thefamilypuzzles.com

Issued by R3

About this certificate

This digital certificate with serial number 03:62:b9:dd:22:3f:1d:3d:22:f0:5f:2d:83:de:fc:95:e1:90 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thefamilypuzzles.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:b9:dd:22:3f:1d:3d:22:f0:5f:2d:83:de:fc:95:e1:90
Serial Number (int): 294931585124961004729985320041783909278096
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:62:8f:d3:87:c1:a3:35:47:ac:a8:52:45:d7:ef:17:90:e9:ea:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:12:b1:5a:c7:fe:31:20:aa:38:c8:7c:4e:2c:04:70:df:b8:36:4f
Fingerprint (sha256): 3d:ad:09:ba:ae:75:a1:c7:2e:a3:4d:40:9e:1b:ec:f3:09:41:f1:37:f9:e4:23:93:ec:b3:1f:17:f9:d2:52:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thefamilypuzzles.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thefamilypuzzles.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.001bz.cc
*.1dating.us
*.3eshha-live.com
*.88lipe.win
*.afterchangingsimcardfromandroidmobilemanycontacrsaremissinv.com
*.aifaremarketing.com
*.ambetterheqlthplans.com
*.applegreenbistroca.com
*.artihainekochan.com
*.betafishfor.sale
*.broda.design
*.camvau.xyz
*.cbscasting.com
*.checkverify.net
*.cilginciftlik.com
*.ciptafile.com
*.cocoin-vodka.com
*.computes.es
*.detikmusik.co
*.epic-andro.shop
*.erommeo.com
*.footfetishlivecams.com
*.formingyourbusiness.com
*.freshcasino13456.com
*.girlscasting.net
*.gokulflex.com
*.haruyun.com
*.hpuse.loan
*.huddsonhomesmanagement.com
*.ismynetworking.com
*.jasminbet465.com
*.krakenaccess.com
*.lineperiswa.com
*.linkskinschainmail.com
*.lioncontabilidade.com
*.mobile-tax-returns.com
*.onfullstream.com
*.pewnykoloru.com
*.physonn.com
*.porntrex.name
*.reggala.com
*.ryrdigital.com
*.salvoiinnovativesolutions.com
*.servicerunning.net
*.syn3mxsbaeypu6sfbbs.com
*.thefamilypuzzles.com
*.thepokie77net.com
*.visitksatar.com
*.wikies.wiki
*.xn--22c0c9d8c.com
001bz.cc
1dating.us
3eshha-live.com
88lipe.win
afterchangingsimcardfromandroidmobilemanycontacrsaremissinv.com
aifaremarketing.com
ambetterheqlthplans.com
applegreenbistroca.com
artihainekochan.com
betafishfor.sale
broda.design
camvau.xyz
cbscasting.com
checkverify.net
cilginciftlik.com
ciptafile.com
cocoin-vodka.com
computes.es
detikmusik.co
epic-andro.shop
erommeo.com
footfetishlivecams.com
formingyourbusiness.com
freshcasino13456.com
girlscasting.net
gokulflex.com
haruyun.com
hpuse.loan
huddsonhomesmanagement.com
ismynetworking.com
jasminbet465.com
krakenaccess.com
lineperiswa.com
linkskinschainmail.com
lioncontabilidade.com
mobile-tax-returns.com
onfullstream.com
pewnykoloru.com
physonn.com
porntrex.name
reggala.com
ryrdigital.com
salvoiinnovativesolutions.com
servicerunning.net
syn3mxsbaeypu6sfbbs.com
thefamilypuzzles.com
thepokie77net.com
visitksatar.com
wikies.wiki
xn--22c0c9d8c.com

Other certificates including the domain name thefamilypuzzles.com

(limited to 100 certificates)
ajustarlimites.com
answaerthepoblic.com
thefamilypuzzles.com
tvweb.xyz
answaerthepoblic.com
clubthyk.com

Certificate

The complete raw certificate details for thefamilypuzzles.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINuzCCDKOgAwIBAgISA2K53SI/HT0i8F8tg978leGQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjEwNjM5MDdaFw0yNDAyMTkwNjM5MDZaMB8xHTAbBgNVBAMT
FHRoZWZhbWlseXB1enpsZXMuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEA2qqJL62qvMiqWHWB3aCgBsWxVlcqZYm0bJ45d2OkfpTJjur7YLmg0kmt
ejusAAhyq1ElIVANQHyc1gGm4QNoPe5UkVn5RfL9CmBSsZjFG0JlDgMKDpr4JTmf
N06PqHhz/OxGKIikztNvjA/DoRTYj8pro5XUxbom6rz3FjQwteLEIcVrglMcWts7
+0CjnGLgfzgJWu114LCie1Wsi+wesp7vDILDs35LgSAdnciKv3vS+kutnYpKPuxQ
L5x/SkwEK3rIiCJ+16W8mPCnf4hJSZKW8ikH1c6I7zifCKGa1/qmCZ7PLiA6TlNs
fUMXouN2u8vJlojFwsdLZCX9XUK2llPrLoL0KKohcsxXWgHqwHblUW6K+i1CcLib
SYUdvVyQ3ZOXfINBe56xYoC3LJQi8XPB2PVPT6IoC+Zd5EjPrTKphDXS714YdWGo
xfor4Bqek4aoE86JzKbLwU+xYBg+iKsZQ2Le///8lyNreCSslhBz4YWOl1pevhK7
ABX8nIkLNRE0ph7DuOuC16mAcxN9tpMDsd5AIFTZyLA1MJtfDCCNJJhZq25ismhR
4+EEjQciFrdVYZZm6Wrbsq/YRNsMjTPUOnZSerNhG0mtuhW1h7tEX07ix5Qz9D4O
ly9Fljvg0ysAIO5Kejr+LQ02rHojyRA6c4ySt0y7q3Kf+BFjGr0CAwEAAaOCCdww
ggnYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+2KP04fBozVHrKhSRdfvF5Dp6oQw
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggfjBgNVHREEggfaMIIH1oIKKi4wMDFi
ei5jY4IMKi4xZGF0aW5nLnVzghEqLjNlc2hoYS1saXZlLmNvbYIMKi44OGxpcGUu
d2lugkEqLmFmdGVyY2hhbmdpbmdzaW1jYXJkZnJvbWFuZHJvaWRtb2JpbGVtYW55
Y29udGFjcnNhcmVtaXNzaW52LmNvbYIVKi5haWZhcmVtYXJrZXRpbmcuY29tghkq
LmFtYmV0dGVyaGVxbHRocGxhbnMuY29tghgqLmFwcGxlZ3JlZW5iaXN0cm9jYS5j
b22CFSouYXJ0aWhhaW5la29jaGFuLmNvbYISKi5iZXRhZmlzaGZvci5zYWxlgg4q
LmJyb2RhLmRlc2lnboIMKi5jYW12YXUueHl6ghAqLmNic2Nhc3RpbmcuY29tghEq
LmNoZWNrdmVyaWZ5Lm5ldIITKi5jaWxnaW5jaWZ0bGlrLmNvbYIPKi5jaXB0YWZp
bGUuY29tghIqLmNvY29pbi12b2RrYS5jb22CDSouY29tcHV0ZXMuZXOCDyouZGV0
aWttdXNpay5jb4IRKi5lcGljLWFuZHJvLnNob3CCDSouZXJvbW1lby5jb22CGCou
Zm9vdGZldGlzaGxpdmVjYW1zLmNvbYIZKi5mb3JtaW5neW91cmJ1c2luZXNzLmNv
bYIWKi5mcmVzaGNhc2lubzEzNDU2LmNvbYISKi5naXJsc2Nhc3RpbmcubmV0gg8q
Lmdva3VsZmxleC5jb22CDSouaGFydXl1bi5jb22CDCouaHB1c2UubG9hboIcKi5o
dWRkc29uaG9tZXNtYW5hZ2VtZW50LmNvbYIUKi5pc215bmV0d29ya2luZy5jb22C
EiouamFzbWluYmV0NDY1LmNvbYISKi5rcmFrZW5hY2Nlc3MuY29tghEqLmxpbmVw
ZXJpc3dhLmNvbYIYKi5saW5rc2tpbnNjaGFpbm1haWwuY29tghcqLmxpb25jb250
YWJpbGlkYWRlLmNvbYIYKi5tb2JpbGUtdGF4LXJldHVybnMuY29tghIqLm9uZnVs
bHN0cmVhbS5jb22CESoucGV3bnlrb2xvcnUuY29tgg0qLnBoeXNvbm4uY29tgg8q
LnBvcm50cmV4Lm5hbWWCDSoucmVnZ2FsYS5jb22CECoucnlyZGlnaXRhbC5jb22C
Hyouc2Fsdm9paW5ub3ZhdGl2ZXNvbHV0aW9ucy5jb22CFCouc2VydmljZXJ1bm5p
bmcubmV0ghkqLnN5bjNteHNiYWV5cHU2c2ZiYnMuY29tghYqLnRoZWZhbWlseXB1
enpsZXMuY29tghMqLnRoZXBva2llNzduZXQuY29tghEqLnZpc2l0a3NhdGFyLmNv
bYINKi53aWtpZXMud2lraYITKi54bi0tMjJjMGM5ZDhjLmNvbYIIMDAxYnouY2OC
CjFkYXRpbmcudXOCDzNlc2hoYS1saXZlLmNvbYIKODhsaXBlLndpboI/YWZ0ZXJj
aGFuZ2luZ3NpbWNhcmRmcm9tYW5kcm9pZG1vYmlsZW1hbnljb250YWNyc2FyZW1p
c3NpbnYuY29tghNhaWZhcmVtYXJrZXRpbmcuY29tghdhbWJldHRlcmhlcWx0aHBs
YW5zLmNvbYIWYXBwbGVncmVlbmJpc3Ryb2NhLmNvbYITYXJ0aWhhaW5la29jaGFu
LmNvbYIQYmV0YWZpc2hmb3Iuc2FsZYIMYnJvZGEuZGVzaWduggpjYW12YXUueHl6
gg5jYnNjYXN0aW5nLmNvbYIPY2hlY2t2ZXJpZnkubmV0ghFjaWxnaW5jaWZ0bGlr
LmNvbYINY2lwdGFmaWxlLmNvbYIQY29jb2luLXZvZGthLmNvbYILY29tcHV0ZXMu
ZXOCDWRldGlrbXVzaWsuY2+CD2VwaWMtYW5kcm8uc2hvcIILZXJvbW1lby5jb22C
FmZvb3RmZXRpc2hsaXZlY2Ftcy5jb22CF2Zvcm1pbmd5b3VyYnVzaW5lc3MuY29t
ghRmcmVzaGNhc2lubzEzNDU2LmNvbYIQZ2lybHNjYXN0aW5nLm5ldIINZ29rdWxm
bGV4LmNvbYILaGFydXl1bi5jb22CCmhwdXNlLmxvYW6CGmh1ZGRzb25ob21lc21h
bmFnZW1lbnQuY29tghJpc215bmV0d29ya2luZy5jb22CEGphc21pbmJldDQ2NS5j
b22CEGtyYWtlbmFjY2Vzcy5jb22CD2xpbmVwZXJpc3dhLmNvbYIWbGlua3NraW5z
Y2hhaW5tYWlsLmNvbYIVbGlvbmNvbnRhYmlsaWRhZGUuY29tghZtb2JpbGUtdGF4
LXJldHVybnMuY29tghBvbmZ1bGxzdHJlYW0uY29tgg9wZXdueWtvbG9ydS5jb22C
C3BoeXNvbm4uY29tgg1wb3JudHJleC5uYW1lggtyZWdnYWxhLmNvbYIOcnlyZGln
aXRhbC5jb22CHXNhbHZvaWlubm92YXRpdmVzb2x1dGlvbnMuY29tghJzZXJ2aWNl
cnVubmluZy5uZXSCF3N5bjNteHNiYWV5cHU2c2ZiYnMuY29tghR0aGVmYW1pbHlw
dXp6bGVzLmNvbYIRdGhlcG9raWU3N25ldC5jb22CD3Zpc2l0a3NhdGFyLmNvbYIL
d2lraWVzLndpa2mCEXhuLS0yMmMwYzlkOGMuY29tMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAO1N3dT4tuYBOizBbBv5AO2fY
T8P0x70ADS1yb+H61BcAAAGL8NGPmwAABAMARjBEAiAGXPILfxrCsMhjlEh8+hcz
wOAvml9spAxVjsvgXvmHdgIgVMGd+I+gqOok7n30XL9KhAK5N2ikggKVCQI8yaN3
IXAAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYvw0Y+pAAAE
AwBIMEYCIQDY9AvPTVTmCm2exCqGdsbBCat2xfagmDWoENC4fJfEPQIhAM1fS2Kf
7KdGxvRLw+LpR4N78DZHadEGzQggHm1PR/8QMA0GCSqGSIb3DQEBCwUAA4IBAQBJ
FjtkAVVhzL/XHekvgd/lJ+rMaWK7FpvjFFSlx6tqZlXbf1GyOOPj3KdeCE11MhpB
e2ECJN8Hzq4nkvc6AKKFjVaGNHsBzJnsYg3qYjSTI4qwtoxe4SdjRp2C48peYXl9
lyvZCt40vsSe8faWUmNV8VjRrM2KNLcFyVj/kxInYZjEbAXH7o0qJIJ2f0v3Gsjb
rFkBnV8JlVQdvSk8bgdWX/g7IcOzgvpj9Hal8Qz8WxDi/C8lwItJzcbMRsm8jjoz
BF9juQlMdusMNmFIEaQYtHY6y8+utckbPbA7VorrHaJpLYzKlnWeFET0WX9JcyNS
6HH5iTiwSpcZLHSHLJwB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294931585124961004729985320041783909278096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 06:39:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 06:39:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thefamilypuzzles.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892080085369732123986972832570693985255606614896830470920583191632818325393506040807873544929735716145516009905950363128453006442658767116279068886697044183488861022447371410981794181271319625909461324627775387279777034597440723332916286318596036786815018026859738225626935652140556546668551537918816605755742794580807505369864483161562961269370092315161597030554051058658104410181457781204336877964766352254120943015969549548622191262836849684844272130044322881406889086894837776267797672124145384951649194494712925792747508886302288047561809929895853533400685381286520488244235308331257589730031327441576732507534693058659283202269077278835976884598108316349734744929022724965255009867377661149945723722387643672131954924942357959257687616398807605514551341808440710019469972136698298040833118189603250355271364310700405591494606096755356987630771734324058187179711213964950041122042976532760701472012528522023312447765064981206776574811737139640269650781733503201363515774341999011582233348328815417166501664357913254827353184725684304848941398864530805642163191455816396556621584602317412184102898413172993293278530889129102035919877745064707341249333075390031070137886647911852968607658661122272337750066318178695728565405817533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb628fd387c1a33547aca85245d7ef1790e9ea84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.001bz.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1dating.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3eshha-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.88lipe.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afterchangingsimcardfromandroidmobilemanycontacrsaremissinv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aifaremarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambetterheqlthplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applegreenbistroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artihainekochan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betafishfor.sale'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broda.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camvau.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbscasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkverify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cilginciftlik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciptafile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocoin-vodka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computes.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detikmusik.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epic-andro.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erommeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footfetishlivecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formingyourbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshcasino13456.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlscasting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gokulflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haruyun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpuse.loan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huddsonhomesmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ismynetworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jasminbet465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krakenaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lineperiswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkskinschainmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lioncontabilidade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile-tax-returns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfullstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pewnykoloru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.physonn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porntrex.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reggala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryrdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salvoiinnovativesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicerunning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syn3mxsbaeypu6sfbbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefamilypuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepokie77net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitksatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikies.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--22c0c9d8c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '001bz.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1dating.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3eshha-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '88lipe.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterchangingsimcardfromandroidmobilemanycontacrsaremissinv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aifaremarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambetterheqlthplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applegreenbistroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artihainekochan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betafishfor.sale'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broda.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camvau.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbscasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkverify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cilginciftlik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciptafile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocoin-vodka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computes.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detikmusik.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic-andro.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erommeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footfetishlivecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formingyourbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshcasino13456.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlscasting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokulflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haruyun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpuse.loan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huddsonhomesmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ismynetworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasminbet465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krakenaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lineperiswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkskinschainmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lioncontabilidade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-tax-returns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfullstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewnykoloru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physonn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porntrex.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryrdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salvoiinnovativesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicerunning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syn3mxsbaeypu6sfbbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefamilypuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepokie77net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitksatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikies.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--22c0c9d8c.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf0d18f9b00000403004630440220065cf20b7f1ac2b0c86394487cfa1733c0e02f9a5f6ca40c558ecbe05ef98776022054c19df88fa0a8ea24ee7df45cbf4a8402b93768a482029509023cc9a3772170007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf0d18fa90000040300483046022100d8f40bcf4d54e60a6d9ec42a8676c6c109ab76c5f6a09835a810d0b87c97c43d022100cd5f4b629feca746c6f44bc3e2e947837bf0364769d106cd08201e6d4f47ff10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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