617089e0a09b2804e48228ac32cdad294bc2034dc03d6c15a902207308cb1ac3dc48ddf5ac0781efdc962e37b058b4bee255c8afe73505b05333c600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bb0cea7040000040300483046022100d93a56c18919728a5b23454594b78b422bcb6a2d19b959e313c01ef1520ee923022100ad0e1fcff7a188286f86393dd1cad1aad42e07853d8f9f4ef245d1506e393156
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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