heroncitybarcelona.com

Issued by R3

About this certificate

This digital certificate with serial number 03:17:c5:dd:20:f9:b8:f1:41:38:f8:31:aa:89:92:d2:3a:2b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=heroncitybarcelona.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:c5:dd:20:f9:b8:f1:41:38:f8:31:aa:89:92:d2:3a:2b
Serial Number (int): 269426358316059845907236921272231378696747
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:68:69:1f:34:e6:54:9a:b1:7d:98:e8:50:d7:2a:85:7d:ff:87:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:49:5a:e1:29:cb:8d:3e:cf:f1:74:0e:60:32:0a:d2:6f:36:99:2f
Fingerprint (sha256): 34:d7:e5:8d:23:94:28:ed:a7:1c:95:f4:5e:34:54:0d:b8:c1:e9:0c:62:25:30:09:05:9b:6c:a9:9d:1e:8d:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate heroncitybarcelona.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heroncitybarcelona.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3dprinteratlas.com
*.akmsolarandelectrical.com
*.akulagtm.com
*.amitmeg.click
*.animixplay.li
*.batterioegypt.com
*.boyyapi.net
*.businessavoid.com
*.camper-bikes.com
*.discusionjuridica.com
*.divattrendek.hu
*.educationlivebd.com
*.elayemdz.com
*.erpsforce.com
*.etemplate.com.au
*.groupifly.com
*.habitationsviagere.com
*.haciendaprojects.com
*.heroncitybarcelona.com
*.im568.cc
*.itissam.com
*.kapteenimiettinen.com
*.kitrama.co
*.konoba-marija.com
*.kunyuschool.com
*.lidltest9.us
*.luchoevangeliza.com
*.lyh91.com
*.meritking915.com
*.milewidesports.com
*.modernbutorok.hu
*.mwqusa.com
*.optika-zornica.com
*.palmerindustrialsupplies.net
*.pelo.email
*.pompe.us
*.pushkat.com
*.pzychics.com
*.recrutementafriquefrancophone.com
*.rihannalounge.com
*.scatkings.co
*.sonsdexaloc.com
*.tallergrinberg.com
*.taosstargazer.com
*.teasons.com.au
*.thestachecycler.com
*.tiendaoutdoor.com
*.tiver.me
*.uliv.cc
*.vipsets.com
3dprinteratlas.com
akmsolarandelectrical.com
akulagtm.com
amitmeg.click
animixplay.li
batterioegypt.com
boyyapi.net
businessavoid.com
camper-bikes.com
discusionjuridica.com
divattrendek.hu
educationlivebd.com
elayemdz.com
erpsforce.com
etemplate.com.au
groupifly.com
habitationsviagere.com
haciendaprojects.com
heroncitybarcelona.com
im568.cc
itissam.com
kapteenimiettinen.com
kitrama.co
konoba-marija.com
kunyuschool.com
lidltest9.us
luchoevangeliza.com
lyh91.com
meritking915.com
milewidesports.com
modernbutorok.hu
mwqusa.com
optika-zornica.com
palmerindustrialsupplies.net
pelo.email
pompe.us
pushkat.com
pzychics.com
recrutementafriquefrancophone.com
rihannalounge.com
scatkings.co
sonsdexaloc.com
tallergrinberg.com
taosstargazer.com
teasons.com.au
thestachecycler.com
tiendaoutdoor.com
tiver.me
uliv.cc
vipsets.com

Other certificates including the domain name heroncitybarcelona.com

(limited to 100 certificates)
heroncitybarcelona.com
www.heroncitybarcelona.com
www.heroncitybarcelona.com
elayfi.com
www.heroncitybarcelona.com
www.heroncitybarcelona.com
domainads.com.au
domainads.com.au

Certificate

The complete raw certificate details for heroncitybarcelona.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINGTCCDAGgAwIBAgISAxfF3SD5uPFBOPgxqomS0jorMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDYwODA4MTNaFw0yNDA0MDUwODA4MTJaMCExHzAdBgNVBAMT
Fmhlcm9uY2l0eWJhcmNlbG9uYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQDA/ueyO2BzlWQEyVJruRYLxlTnkz+rSNZQwKHr/9jxvRm6pQ5Kx1CP
RN7ZctJjXu9gGnRnwNgGQe20/TUIwcW0swd3TWzMCsWRLRCE4JVFlAQeD4kHanR4
JvMIO2Q5hczGBy2Y0MUmQ9EKm7nz0TQYNQj4Wm4KfMGlbruEMB7gR6ElNZsqLeGp
8/hNWfQBmsYKhnsoFY9zg1B5qNGiRspkf4YkxmWq2JMmo46ks4qkKOzCsQTRo2YZ
2ROZWFEHxPqzV6KnKDrroliRq9zG9wOiqQp1CLu/elzYJbOE5H1VvGMShZcM91lr
aD1ZJyibwMA7AhUHeHEurlFZ7q8bRqHTv6+ASTA4NE/WKeWSIvHqx3bXQFiQIYXv
aiE7RJp+Tq3YKSgf2kvnbej7K1E0SERMpTPKshzokvOFSgg80TTY6EO9tr0fJQh0
OjQGcrwhvi9dQsV7TI7DhKsAagSffSaIC5uKb91YOvFtqogSX2mJkPNz0iv3kIZu
7l8ejmSqfBxa2dgSotPQ7hk4+X203lJiuKwks7te3NWk5ML8ZHIEJQgCWlAqFzF+
ANjvT89Fn7zL1UdksjeHETHi/qhPFYQ6PUwD3RGJEch20Qf9ssNy1oFCmz2CdrVP
9eWJ6WjVr+LVkZQdjYlFjtM/UFVX3Q8Lmling2XRTaJhGfMP7DIb2wIDAQABo4IJ
ODCCCTQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRoaGkfNOZUmrF9mOhQ1yqFff+H
8DAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ
MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw
AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCB0EGA1UdEQSCBzgwggc0ghQqLjNk
cHJpbnRlcmF0bGFzLmNvbYIbKi5ha21zb2xhcmFuZGVsZWN0cmljYWwuY29tgg4q
LmFrdWxhZ3RtLmNvbYIPKi5hbWl0bWVnLmNsaWNrgg8qLmFuaW1peHBsYXkubGmC
EyouYmF0dGVyaW9lZ3lwdC5jb22CDSouYm95eWFwaS5uZXSCEyouYnVzaW5lc3Nh
dm9pZC5jb22CEiouY2FtcGVyLWJpa2VzLmNvbYIXKi5kaXNjdXNpb25qdXJpZGlj
YS5jb22CESouZGl2YXR0cmVuZGVrLmh1ghUqLmVkdWNhdGlvbmxpdmViZC5jb22C
DiouZWxheWVtZHouY29tgg8qLmVycHNmb3JjZS5jb22CEiouZXRlbXBsYXRlLmNv
bS5hdYIPKi5ncm91cGlmbHkuY29tghgqLmhhYml0YXRpb25zdmlhZ2VyZS5jb22C
FiouaGFjaWVuZGFwcm9qZWN0cy5jb22CGCouaGVyb25jaXR5YmFyY2Vsb25hLmNv
bYIKKi5pbTU2OC5jY4INKi5pdGlzc2FtLmNvbYIXKi5rYXB0ZWVuaW1pZXR0aW5l
bi5jb22CDCoua2l0cmFtYS5jb4ITKi5rb25vYmEtbWFyaWphLmNvbYIRKi5rdW55
dXNjaG9vbC5jb22CDioubGlkbHRlc3Q5LnVzghUqLmx1Y2hvZXZhbmdlbGl6YS5j
b22CCyoubHloOTEuY29tghIqLm1lcml0a2luZzkxNS5jb22CFCoubWlsZXdpZGVz
cG9ydHMuY29tghIqLm1vZGVybmJ1dG9yb2suaHWCDCoubXdxdXNhLmNvbYIUKi5v
cHRpa2Etem9ybmljYS5jb22CHioucGFsbWVyaW5kdXN0cmlhbHN1cHBsaWVzLm5l
dIIMKi5wZWxvLmVtYWlsggoqLnBvbXBlLnVzgg0qLnB1c2hrYXQuY29tgg4qLnB6
eWNoaWNzLmNvbYIjKi5yZWNydXRlbWVudGFmcmlxdWVmcmFuY29waG9uZS5jb22C
EyoucmloYW5uYWxvdW5nZS5jb22CDiouc2NhdGtpbmdzLmNvghEqLnNvbnNkZXhh
bG9jLmNvbYIUKi50YWxsZXJncmluYmVyZy5jb22CEyoudGFvc3N0YXJnYXplci5j
b22CECoudGVhc29ucy5jb20uYXWCFSoudGhlc3RhY2hlY3ljbGVyLmNvbYITKi50
aWVuZGFvdXRkb29yLmNvbYIKKi50aXZlci5tZYIJKi51bGl2LmNjgg0qLnZpcHNl
dHMuY29tghIzZHByaW50ZXJhdGxhcy5jb22CGWFrbXNvbGFyYW5kZWxlY3RyaWNh
bC5jb22CDGFrdWxhZ3RtLmNvbYINYW1pdG1lZy5jbGlja4INYW5pbWl4cGxheS5s
aYIRYmF0dGVyaW9lZ3lwdC5jb22CC2JveXlhcGkubmV0ghFidXNpbmVzc2F2b2lk
LmNvbYIQY2FtcGVyLWJpa2VzLmNvbYIVZGlzY3VzaW9uanVyaWRpY2EuY29tgg9k
aXZhdHRyZW5kZWsuaHWCE2VkdWNhdGlvbmxpdmViZC5jb22CDGVsYXllbWR6LmNv
bYINZXJwc2ZvcmNlLmNvbYIQZXRlbXBsYXRlLmNvbS5hdYINZ3JvdXBpZmx5LmNv
bYIWaGFiaXRhdGlvbnN2aWFnZXJlLmNvbYIUaGFjaWVuZGFwcm9qZWN0cy5jb22C
Fmhlcm9uY2l0eWJhcmNlbG9uYS5jb22CCGltNTY4LmNjggtpdGlzc2FtLmNvbYIV
a2FwdGVlbmltaWV0dGluZW4uY29tggpraXRyYW1hLmNvghFrb25vYmEtbWFyaWph
LmNvbYIPa3VueXVzY2hvb2wuY29tggxsaWRsdGVzdDkudXOCE2x1Y2hvZXZhbmdl
bGl6YS5jb22CCWx5aDkxLmNvbYIQbWVyaXRraW5nOTE1LmNvbYISbWlsZXdpZGVz
cG9ydHMuY29tghBtb2Rlcm5idXRvcm9rLmh1ggptd3F1c2EuY29tghJvcHRpa2Et
em9ybmljYS5jb22CHHBhbG1lcmluZHVzdHJpYWxzdXBwbGllcy5uZXSCCnBlbG8u
ZW1haWyCCHBvbXBlLnVzggtwdXNoa2F0LmNvbYIMcHp5Y2hpY3MuY29tgiFyZWNy
dXRlbWVudGFmcmlxdWVmcmFuY29waG9uZS5jb22CEXJpaGFubmFsb3VuZ2UuY29t
ggxzY2F0a2luZ3MuY2+CD3NvbnNkZXhhbG9jLmNvbYISdGFsbGVyZ3JpbmJlcmcu
Y29tghF0YW9zc3RhcmdhemVyLmNvbYIOdGVhc29ucy5jb20uYXWCE3RoZXN0YWNo
ZWN5Y2xlci5jb22CEXRpZW5kYW91dGRvb3IuY29tggh0aXZlci5tZYIHdWxpdi5j
Y4ILdmlwc2V0cy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggECBgorBgEEAdZ5
AgQCBIHzBIHwAO4AdQA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAA
AYzeB6r6AAAEAwBGMEQCICzF7RocEZYbooAFthrRnm0tqKsuAV7o/l0vnoNKQtqN
AiBxgG9QaloFQk0t9P5+vNBFJNz+wkNyUxBP4FuBZiNP2gB1AKLiv9Ye3i8vB6DW
Tm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjN4HqwMAAAQDAEYwRAIgLxVbCTGY+X5j
CLZRXymeBOYdlY/oLZ5yxcu1l/k5hoUCIAvQDtaATlebu0wHjNZxOFbgrxKd7Lfn
6S/pXOppXiOPMA0GCSqGSIb3DQEBCwUAA4IBAQBqif2a15rvdQryieLzwQcP+xFR
p2EyZfWLQawwTOpdVF8uQRGzH7K6D+XE8IVTo4yzZaiN+NINlbvml3TCjMeVRphP
TSxoiEpIW73TongZnN94Q4Yzoqwc3GxuxUUZKTGtAXNCpMpdvThrp+GfdiVd1WE6
r5gZS6menJ+cKEfxjXyktj20CRkbm8TT6XbiMNCJuOueDMnhSdKvjdU3kD+vI7j3
2csXA48FZCrj2SzcslkpnuUTXK50szSnTMxwgBY6vcMyvpF48EEttw5Wi9tEWZMA
dqYAnBuIWvWLL7BWC2ojeI822I3fRYaCUK5ykFgnsJ4pKFnvJ3eiGPWzUV4d
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwP7nsjtgc5VkBMlSa7kW
C8ZU55M/q0jWUMCh6//Y8b0ZuqUOSsdQj0Te2XLSY17vYBp0Z8DYBkHttP01CMHF
tLMHd01szArFkS0QhOCVRZQEHg+JB2p0eCbzCDtkOYXMxgctmNDFJkPRCpu589E0
GDUI+FpuCnzBpW67hDAe4EehJTWbKi3hqfP4TVn0AZrGCoZ7KBWPc4NQeajRokbK
ZH+GJMZlqtiTJqOOpLOKpCjswrEE0aNmGdkTmVhRB8T6s1eipyg666JYkavcxvcD
oqkKdQi7v3pc2CWzhOR9VbxjEoWXDPdZa2g9WScom8DAOwIVB3hxLq5RWe6vG0ah
07+vgEkwODRP1inlkiLx6sd210BYkCGF72ohO0Safk6t2CkoH9pL523o+ytRNEhE
TKUzyrIc6JLzhUoIPNE02OhDvba9HyUIdDo0BnK8Ib4vXULFe0yOw4SrAGoEn30m
iAubim/dWDrxbaqIEl9piZDzc9Ir95CGbu5fHo5kqnwcWtnYEqLT0O4ZOPl9tN5S
YrisJLO7XtzVpOTC/GRyBCUIAlpQKhcxfgDY70/PRZ+8y9VHZLI3hxEx4v6oTxWE
Oj1MA90RiRHIdtEH/bLDctaBQps9gna1T/Xlielo1a/i1ZGUHY2JRY7TP1BVV90P
C5pYp4Nl0U2iYRnzD+wyG9sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269426358316059845907236921272231378696747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 08:08:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 08:08:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heroncitybarcelona.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787353856097437597785355695369463009124189872396094927920679198403117256797935259082427946210193375394535159793818176374096262756420685527621251218361512313219248908864774610168692052090471828931808887041974975654440975619192350018766827396541182359211214659740973827272238536450805291271406360602160984979688691153854968237428435669746452723032934129810281891774687749284711095293088829264935844907719413273212343797912830967879056958205498967912608306870234065687765556378298547259178265752576690660970552143958556581332086863189437270845809088823659790112647751178588686878547488961005060454130121792858884290025598817732806509570522870904662311191071823112680735292077671783354476690374996445167615032867892943743707098695167999087788989186636403861928325900887694130719896144678954892073875340480762261737678426112932485138444928420866787642831183929986343035221718484950118887443190302757637872086745094993897658368012911467024453614163111298568104670775043414406796276576098614228626693895564585484658937062856305115652610793068214817865528179880661349093800987838974723604800617242087894164843968763654705819170005171727088458736086691791412669149838688876655169491579283635525309610440444706596439969205739886048485489908699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6868691f34e6549ab17d98e850d72a857dff87f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dprinteratlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akmsolarandelectrical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akulagtm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amitmeg.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animixplay.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batterioegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boyyapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessavoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camper-bikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discusionjuridica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divattrendek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educationlivebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elayemdz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erpsforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etemplate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupifly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habitationsviagere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haciendaprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heroncitybarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.im568.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itissam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kapteenimiettinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitrama.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konoba-marija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kunyuschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lidltest9.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luchoevangeliza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyh91.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meritking915.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milewidesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernbutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mwqusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optika-zornica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palmerindustrialsupplies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelo.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pompe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pushkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pzychics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recrutementafriquefrancophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rihannalounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scatkings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonsdexaloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tallergrinberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taosstargazer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teasons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thestachecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiendaoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiver.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uliv.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dprinteratlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akmsolarandelectrical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akulagtm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitmeg.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animixplay.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batterioegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boyyapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessavoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camper-bikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discusionjuridica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divattrendek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationlivebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elayemdz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erpsforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etemplate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupifly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitationsviagere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haciendaprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heroncitybarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im568.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itissam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapteenimiettinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitrama.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konoba-marija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunyuschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidltest9.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchoevangeliza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyh91.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritking915.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milewidesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernbutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwqusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optika-zornica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmerindustrialsupplies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelo.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pompe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pzychics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recrutementafriquefrancophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rihannalounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scatkings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonsdexaloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallergrinberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taosstargazer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teasons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestachecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiendaoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiver.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uliv.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipsets.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cde07aafa000004030046304402202cc5ed1a1c11961ba28005b61ad19e6d2da8ab2e015ee8fe5d2f9e834a42da8d022071806f506a5a05424d2df4fe7ebcd04524dcfec2437253104fe05b8166234fda007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cde07ab03000004030046304402202f155b093198f97e6308b6515f299e04e61d958fe82d9e72c5cbb597f939868502200bd00ed6804e579bbb4c078cd6713856e0af129decb7e7e92fe95cea695e238f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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