nutriendovida.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b9:a5:f0:ce:a6:a9:7f:db:15:90:c6:fd:27:cc:20:a8:dd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nutriendovida.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:a5:f0:ce:a6:a9:7f:db:15:90:c6:fd:27:cc:20:a8:dd
Serial Number (int): 411621954569345872669326835295189196646621
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:23:e1:e0:80:ab:4a:c5:a1:29:3a:cc:0f:d1:97:67:6a:d1:b9:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:7b:52:c4:22:34:a8:f0:11:d4:6a:ea:d2:91:34:a8:bc:bc:69:81
Fingerprint (sha256): 49:b8:d2:6b:b7:ff:26:ec:04:b2:01:b1:c3:03:39:e9:b7:d0:e8:b3:d5:98:ce:cb:2b:38:94:b5:76:f7:1e:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nutriendovida.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nutriendovida.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123moovies.net
*.13xiaoshuo.net
*.allamericanline.com
*.bcanaheimllc.com
*.beautyheal.org
*.betheasda.net
*.bikaui.me
*.butyourefrench.com
*.cheapdressesonlinestores.com
*.combclip.com
*.devstopia.net
*.discoball.com.au
*.divxtotal.online
*.earn-bbaf.be
*.engfound.com
*.gurututorku.com
*.hippomoon.com
*.historiapojazdu.com
*.irresistible-revolution.com
*.juvehaircare.com
*.mangatou.com
*.marvelrealtor.com
*.morningtrace.com
*.myphamstarlight.com
*.northwestdoorandsupply.com
*.nutriendovida.com
*.ontvsflix.com
*.pachimondvd.com
*.patronuscoin.org
*.pensionmarion.com
*.pinkyshotbox.com
*.play-slitherio.com
*.rareburg.com
*.relocationuy.com
*.restaurant-lembellie.com
*.rmelectronicsonline.com
*.ryoshuu.com
*.sse-cmm.org
*.thekushnyc.com
*.thethrillofspeed.com
*.uncoiffeur.com
*.underarmou.de
*.univisionbd.net
*.usatoplawyer.com
*.valleyviewparkestates.com
*.video-candy.com
*.voz.com.au
*.wesdistribuidora.com.br
*.wikiatalanta.com
*.wvtheatreplayersnh.org
123moovies.net
13xiaoshuo.net
allamericanline.com
bcanaheimllc.com
beautyheal.org
betheasda.net
bikaui.me
butyourefrench.com
cheapdressesonlinestores.com
combclip.com
devstopia.net
discoball.com.au
divxtotal.online
earn-bbaf.be
engfound.com
gurututorku.com
hippomoon.com
historiapojazdu.com
irresistible-revolution.com
juvehaircare.com
mangatou.com
marvelrealtor.com
morningtrace.com
myphamstarlight.com
northwestdoorandsupply.com
nutriendovida.com
ontvsflix.com
pachimondvd.com
patronuscoin.org
pensionmarion.com
pinkyshotbox.com
play-slitherio.com
rareburg.com
relocationuy.com
restaurant-lembellie.com
rmelectronicsonline.com
ryoshuu.com
sse-cmm.org
thekushnyc.com
thethrillofspeed.com
uncoiffeur.com
underarmou.de
univisionbd.net
usatoplawyer.com
valleyviewparkestates.com
video-candy.com
voz.com.au
wesdistribuidora.com.br
wikiatalanta.com
wvtheatreplayersnh.org

Other certificates including the domain name nutriendovida.com

(limited to 100 certificates)
nutriendovida.com
nutriendovida.com
3242.au
nutriendovida.com
svkdttravels.in
nutriendovida.com
nutriendovida.com
nutriendovida.com
3242.au

Certificate

The complete raw certificate details for nutriendovida.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINcjCCDFqgAwIBAgISBLml8M6mqX/bFZDG/SfMIKjdMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMTcxOTEyNTdaFw0yNDA1MTcxOTEyNTZaMBwxGjAYBgNVBAMT
EW51dHJpZW5kb3ZpZGEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAv/cnwoY5rchkQJxRTCIIFpCvLNgs5EmW0C+81M3JwUnMoaDovk4wekUuydho
wvCr0LkI7obqfeQOE2anYrEM5eezZPJ/THtkZaYpAPo99k+R8QkMp8gZ6kc/KU6C
O98lLTnMim0YHkVxhLnj/JmhUkQrbjmPL10tiHJaCYeVuGF5q3h/EiDiU0rOYcST
61veqXkH30FW3gGhXp/FeZ2OnVJgURGsEobsRgxs9OUTershBquqhI36djHS3kan
9fyx4Bc8NJu3b5p4q6Wo6RB4DskrA8FnfLgxPRO3mrFgl+XhvCmns5ZKBEFBlYsM
kd+R6XNYxgwBD20ta7GH9kCAcluvJf3ExZXRRFWab+KwrvgDqDOa6WXmgxKyN+Ml
n8E/NfOEJDjUuHJl363PNdGotUT3fQts8+EGlfw9GU+plb9nkHr55Hjl2xdmwmyB
gU5SLhuLdtwwbeED6hsW26cd9lMtdcmGksRRk3o/0Rnxu3jQECW9xyQGxAj+Rywt
cYIxZqm3MCqzPMWNXqTAs2K1dHMs8rO4v9J1APrr2RWTOFE0o35wPZdXgUbVuXGu
nUPJUKrRM37OKrOZV/urtmPIFw9gx5ENuIPlJcu9vNGMOTQyo1tbSCjXHrQ2pBo7
67lUVAP0nLolR/FVdFXpqRm1ypRN0E2y65IqQ0QD+/kGi5MCAwEAAaOCCZYwggmS
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUMCPh4ICrSsWhKTrMD9GXZ2rRua0wHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggedBgNVHREEggeUMIIHkIIQKi4xMjNtb292
aWVzLm5ldIIQKi4xM3hpYW9zaHVvLm5ldIIVKi5hbGxhbWVyaWNhbmxpbmUuY29t
ghIqLmJjYW5haGVpbWxsYy5jb22CECouYmVhdXR5aGVhbC5vcmeCDyouYmV0aGVh
c2RhLm5ldIILKi5iaWthdWkubWWCFCouYnV0eW91cmVmcmVuY2guY29tgh4qLmNo
ZWFwZHJlc3Nlc29ubGluZXN0b3Jlcy5jb22CDiouY29tYmNsaXAuY29tgg8qLmRl
dnN0b3BpYS5uZXSCEiouZGlzY29iYWxsLmNvbS5hdYISKi5kaXZ4dG90YWwub25s
aW5lgg4qLmVhcm4tYmJhZi5iZYIOKi5lbmdmb3VuZC5jb22CESouZ3VydXR1dG9y
a3UuY29tgg8qLmhpcHBvbW9vbi5jb22CFSouaGlzdG9yaWFwb2phemR1LmNvbYId
Ki5pcnJlc2lzdGlibGUtcmV2b2x1dGlvbi5jb22CEiouanV2ZWhhaXJjYXJlLmNv
bYIOKi5tYW5nYXRvdS5jb22CEyoubWFydmVscmVhbHRvci5jb22CEioubW9ybmlu
Z3RyYWNlLmNvbYIVKi5teXBoYW1zdGFybGlnaHQuY29tghwqLm5vcnRod2VzdGRv
b3JhbmRzdXBwbHkuY29tghMqLm51dHJpZW5kb3ZpZGEuY29tgg8qLm9udHZzZmxp
eC5jb22CESoucGFjaGltb25kdmQuY29tghIqLnBhdHJvbnVzY29pbi5vcmeCEyou
cGVuc2lvbm1hcmlvbi5jb22CEioucGlua3lzaG90Ym94LmNvbYIUKi5wbGF5LXNs
aXRoZXJpby5jb22CDioucmFyZWJ1cmcuY29tghIqLnJlbG9jYXRpb251eS5jb22C
GioucmVzdGF1cmFudC1sZW1iZWxsaWUuY29tghkqLnJtZWxlY3Ryb25pY3Nvbmxp
bmUuY29tgg0qLnJ5b3NodXUuY29tgg0qLnNzZS1jbW0ub3JnghAqLnRoZWt1c2hu
eWMuY29tghYqLnRoZXRocmlsbG9mc3BlZWQuY29tghAqLnVuY29pZmZldXIuY29t
gg8qLnVuZGVyYXJtb3UuZGWCESoudW5pdmlzaW9uYmQubmV0ghIqLnVzYXRvcGxh
d3llci5jb22CGyoudmFsbGV5dmlld3Bhcmtlc3RhdGVzLmNvbYIRKi52aWRlby1j
YW5keS5jb22CDCoudm96LmNvbS5hdYIZKi53ZXNkaXN0cmlidWlkb3JhLmNvbS5i
coISKi53aWtpYXRhbGFudGEuY29tghgqLnd2dGhlYXRyZXBsYXllcnNuaC5vcmeC
DjEyM21vb3ZpZXMubmV0gg4xM3hpYW9zaHVvLm5ldIITYWxsYW1lcmljYW5saW5l
LmNvbYIQYmNhbmFoZWltbGxjLmNvbYIOYmVhdXR5aGVhbC5vcmeCDWJldGhlYXNk
YS5uZXSCCWJpa2F1aS5tZYISYnV0eW91cmVmcmVuY2guY29tghxjaGVhcGRyZXNz
ZXNvbmxpbmVzdG9yZXMuY29tggxjb21iY2xpcC5jb22CDWRldnN0b3BpYS5uZXSC
EGRpc2NvYmFsbC5jb20uYXWCEGRpdnh0b3RhbC5vbmxpbmWCDGVhcm4tYmJhZi5i
ZYIMZW5nZm91bmQuY29tgg9ndXJ1dHV0b3JrdS5jb22CDWhpcHBvbW9vbi5jb22C
E2hpc3RvcmlhcG9qYXpkdS5jb22CG2lycmVzaXN0aWJsZS1yZXZvbHV0aW9uLmNv
bYIQanV2ZWhhaXJjYXJlLmNvbYIMbWFuZ2F0b3UuY29tghFtYXJ2ZWxyZWFsdG9y
LmNvbYIQbW9ybmluZ3RyYWNlLmNvbYITbXlwaGFtc3RhcmxpZ2h0LmNvbYIabm9y
dGh3ZXN0ZG9vcmFuZHN1cHBseS5jb22CEW51dHJpZW5kb3ZpZGEuY29tgg1vbnR2
c2ZsaXguY29tgg9wYWNoaW1vbmR2ZC5jb22CEHBhdHJvbnVzY29pbi5vcmeCEXBl
bnNpb25tYXJpb24uY29tghBwaW5reXNob3Rib3guY29tghJwbGF5LXNsaXRoZXJp
by5jb22CDHJhcmVidXJnLmNvbYIQcmVsb2NhdGlvbnV5LmNvbYIYcmVzdGF1cmFu
dC1sZW1iZWxsaWUuY29tghdybWVsZWN0cm9uaWNzb25saW5lLmNvbYILcnlvc2h1
dS5jb22CC3NzZS1jbW0ub3Jngg50aGVrdXNobnljLmNvbYIUdGhldGhyaWxsb2Zz
cGVlZC5jb22CDnVuY29pZmZldXIuY29tgg11bmRlcmFybW91LmRlgg91bml2aXNp
b25iZC5uZXSCEHVzYXRvcGxhd3llci5jb22CGXZhbGxleXZpZXdwYXJrZXN0YXRl
cy5jb22CD3ZpZGVvLWNhbmR5LmNvbYIKdm96LmNvbS5hdYIXd2VzZGlzdHJpYnVp
ZG9yYS5jb20uYnKCEHdpa2lhdGFsYW50YS5jb22CFnd2dGhlYXRyZXBsYXllcnNu
aC5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY24s1Y3AAAE
AwBHMEUCIQDKOtkyEZZwqRWMiTH8qOSLXqwSLjdPpmpGoiSvthgd4gIgAojcmdjp
i0oM9k5i/Fn+uiLcoMUE8JyU5utG76BzUp4AdgBIsONr2qZHNA/lagL6nTDrHFIB
y1bdLIHZu7+rOdiEcwAAAY24s1gxAAAEAwBHMEUCIHdy1cNFtrG7jJK0FnZikqjh
rLesI6L+iQhBU9Jp33jRAiEA5QqfmY9iLg7r2S60CAD5mXV+pHwOAF1xt5xsTQS/
NxswDQYJKoZIhvcNAQELBQADggEBALHjRchfk53y8g+aLQaZVx5bINKPUTE8WgGo
9awxswxIytX0lOIRYvV9IJKtA6VrSTvEh6UUxQgBy+EDJcQwAWge/9d8xZI+/nqX
kuz4XZ7HPLnkcgM9kTTdGKCdVyZk/YzK4NqMe1oiFh3OGF9ItFm9ny1iuOkVMYWh
2hXGNnwUcRNRbahevrtPFMIuENuOezziwIfRW3q0wYEv/HdN2Jcos8YbrJwjWsk3
UkIdy+w5q10SXjI8UcJPkZdbkrpgBKdQmK0S8mNs69B5m+rvYILwkx76xeJkgULl
VOWuMEuyoyn/ny6Sxe67OtBH/7HmHtRq4Yoy6RpMJKd0hhwuPfQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411621954569345872669326835295189196646621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 19:12:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 19:12:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nutriendovida.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783150711141449884417213996460067506199548974226419573172158793940153595978719007082216238387517715074674729008999314139136011002781777448851915452126046309794944146491217314365157082903853832607523837224751863355891384672378628905583617888906208382690227285561490023071907329388829683820434353838278383031305910218778046382192643926979547974994389735360746861979660229532759020415791126272392230410365460509950793501041393216853053337052915262681439803522911913986956129973969628515856203773730718361888612236265537741095458847297649744905943440690998204797161747303122421338788542526748184376255303731167148943962851645847127567304880938795981664568132145967534348434038255955168034851516468858940155680813678656707413483308398080269476425838170179188458555239386081532346454523046592678775784803845230815818986862341391123897903417245633904599710834807037201266611575208559086766219352264920451414080218353479757790063909056808207215191658047198697456332883828497144081865436682643466897355121756671333911994944740599313343358165936776723611813065727054903356585886167899915675870693998986732327806588612415735768470890381830084473500844654614707127200292343145385287254341661968748806757684168642066877952956473391255519022713747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3023e1e080ab4ac5a1293acc0fd197676ad1b9ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123moovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.13xiaoshuo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allamericanline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcanaheimllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautyheal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betheasda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikaui.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butyourefrench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapdressesonlinestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.combclip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devstopia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discoball.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divxtotal.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earn-bbaf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engfound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurututorku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hippomoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.historiapojazdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irresistible-revolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juvehaircare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangatou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marvelrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morningtrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myphamstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northwestdoorandsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutriendovida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontvsflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pachimondvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patronuscoin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensionmarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkyshotbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.play-slitherio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rareburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relocationuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurant-lembellie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rmelectronicsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryoshuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sse-cmm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekushnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thethrillofspeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncoiffeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.underarmou.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.univisionbd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usatoplawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valleyviewparkestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video-candy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wesdistribuidora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikiatalanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wvtheatreplayersnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123moovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '13xiaoshuo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allamericanline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcanaheimllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyheal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betheasda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikaui.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butyourefrench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapdressesonlinestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'combclip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devstopia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoball.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divxtotal.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earn-bbaf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engfound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurututorku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippomoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiapojazdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irresistible-revolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juvehaircare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangatou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvelrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myphamstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwestdoorandsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutriendovida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontvsflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pachimondvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patronuscoin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionmarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkyshotbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play-slitherio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rareburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relocationuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant-lembellie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmelectronicsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryoshuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sse-cmm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekushnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thethrillofspeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncoiffeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underarmou.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univisionbd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usatoplawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyviewparkestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-candy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesdistribuidora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikiatalanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvtheatreplayersnh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db8b356370000040300473045022100ca3ad932119670a9158c8931fca8e48b5eac122e374fa66a46a224afb6181de202200288dc99d8e98b4a0cf64e62fc59feba22dca0c504f09c94e6eb46efa073529e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db8b35831000004030047304502207772d5c345b6b1bb8c92b416766292a8e1acb7ac23a2fe89084153d269df78d1022100e50a9f998f622e0eebd92eb40800f999757ea47c0e005d71b79c6c4d04bf371b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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