light-city.club

Issued by R3

About this certificate

This digital certificate with serial number 03:5d:c2:63:e5:28:0b:53:61:d2:84:25:fd:63:f9:75:ba:cb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=light-city.club

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:c2:63:e5:28:0b:53:61:d2:84:25:fd:63:f9:75:ba:cb
Serial Number (int): 293241506835343716543951150874650750597835
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:90:83:2c:3a:26:2b:22:f3:1f:fd:d9:4e:5d:c5:f0:b4:5d:e8:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:f8:21:72:0d:c4:2d:35:6d:08:97:2a:cd:f5:56:db:43:d6:07:36
Fingerprint (sha256): 43:c4:c5:97:b5:b3:a9:d0:a5:e6:dc:fc:95:ff:c6:c4:5f:58:e1:8c:06:2f:4d:e3:63:6a:ec:cb:25:cf:f4:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate light-city.club

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for light-city.club

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a18.store
*.adjets.com
*.alharmainassociates.com
*.apple4theteacher.com
*.ashlefurniture.com
*.ashoksom.com
*.atikaboutique.com
*.baliforkids.com
*.bbclearnenglish.com
*.beabyte.com
*.bosleypropeciarx.com
*.brownsautosales.com
*.cexioinvestment.com
*.churcill.com
*.csmonitor.co
*.dh4567.com
*.dmv-writen-test.com
*.dubdiezdesign.ru
*.filmazone.co
*.flightadar24.com
*.gudangnomor.co
*.herogfx.com
*.hopelink.com
*.i0wp.com
*.indianriverkeeper.org
*.iwdbb.co
*.janiejack.com
*.jizzmobi.com
*.light-city.club
*.longclipstube.com
*.mackarbag.com
*.molerski.com
*.myobsaidwhat.com
*.myoldfords.com
*.myziphius.com
*.oc0-video.xyz
*.phx-obgyn.md
*.plutojournals.org
*.pontoslivelo2.me
*.sapporo-black-white.com
*.selu8888.xyz
*.sixgod.shop
*.spotifyup.me
*.stayawesome.co
*.sunjp.com
*.the-fanboy-perspective.com
*.tonyhoangle.com
*.uy9.co
*.wwwrxmedicareplans.com
*.yosoyelrealoviedo.com
a18.store
adjets.com
alharmainassociates.com
apple4theteacher.com
ashlefurniture.com
ashoksom.com
atikaboutique.com
baliforkids.com
bbclearnenglish.com
beabyte.com
bosleypropeciarx.com
brownsautosales.com
cexioinvestment.com
churcill.com
csmonitor.co
dh4567.com
dmv-writen-test.com
dubdiezdesign.ru
filmazone.co
flightadar24.com
gudangnomor.co
herogfx.com
hopelink.com
i0wp.com
indianriverkeeper.org
iwdbb.co
janiejack.com
jizzmobi.com
light-city.club
longclipstube.com
mackarbag.com
molerski.com
myobsaidwhat.com
myoldfords.com
myziphius.com
oc0-video.xyz
phx-obgyn.md
plutojournals.org
pontoslivelo2.me
sapporo-black-white.com
selu8888.xyz
sixgod.shop
spotifyup.me
stayawesome.co
sunjp.com
the-fanboy-perspective.com
tonyhoangle.com
uy9.co
wwwrxmedicareplans.com
yosoyelrealoviedo.com

Other certificates including the domain name light-city.club

(limited to 100 certificates)
getgrounded.net
light-city.club
light-city.club
light-city.club
light-city.club
tonyhoangle.com
light-city.club
getgrounded.net
sycnrectification.com
light-city.club
light-city.club
light-city.club

Certificate

The complete raw certificate details for light-city.club in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMzjCCC7agAwIBAgISA13CY+UoC1Nh0oQl/WP5dbrLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDUxODA3MzdaFw0yNDA0MDQxODA3MzZaMBoxGDAWBgNVBAMT
D2xpZ2h0LWNpdHkuY2x1YjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
APENMZMdzDDRdAJcWAszXq4vXpzkltLWPD5jO+vi7/eTQzwESMU/Ci9QFAPgcjPA
TqFRpDDzkd7kGouZXQCw2TEObkvL4kw/pqFO/mD3AbZ+yFVE7XoU9Au7RH7FCx39
N1TR4mHjGAg9IAnIIzVQ9OgcryK4obf8wk4U6YRde5m31ohb5KgcncF/tdMgokdC
9xA58Im3B2PupNB4j0/mGLe9Ecey89lNcl8YHVfOvwmGQmMUEoGdpmqzNEWh9WJ5
tPdGeNDMiVoXmn68kf3Fg1t5vzLlfqlkFym8b+DgAFfAYv+GitN6twskUVd8gKYR
oS/4+k8GcQfVJ3XfxAOlgbupyMmJwHBkZQr3GqtgQIpYRnkV1DfUCQ0/TPMzreT9
+iVL9/zCGAiHfIzSg827LTRK6Th8Dmx/RxvMWckssWbh9E3/CPiBzT11AWz4i1UO
WrooyYZ0IkoZHmzvARxrH66+Mn4GzH9mcutL69ebELbq+x0D6p9wnH1lhMJKiJxY
Rvw90qhoXbgAyB6cqc83QOXw6yTB8bObL6Co6o0UDdrqCm78TKjmf0ud+td+EPE7
abcmVAvX1nn0tVpmdhnHUy+nMY2zMDiLN/MyBR+O8vt7vkoahsJ4sNF0WdCBl0Xv
usy0wEXYSKyXzCwLh+hvSVzp7mIs8cbYI8wAIXtbuB77AgMBAAGjggj0MIII8DAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFHKQgyw6Jisi8x/92U5dxfC0XejxMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMIIG+wYDVR0RBIIG8jCCBu6CCyouYTE4LnN0b3Jl
ggwqLmFkamV0cy5jb22CGSouYWxoYXJtYWluYXNzb2NpYXRlcy5jb22CFiouYXBw
bGU0dGhldGVhY2hlci5jb22CFCouYXNobGVmdXJuaXR1cmUuY29tgg4qLmFzaG9r
c29tLmNvbYITKi5hdGlrYWJvdXRpcXVlLmNvbYIRKi5iYWxpZm9ya2lkcy5jb22C
FSouYmJjbGVhcm5lbmdsaXNoLmNvbYINKi5iZWFieXRlLmNvbYIWKi5ib3NsZXlw
cm9wZWNpYXJ4LmNvbYIVKi5icm93bnNhdXRvc2FsZXMuY29tghUqLmNleGlvaW52
ZXN0bWVudC5jb22CDiouY2h1cmNpbGwuY29tgg4qLmNzbW9uaXRvci5jb4IMKi5k
aDQ1NjcuY29tghUqLmRtdi13cml0ZW4tdGVzdC5jb22CEiouZHViZGllemRlc2ln
bi5ydYIOKi5maWxtYXpvbmUuY2+CEiouZmxpZ2h0YWRhcjI0LmNvbYIQKi5ndWRh
bmdub21vci5jb4INKi5oZXJvZ2Z4LmNvbYIOKi5ob3BlbGluay5jb22CCiouaTB3
cC5jb22CFyouaW5kaWFucml2ZXJrZWVwZXIub3JnggoqLml3ZGJiLmNvgg8qLmph
bmllamFjay5jb22CDiouaml6em1vYmkuY29tghEqLmxpZ2h0LWNpdHkuY2x1YoIT
Ki5sb25nY2xpcHN0dWJlLmNvbYIPKi5tYWNrYXJiYWcuY29tgg4qLm1vbGVyc2tp
LmNvbYISKi5teW9ic2FpZHdoYXQuY29tghAqLm15b2xkZm9yZHMuY29tgg8qLm15
emlwaGl1cy5jb22CDyoub2MwLXZpZGVvLnh5eoIOKi5waHgtb2JneW4ubWSCEyou
cGx1dG9qb3VybmFscy5vcmeCEioucG9udG9zbGl2ZWxvMi5tZYIZKi5zYXBwb3Jv
LWJsYWNrLXdoaXRlLmNvbYIOKi5zZWx1ODg4OC54eXqCDSouc2l4Z29kLnNob3CC
Diouc3BvdGlmeXVwLm1lghAqLnN0YXlhd2Vzb21lLmNvggsqLnN1bmpwLmNvbYIc
Ki50aGUtZmFuYm95LXBlcnNwZWN0aXZlLmNvbYIRKi50b255aG9hbmdsZS5jb22C
CCoudXk5LmNvghgqLnd3d3J4bWVkaWNhcmVwbGFucy5jb22CFyoueW9zb3llbHJl
YWxvdmllZG8uY29tgglhMTguc3RvcmWCCmFkamV0cy5jb22CF2FsaGFybWFpbmFz
c29jaWF0ZXMuY29tghRhcHBsZTR0aGV0ZWFjaGVyLmNvbYISYXNobGVmdXJuaXR1
cmUuY29tggxhc2hva3NvbS5jb22CEWF0aWthYm91dGlxdWUuY29tgg9iYWxpZm9y
a2lkcy5jb22CE2JiY2xlYXJuZW5nbGlzaC5jb22CC2JlYWJ5dGUuY29tghRib3Ns
ZXlwcm9wZWNpYXJ4LmNvbYITYnJvd25zYXV0b3NhbGVzLmNvbYITY2V4aW9pbnZl
c3RtZW50LmNvbYIMY2h1cmNpbGwuY29tggxjc21vbml0b3IuY2+CCmRoNDU2Ny5j
b22CE2Rtdi13cml0ZW4tdGVzdC5jb22CEGR1YmRpZXpkZXNpZ24ucnWCDGZpbG1h
em9uZS5jb4IQZmxpZ2h0YWRhcjI0LmNvbYIOZ3VkYW5nbm9tb3IuY2+CC2hlcm9n
ZnguY29tggxob3BlbGluay5jb22CCGkwd3AuY29tghVpbmRpYW5yaXZlcmtlZXBl
ci5vcmeCCGl3ZGJiLmNvgg1qYW5pZWphY2suY29tggxqaXp6bW9iaS5jb22CD2xp
Z2h0LWNpdHkuY2x1YoIRbG9uZ2NsaXBzdHViZS5jb22CDW1hY2thcmJhZy5jb22C
DG1vbGVyc2tpLmNvbYIQbXlvYnNhaWR3aGF0LmNvbYIObXlvbGRmb3Jkcy5jb22C
DW15emlwaGl1cy5jb22CDW9jMC12aWRlby54eXqCDHBoeC1vYmd5bi5tZIIRcGx1
dG9qb3VybmFscy5vcmeCEHBvbnRvc2xpdmVsbzIubWWCF3NhcHBvcm8tYmxhY2st
d2hpdGUuY29tggxzZWx1ODg4OC54eXqCC3NpeGdvZC5zaG9wggxzcG90aWZ5dXAu
bWWCDnN0YXlhd2Vzb21lLmNvgglzdW5qcC5jb22CGnRoZS1mYW5ib3ktcGVyc3Bl
Y3RpdmUuY29tgg90b255aG9hbmdsZS5jb22CBnV5OS5jb4IWd3d3cnhtZWRpY2Fy
ZXBsYW5zLmNvbYIVeW9zb3llbHJlYWxvdmllZG8uY29tMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGM2wYUiQAABAMARjBEAiAeu2YmSD1VVqyrCFJf
+iyJN8nqfpgo5MvA7wO5fK0LmQIgPNgkX0lNuNVdV/TVKYL6Bi/e15BDVoJ6uUDA
0oxrXQ0AdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYzbBhaG
AAAEAwBIMEYCIQCyTIa/9RBl9CW8zeUcDy733wgxdz8+Z+Wt6NL+Kly4/AIhAMlT
tlzkX1XqSboD26YMWR4Gv5pc/b5yPeppK7WN93icMA0GCSqGSIb3DQEBCwUAA4IB
AQBLZ7nZTfUyPzZrQgnrhpYqbwSAVUeUPo5oCcSjwUSq8Z29XyErNHVHQllncFAx
YwJomsP92lIts3mOjvLGUe2reL6vYIdcCS21VS4Ji4FN2F8Gak+NXgPDOwdypLBM
IAESVGJ/EXJvJbxDWf3B5p7rSp5pV5PUsGcfqJm1R+SDzEJj1vU88+tgvH1S25ZG
UAu1gfo3+kyNvQZVE/lH1yJ68qXIcnQ45pdWVDbOyVI2OGUxbn0EpmG2XASNIlcB
KE25BollrxhTVaO+bEOqyxNgjddnAe9gx127lDJDfnLUiQUuoB6U6bhcen+QpyNk
vwwlS+nREQMYASbjBlzcRZNe
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293241506835343716543951150874650750597835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 18:07:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 18:07:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'light-city.club'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 983404475862832531831419263580635286319275540762973779303436862475736805824492977308560682816220604713180701237388557570900923436832428317873015579268662668952007477552447225640053035758427962244816411333138594091008427905195056150347152284193457161894947168509822403464153694140307883410794203810094345587268530386547982169951173576973765597228757943208689821979339290256209830593680483370724835810631916708192422565088122416166576689727778573961231932861788334300051538227072359825337921986240791551507576181459705261276670516112633414506309881273766621854744828359582657479259628981384821150697854123484564136363586229531240574665968069970166644190884899715967185150588613867187022413811289406966550534040896312720473563415757420174442137043581634309938870297619566824982029139255845225087939681706761537907373422286464851866809196393104632639331848860068059383623547645369257534418403073329313535564588627857582729619810304932181110437993618551151942756071366426510251779746946119940676220281705984677565944644126079207111956728708522332265215741445145391107824590088692895952723659383829839939024436935375702382460965689709262148453444187976965276418514569964452161198033683978730971068425616891728370459598363202423921720172283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7290832c3a262b22f31ffdd94e5dc5f0b45de8f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1778 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a18.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adjets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alharmainassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apple4theteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashlefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashoksom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atikaboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baliforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbclearnenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beabyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bosleypropeciarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brownsautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cexioinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.churcill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csmonitor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dh4567.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmv-writen-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubdiezdesign.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmazone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flightadar24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gudangnomor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herogfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopelink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i0wp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianriverkeeper.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwdbb.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janiejack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jizzmobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.light-city.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longclipstube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackarbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.molerski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myobsaidwhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myoldfords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myziphius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oc0-video.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phx-obgyn.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plutojournals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pontoslivelo2.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sapporo-black-white.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selu8888.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixgod.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotifyup.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stayawesome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-fanboy-perspective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonyhoangle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uy9.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwrxmedicareplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yosoyelrealoviedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a18.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adjets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alharmainassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple4theteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashoksom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atikaboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baliforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbclearnenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beabyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosleypropeciarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cexioinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churcill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csmonitor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dh4567.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmv-writen-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubdiezdesign.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmazone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightadar24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gudangnomor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herogfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopelink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i0wp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianriverkeeper.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwdbb.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janiejack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jizzmobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'light-city.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longclipstube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackarbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molerski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myobsaidwhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myoldfords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myziphius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc0-video.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phx-obgyn.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plutojournals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pontoslivelo2.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapporo-black-white.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selu8888.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixgod.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotifyup.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayawesome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunjp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-fanboy-perspective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonyhoangle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uy9.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwrxmedicareplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yosoyelrealoviedo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cdb061489000004030046304402201ebb6626483d5556acab08525ffa2c8937c9ea7e9828e4cbc0ef03b97cad0b9902203cd8245f494db8d55d57f4d52982fa062fded7904356827ab940c0d28c6b5d0d0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cdb0616860000040300483046022100b24c86bff51065f425bccde51c0f2ef7df0831773f3e67e5ade8d2fe2a5cb8fc022100c953b65ce45f55ea49ba03dba60c591e06bf9a5cfdbe723dea692bb58df7789c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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