maspion.group

Issued by R3

About this certificate

This digital certificate with serial number 04:9e:78:aa:cd:4d:0e:9d:75:89:1d:94:a4:96:31:bc:a4:03 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=maspion.group

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:78:aa:cd:4d:0e:9d:75:89:1d:94:a4:96:31:bc:a4:03
Serial Number (int): 402374151914508465047882276190926946477059
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:18:38:d8:c1:e4:27:ad:c3:13:92:18:cb:60:3d:b6:fe:a4:02:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:df:fa:ac:4b:55:d8:20:16:64:d1:24:e7:f4:ff:af:bb:f1:7e:0e
Fingerprint (sha256): 3f:d5:a3:26:b7:b4:ca:76:d6:1f:86:54:69:2b:7e:46:f1:4c:7e:31:23:03:c8:e6:8c:52:f2:61:02:16:39:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate maspion.group

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maspion.group

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.6502.com
*.antitts.co
*.bapak.asia
*.beautyoflife.com
*.bioliefprints.com
*.camping-lespins.net
*.clothin.com
*.cloudgym.com.au
*.contexto.com
*.cschartertours.com
*.daisuki.com
*.defences.net
*.fancyflyers.com
*.fietsenkleding.com
*.frqn.com
*.gmailhangout.com
*.habiaunavez.com
*.handem.com
*.hangos.com
*.hongkan.com
*.houblon.com
*.how-to-root.com
*.ioane.com
*.ishirts.com
*.jovey.com
*.kintzer.com
*.kitchenary.com
*.lagransangre.com
*.lajkovi.com
*.lakuna.com
*.marrada.com
*.maspion.group
*.maxkend.com
*.meskin.com
*.mobiloabs.com
*.obfirefighting.com
*.ohanes.com
*.ouisi.com
*.rmaarp.com
*.rujiao.com
*.sakuratl.com
*.tenancingo.com
*.thamer.com
*.theartofsciences.com
*.tuen.net
*.urmj.com
*.watchcars.com
*.widercircle.org
*.xxhu12.com
*.ypiix.com
6502.com
antitts.co
bapak.asia
beautyoflife.com
bioliefprints.com
camping-lespins.net
clothin.com
cloudgym.com.au
contexto.com
cschartertours.com
daisuki.com
defences.net
fancyflyers.com
fietsenkleding.com
frqn.com
gmailhangout.com
habiaunavez.com
handem.com
hangos.com
hongkan.com
houblon.com
how-to-root.com
ioane.com
ishirts.com
jovey.com
kintzer.com
kitchenary.com
lagransangre.com
lajkovi.com
lakuna.com
marrada.com
maspion.group
maxkend.com
meskin.com
mobiloabs.com
obfirefighting.com
ohanes.com
ouisi.com
rmaarp.com
rujiao.com
sakuratl.com
tenancingo.com
thamer.com
theartofsciences.com
tuen.net
urmj.com
watchcars.com
widercircle.org
xxhu12.com
ypiix.com

Other certificates including the domain name maspion.group

(limited to 100 certificates)
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
maspion.group
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
maspion.group
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
maspion.group
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com
sni40980.cloudflaressl.com

Certificate

The complete raw certificate details for maspion.group in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL0zCCCrugAwIBAgISBJ54qs1NDp11iR2UpJYxvKQDMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTUwOTE3MTZaFw0yMzEyMTQwOTE3MTVaMBgxFjAUBgNVBAMT
DW1hc3Bpb24uZ3JvdXAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC4
OpvtBOgY7CSNA6AeeR2FvKyqhiCwaUqfTUkxyOHa7toG4wSzg8sm8qGOCqYvbb9H
fOrZ9SRbWnWVByErIBhaF0s3JUfxdS+8hA9dijjK6uJUA9+8UmxrmhlD5iAPv7Qn
gbES6oer2lwC6Z32ueQcd/4RhYf8xGQFhiAM229vAN9tB4ttxYg9JWt/ld8Ndu+N
NTjVQkmwsdX58bWYDz3ZltfspZrIUjkkItz/O/z8oQ44X5aBxkE0A8ODSgQawhxg
ukhwVxTDf25C7MFkAXT1YOvEM0xjmsLsTBSVZ7vdB++r/8XXqfTweYRIkUXSqNbb
PHiU5Oeiye/I4XzpHE7QjKK0dU4FGms9NEqYSjEBYyk/yC204yDIfNNt2QQl+9xb
pg/EbOUZIffcZ5RhYtnaAbuZ4MnXVMQENguRVgYw1zHlbaaRmPm4kN2GcFF9wi5k
1z+EkHnrwXQpmQxJVtv/+vp5LbmszPGLatvWcOjgN0jmjrRHrqOLnxzQl7C2uW/f
7lF0OLannEH3VZGyYuIBj9weBNrfvl7IeOkPAuE5m2GiSLDgKrda3/sJPyGbOLBA
h9HejEDnu3uOhWAsqtt5yD5kBBnBnQYS2gurF/WSUCQKOH9vgSMUHrzLy6f1wV4B
9c37vpkgoHtIJl04TYDDUwY2jR74q/LQ4XxCOCtQQwIDAQABo4IH+zCCB/cwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBQAGDjYweQnrcMTkhjLYD22/qQCSDAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBgMGA1UdEQSCBfowggX2ggoqLjY1MDIuY29tggwq
LmFudGl0dHMuY2+CDCouYmFwYWsuYXNpYYISKi5iZWF1dHlvZmxpZmUuY29tghMq
LmJpb2xpZWZwcmludHMuY29tghUqLmNhbXBpbmctbGVzcGlucy5uZXSCDSouY2xv
dGhpbi5jb22CESouY2xvdWRneW0uY29tLmF1gg4qLmNvbnRleHRvLmNvbYIUKi5j
c2NoYXJ0ZXJ0b3Vycy5jb22CDSouZGFpc3VraS5jb22CDiouZGVmZW5jZXMubmV0
ghEqLmZhbmN5Zmx5ZXJzLmNvbYIUKi5maWV0c2Vua2xlZGluZy5jb22CCiouZnJx
bi5jb22CEiouZ21haWxoYW5nb3V0LmNvbYIRKi5oYWJpYXVuYXZlei5jb22CDCou
aGFuZGVtLmNvbYIMKi5oYW5nb3MuY29tgg0qLmhvbmdrYW4uY29tgg0qLmhvdWJs
b24uY29tghEqLmhvdy10by1yb290LmNvbYILKi5pb2FuZS5jb22CDSouaXNoaXJ0
cy5jb22CCyouam92ZXkuY29tgg0qLmtpbnR6ZXIuY29tghAqLmtpdGNoZW5hcnku
Y29tghIqLmxhZ3JhbnNhbmdyZS5jb22CDSoubGFqa292aS5jb22CDCoubGFrdW5h
LmNvbYINKi5tYXJyYWRhLmNvbYIPKi5tYXNwaW9uLmdyb3Vwgg0qLm1heGtlbmQu
Y29tggwqLm1lc2tpbi5jb22CDyoubW9iaWxvYWJzLmNvbYIUKi5vYmZpcmVmaWdo
dGluZy5jb22CDCoub2hhbmVzLmNvbYILKi5vdWlzaS5jb22CDCoucm1hYXJwLmNv
bYIMKi5ydWppYW8uY29tgg4qLnNha3VyYXRsLmNvbYIQKi50ZW5hbmNpbmdvLmNv
bYIMKi50aGFtZXIuY29tghYqLnRoZWFydG9mc2NpZW5jZXMuY29tggoqLnR1ZW4u
bmV0ggoqLnVybWouY29tgg8qLndhdGNoY2Fycy5jb22CESoud2lkZXJjaXJjbGUu
b3JnggwqLnh4aHUxMi5jb22CCyoueXBpaXguY29tggg2NTAyLmNvbYIKYW50aXR0
cy5jb4IKYmFwYWsuYXNpYYIQYmVhdXR5b2ZsaWZlLmNvbYIRYmlvbGllZnByaW50
cy5jb22CE2NhbXBpbmctbGVzcGlucy5uZXSCC2Nsb3RoaW4uY29tgg9jbG91ZGd5
bS5jb20uYXWCDGNvbnRleHRvLmNvbYISY3NjaGFydGVydG91cnMuY29tggtkYWlz
dWtpLmNvbYIMZGVmZW5jZXMubmV0gg9mYW5jeWZseWVycy5jb22CEmZpZXRzZW5r
bGVkaW5nLmNvbYIIZnJxbi5jb22CEGdtYWlsaGFuZ291dC5jb22CD2hhYmlhdW5h
dmV6LmNvbYIKaGFuZGVtLmNvbYIKaGFuZ29zLmNvbYILaG9uZ2thbi5jb22CC2hv
dWJsb24uY29tgg9ob3ctdG8tcm9vdC5jb22CCWlvYW5lLmNvbYILaXNoaXJ0cy5j
b22CCWpvdmV5LmNvbYILa2ludHplci5jb22CDmtpdGNoZW5hcnkuY29tghBsYWdy
YW5zYW5ncmUuY29tggtsYWprb3ZpLmNvbYIKbGFrdW5hLmNvbYILbWFycmFkYS5j
b22CDW1hc3Bpb24uZ3JvdXCCC21heGtlbmQuY29tggptZXNraW4uY29tgg1tb2Jp
bG9hYnMuY29tghJvYmZpcmVmaWdodGluZy5jb22CCm9oYW5lcy5jb22CCW91aXNp
LmNvbYIKcm1hYXJwLmNvbYIKcnVqaWFvLmNvbYIMc2FrdXJhdGwuY29tgg50ZW5h
bmNpbmdvLmNvbYIKdGhhbWVyLmNvbYIUdGhlYXJ0b2ZzY2llbmNlcy5jb22CCHR1
ZW4ubmV0ggh1cm1qLmNvbYINd2F0Y2hjYXJzLmNvbYIPd2lkZXJjaXJjbGUub3Jn
ggp4eGh1MTIuY29tggl5cGlpeC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir
wTpXo1LrUgAAAYqYWEhiAAAEAwBGMEQCIFIVYkelsPm7Z+ecU3T0mbIyIznZIqNm
3yjmjmJ5GgIoAiBsCnMbk5u5Ndvul5UNnaGsauUSQgkIvbYjFygR/tTYDAB2AK33
vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABiphYSJIAAAQDAEcwRQIh
AKSIEpHfbFJTNJzZh2oIQX57qTEhOk2bYCytyrSqbob+AiAzWrTDfE/uwcrBnj3H
ZiwdN6sledAriW0+ad5hYYMngzANBgkqhkiG9w0BAQsFAAOCAQEAjyc4YE6khMTU
MlhdbRxwYSqaJfmE66D9PmEC0yTrJWTRwhY7CNq9YrFq4iUbW3EtCsw1BJLf+ujX
TM14clKsH9ulr9ifCXXKazqltZRHxnHyPGMmNqdkNh5oEz83bKBDNyGpkWzaY6x7
s+IDxIv9wOkCL1Bzt87yK5HnqSs8ZLWdCyPLTu1i3HuGAHnVpGxYRKbhQ5y1Y1xF
DC6+KNOfkYLhFedfs18m/8h+ov7IJWI/Oq+9JVMBkgh87wk2Ucg+zl2QzB3HGILu
YR+jba3IXrVjgjX/2wDpr0KjSjkr3rUOwVsnkm6FYI5/PA7d7zp+jEo+LEwt/tue
So6o8Q0uFg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402374151914508465047882276190926946477059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 09:17:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 09:17:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maspion.group'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751588509326188145809632850664319163116016942252863959070876262718577819565225975667757023122791069324453678675842846843771924801884541808545998053277041067985579533265685139802502120927735803589119930983452146058677729275799567416716852669363015809660316074091923551756425127265431945491882930812731215960171235217692073316180586847098686172923383413122119966828569428328576558730672688357456455029544001260189782557449477482972599415481387709232573399689088257368504661933754531645170447341217164294196652124780015459912359156665906506197698798416147722989550078600974145110734458289778610395114010690782487643912343433747273498984245786067517956854406666177917013096429523288671547031888944300499787268758968903265282981393138225128107514495760779956876190563140780777340923869500720065647805885035819794165688495889344617581174183006274257435045625580910509141016243192972930851743253854637178507883387986795370560470191066489234806906503228637415168017919918884796698315381024965845261449433825880611503139419573963902501728246990158367014532033539297960948417189254507199772704592314598571215014844954139658606483005170340647340303004018400151821211644742502983721012045718077461370303589148741058530904886737844266873112973379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							001838d8c1e427adc3139218cb603db6fea40248
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1530 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6502.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antitts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bapak.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautyoflife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioliefprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camping-lespins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clothin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudgym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cschartertours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daisuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defences.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fancyflyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fietsenkleding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frqn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmailhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habiaunavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hangos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongkan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houblon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.how-to-root.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ioane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ishirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jovey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kintzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchenary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagransangre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lajkovi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakuna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marrada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maspion.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxkend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobiloabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obfirefighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ouisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rmaarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rujiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sakuratl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenancingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theartofsciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.widercircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxhu12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ypiix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6502.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antitts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bapak.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyoflife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioliefprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camping-lespins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudgym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cschartertours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daisuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defences.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancyflyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fietsenkleding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frqn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmailhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habiaunavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongkan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houblon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'how-to-root.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ioane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jovey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kintzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagransangre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajkovi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakuna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marrada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maspion.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxkend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiloabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obfirefighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmaarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rujiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakuratl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenancingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartofsciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widercircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxhu12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ypiix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a985848620000040300463044022052156247a5b0f9bb67e79c5374f499b2322339d922a366df28e68e62791a022802206c0a731b939bb935dbee97950d9da1ac6ae512420908bdb623172811fed4d80c007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a985848920000040300473045022100a4881291df6c5253349cd9876a08417e7ba931213a4d9b602cadcab4aa6e86fe0220335ab4c37c4feec1cac19e3dc7662c1d37ab2579d02b896d3e69de6161832783
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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