projetocogumelo.org

Issued by R3

About this certificate

This digital certificate with serial number 04:03:e4:02:94:b1:e0:e9:dd:a2:6c:fc:0d:5f:96:33:13:b1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=projetocogumelo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:03:e4:02:94:b1:e0:e9:dd:a2:6c:fc:0d:5f:96:33:13:b1
Serial Number (int): 349773068211326093339590227326092017079217
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:8a:06:c2:0f:25:52:fb:07:e7:63:21:5d:d0:08:bb:50:24:26:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:ef:d2:2e:84:bf:43:45:dd:f5:fd:28:51:da:73:25:f1:8f:19:3e
Fingerprint (sha256): 32:1e:30:46:72:e3:22:5b:38:d7:3b:6e:49:c8:76:47:d8:46:bc:11:89:27:2d:ea:42:74:17:35:97:3d:89:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate projetocogumelo.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for projetocogumelo.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1wxq.quest
*.709xs.com
*.800718.com
*.adaniclassaction.com.au
*.artykupublikujemynahotmag.pl
*.astroturismotarapaca.com
*.aueingressos.com
*.axhome-chateau-thierry.com
*.beta138.asia
*.boccard-france.com
*.boobpedia.co
*.cadiztotal.com
*.cammadethat.com
*.canlitribun41.com
*.casatsch.com
*.climbing-park.com
*.clrfurniture.com
*.coach-coaching-maroc.com
*.crazymoonlight.com
*.czsh.app
*.dirtyyroulette.com
*.ecocentre45.org
*.edcouchtx.us
*.elllo.co
*.friscsoschicken.com
*.gatlinburgimprovfest.net
*.glassylilac.com
*.hbham.co
*.home-assistant-help.com
*.huronvolleyballclub.com
*.iamherdynasty.com
*.islamiclecture.net
*.manimelist.net
*.minokabu.com
*.motivatedbythebook.com
*.oneandoneyouth.com
*.onlinegamesbet.com
*.pgjcs.com
*.projetocogumelo.org
*.prometricjp.com
*.rheasacekimi.com
*.seductiveflorescence.com
*.sortshoes.com
*.special-style.co
*.thebharatpress.com
*.torrentnori18.com
*.visual-foxpro-programmer.com
*.walmart-online-shopping.com
*.whenthingsgetbacktonormal.net
*.wl.net.au
1wxq.quest
709xs.com
800718.com
adaniclassaction.com.au
artykupublikujemynahotmag.pl
astroturismotarapaca.com
aueingressos.com
axhome-chateau-thierry.com
beta138.asia
boccard-france.com
boobpedia.co
cadiztotal.com
cammadethat.com
canlitribun41.com
casatsch.com
climbing-park.com
clrfurniture.com
coach-coaching-maroc.com
crazymoonlight.com
czsh.app
dirtyyroulette.com
ecocentre45.org
edcouchtx.us
elllo.co
friscsoschicken.com
gatlinburgimprovfest.net
glassylilac.com
hbham.co
home-assistant-help.com
huronvolleyballclub.com
iamherdynasty.com
islamiclecture.net
manimelist.net
minokabu.com
motivatedbythebook.com
oneandoneyouth.com
onlinegamesbet.com
pgjcs.com
projetocogumelo.org
prometricjp.com
rheasacekimi.com
seductiveflorescence.com
sortshoes.com
special-style.co
thebharatpress.com
torrentnori18.com
visual-foxpro-programmer.com
walmart-online-shopping.com
whenthingsgetbacktonormal.net
wl.net.au

Other certificates including the domain name projetocogumelo.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for projetocogumelo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINuTCCDKGgAwIBAgISBAPkApSx4Ondomz8DV+WMxOxMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjIyMDU4NTZaFw0yNDAyMjAyMDU4NTVaMB4xHDAaBgNVBAMT
E3Byb2pldG9jb2d1bWVsby5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDL2MnqffU1BAvamRRYH2uv+B5DMnUAlC7kIpPCReR1r1UvfgbZS7e2VluX
WTLMMCLBZD40DXPiPWysScsXnmr54585jnzZ0EK2RKcpKtUYDtI9ycxfqOMrSs3R
dRX4scARtXPd4qDjgFLtVDlVxiqJ+sfbmiSnfjRdU/UbAIEMHKf3lMa0b5zEbTN2
ZeqtHizXrnSYm5ErSPt6A0yWf6OzwXi5D22338R0fJru6wqUePO3m6Auyzfac/Nl
Lgv2O3NgOg/kHPKt+HMj8e34ltpW0NHzq81CtFw+6wWFofNrm6s2Bz+/snizX4vF
5ISKblpd8tkpqP8qndgYrlS0DgbHYpBBd0MWO5YeRTcjhJ/2u/rej0PHRgLYSvxq
mONbjPVYFbZjkqNVWD1fQQHmvgjJ1UosT2rhlRnxf49mNhlgn12Z9yIku+xebvrG
mFbhgZky4yolMt3pIbW9d23higI0ZdfdePHSzAXVqRvghdHc9wjDv8I0bWRpRvZ+
ubMQYYeBHkDZhPq6rBcAdQrIHQ9J97vSy41kTQ3HfWCiwo3UQ3LP/zd5lclj/toH
uC1XzhFhL10k8gpgBoyTjkGFQRYTZi11c/yWJQ/LMI28adjarDonJ74AC5+8nwlR
EbmYqqOcmnX5FnSokrroVhE05AnJotfysO/QYI3q22kx6vLMTQIDAQABo4IJ2zCC
CdcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSmigbCDyVS+wfnYyFd0Ai7UCQmszAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCB+MGA1UdEQSCB9owggfWggwqLjF3eHEu
cXVlc3SCCyouNzA5eHMuY29tggwqLjgwMDcxOC5jb22CGSouYWRhbmljbGFzc2Fj
dGlvbi5jb20uYXWCHiouYXJ0eWt1cHVibGlrdWplbXluYWhvdG1hZy5wbIIaKi5h
c3Ryb3R1cmlzbW90YXJhcGFjYS5jb22CEiouYXVlaW5ncmVzc29zLmNvbYIcKi5h
eGhvbWUtY2hhdGVhdS10aGllcnJ5LmNvbYIOKi5iZXRhMTM4LmFzaWGCFCouYm9j
Y2FyZC1mcmFuY2UuY29tgg4qLmJvb2JwZWRpYS5jb4IQKi5jYWRpenRvdGFsLmNv
bYIRKi5jYW1tYWRldGhhdC5jb22CEyouY2FubGl0cmlidW40MS5jb22CDiouY2Fz
YXRzY2guY29tghMqLmNsaW1iaW5nLXBhcmsuY29tghIqLmNscmZ1cm5pdHVyZS5j
b22CGiouY29hY2gtY29hY2hpbmctbWFyb2MuY29tghQqLmNyYXp5bW9vbmxpZ2h0
LmNvbYIKKi5jenNoLmFwcIIUKi5kaXJ0eXlyb3VsZXR0ZS5jb22CESouZWNvY2Vu
dHJlNDUub3Jngg4qLmVkY291Y2h0eC51c4IKKi5lbGxsby5jb4IVKi5mcmlzY3Nv
c2NoaWNrZW4uY29tghoqLmdhdGxpbmJ1cmdpbXByb3ZmZXN0Lm5ldIIRKi5nbGFz
c3lsaWxhYy5jb22CCiouaGJoYW0uY2+CGSouaG9tZS1hc3Npc3RhbnQtaGVscC5j
b22CGSouaHVyb252b2xsZXliYWxsY2x1Yi5jb22CEyouaWFtaGVyZHluYXN0eS5j
b22CFCouaXNsYW1pY2xlY3R1cmUubmV0ghAqLm1hbmltZWxpc3QubmV0gg4qLm1p
bm9rYWJ1LmNvbYIYKi5tb3RpdmF0ZWRieXRoZWJvb2suY29tghQqLm9uZWFuZG9u
ZXlvdXRoLmNvbYIUKi5vbmxpbmVnYW1lc2JldC5jb22CCyoucGdqY3MuY29tghUq
LnByb2pldG9jb2d1bWVsby5vcmeCESoucHJvbWV0cmljanAuY29tghIqLnJoZWFz
YWNla2ltaS5jb22CGiouc2VkdWN0aXZlZmxvcmVzY2VuY2UuY29tgg8qLnNvcnRz
aG9lcy5jb22CEiouc3BlY2lhbC1zdHlsZS5jb4IUKi50aGViaGFyYXRwcmVzcy5j
b22CEyoudG9ycmVudG5vcmkxOC5jb22CHioudmlzdWFsLWZveHByby1wcm9ncmFt
bWVyLmNvbYIdKi53YWxtYXJ0LW9ubGluZS1zaG9wcGluZy5jb22CHyoud2hlbnRo
aW5nc2dldGJhY2t0b25vcm1hbC5uZXSCCyoud2wubmV0LmF1ggoxd3hxLnF1ZXN0
ggk3MDl4cy5jb22CCjgwMDcxOC5jb22CF2FkYW5pY2xhc3NhY3Rpb24uY29tLmF1
ghxhcnR5a3VwdWJsaWt1amVteW5haG90bWFnLnBsghhhc3Ryb3R1cmlzbW90YXJh
cGFjYS5jb22CEGF1ZWluZ3Jlc3Nvcy5jb22CGmF4aG9tZS1jaGF0ZWF1LXRoaWVy
cnkuY29tggxiZXRhMTM4LmFzaWGCEmJvY2NhcmQtZnJhbmNlLmNvbYIMYm9vYnBl
ZGlhLmNvgg5jYWRpenRvdGFsLmNvbYIPY2FtbWFkZXRoYXQuY29tghFjYW5saXRy
aWJ1bjQxLmNvbYIMY2FzYXRzY2guY29tghFjbGltYmluZy1wYXJrLmNvbYIQY2xy
ZnVybml0dXJlLmNvbYIYY29hY2gtY29hY2hpbmctbWFyb2MuY29tghJjcmF6eW1v
b25saWdodC5jb22CCGN6c2guYXBwghJkaXJ0eXlyb3VsZXR0ZS5jb22CD2Vjb2Nl
bnRyZTQ1Lm9yZ4IMZWRjb3VjaHR4LnVzgghlbGxsby5jb4ITZnJpc2Nzb3NjaGlj
a2VuLmNvbYIYZ2F0bGluYnVyZ2ltcHJvdmZlc3QubmV0gg9nbGFzc3lsaWxhYy5j
b22CCGhiaGFtLmNvghdob21lLWFzc2lzdGFudC1oZWxwLmNvbYIXaHVyb252b2xs
ZXliYWxsY2x1Yi5jb22CEWlhbWhlcmR5bmFzdHkuY29tghJpc2xhbWljbGVjdHVy
ZS5uZXSCDm1hbmltZWxpc3QubmV0ggxtaW5va2FidS5jb22CFm1vdGl2YXRlZGJ5
dGhlYm9vay5jb22CEm9uZWFuZG9uZXlvdXRoLmNvbYISb25saW5lZ2FtZXNiZXQu
Y29tgglwZ2pjcy5jb22CE3Byb2pldG9jb2d1bWVsby5vcmeCD3Byb21ldHJpY2pw
LmNvbYIQcmhlYXNhY2VraW1pLmNvbYIYc2VkdWN0aXZlZmxvcmVzY2VuY2UuY29t
gg1zb3J0c2hvZXMuY29tghBzcGVjaWFsLXN0eWxlLmNvghJ0aGViaGFyYXRwcmVz
cy5jb22CEXRvcnJlbnRub3JpMTguY29tghx2aXN1YWwtZm94cHJvLXByb2dyYW1t
ZXIuY29tght3YWxtYXJ0LW9ubGluZS1zaG9wcGluZy5jb22CHXdoZW50aGluZ3Nn
ZXRiYWNrdG9ub3JtYWwubmV0ggl3bC5uZXQuYXUwEwYDVR0gBAwwCjAIBgZngQwB
AgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBIsONr2qZHNA/lagL6nTDrHFIB
y1bdLIHZu7+rOdiEcwAAAYv5Cxs3AAAEAwBHMEUCIFQDv735iVyZT4UazWMb/nQz
YzS26zOpgu44WLn0chAsAiEA/uS8RXHf6wt38bl48gsdSPktQmh+JHD/Caj/lx1/
ao0AdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYv5CxtuAAAE
AwBGMEQCICbABBkF0kx6ZTjY86M7GsGYm+rt04ItBMZztcfScABBAiBAPeaBfTwZ
LXfCSOfYSGuCFjHaZuxm9W1cgvkGm8KzdDANBgkqhkiG9w0BAQsFAAOCAQEAJhVn
tX5tSVLOSnmA7QbYz4YXfzYI4NfJe1Y7YX6sMC69VqMxh6dXQa0FgeFcbn9sZczN
0+KSeSnUEUIWrIaCPI0VRlIuT+GkPbjfyPfRbkr5QQ6q4WBGXme76kri6BfyBnlU
eF98Kgkpa/C9YkIxb2h2+SyCYOUNYqnz7jwChPBjlMB934xxP5XEVeVRBjqLoDiY
hcwYvz6cGBOK0F2uLTZ67U3WrwhliZ3WwZHF4+6ULacpfB5VmUDwBIIXwYTYaoDj
Y97urAYqqKJCY9+9enJkCq8X456Uveud7IXz9IyJlpnSAKrdobm7N/2Ylzcv+pKw
zESZ+8iHtPbm+E8sog==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349773068211326093339590227326092017079217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 20:58:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 20:58:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'projetocogumelo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831622514846988035247584523289820147439398616929570882825548826515024549363796116638908422774407520874889654441030078798091910377608039672109126262737278633912908487017566586777361874356470650370683811316153714191414891460451985828268028836295784337006836678306370057496763999989914372917437234871656626442895096158895877939070642082861544736180017475152185668740703701746062929980634293072688026628393187574826987025340969385299185743260009676082805800343928752239412257731430136991947536994721125400027942471532106081717449190824103495706167157904942265055298878947999203040089935017035240963587358427842075117790298079904692495321888162374682004725163825665066336769286591822105724121190131422920112947874700207559957422270381987638666810285968713945317983485559457452332122282672108215184767795579407462476013228431502664087945426642539909055793163083328315545678131865344461050139253631514600706679751593690771837601552856968010712677456966008233300274908427393053574975167183029656219896424674420490172080454237304348077786371187099653442716349585003470245725835745820965455477035946874405983952097003260672603458188387093826200500574578873477377350395286303747761999508149747510061044247380219837795508094487670618966149221453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a68a06c20f2552fb07e763215dd008bb502426b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1wxq.quest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.709xs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.800718.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adaniclassaction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artykupublikujemynahotmag.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astroturismotarapaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aueingressos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axhome-chateau-thierry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta138.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boccard-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boobpedia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cadiztotal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cammadethat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canlitribun41.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casatsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.climbing-park.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clrfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coach-coaching-maroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crazymoonlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.czsh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dirtyyroulette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecocentre45.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edcouchtx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elllo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friscsoschicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gatlinburgimprovfest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glassylilac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbham.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.home-assistant-help.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huronvolleyballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamherdynasty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islamiclecture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manimelist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minokabu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motivatedbythebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneandoneyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinegamesbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pgjcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projetocogumelo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prometricjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rheasacekimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seductiveflorescence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sortshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.special-style.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebharatpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentnori18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visual-foxpro-programmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmart-online-shopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whenthingsgetbacktonormal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wl.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1wxq.quest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '709xs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '800718.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adaniclassaction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artykupublikujemynahotmag.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astroturismotarapaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aueingressos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axhome-chateau-thierry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta138.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boccard-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobpedia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadiztotal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cammadethat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canlitribun41.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casatsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climbing-park.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clrfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach-coaching-maroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazymoonlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czsh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtyyroulette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecocentre45.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edcouchtx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elllo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friscsoschicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatlinburgimprovfest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassylilac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbham.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home-assistant-help.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huronvolleyballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamherdynasty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islamiclecture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manimelist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minokabu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motivatedbythebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneandoneyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinegamesbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgjcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projetocogumelo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometricjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheasacekimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seductiveflorescence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sortshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'special-style.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebharatpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentnori18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visual-foxpro-programmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmart-online-shopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenthingsgetbacktonormal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wl.net.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf90b1b37000004030047304502205403bfbdf9895c994f851acd631bfe74336334b6eb33a982ee3858b9f472102c022100fee4bc4571dfeb0b77f1b978f20b1d48f92d42687e2470ff09a8ff971d7f6a8d007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf90b1b6e0000040300463044022026c0041905d24c7a6538d8f3a33b1ac1989beaedd3822d04c673b5c7d27000410220403de6817d3c192d77c248e7d8486b821631da66ec66f56d5c82f9069bc2b374
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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