justaskweg.com

Issued by R3

About this certificate

This digital certificate with serial number 04:30:3d:c1:3e:31:6f:c5:c9:58:51:20:8c:a9:b7:ec:e7:cf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=justaskweg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:30:3d:c1:3e:31:6f:c5:c9:58:51:20:8c:a9:b7:ec:e7:cf
Serial Number (int): 364864783621708777257620992356975282808783
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:a0:7f:bf:ee:a5:b4:7d:bf:bf:55:28:fd:11:68:c6:01:ec:4c:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:12:ae:a0:dd:9b:fd:d3:c9:2e:a7:13:ae:fe:42:01:1c:3c:4c:49
Fingerprint (sha256): 50:9b:89:a4:d6:ef:6b:e6:10:4b:e8:08:76:b1:4d:82:c6:a7:26:e7:4b:4b:0f:08:45:fe:8a:b4:f6:e1:d1:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate justaskweg.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justaskweg.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3libe.net
*.adventures.es
*.amerihealthcaitasfl.com
*.amerihealthcaitaspa.com
*.amerihealthcariasdc.com
*.amerihelthcaritasfl.com
*.amerihelthcaritasnh.com
*.anticipodinero.es
*.banjoko.com
*.bbc-rdc.com
*.bigtorrents.org
*.bluehoest.com
*.comunityhealthchoice.com
*.decoration.com.au
*.ebiostatician.com
*.firstbankard.com
*.funhotpic.com
*.hdmouie.com
*.hedgermining.com
*.hermelsa.com
*.intercoastalmedicicalgroup.com
*.justaskweg.com
*.khockey.com
*.llanzoux.com
*.lumenchristie.com
*.mobileworker.net.au
*.nurrisalesinedir.com
*.opodo.uk
*.peeacocktv.com
*.pokersprint.com
*.restarauntnews.com
*.rivokids.com
*.scoilchaitriona.com
*.sevensignal.com
*.shirland.com
*.simmentals.com
*.sourhwestwahomes.com
*.sppectrum.net
*.sugardetoxmadeeasy.com
*.tesam-xecuter.com
*.toog.net
*.ultimaterenovations.com.au
*.victery.com
*.videoming.in
*.watchlivenews.tv
*.waterfrontcabinrentals.com
*.westtech.eu
*.wholelingerie.com
*.worxauto.com
*.wwwzenni.com
3libe.net
adventures.es
amerihealthcaitasfl.com
amerihealthcaitaspa.com
amerihealthcariasdc.com
amerihelthcaritasfl.com
amerihelthcaritasnh.com
anticipodinero.es
banjoko.com
bbc-rdc.com
bigtorrents.org
bluehoest.com
comunityhealthchoice.com
decoration.com.au
ebiostatician.com
firstbankard.com
funhotpic.com
hdmouie.com
hedgermining.com
hermelsa.com
intercoastalmedicicalgroup.com
justaskweg.com
khockey.com
llanzoux.com
lumenchristie.com
mobileworker.net.au
nurrisalesinedir.com
opodo.uk
peeacocktv.com
pokersprint.com
restarauntnews.com
rivokids.com
scoilchaitriona.com
sevensignal.com
shirland.com
simmentals.com
sourhwestwahomes.com
sppectrum.net
sugardetoxmadeeasy.com
tesam-xecuter.com
toog.net
ultimaterenovations.com.au
victery.com
videoming.in
watchlivenews.tv
waterfrontcabinrentals.com
westtech.eu
wholelingerie.com
worxauto.com
wwwzenni.com

Other certificates including the domain name justaskweg.com

(limited to 100 certificates)
chopsueys.com
katherinemartin.com
jojosiwa.com
justaskweg.com
justaskweg.com
jetbluebuisnesscard.com
johnlewislist.com
chopsueys.com
justin-beasley.com
justaskweg.com
jetsetinternet.com

Certificate

The complete raw certificate details for justaskweg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINiTCCDHGgAwIBAgISBDA9wT4xb8XJWFEgjKm37OfPMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMTgxMjA0NTVaFw0yMzA0MTgxMjA0NTRaMBkxFzAVBgNVBAMT
Dmp1c3Rhc2t3ZWcuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
q6+i9RnuUVLumAcm5tDlF9w2yVztSraf26yT5/SjuNO1KynallnhuilEhKqI/sVV
3yjQ4IsYFy/fVkYCHo95KQNb9xcf2uDLCrgbKb0TkOm3zrLLaQUxQ/il6pbKXUNG
kpyKVZhWLwHTgk4AobfqM4vJCKZG/AKdUJCAqwDzYERY0D1scQvWCzXXoMb+EqvE
lFBwoh7Qz4vot/93yCsFHdv7sXv7BdbkDG++myUaBQlDby2PRCncUt/fqHQ/BxqH
vtYW/ODsoySWX1sDvfkTBCbG3T5expxc8Ggoitj2Iq4Q7WElJOyLAnKEH20l5FXX
NivTqPuEtFlSSTZYP7TXYo1hvNz+mL21gTJeIJB46tRcOXWUtnD3FCvfqkybLCAr
QHCscQXA3Qac0tRmxjR5H7tRwoasKaJSOX3wuTA7EEWpUDOiDnN3u2hTF9W8kA38
RZEehNVG9acsro+cPYd4JXvtYNEd2gDtvJN8HSLup59s2nSAN68UQNDh6vZXFunY
5xdOVsPdUsF/p9nvLGty8C898mGrgvMoTbxbsHIFNvnUxI4TsObUlqlOMbpNgeqT
MZ5B7zbcMDkexvIhuo3EyMLncgXe3cA/kGwb9FjQgGn544SZx2ofes6bLExSup9h
uHMVGL1lEJlnbY3BaqaB2Ro+KfUlOokkiaWru3dhMdUCAwEAAaOCCbAwggmsMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUvKB/v+6ltH2/v1Uo/RFoxgHsTPUwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggd/BgNVHREEggd2MIIHcoILKi4zbGliZS5uZXSC
DyouYWR2ZW50dXJlcy5lc4IZKi5hbWVyaWhlYWx0aGNhaXRhc2ZsLmNvbYIZKi5h
bWVyaWhlYWx0aGNhaXRhc3BhLmNvbYIZKi5hbWVyaWhlYWx0aGNhcmlhc2RjLmNv
bYIZKi5hbWVyaWhlbHRoY2FyaXRhc2ZsLmNvbYIZKi5hbWVyaWhlbHRoY2FyaXRh
c25oLmNvbYITKi5hbnRpY2lwb2RpbmVyby5lc4INKi5iYW5qb2tvLmNvbYINKi5i
YmMtcmRjLmNvbYIRKi5iaWd0b3JyZW50cy5vcmeCDyouYmx1ZWhvZXN0LmNvbYIa
Ki5jb211bml0eWhlYWx0aGNob2ljZS5jb22CEyouZGVjb3JhdGlvbi5jb20uYXWC
EyouZWJpb3N0YXRpY2lhbi5jb22CEiouZmlyc3RiYW5rYXJkLmNvbYIPKi5mdW5o
b3RwaWMuY29tgg0qLmhkbW91aWUuY29tghIqLmhlZGdlcm1pbmluZy5jb22CDiou
aGVybWVsc2EuY29tgiAqLmludGVyY29hc3RhbG1lZGljaWNhbGdyb3VwLmNvbYIQ
Ki5qdXN0YXNrd2VnLmNvbYINKi5raG9ja2V5LmNvbYIOKi5sbGFuem91eC5jb22C
EyoubHVtZW5jaHJpc3RpZS5jb22CFSoubW9iaWxld29ya2VyLm5ldC5hdYIWKi5u
dXJyaXNhbGVzaW5lZGlyLmNvbYIKKi5vcG9kby51a4IQKi5wZWVhY29ja3R2LmNv
bYIRKi5wb2tlcnNwcmludC5jb22CFCoucmVzdGFyYXVudG5ld3MuY29tgg4qLnJp
dm9raWRzLmNvbYIVKi5zY29pbGNoYWl0cmlvbmEuY29tghEqLnNldmVuc2lnbmFs
LmNvbYIOKi5zaGlybGFuZC5jb22CECouc2ltbWVudGFscy5jb22CFiouc291cmh3
ZXN0d2Fob21lcy5jb22CDyouc3BwZWN0cnVtLm5ldIIYKi5zdWdhcmRldG94bWFk
ZWVhc3kuY29tghMqLnRlc2FtLXhlY3V0ZXIuY29tggoqLnRvb2cubmV0ghwqLnVs
dGltYXRlcmVub3ZhdGlvbnMuY29tLmF1gg0qLnZpY3RlcnkuY29tgg4qLnZpZGVv
bWluZy5pboISKi53YXRjaGxpdmVuZXdzLnR2ghwqLndhdGVyZnJvbnRjYWJpbnJl
bnRhbHMuY29tgg0qLndlc3R0ZWNoLmV1ghMqLndob2xlbGluZ2VyaWUuY29tgg4q
LndvcnhhdXRvLmNvbYIOKi53d3d6ZW5uaS5jb22CCTNsaWJlLm5ldIINYWR2ZW50
dXJlcy5lc4IXYW1lcmloZWFsdGhjYWl0YXNmbC5jb22CF2FtZXJpaGVhbHRoY2Fp
dGFzcGEuY29tghdhbWVyaWhlYWx0aGNhcmlhc2RjLmNvbYIXYW1lcmloZWx0aGNh
cml0YXNmbC5jb22CF2FtZXJpaGVsdGhjYXJpdGFzbmguY29tghFhbnRpY2lwb2Rp
bmVyby5lc4ILYmFuam9rby5jb22CC2JiYy1yZGMuY29tgg9iaWd0b3JyZW50cy5v
cmeCDWJsdWVob2VzdC5jb22CGGNvbXVuaXR5aGVhbHRoY2hvaWNlLmNvbYIRZGVj
b3JhdGlvbi5jb20uYXWCEWViaW9zdGF0aWNpYW4uY29tghBmaXJzdGJhbmthcmQu
Y29tgg1mdW5ob3RwaWMuY29tggtoZG1vdWllLmNvbYIQaGVkZ2VybWluaW5nLmNv
bYIMaGVybWVsc2EuY29tgh5pbnRlcmNvYXN0YWxtZWRpY2ljYWxncm91cC5jb22C
Dmp1c3Rhc2t3ZWcuY29tggtraG9ja2V5LmNvbYIMbGxhbnpvdXguY29tghFsdW1l
bmNocmlzdGllLmNvbYITbW9iaWxld29ya2VyLm5ldC5hdYIUbnVycmlzYWxlc2lu
ZWRpci5jb22CCG9wb2RvLnVrgg5wZWVhY29ja3R2LmNvbYIPcG9rZXJzcHJpbnQu
Y29tghJyZXN0YXJhdW50bmV3cy5jb22CDHJpdm9raWRzLmNvbYITc2NvaWxjaGFp
dHJpb25hLmNvbYIPc2V2ZW5zaWduYWwuY29tggxzaGlybGFuZC5jb22CDnNpbW1l
bnRhbHMuY29tghRzb3VyaHdlc3R3YWhvbWVzLmNvbYINc3BwZWN0cnVtLm5ldIIW
c3VnYXJkZXRveG1hZGVlYXN5LmNvbYIRdGVzYW0teGVjdXRlci5jb22CCHRvb2cu
bmV0ghp1bHRpbWF0ZXJlbm92YXRpb25zLmNvbS5hdYILdmljdGVyeS5jb22CDHZp
ZGVvbWluZy5pboIQd2F0Y2hsaXZlbmV3cy50doIad2F0ZXJmcm9udGNhYmlucmVu
dGFscy5jb22CC3dlc3R0ZWNoLmV1ghF3aG9sZWxpbmdlcmllLmNvbYIMd29yeGF1
dG8uY29tggx3d3d6ZW5uaS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgC3Pvsk35xNunXyOcW6WPRsXfxC
z3qfNcSeHQmBJe20mQAAAYXE+4QyAAAEAwBHMEUCIAnVQxTMVG/e8dxI3zwYpFnq
RxxX72TXq9cGWKJwraLGAiEAzYfxAiIeC+r4IqPkf+ASY5EIzGnBROhT1mD2ZlWa
gUIAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYXE+4Q8AAAE
AwBGMEQCIFbuSn+cmVUfrgdhlzuC0iBiZTxXbQm29TKub6V/kEbNAiB2UMqzEXEw
LxwGdRJ5AiDY9KegazRlHwiM+H/70sJf7jANBgkqhkiG9w0BAQsFAAOCAQEAfa8l
auWsGR8Ms63epZ4T663ROz5lQtzigqyQfZctg1gpRlRaJ/n5+ky8uV2S7aN8wmBu
UJ24wErHhvYI8tQzX+ZE9oxOVhK3NLWqoD8odthjESpHe2EJwbDaiMiHMPEaxAQR
9Wj5cB5brspts8HuHl2wgUR3PjM5YefE9I/rcVdAOrBhiNNvTdycOT+1BfGt00Zm
os/Hps1AD0zrKrg1AuvuJFukgL0N5Uz260VWIeewMo4dfXNP4PBRpXT1NvRntdKT
TJ2Y87vI1nkYjkCvYwOQXI1Q1vr1Ho/4+11L1CdG5Em14tgmPPXMQNAZylCw+IPS
e65Ls2B47ekyCNUMlw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364864783621708777257620992356975282808783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 12:04:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 12:04:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justaskweg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700418098988182959801984928810836432129273579662965958268507382340081747749748839323679122200596213074345986050445673371306695234174705457064929748400842592231851466426339709116982499895614532885283161501716994692565278598105407825033244881373133380287727876936528420980262341845147110224646960121230572668670208348516169694658068028848476478722893571327840489392429445299313804527652839661420409169484591196072976450773061270495582677465973622216779606830268763358679601980288493247502512471538184583965707405540577845359194734395331499031959729753521037415613656030731141547679070887223324772753534415846652488173528805688129839906002377876623104586208992442914719919527366404553185749897826675801732094588032022417043539935758097578108306886610708949167209242970113139663728012105194445536546440424173350968907107891746231268803258122672029116094629412950262355177349398420315805242802613029188435261898799704706484795379193963845738398204624992112707571305464887695167469008569139974555112835397899409641789756179220698446620392706524702601656232142893038256476930222360217258544018558684202727475762486922640599897957293463803686909244364994350522591572686531648248785988142166401541476731534663675838568214646821895874858267093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bca07fbfeea5b47dbfbf5528fd1168c601ec4cf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3libe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amerihealthcaitasfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amerihealthcaitaspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amerihealthcariasdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amerihelthcaritasfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amerihelthcaritasnh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anticipodinero.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banjoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbc-rdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigtorrents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluehoest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comunityhealthchoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decoration.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebiostatician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstbankard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funhotpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmouie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedgermining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hermelsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intercoastalmedicicalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justaskweg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llanzoux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumenchristie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobileworker.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nurrisalesinedir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opodo.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peeacocktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokersprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restarauntnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoilchaitriona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sevensignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simmentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sourhwestwahomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sppectrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugardetoxmadeeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tesam-xecuter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultimaterenovations.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoming.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchlivenews.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterfrontcabinrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westtech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholelingerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worxauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwzenni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3libe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventures.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerihealthcaitasfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerihealthcaitaspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerihealthcariasdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerihelthcaritasfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerihelthcaritasnh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anticipodinero.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banjoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbc-rdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigtorrents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluehoest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunityhealthchoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoration.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiostatician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstbankard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funhotpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmouie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedgermining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermelsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercoastalmedicicalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justaskweg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llanzoux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumenchristie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileworker.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurrisalesinedir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opodo.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peeacocktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokersprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restarauntnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoilchaitriona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevensignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simmentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourhwestwahomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppectrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugardetoxmadeeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesam-xecuter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimaterenovations.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoming.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchlivenews.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfrontcabinrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westtech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholelingerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worxauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwzenni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185c4fb84320000040300473045022009d54314cc546fdef1dc48df3c18a459ea471c57ef64d7abd70658a270ada2c6022100cd87f102221e0beaf822a3e47fe012639108cc69c144e853d660f666559a81420075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185c4fb843c0000040300463044022056ee4a7f9c99551fae0761973b82d22062653c576d09b6f532ae6fa57f9046cd02207650cab31171302f1c067512790220d8f4a7a06b34651f088cf87ffbd2c25fee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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