libreoffice.us

Issued by R3

About this certificate

This digital certificate with serial number 04:f7:85:be:cc:b2:0c:23:cd:78:e6:56:18:95:b5:d4:97:fd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=libreoffice.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:85:be:cc:b2:0c:23:cd:78:e6:56:18:95:b5:d4:97:fd
Serial Number (int): 432676666368073231665611450166463547348989
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:6d:a5:30:b8:f5:b6:7d:26:cc:37:35:3a:29:a9:1c:d0:d9:d5:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8d:58:06:33:0d:9f:cf:74:25:1f:66:d2:cd:99:50:b6:00:cd:9a:b8
Fingerprint (sha256): 36:3b:c6:69:e8:1b:ab:09:5e:9c:d8:66:ac:a3:e7:37:2d:a9:02:83:4f:44:a7:f6:27:6c:12:58:98:b9:61:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate libreoffice.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libreoffice.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4380.in
*.allindiagasagencyvitarak.com
*.asaprewards.com
*.b6f6.com
*.bananabucks-dev.co
*.beverlybarton.com
*.casestudy24.online
*.colehaanshoes.com
*.dairberlin.com
*.diixelfiver.com
*.eclickd.com.au
*.enanaqet.gq
*.epsomconnect.com
*.erogazou.co
*.fazendoarte.com
*.foolballlive.co
*.georgejochnowitz.com
*.groupbypeter.com
*.hairheaven.shop
*.holtinternational.com
*.hotelnovadhely.com
*.hsmarineservices.com
*.iniciaadif.es
*.interiordesignernanaimobc.com
*.invaluabledispatchto-observetoday.info
*.jodans.com
*.keenoutlineto-scantoday.info
*.kskininstructor.com
*.lab-corp.com
*.lawschools.in
*.libreoffice.us
*.lideshare.net
*.mixing.com.au
*.mplsstudios.com
*.multivate.com
*.murthahartmanwedding.com
*.mutley.com
*.n3wjiul1f31ivdf.com
*.olivegardenjobs.com
*.personeimagem.com
*.qualityrefill.com
*.qualityreportto-construetoday.info
*.screened-wordtorecognizetoday.info
*.shippingtimes.com
*.sunlink.online
*.tarde.ai
*.thebodystore.com
*.tireblog.com
*.xtape.me
*.zuckungen-im-arm.de
4380.in
allindiagasagencyvitarak.com
asaprewards.com
b6f6.com
bananabucks-dev.co
beverlybarton.com
casestudy24.online
colehaanshoes.com
dairberlin.com
diixelfiver.com
eclickd.com.au
enanaqet.gq
epsomconnect.com
erogazou.co
fazendoarte.com
foolballlive.co
georgejochnowitz.com
groupbypeter.com
hairheaven.shop
holtinternational.com
hotelnovadhely.com
hsmarineservices.com
iniciaadif.es
interiordesignernanaimobc.com
invaluabledispatchto-observetoday.info
jodans.com
keenoutlineto-scantoday.info
kskininstructor.com
lab-corp.com
lawschools.in
libreoffice.us
lideshare.net
mixing.com.au
mplsstudios.com
multivate.com
murthahartmanwedding.com
mutley.com
n3wjiul1f31ivdf.com
olivegardenjobs.com
personeimagem.com
qualityrefill.com
qualityreportto-construetoday.info
screened-wordtorecognizetoday.info
shippingtimes.com
sunlink.online
tarde.ai
thebodystore.com
tireblog.com
xtape.me
zuckungen-im-arm.de

Other certificates including the domain name libreoffice.us

(limited to 100 certificates)
libreoffice.us
libreoffice.us
libreoffice.us

Certificate

The complete raw certificate details for libreoffice.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINqjCCDJKgAwIBAgISBPeFvsyyDCPNeOZWGJW11Jf9MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTQwMTM5NDRaFw0yNDA2MTIwMTM5NDNaMBkxFzAVBgNVBAMT
DmxpYnJlb2ZmaWNlLnVzMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
vqxTkCNJwBPKVbgFdmmP9SrJ4hQo8+Im+bn9wGFmXsqOKJrRfgNLJLhJf3atyqzV
9RHha81aPzxWTqQ9xms+e2qA577SshgGg8yKx9rGcixsEQn8K2y4g6WwxDBglZZ5
J2LBLnpzLFLjppMAd3cpwOabJKSymULgU6rA8z+9f4U8l+6lgUcKFC3VKTAYvjpF
mj+WdqGFTcJ98K1BOhTqOaEOmtwYY01p1msvxn4B9K0SvIL3GYKl+1bGt3rvdHFp
GeUcJPURelWgxyTBqpYiNrCwXF8rGXVCqMWXFP9nCFhx49PuLxTpdEiOUCwEW0FJ
HpGCPRTboernbMuE021LWBY50lX1lRi3yOzPjyd6ZIKopWRtNc/CuTVrFjQfXAAm
CB9ufyz92daFuP/GYzB9stPsKGsF6jZ4/qVI58/qMpJJfa7FfKQnBZeIdVQw+wzj
LRPz8Ico+RiPZBQ9G6e+W4xJ7ZJ2uiyoKMARZGNOajMA2otOyVsGT1/NdECUxJWM
DCqdazr1s3s2cZfDsnXiaV0CLR7q2h4Zpz22EDKtLih/ZKMe/93owQSW8Dx6cozU
dHdVg1hIqLIwHBKVWUeeyjxNrF51PVg3LGXM3KtInBDl8Jm/EcYxoqfhln/CkuME
P79MD2a6m31qhWnDEXUnpYJpRaoCDOrHba5r+IgBQsUCAwEAAaOCCdEwggnNMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUPm2lMLj1tn0mzDc1OimpHNDZ1a0wHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggfXBgNVHREEggfOMIIHyoIJKi40MzgwLmlugh4q
LmFsbGluZGlhZ2FzYWdlbmN5dml0YXJhay5jb22CESouYXNhcHJld2FyZHMuY29t
ggoqLmI2ZjYuY29tghQqLmJhbmFuYWJ1Y2tzLWRldi5jb4ITKi5iZXZlcmx5YmFy
dG9uLmNvbYIUKi5jYXNlc3R1ZHkyNC5vbmxpbmWCEyouY29sZWhhYW5zaG9lcy5j
b22CECouZGFpcmJlcmxpbi5jb22CESouZGlpeGVsZml2ZXIuY29tghAqLmVjbGlj
a2QuY29tLmF1gg0qLmVuYW5hcWV0LmdxghIqLmVwc29tY29ubmVjdC5jb22CDSou
ZXJvZ2F6b3UuY2+CESouZmF6ZW5kb2FydGUuY29tghEqLmZvb2xiYWxsbGl2ZS5j
b4IWKi5nZW9yZ2Vqb2Nobm93aXR6LmNvbYISKi5ncm91cGJ5cGV0ZXIuY29tghEq
LmhhaXJoZWF2ZW4uc2hvcIIXKi5ob2x0aW50ZXJuYXRpb25hbC5jb22CFCouaG90
ZWxub3ZhZGhlbHkuY29tghYqLmhzbWFyaW5lc2VydmljZXMuY29tgg8qLmluaWNp
YWFkaWYuZXOCHyouaW50ZXJpb3JkZXNpZ25lcm5hbmFpbW9iYy5jb22CKCouaW52
YWx1YWJsZWRpc3BhdGNodG8tb2JzZXJ2ZXRvZGF5LmluZm+CDCouam9kYW5zLmNv
bYIeKi5rZWVub3V0bGluZXRvLXNjYW50b2RheS5pbmZvghUqLmtza2luaW5zdHJ1
Y3Rvci5jb22CDioubGFiLWNvcnAuY29tgg8qLmxhd3NjaG9vbHMuaW6CECoubGli
cmVvZmZpY2UudXOCDyoubGlkZXNoYXJlLm5ldIIPKi5taXhpbmcuY29tLmF1ghEq
Lm1wbHNzdHVkaW9zLmNvbYIPKi5tdWx0aXZhdGUuY29tghoqLm11cnRoYWhhcnRt
YW53ZWRkaW5nLmNvbYIMKi5tdXRsZXkuY29tghUqLm4zd2ppdWwxZjMxaXZkZi5j
b22CFSoub2xpdmVnYXJkZW5qb2JzLmNvbYITKi5wZXJzb25laW1hZ2VtLmNvbYIT
Ki5xdWFsaXR5cmVmaWxsLmNvbYIkKi5xdWFsaXR5cmVwb3J0dG8tY29uc3RydWV0
b2RheS5pbmZvgiQqLnNjcmVlbmVkLXdvcmR0b3JlY29nbml6ZXRvZGF5LmluZm+C
Eyouc2hpcHBpbmd0aW1lcy5jb22CECouc3VubGluay5vbmxpbmWCCioudGFyZGUu
YWmCEioudGhlYm9keXN0b3JlLmNvbYIOKi50aXJlYmxvZy5jb22CCioueHRhcGUu
bWWCFSouenVja3VuZ2VuLWltLWFybS5kZYIHNDM4MC5pboIcYWxsaW5kaWFnYXNh
Z2VuY3l2aXRhcmFrLmNvbYIPYXNhcHJld2FyZHMuY29tgghiNmY2LmNvbYISYmFu
YW5hYnVja3MtZGV2LmNvghFiZXZlcmx5YmFydG9uLmNvbYISY2FzZXN0dWR5MjQu
b25saW5lghFjb2xlaGFhbnNob2VzLmNvbYIOZGFpcmJlcmxpbi5jb22CD2RpaXhl
bGZpdmVyLmNvbYIOZWNsaWNrZC5jb20uYXWCC2VuYW5hcWV0LmdxghBlcHNvbWNv
bm5lY3QuY29tggtlcm9nYXpvdS5jb4IPZmF6ZW5kb2FydGUuY29tgg9mb29sYmFs
bGxpdmUuY2+CFGdlb3JnZWpvY2hub3dpdHouY29tghBncm91cGJ5cGV0ZXIuY29t
gg9oYWlyaGVhdmVuLnNob3CCFWhvbHRpbnRlcm5hdGlvbmFsLmNvbYISaG90ZWxu
b3ZhZGhlbHkuY29tghRoc21hcmluZXNlcnZpY2VzLmNvbYINaW5pY2lhYWRpZi5l
c4IdaW50ZXJpb3JkZXNpZ25lcm5hbmFpbW9iYy5jb22CJmludmFsdWFibGVkaXNw
YXRjaHRvLW9ic2VydmV0b2RheS5pbmZvggpqb2RhbnMuY29tghxrZWVub3V0bGlu
ZXRvLXNjYW50b2RheS5pbmZvghNrc2tpbmluc3RydWN0b3IuY29tggxsYWItY29y
cC5jb22CDWxhd3NjaG9vbHMuaW6CDmxpYnJlb2ZmaWNlLnVzgg1saWRlc2hhcmUu
bmV0gg1taXhpbmcuY29tLmF1gg9tcGxzc3R1ZGlvcy5jb22CDW11bHRpdmF0ZS5j
b22CGG11cnRoYWhhcnRtYW53ZWRkaW5nLmNvbYIKbXV0bGV5LmNvbYITbjN3aml1
bDFmMzFpdmRmLmNvbYITb2xpdmVnYXJkZW5qb2JzLmNvbYIRcGVyc29uZWltYWdl
bS5jb22CEXF1YWxpdHlyZWZpbGwuY29tgiJxdWFsaXR5cmVwb3J0dG8tY29uc3Ry
dWV0b2RheS5pbmZvgiJzY3JlZW5lZC13b3JkdG9yZWNvZ25pemV0b2RheS5pbmZv
ghFzaGlwcGluZ3RpbWVzLmNvbYIOc3VubGluay5vbmxpbmWCCHRhcmRlLmFpghB0
aGVib2R5c3RvcmUuY29tggx0aXJlYmxvZy5jb22CCHh0YXBlLm1lghN6dWNrdW5n
ZW4taW0tYXJtLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIE
AgSB9gSB8wDxAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGO
OtRvAgAABAMASDBGAiEArOtCm7/uS+85DxCQD1/nWi1x7QC9WYxmL1eyvAYL0iAC
IQDTfgQp5GAyWCDF/m93RSBC9PVVdqAW2+0D8+V0ReQrTgB2AEiw42vapkc0D+Vq
AvqdMOscUgHLVt0sgdm7v6s52IRzAAABjjrUb5gAAAQDAEcwRQIhANbzB293axEJ
EMgBCrz8W56c14+Ur9WFsvPvDGIP8S4vAiBe5doBCO40POK0H4h0ikmgkWKbMOFw
pQdbwD4HfD1hAjANBgkqhkiG9w0BAQsFAAOCAQEAAlNpwCu7RzBoUCxINB7zsxX0
9UpSAEZu1k1K1+hPaaw7hl6jIUWf89o2WnGu/TwLf45gNCm7kzIWyWuJ0/MkfVle
Wpf2gEjWh4b2HkCacGdKcxzRV94N/h7ZyrJhIvmMSOp+9L/OoIODeWBGRCycnUBo
IoTRnGMYwyUIpW/qtDb5CG3a18XjrNhtlI244DwQYbwl1LNBgoDoPA6b+DZ8jsft
qxWL8hgXcRmJcTqfRhtrQm1mQdQP9OX/gTHPBw9MP6QEUHNamQNl+rv/ENUIF4o3
pnZXJ2koxx7onuhKp4/d7WS1ajhaSsdTU+q/ZyrbhVvYw9macw4e/ba80aDOKQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432676666368073231665611450166463547348989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 01:39:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 01:39:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libreoffice.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777878585616957590101027516703476417369234216778384303416783743559243757182311371817671478809304082327768815238507070703645432331806979019218697264491345120044854134403850900755847009803969607976877264504571621808923371080264240186319500284135302008253257294662477007934317438062589974107695121557333763106442839532791480637638941187259046763307570741936659151598385525149476837180554130642599128722723401356963513661335338148087384544710635022337397694329209679352385492346431639117491919562324505411471784703033570698311306768858059260278498048852895931255085527137921936742265871443614278989120716577272010842790527066964866808877340179819190623449293398381326688565236198119811557891170654934653100172408162220238846019697668231003394564030286412893181586194461873143190176694752323815068346110300529691938771524379462540026473579340116259390699995512477591467110639530208394714166882864853635009016478665698875745160493786052458480630095415793317305229441840026413553477317870639045217346467946661119162331792621802928543889921537534898180231700320757394792488893177459551969241961834705369077191805683720080313356675712754560072234401765361188069097732767970846303089215533436837397700550236951815764889152944832467066320667333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e6da530b8f5b67d26cc37353a29a91cd0d9d5ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1998 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4380.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allindiagasagencyvitarak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asaprewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b6f6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bananabucks-dev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beverlybarton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casestudy24.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colehaanshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dairberlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diixelfiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eclickd.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enanaqet.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epsomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erogazou.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fazendoarte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foolballlive.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.georgejochnowitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupbypeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairheaven.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holtinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelnovadhely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsmarineservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iniciaadif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interiordesignernanaimobc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invaluabledispatchto-observetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jodans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keenoutlineto-scantoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kskininstructor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lab-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawschools.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libreoffice.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lideshare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mixing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mplsstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murthahartmanwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.n3wjiul1f31ivdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olivegardenjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personeimagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityrefill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityreportto-construetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.screened-wordtorecognizetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shippingtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunlink.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarde.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebodystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tireblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xtape.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuckungen-im-arm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4380.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allindiagasagencyvitarak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asaprewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b6f6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bananabucks-dev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beverlybarton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casestudy24.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colehaanshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairberlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diixelfiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclickd.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enanaqet.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epsomconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erogazou.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fazendoarte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foolballlive.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgejochnowitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupbypeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairheaven.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holtinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelnovadhely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsmarineservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iniciaadif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interiordesignernanaimobc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invaluabledispatchto-observetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keenoutlineto-scantoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kskininstructor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawschools.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libreoffice.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lideshare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mixing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mplsstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murthahartmanwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n3wjiul1f31ivdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivegardenjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personeimagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityrefill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityreportto-construetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screened-wordtorecognizetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippingtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunlink.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarde.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebodystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tireblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtape.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuckungen-im-arm.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3ad46f020000040300483046022100aceb429bbfee4bef390f10900f5fe75a2d71ed00bd598c662f57b2bc060bd220022100d37e0429e460325820c5fe6f77452042f4f55576a016dbed03f3e57445e42b4e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e3ad46f980000040300473045022100d6f3076f776b110910c8010abcfc5b9e9cd78f94afd585b2f3ef0c620ff12e2f02205ee5da0108ee343ce2b41f88748a49a091629b30e170a5075bc03e077c3d6102
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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