roufs.com

Issued by R3

About this certificate

This digital certificate with serial number 03:94:4d:8d:40:23:88:23:49:14:9f:e2:44:5a:92:d8:1f:25 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roufs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:4d:8d:40:23:88:23:49:14:9f:e2:44:5a:92:d8:1f:25
Serial Number (int): 311801732070001457405919113717800353931045
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:60:29:50:09:ed:a6:65:e9:ac:7c:62:1d:8e:58:de:ec:74:c2:28
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:99:07:3e:d7:36:92:ee:8d:6b:9f:03:c9:2e:53:9e:f3:71:2e:57
Fingerprint (sha256): 31:e8:8a:3a:48:53:8e:f7:fd:20:6c:ae:13:19:98:3f:50:28:f1:37:12:73:4f:71:cd:d0:a6:40:15:c7:91:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate roufs.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roufs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5seconds.com
*.accpubg.com
*.amsloans.com
*.artitect.com
*.ayneh.com
*.bandarudara.com
*.beautyleak.org
*.bicoin.wiki
*.blucas.com
*.carmichaels.com
*.childrensjustice.org
*.csgoempre.com
*.daizhang.com
*.duaine.com
*.forgetmeknotfloral.com
*.frandt.com
*.generalshared.com
*.greenmechanic.com
*.hablaclaro.com
*.hlm123.cc
*.hoteldaten.com
*.inferno-development.com
*.islandspicecan.com
*.jasminethai.com
*.madamechocolatshop.com
*.mechancisbank.com
*.medicaidchip.com
*.oshima-beniya.com
*.peachaandivy.com
*.roosendaal.com
*.roufs.com
*.saspaperleaf.net
*.satyaonline.com
*.saundry.com
*.scratchndentsuperstore.com
*.sevenler.com
*.sunana.com
*.thepokiesnet11.com
*.tonari-shibuya.com
*.treeremovalcost.com
*.troye.com
*.urina.com
*.villamoderne.com
*.visaje.com
*.vollemaan.com
*.volvopartsdirect.com
*.waitao.com
*.wandry.com
*.westernmutual.cm
*.yuanpan.com
5seconds.com
accpubg.com
amsloans.com
artitect.com
ayneh.com
bandarudara.com
beautyleak.org
bicoin.wiki
blucas.com
carmichaels.com
childrensjustice.org
csgoempre.com
daizhang.com
duaine.com
forgetmeknotfloral.com
frandt.com
generalshared.com
greenmechanic.com
hablaclaro.com
hlm123.cc
hoteldaten.com
inferno-development.com
islandspicecan.com
jasminethai.com
madamechocolatshop.com
mechancisbank.com
medicaidchip.com
oshima-beniya.com
peachaandivy.com
roosendaal.com
roufs.com
saspaperleaf.net
satyaonline.com
saundry.com
scratchndentsuperstore.com
sevenler.com
sunana.com
thepokiesnet11.com
tonari-shibuya.com
treeremovalcost.com
troye.com
urina.com
villamoderne.com
visaje.com
vollemaan.com
volvopartsdirect.com
waitao.com
wandry.com
westernmutual.cm
yuanpan.com

Other certificates including the domain name roufs.com

(limited to 100 certificates)
plantpatentcannabis.com
roufs.com
mcpehisp.com
roufs.com
maheshmithran.com
combomortgage.com
roufs.com

Certificate

The complete raw certificate details for roufs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM1DCCC7ygAwIBAgISA5RNjUAjiCNJFJ/iRFqS2B8lMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMTkwODA4NDVaFw0yMzA2MTcwODA4NDRaMBQxEjAQBgNVBAMT
CXJvdWZzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL2whlv9
rb22MtcGWXN4iTkrAm+d1d2+zSY6KPCsIW0erfUN2NTSNi6V0CDchm7et8tN6XRE
2sX7oDJrxMRtViHQjXdxvwXQgCib8s2nZHFpMMNXR+NTNN5/FovU8WQ0e0EyEaUp
pqpPt7J2gtpbQvXgFykwrftyWz2KCLcxDdDORKJdKBui15bHBrWo02tPuXUh7nHA
RnC0Y3niFzQMK8sIKswS1uFZZEfFiM6cW57w950X3L2tIkVg639ktpySy9+FQL6H
8rdmp7q38h8oMn1h20acUfurZ9qceNmPsWPKyUujjsaX7BSE1KZILN9iE0wMaF/m
gbfJWsDMaWHLJxmy1ZmZzvc/Ux8Rqf4qHYhLmGiFm51eDZtirGrEXfKCsSMDsofK
Hh6KggnHeAAatTTA8HbABFUO98fsTmdhjOY+Wc8RwXZ3TzOhS9oeGNHBUmAG/cA7
bo7ikyfo0JuYB8js9TE3W5JxgghyPo8afB2PACkdxz6gD71Qv4xyqL4gWgFHxpQI
BuKOV9p86B9oDmkXvnlQfsILWQ0da0qg69UitXdgDKfmQUUFkk6aCzKGCD9ngw/3
RXJa2RODGelVHwsqdlXky9m0xgmGc6azwqloxoYyYJLfQ1MnzCY7gZQ5QIKuT6vY
IKZpZR6gBDq99cnst9Ev0+CuCqHSh4kZ8LV5AgMBAAGjggkAMIII/DAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFMhgKVAJ7aZl6ax8Yh2OWN7sdMIoMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIGzwYDVR0RBIIGxjCCBsKCDiouNXNlY29uZHMuY29tgg0q
LmFjY3B1YmcuY29tgg4qLmFtc2xvYW5zLmNvbYIOKi5hcnRpdGVjdC5jb22CCyou
YXluZWguY29tghEqLmJhbmRhcnVkYXJhLmNvbYIQKi5iZWF1dHlsZWFrLm9yZ4IN
Ki5iaWNvaW4ud2lraYIMKi5ibHVjYXMuY29tghEqLmNhcm1pY2hhZWxzLmNvbYIW
Ki5jaGlsZHJlbnNqdXN0aWNlLm9yZ4IPKi5jc2dvZW1wcmUuY29tgg4qLmRhaXpo
YW5nLmNvbYIMKi5kdWFpbmUuY29tghgqLmZvcmdldG1la25vdGZsb3JhbC5jb22C
DCouZnJhbmR0LmNvbYITKi5nZW5lcmFsc2hhcmVkLmNvbYITKi5ncmVlbm1lY2hh
bmljLmNvbYIQKi5oYWJsYWNsYXJvLmNvbYILKi5obG0xMjMuY2OCECouaG90ZWxk
YXRlbi5jb22CGSouaW5mZXJuby1kZXZlbG9wbWVudC5jb22CFCouaXNsYW5kc3Bp
Y2VjYW4uY29tghEqLmphc21pbmV0aGFpLmNvbYIYKi5tYWRhbWVjaG9jb2xhdHNo
b3AuY29tghMqLm1lY2hhbmNpc2JhbmsuY29tghIqLm1lZGljYWlkY2hpcC5jb22C
Eyoub3NoaW1hLWJlbml5YS5jb22CEioucGVhY2hhYW5kaXZ5LmNvbYIQKi5yb29z
ZW5kYWFsLmNvbYILKi5yb3Vmcy5jb22CEiouc2FzcGFwZXJsZWFmLm5ldIIRKi5z
YXR5YW9ubGluZS5jb22CDSouc2F1bmRyeS5jb22CHCouc2NyYXRjaG5kZW50c3Vw
ZXJzdG9yZS5jb22CDiouc2V2ZW5sZXIuY29tggwqLnN1bmFuYS5jb22CFCoudGhl
cG9raWVzbmV0MTEuY29tghQqLnRvbmFyaS1zaGlidXlhLmNvbYIVKi50cmVlcmVt
b3ZhbGNvc3QuY29tggsqLnRyb3llLmNvbYILKi51cmluYS5jb22CEioudmlsbGFt
b2Rlcm5lLmNvbYIMKi52aXNhamUuY29tgg8qLnZvbGxlbWFhbi5jb22CFioudm9s
dm9wYXJ0c2RpcmVjdC5jb22CDCoud2FpdGFvLmNvbYIMKi53YW5kcnkuY29tghIq
Lndlc3Rlcm5tdXR1YWwuY22CDSoueXVhbnBhbi5jb22CDDVzZWNvbmRzLmNvbYIL
YWNjcHViZy5jb22CDGFtc2xvYW5zLmNvbYIMYXJ0aXRlY3QuY29tgglheW5laC5j
b22CD2JhbmRhcnVkYXJhLmNvbYIOYmVhdXR5bGVhay5vcmeCC2JpY29pbi53aWtp
ggpibHVjYXMuY29tgg9jYXJtaWNoYWVscy5jb22CFGNoaWxkcmVuc2p1c3RpY2Uu
b3Jngg1jc2dvZW1wcmUuY29tggxkYWl6aGFuZy5jb22CCmR1YWluZS5jb22CFmZv
cmdldG1la25vdGZsb3JhbC5jb22CCmZyYW5kdC5jb22CEWdlbmVyYWxzaGFyZWQu
Y29tghFncmVlbm1lY2hhbmljLmNvbYIOaGFibGFjbGFyby5jb22CCWhsbTEyMy5j
Y4IOaG90ZWxkYXRlbi5jb22CF2luZmVybm8tZGV2ZWxvcG1lbnQuY29tghJpc2xh
bmRzcGljZWNhbi5jb22CD2phc21pbmV0aGFpLmNvbYIWbWFkYW1lY2hvY29sYXRz
aG9wLmNvbYIRbWVjaGFuY2lzYmFuay5jb22CEG1lZGljYWlkY2hpcC5jb22CEW9z
aGltYS1iZW5peWEuY29tghBwZWFjaGFhbmRpdnkuY29tgg5yb29zZW5kYWFsLmNv
bYIJcm91ZnMuY29tghBzYXNwYXBlcmxlYWYubmV0gg9zYXR5YW9ubGluZS5jb22C
C3NhdW5kcnkuY29tghpzY3JhdGNobmRlbnRzdXBlcnN0b3JlLmNvbYIMc2V2ZW5s
ZXIuY29tggpzdW5hbmEuY29tghJ0aGVwb2tpZXNuZXQxMS5jb22CEnRvbmFyaS1z
aGlidXlhLmNvbYITdHJlZXJlbW92YWxjb3N0LmNvbYIJdHJveWUuY29tggl1cmlu
YS5jb22CEHZpbGxhbW9kZXJuZS5jb22CCnZpc2FqZS5jb22CDXZvbGxlbWFhbi5j
b22CFHZvbHZvcGFydHNkaXJlY3QuY29tggp3YWl0YW8uY29tggp3YW5kcnkuY29t
ghB3ZXN0ZXJubXV0dWFsLmNtggt5dWFucGFuLmNvbTBMBgNVHSAERTBDMAgGBmeB
DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHoyjFTYty22
IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhvkg2h4AAAQDAEYwRAIga2MnZeaw
Nld3kFKwTmjEAgU1J6xYU133M5mZy7f4X4ECIDhPpP1/V2VoMORw3tTBj1rQ2tBw
zB2qCKnHgAZHGYgeAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkA
AAGG+SDaFgAABAMARzBFAiEAlX1Q1WQbFHB4wgFAALhrjLg3NMDXf3HrZbxYPjde
OcUCIEMKyVd5ruddn/UgT0dFuOZEYdYm3Os8vI1zWu8QI339MA0GCSqGSIb3DQEB
CwUAA4IBAQADhV/BmJJq3I0sid2MSmSHQa+5p5EXCEVPuuCFXZMTR2e7ZHStkjS4
q2q1AGCOJrCCVS3AJCkrXjmU/pLJJkRVe5uCHdb9WzIZ7EmVyLx6u+7Ee20FREGP
MwgcyLgT6v0d5Loo4RLhoG7j1ERHXpni9F8+yY5rpFvD5gxHf684xkrJTfLsI7aA
k4si80RZHoP89Own647XZeepWk7DeRca9wrBAgtN57eVYO868HCFP7tHQhPTdzup
UcK9gTp4jm5p6eEfinAbWyqXKJsGELtZ+qegj0xTz4yLCiAy1mALbri0cexe/lhd
nXz8hUisH97e8x5W0nyzePymApFzJrNN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvbCGW/2tvbYy1wZZc3iJ
OSsCb53V3b7NJjoo8KwhbR6t9Q3Y1NI2LpXQINyGbt63y03pdETaxfugMmvExG1W
IdCNd3G/BdCAKJvyzadkcWkww1dH41M03n8Wi9TxZDR7QTIRpSmmqk+3snaC2ltC
9eAXKTCt+3JbPYoItzEN0M5Eol0oG6LXlscGtajTa0+5dSHuccBGcLRjeeIXNAwr
ywgqzBLW4VlkR8WIzpxbnvD3nRfcva0iRWDrf2S2nJLL34VAvofyt2anurfyHygy
fWHbRpxR+6tn2px42Y+xY8rJS6OOxpfsFITUpkgs32ITTAxoX+aBt8lawMxpYcsn
GbLVmZnO9z9THxGp/iodiEuYaIWbnV4Nm2KsasRd8oKxIwOyh8oeHoqCCcd4ABq1
NMDwdsAEVQ73x+xOZ2GM5j5ZzxHBdndPM6FL2h4Y0cFSYAb9wDtujuKTJ+jQm5gH
yOz1MTdbknGCCHI+jxp8HY8AKR3HPqAPvVC/jHKoviBaAUfGlAgG4o5X2nzoH2gO
aRe+eVB+wgtZDR1rSqDr1SK1d2AMp+ZBRQWSTpoLMoYIP2eDD/dFclrZE4MZ6VUf
Cyp2VeTL2bTGCYZzprPCqWjGhjJgkt9DUyfMJjuBlDlAgq5Pq9ggpmllHqAEOr31
yey30S/T4K4KodKHiRnwtXkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311801732070001457405919113717800353931045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 08:08:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 08:08:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roufs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773865848079000609662203223940910217986468856790433345622748387333977327060581977871866207369930391009285517067429308975377752586345451365720893285395802344158747768233936900601505820330469288689748795826431877599841870405079360308083213975663118813138676130565795148625891599400725721683840616458281323875311707256623464358718494947726643702429766956526863957250434415708788085082279936204215635700878693868941861006578406461905197767167438534271961859335547964307166530031900298966379386372466421514362144588864259892341303418530875532157858784340266944362982692656369826066079839500272267672453663266188517529353654631141853595390382976090596774193273117450577814789364386951418113690995434554565281923685343768382950285807087455858685604488823342277403444284640478174554983833896845369332130899926173422304008693584358448505998941930215314362136106209780992968197551252131940240666402979649610790693884918913139135389332468977473745440546203586152687789827602014707072021728066512491755347441691394101437476242023616456596967966219741485785409777226493377843859072566323230343632886385737204412026332288570464635042681674115745796950621372877458438573311273160828926989136672157628653347219794809892451818527697477224909711127929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c860295009eda665e9ac7c621d8e58deec74c228
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1734 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5seconds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accpubg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amsloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artitect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayneh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandarudara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautyleak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicoin.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blucas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carmichaels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrensjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csgoempre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daizhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forgetmeknotfloral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frandt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generalshared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenmechanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hablaclaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlm123.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteldaten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inferno-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islandspicecan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jasminethai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madamechocolatshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mechancisbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicaidchip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oshima-beniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peachaandivy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roosendaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roufs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saspaperleaf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satyaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scratchndentsuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sevenler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepokiesnet11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonari-shibuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treeremovalcost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.troye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villamoderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visaje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vollemaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volvopartsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waitao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wandry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernmutual.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yuanpan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5seconds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accpubg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artitect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayneh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandarudara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyleak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicoin.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blucas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmichaels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrensjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgoempre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daizhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgetmeknotfloral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frandt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalshared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenmechanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hablaclaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlm123.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteldaten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inferno-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandspicecan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasminethai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madamechocolatshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechancisbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicaidchip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshima-beniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachaandivy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosendaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roufs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saspaperleaf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satyaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scratchndentsuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepokiesnet11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonari-shibuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treeremovalcost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villamoderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visaje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vollemaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvopartsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernmutual.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuanpan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186f920da1e000004030046304402206b632765e6b03657779052b04e68c402053527ac58535df7339999cbb7f85f810220384fa4fd7f57656830e470ded4c18f5ad0dad070cc1daa08a9c780064719881e007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186f920da160000040300473045022100957d50d5641b147078c2014000b86b8cb83734c0d77f71eb65bc583e375e39c50220430ac95779aee75d9ff5204f4745b8e64461d626dceb3cbc8d735aef10237dfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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