uclafootball.com

Issued by R3

About this certificate

This digital certificate with serial number 03:33:65:8e:1a:b2:27:d5:27:b5:ef:82:59:97:4d:72:3d:97 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uclafootball.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:65:8e:1a:b2:27:d5:27:b5:ef:82:59:97:4d:72:3d:97
Serial Number (int): 278826248383434380251783844782645068316055
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:ca:45:cf:1f:e7:a3:0a:1d:12:a0:41:12:13:09:94:c0:d7:6c:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:68:72:64:17:86:83:c6:c0:63:2a:f4:62:04:ef:0b:90:fb:de:f8
Fingerprint (sha256): 3e:58:d6:bd:72:bd:fe:64:43:be:91:a9:6e:5f:4c:32:05:1b:98:57:f7:88:e3:6e:41:13:24:ac:87:c7:12:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate uclafootball.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uclafootball.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4rapfa.com
*.acrossthespiderverse.com
*.agissons.com
*.auctiontroubleshooter.com
*.autotraderservice.co.uk
*.baatcheetunofficial.com
*.beinin.com
*.boardofpharmacy.com
*.boksitogorsk.com
*.de-ryanair.com
*.differn.com
*.dubaicallgirls.me
*.dunbox.com
*.enhancement.com
*.ephya.com
*.finestpainting.com
*.homeselector.com.au
*.howare.pro
*.ihurtpeople.com
*.internetworkengineering.com
*.kurumu.com
*.kuxue.mobi
*.mysharedpage.com
*.palmasola.com
*.piangao.com
*.profitinvestor.com
*.quntas.com
*.region4.com
*.registos.com
*.remoteautomater.com
*.ritepharmacy.com
*.rollingtobaccoonline.com
*.salazars.com
*.sflicks.to
*.shahvni.com
*.starhublunarnewyear.com
*.superbowlgambler.com
*.taggem.com
*.tarad2u.com
*.tekly.com
*.thecashregister.com
*.thetimeless.com
*.tiners.com
*.tunagari.com
*.uclafootball.com
*.valean.com
*.ve7.com
*.whichdietician.com.au
*.wikikb.com
*.xianwu.com
4rapfa.com
acrossthespiderverse.com
agissons.com
auctiontroubleshooter.com
autotraderservice.co.uk
baatcheetunofficial.com
beinin.com
boardofpharmacy.com
boksitogorsk.com
de-ryanair.com
differn.com
dubaicallgirls.me
dunbox.com
enhancement.com
ephya.com
finestpainting.com
homeselector.com.au
howare.pro
ihurtpeople.com
internetworkengineering.com
kurumu.com
kuxue.mobi
mysharedpage.com
palmasola.com
piangao.com
profitinvestor.com
quntas.com
region4.com
registos.com
remoteautomater.com
ritepharmacy.com
rollingtobaccoonline.com
salazars.com
sflicks.to
shahvni.com
starhublunarnewyear.com
superbowlgambler.com
taggem.com
tarad2u.com
tekly.com
thecashregister.com
thetimeless.com
tiners.com
tunagari.com
uclafootball.com
valean.com
ve7.com
whichdietician.com.au
wikikb.com
xianwu.com

Other certificates including the domain name uclafootball.com

(limited to 100 certificates)
uclafootball.com
uclafootball.com
uclafootball.com
uclafootball.com
uclafootball.com
gameslover.com
pindeduo.com
uclafootball.com
turnkeydropships.com
womanwith.com
uclafootball.com
superculos.com

Certificate

The complete raw certificate details for uclafootball.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMxjCCC66gAwIBAgISAzNljhqyJ9Unte+CWZdNcj2XMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjgwOTIwNDJaFw0yMzEyMjcwOTIwNDFaMBsxGTAXBgNVBAMT
EHVjbGFmb290YmFsbC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDOZz7t2R+AhasIJcQstVJW8BNVxrdJdpw00Ufa4JT9cTewDiG1akGQV9fDwLeV
CRjIQPiKeHzj7n0yt04mlOFq8J+mnSQJ+QqEL7evPC/TrhtDDfgfMKRb8gi/7TxT
6tgbhV6zvlwtoEccUNKnmYIH9hbP8RwF5f0mqgXXIGT7lT9IAjYwWGlMJwKuxWH7
gBNtdZkowRAZQNeCrbI/gRjsAMFvSoJFwvnC+jW/FKDD5iKkDKEpcGvlQs3Hy4aN
3CXIAPvcRH24MuYN47fkk02vT3k/M+E+rTQ7XMkr1T15w0kPfn13HI+tTglbQprs
yJgL3jsJLShIqFEJLwQrfEYY04t7FaLzlv3EV/GjjOa7pvkiCfP3A0paZYNf1XOT
48jWVWRMXuEWgbCpXS+hlAODE93a0HYeOkZTjcAzPW6+1ku2wz0fwVP8lsyZaIb0
P2DZyOFfBIDIRdjJMrgk0+J1jC7LlB0hX3X0H/e+nnrtWCD2AEwkLEzcaJKc9ENq
w5gymud1IQoqIrYjQ1jWXdT40uLh9aof/sdyJmwIsxtLTzibEGhXmn2wn4++b14T
7d0ZQy3azt1ocnTsAwLlz5+R3K4Dn6ZhDQK9kVyuNxILmkBu3hhi+kISTIT9zlXZ
WABjVJrnrj4ryOQdx7SPRscXxUmj+aYsEONpxPBgzztP2QIDAQABo4II6zCCCOcw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQRykXPH+ejCh0SoEESEwmUwNdsGjAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCBvMGA1UdEQSCBuowggbmggwqLjRyYXBmYS5j
b22CGiouYWNyb3NzdGhlc3BpZGVydmVyc2UuY29tgg4qLmFnaXNzb25zLmNvbYIb
Ki5hdWN0aW9udHJvdWJsZXNob290ZXIuY29tghkqLmF1dG90cmFkZXJzZXJ2aWNl
LmNvLnVrghkqLmJhYXRjaGVldHVub2ZmaWNpYWwuY29tggwqLmJlaW5pbi5jb22C
FSouYm9hcmRvZnBoYXJtYWN5LmNvbYISKi5ib2tzaXRvZ29yc2suY29tghAqLmRl
LXJ5YW5haXIuY29tgg0qLmRpZmZlcm4uY29tghMqLmR1YmFpY2FsbGdpcmxzLm1l
ggwqLmR1bmJveC5jb22CESouZW5oYW5jZW1lbnQuY29tggsqLmVwaHlhLmNvbYIU
Ki5maW5lc3RwYWludGluZy5jb22CFSouaG9tZXNlbGVjdG9yLmNvbS5hdYIMKi5o
b3dhcmUucHJvghEqLmlodXJ0cGVvcGxlLmNvbYIdKi5pbnRlcm5ldHdvcmtlbmdp
bmVlcmluZy5jb22CDCoua3VydW11LmNvbYIMKi5rdXh1ZS5tb2JpghIqLm15c2hh
cmVkcGFnZS5jb22CDyoucGFsbWFzb2xhLmNvbYINKi5waWFuZ2FvLmNvbYIUKi5w
cm9maXRpbnZlc3Rvci5jb22CDCoucXVudGFzLmNvbYINKi5yZWdpb240LmNvbYIO
Ki5yZWdpc3Rvcy5jb22CFSoucmVtb3RlYXV0b21hdGVyLmNvbYISKi5yaXRlcGhh
cm1hY3kuY29tghoqLnJvbGxpbmd0b2JhY2Nvb25saW5lLmNvbYIOKi5zYWxhemFy
cy5jb22CDCouc2ZsaWNrcy50b4INKi5zaGFodm5pLmNvbYIZKi5zdGFyaHVibHVu
YXJuZXd5ZWFyLmNvbYIWKi5zdXBlcmJvd2xnYW1ibGVyLmNvbYIMKi50YWdnZW0u
Y29tgg0qLnRhcmFkMnUuY29tggsqLnRla2x5LmNvbYIVKi50aGVjYXNocmVnaXN0
ZXIuY29tghEqLnRoZXRpbWVsZXNzLmNvbYIMKi50aW5lcnMuY29tgg4qLnR1bmFn
YXJpLmNvbYISKi51Y2xhZm9vdGJhbGwuY29tggwqLnZhbGVhbi5jb22CCSoudmU3
LmNvbYIXKi53aGljaGRpZXRpY2lhbi5jb20uYXWCDCoud2lraWtiLmNvbYIMKi54
aWFud3UuY29tggo0cmFwZmEuY29tghhhY3Jvc3N0aGVzcGlkZXJ2ZXJzZS5jb22C
DGFnaXNzb25zLmNvbYIZYXVjdGlvbnRyb3VibGVzaG9vdGVyLmNvbYIXYXV0b3Ry
YWRlcnNlcnZpY2UuY28udWuCF2JhYXRjaGVldHVub2ZmaWNpYWwuY29tggpiZWlu
aW4uY29tghNib2FyZG9mcGhhcm1hY3kuY29tghBib2tzaXRvZ29yc2suY29tgg5k
ZS1yeWFuYWlyLmNvbYILZGlmZmVybi5jb22CEWR1YmFpY2FsbGdpcmxzLm1lggpk
dW5ib3guY29tgg9lbmhhbmNlbWVudC5jb22CCWVwaHlhLmNvbYISZmluZXN0cGFp
bnRpbmcuY29tghNob21lc2VsZWN0b3IuY29tLmF1ggpob3dhcmUucHJvgg9paHVy
dHBlb3BsZS5jb22CG2ludGVybmV0d29ya2VuZ2luZWVyaW5nLmNvbYIKa3VydW11
LmNvbYIKa3V4dWUubW9iaYIQbXlzaGFyZWRwYWdlLmNvbYINcGFsbWFzb2xhLmNv
bYILcGlhbmdhby5jb22CEnByb2ZpdGludmVzdG9yLmNvbYIKcXVudGFzLmNvbYIL
cmVnaW9uNC5jb22CDHJlZ2lzdG9zLmNvbYITcmVtb3RlYXV0b21hdGVyLmNvbYIQ
cml0ZXBoYXJtYWN5LmNvbYIYcm9sbGluZ3RvYmFjY29vbmxpbmUuY29tggxzYWxh
emFycy5jb22CCnNmbGlja3MudG+CC3NoYWh2bmkuY29tghdzdGFyaHVibHVuYXJu
ZXd5ZWFyLmNvbYIUc3VwZXJib3dsZ2FtYmxlci5jb22CCnRhZ2dlbS5jb22CC3Rh
cmFkMnUuY29tggl0ZWtseS5jb22CE3RoZWNhc2hyZWdpc3Rlci5jb22CD3RoZXRp
bWVsZXNzLmNvbYIKdGluZXJzLmNvbYIMdHVuYWdhcmkuY29tghB1Y2xhZm9vdGJh
bGwuY29tggp2YWxlYW4uY29tggd2ZTcuY29tghV3aGljaGRpZXRpY2lhbi5jb20u
YXWCCndpa2lrYi5jb22CCnhpYW53dS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw
ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qf
NcSeHQmBJe20mQAAAYrbThZRAAAEAwBGMEQCICUkSZyhnZQ82CgjttCSqRT7r+WL
paTdxQmZG05noqXEAiBes5m55vvoL3VT3/7XVVAmj0CV0qDlHmVqXL+Ma0O+YQB2
AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABittOFkYAAAQDAEcw
RQIhAMs/73EttT0sF95INLQ7s46/lrDwTeMErWpqrlcm4WrbAiA7ZM6akOetVITx
9U646BO0x1hiXVf7Lvy7S3RxHFQVsDANBgkqhkiG9w0BAQsFAAOCAQEAmJEus3hO
KpZrIGaM7w70AeBb7UziyGq/tOwU2eTCssK+1BJtfCy5CQ+0/UWUoFt8+75q0+2D
7060Bh6V/rVIHkb5Z56YMUInFODk8Ddp18jexmOrWMNnQ8rOqstJJeVUaz8thbjd
9N8G8mfjRWP2A6DG1wzb/5r/ITWXwUbiGnYLml69WfXDCWMTkbB8uEcV9Bdys8a/
ju9K5L8dGVpBUpixJ/OolFtmXzIc5Y21WkBEJ0DWXPv3nCUiRfihHqPSHLQwhxtV
MtCdAzTw4e/GnzLrZ+6bvv+xtt5a0j7cQMjHnMNSdFwpaYOKIA289mmvmAwdSAtP
nB01HOXUwgz7QA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzmc+7dkfgIWrCCXELLVS
VvATVca3SXacNNFH2uCU/XE3sA4htWpBkFfXw8C3lQkYyED4inh84+59MrdOJpTh
avCfpp0kCfkKhC+3rzwv064bQw34HzCkW/IIv+08U+rYG4Ves75cLaBHHFDSp5mC
B/YWz/EcBeX9JqoF1yBk+5U/SAI2MFhpTCcCrsVh+4ATbXWZKMEQGUDXgq2yP4EY
7ADBb0qCRcL5wvo1vxSgw+YipAyhKXBr5ULNx8uGjdwlyAD73ER9uDLmDeO35JNN
r095PzPhPq00O1zJK9U9ecNJD359dxyPrU4JW0Ka7MiYC947CS0oSKhRCS8EK3xG
GNOLexWi85b9xFfxo4zmu6b5Ignz9wNKWmWDX9Vzk+PI1lVkTF7hFoGwqV0voZQD
gxPd2tB2HjpGU43AMz1uvtZLtsM9H8FT/JbMmWiG9D9g2cjhXwSAyEXYyTK4JNPi
dYwuy5QdIV919B/3vp567Vgg9gBMJCxM3GiSnPRDasOYMprndSEKKiK2I0NY1l3U
+NLi4fWqH/7HciZsCLMbS084mxBoV5p9sJ+Pvm9eE+3dGUMt2s7daHJ07AMC5c+f
kdyuA5+mYQ0CvZFcrjcSC5pAbt4YYvpCEkyE/c5V2VgAY1Sa564+K8jkHce0j0bH
F8VJo/mmLBDjacTwYM87T9kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278826248383434380251783844782645068316055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 09:20:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 09:20:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uclafootball.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842052014668209389495481949837951426502437656237002593645702829891046380844237461107202902818270968203692053542681699897920856572971728394170484705959213320448200900154912618895619381752001960315787776613361818366382359037997040567315287737917654359750455377254121372300644936354493066872867694108555704959153416226008319246051591707481077542758067084215766540688782979168616299362711654970844458493580500488846492054476263156354777085406755016380918424234727178579887121769975325419187000724762940290324839935437283997734805854928183114979557700838218069598148852827718259368233922966031155101610553764908675012306945311385152741030252708628290490268083037498935817045610515099724950163408928280641359650306525288404021506692661624953822983800920159049595231420402866690707094185700542787364191971998566393775176429348486754632650832204986689302003706298929088520011823418863974952039296967154263118605171004580781101747991070085141993639510708383843018134869772036625502415137549930244033721147381143669301519453923860063191973403115033701761174205380271190113847503527256325453662457678394513287197795637157673375865303953523573925759047607233969805755929429655374853636594433181127333535437095567262300172446012914861704709099481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11ca45cf1fe7a30a1d12a04112130994c0d76c1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1770 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4rapfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acrossthespiderverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctiontroubleshooter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autotraderservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baatcheetunofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beinin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardofpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boksitogorsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-ryanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.differn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubaicallgirls.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enhancement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ephya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finestpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeselector.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howare.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihurtpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internetworkengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurumu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuxue.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysharedpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palmasola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piangao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profitinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quntas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.region4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remoteautomater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ritepharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollingtobaccoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salazars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sflicks.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shahvni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starhublunarnewyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superbowlgambler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taggem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarad2u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecashregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetimeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tunagari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ve7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichdietician.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikikb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xianwu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4rapfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrossthespiderverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctiontroubleshooter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotraderservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baatcheetunofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardofpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boksitogorsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ryanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'differn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaicallgirls.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhancement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ephya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finestpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeselector.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howare.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihurtpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetworkengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurumu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuxue.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysharedpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmasola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piangao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profitinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quntas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoteautomater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritepharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollingtobaccoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salazars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sflicks.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shahvni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starhublunarnewyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbowlgambler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taggem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarad2u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecashregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetimeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunagari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uclafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 've7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichdietician.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikikb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianwu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018adb4e1651000004030046304402202524499ca19d943cd82823b6d092a914fbafe58ba5a4ddc509991b4e67a2a5c402205eb399b9e6fbe82f7553dffed75550268f4095d2a0e51e656a5cbf8c6b43be61007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018adb4e16460000040300473045022100cb3fef712db53d2c17de4834b43bb38ebf96b0f04de304ad6a6aae5726e16adb02203b64ce9a90e7ad5484f1f54eb8e813b4c758625d57fb2efcbb4b74711c5415b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0098912eb3784e2a966b20668cef0ef401e05bed4ce2c86abfb4ec14d9e4c2b2c2bed4126d7c2cb9090fb4fd4594a05b7cfbbe6ad3ed83ef4eb4061e95feb5481e46f9679e9831422714e0e4f03769d7c8dec663ab58c36743caceaacb4925e5546b3f2d85b8ddf4df06f267e34563f603a0c6d70cdbff9aff213597c146e21a760b9a5ebd59f5c309631391b07cb84715f41772b3c6bf8eef4ae4bf1d195a415298b127f3a8945b665f321ce58db55a40442740d65cfbf79c252245f8a11ea3d21cb430871b5532d09d0334f0e1efc69f32eb67ee9bbeffb1b6de5ad23edc40c8c79cc352745c2969838a200dbcf669af980c1d480b4f9c1d351ce5d4c20cfb40