gemalings.ca

Issued by R11

About this certificate

This digital certificate with serial number 04:7d:28:cf:06:98:cc:b2:db:0e:38:de:f3:54:6e:54:ed:64 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gemalings.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:7d:28:cf:06:98:cc:b2:db:0e:38:de:f3:54:6e:54:ed:64
Serial Number (int): 391038683651239897352990941835907321621860
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:60:36:65:c1:0c:fa:ea:a7:95:b2:eb:90:b7:1c:11:55:8b:1b:ba
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): a6:3c:61:d7:da:10:16:a5:9c:56:a6:e9:27:46:34:6e:23:b3:f0:86
Fingerprint (sha256): 52:47:53:58:43:ef:86:da:b8:9c:7d:80:f8:e5:7d:c0:52:b6:38:43:d6:61:1e:23:42:7a:4a:e6:85:fa:9c:55

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate gemalings.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gemalings.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dmonsterporn.com
advoxate.com
arcoartviolinshop.com
assumptionparish.com
banneradservices.com
batchelorlaw.com
blackcombskirentals.com
bobdecker.com
boxbuttecounty.com
brandingsecrets.com
business-forms.com
canibuild.group
carbonoffsetmarket.com
chasethemonkey.com
chubbinvestments.com
circlesoftrust.com
clecell.com
comsysdesign.com
costarosada.com
crochetpartners.com
cryptocable.com
customerassistancedesk.com
deadboltlock.com
diagnosticonline.com
domainsforpurchase.com
dswhited.com
entertainmentiplaw.co
estateclearing.com
euphoria.co.in
findability.info
firearmsinsanantonio.com
floridaprivateschooldirectory.com
foodshomes.com
gemalings.ca
growkoi.com
hardnigganews.com
haywardlawyer.com
healthgov.org
hempmarkets.com
hotelace.com
hypnotise.co.in
isanyoneup.com
ivkerrville.com
jobforecast.com
kansastrophyoutfitters.com
ksb-giw.com
laportegarbage.com
lendingblog.com
locationseo.com
lock.bdsmsecurity.com
logintmall.com
london4vip.com
mattgolaboff.com
miimagency.com
monstrantviam.info
morethanapatch.info
murdermustard.com
musicalmemorycare.org
netzeroeconomy.com
neverquitwater.org
oestringen.com
ourmissionloans.com
paramb.com
paversealingclermont.com
peoplefriendlyhomes.com
personalblogs.com
powerbilt.org
projectgowild.com
realestatehogs.com
recoverymasters.com
rencontreadultes.ch
reneecarrington.com
rvj.co.in
safitness.com
saintelizabethsociety.com
samanmag.com
sargentcounty.com
shipwrecks101.com
shopmovers.com
shotsbyjcb.com
skate.vc
solarpowerelpaso.com
staffingguide.com
stockinvestingvideotutorials.com
sugarreformulated.com
supervisedresearch.com
supplyhelp.com
tannergerritsen.com
texasbitcoinbook.com
traveltolearn.com
trempealeaucounty.com
unfructose.com
unitedstatesweekly.org
wetzelcounty.com
whitetrashnegro.com
www.professorschoice.com
xnxdating.com
zapmedia.org.zapmedia.org
zeroerythritol.com

Other certificates including the domain name gemalings.ca

(limited to 100 certificates)
gemalings.ca
gemalings.ca
streamavideo.com.gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
gemalings.ca
www.sidepiecerehab.com
ssl-2a4ob.epik.to

Certificate

The complete raw certificate details for gemalings.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMZTCCC02gAwIBAgISBH0ozwaYzLLbDjje81RuVO1kMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjA4MDEwMTE4WhcNMjQwOTA2MDEwMTE3WjAXMRUwEwYDVQQD
EwxnZW1hbGluZ3MuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF
HnCtuIQV4QeVAt+nwRYxEvTHVZzCPo07KKnfm6AJOmlR4NQ07/dQ9KQ7JuNWrTlI
Kb8aeZIxHKtE3+q8K2Ok1eKtWAr2BjmhXBb8fBfyG9DdWg6vqgXO/duOtnzgASXB
TppvDeO8gFVcWiDAM4MQf5bXQOp+HKB8pWotYH5VlrVvl2mTsp4ZNi9q4zybliFZ
Ls44NmUSH3eaocPXppxdN5oKL1GVA8rVl10o74K1V/QY3pGmmqbezj6Q5Br89hTo
njzB2LiCxYxesO5JsJ4OdYcN4Dm7/l7geQS2Un6uFok/hMi8CA2v/YUO5/iT7ao1
5tw4PJFVMIy6oqt9ytlDAgMBAAGjggmNMIIJiTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFKNgNmXBDPrqp5Wy65C3HBFVixu6MB8GA1UdIwQYMBaAFMXPRqTq9MPAemyV
xC2wXpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYWaHR0cDovL3Ix
MS5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMS5pLmxlbmNyLm9y
Zy8wggeTBgNVHREEggeKMIIHhoIRM2Rtb25zdGVycG9ybi5jb22CDGFkdm94YXRl
LmNvbYIVYXJjb2FydHZpb2xpbnNob3AuY29tghRhc3N1bXB0aW9ucGFyaXNoLmNv
bYIUYmFubmVyYWRzZXJ2aWNlcy5jb22CEGJhdGNoZWxvcmxhdy5jb22CF2JsYWNr
Y29tYnNraXJlbnRhbHMuY29tgg1ib2JkZWNrZXIuY29tghJib3hidXR0ZWNvdW50
eS5jb22CE2JyYW5kaW5nc2VjcmV0cy5jb22CEmJ1c2luZXNzLWZvcm1zLmNvbYIP
Y2FuaWJ1aWxkLmdyb3VwghZjYXJib25vZmZzZXRtYXJrZXQuY29tghJjaGFzZXRo
ZW1vbmtleS5jb22CFGNodWJiaW52ZXN0bWVudHMuY29tghJjaXJjbGVzb2Z0cnVz
dC5jb22CC2NsZWNlbGwuY29tghBjb21zeXNkZXNpZ24uY29tgg9jb3N0YXJvc2Fk
YS5jb22CE2Nyb2NoZXRwYXJ0bmVycy5jb22CD2NyeXB0b2NhYmxlLmNvbYIaY3Vz
dG9tZXJhc3Npc3RhbmNlZGVzay5jb22CEGRlYWRib2x0bG9jay5jb22CFGRpYWdu
b3N0aWNvbmxpbmUuY29tghZkb21haW5zZm9ycHVyY2hhc2UuY29tggxkc3doaXRl
ZC5jb22CFWVudGVydGFpbm1lbnRpcGxhdy5jb4ISZXN0YXRlY2xlYXJpbmcuY29t
gg5ldXBob3JpYS5jby5pboIQZmluZGFiaWxpdHkuaW5mb4IYZmlyZWFybXNpbnNh
bmFudG9uaW8uY29tgiFmbG9yaWRhcHJpdmF0ZXNjaG9vbGRpcmVjdG9yeS5jb22C
DmZvb2RzaG9tZXMuY29tggxnZW1hbGluZ3MuY2GCC2dyb3drb2kuY29tghFoYXJk
bmlnZ2FuZXdzLmNvbYIRaGF5d2FyZGxhd3llci5jb22CDWhlYWx0aGdvdi5vcmeC
D2hlbXBtYXJrZXRzLmNvbYIMaG90ZWxhY2UuY29tgg9oeXBub3Rpc2UuY28uaW6C
DmlzYW55b25ldXAuY29tgg9pdmtlcnJ2aWxsZS5jb22CD2pvYmZvcmVjYXN0LmNv
bYIaa2Fuc2FzdHJvcGh5b3V0Zml0dGVycy5jb22CC2tzYi1naXcuY29tghJsYXBv
cnRlZ2FyYmFnZS5jb22CD2xlbmRpbmdibG9nLmNvbYIPbG9jYXRpb25zZW8uY29t
ghVsb2NrLmJkc21zZWN1cml0eS5jb22CDmxvZ2ludG1hbGwuY29tgg5sb25kb240
dmlwLmNvbYIQbWF0dGdvbGFib2ZmLmNvbYIObWlpbWFnZW5jeS5jb22CEm1vbnN0
cmFudHZpYW0uaW5mb4ITbW9yZXRoYW5hcGF0Y2guaW5mb4IRbXVyZGVybXVzdGFy
ZC5jb22CFW11c2ljYWxtZW1vcnljYXJlLm9yZ4ISbmV0emVyb2Vjb25vbXkuY29t
ghJuZXZlcnF1aXR3YXRlci5vcmeCDm9lc3RyaW5nZW4uY29tghNvdXJtaXNzaW9u
bG9hbnMuY29tggpwYXJhbWIuY29tghhwYXZlcnNlYWxpbmdjbGVybW9udC5jb22C
F3Blb3BsZWZyaWVuZGx5aG9tZXMuY29tghFwZXJzb25hbGJsb2dzLmNvbYINcG93
ZXJiaWx0Lm9yZ4IRcHJvamVjdGdvd2lsZC5jb22CEnJlYWxlc3RhdGVob2dzLmNv
bYITcmVjb3ZlcnltYXN0ZXJzLmNvbYITcmVuY29udHJlYWR1bHRlcy5jaIITcmVu
ZWVjYXJyaW5ndG9uLmNvbYIJcnZqLmNvLmlugg1zYWZpdG5lc3MuY29tghlzYWlu
dGVsaXphYmV0aHNvY2lldHkuY29tggxzYW1hbm1hZy5jb22CEXNhcmdlbnRjb3Vu
dHkuY29tghFzaGlwd3JlY2tzMTAxLmNvbYIOc2hvcG1vdmVycy5jb22CDnNob3Rz
YnlqY2IuY29tgghza2F0ZS52Y4IUc29sYXJwb3dlcmVscGFzby5jb22CEXN0YWZm
aW5nZ3VpZGUuY29tgiBzdG9ja2ludmVzdGluZ3ZpZGVvdHV0b3JpYWxzLmNvbYIV
c3VnYXJyZWZvcm11bGF0ZWQuY29tghZzdXBlcnZpc2VkcmVzZWFyY2guY29tgg5z
dXBwbHloZWxwLmNvbYITdGFubmVyZ2Vycml0c2VuLmNvbYIUdGV4YXNiaXRjb2lu
Ym9vay5jb22CEXRyYXZlbHRvbGVhcm4uY29tghV0cmVtcGVhbGVhdWNvdW50eS5j
b22CDnVuZnJ1Y3Rvc2UuY29tghZ1bml0ZWRzdGF0ZXN3ZWVrbHkub3JnghB3ZXR6
ZWxjb3VudHkuY29tghN3aGl0ZXRyYXNobmVncm8uY29tghh3d3cucHJvZmVzc29y
c2Nob2ljZS5jb22CDXhueGRhdGluZy5jb22CGXphcG1lZGlhLm9yZy56YXBtZWRp
YS5vcmeCEnplcm9lcnl0aHJpdG9sLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq
68G/KIXs+GRuAAABj/WUKy8AAAQDAEcwRQIgWlSklMQstNayHNqcOuQTkBZ1SNsA
1MUY/pv6RiM1EYoCIQCFCQxoGy/lJ1r2ZmC62ppHQC5S+oH+CiZRFpXRWMakHAB1
AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABj/WUK14AAAQDAEYw
RAIgETR2G8N0qG/R3D92qGd31a//GRGw4A2VImAoqys2v8wCIA1oIZKuAR71gXfE
EaMVRFT/PUiaa28kRdS3AQpytGOzMA0GCSqGSIb3DQEBCwUAA4IBAQBqLOkuVBOl
AGVXZVectY4aLrMG2h/6NqiyHUxAI2aT7PKoHSnXYE0mANgvzvzdmnqVBDa+Zqxc
skRpXyCGLCilGLNqEbrDfQRgg/QojomUVOnphSJqKFs1CbEnQSfd99pl+GurJGym
T6kFjEaJ6E1wivZoPr+BC7jcEhwXOWawnsaHxoLFz09mMrm2FWxohEqN8BHQ/ZGX
NtbKVFc7RbhF2KyRCpcq2qI4Upt+Ayumkk6JFL1GWID7fUH3bqi9qPuGxTBUxBkY
rX4x8IPFkHMBIBQXqUxkS+A8cLyN6F+HuFf4WbhJw9cRKgsKA7jYO/NEZeHBY/5d
6+cr83APJN/s
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR5wrbiEFeEHlQLfp8EW
MRL0x1Wcwj6NOyip35ugCTppUeDUNO/3UPSkOybjVq05SCm/GnmSMRyrRN/qvCtj
pNXirVgK9gY5oVwW/HwX8hvQ3VoOr6oFzv3bjrZ84AElwU6abw3jvIBVXFogwDOD
EH+W10DqfhygfKVqLWB+VZa1b5dpk7KeGTYvauM8m5YhWS7OODZlEh93mqHD16ac
XTeaCi9RlQPK1ZddKO+CtVf0GN6Rppqm3s4+kOQa/PYU6J48wdi4gsWMXrDuSbCe
DnWHDeA5u/5e4HkEtlJ+rhaJP4TIvAgNr/2FDuf4k+2qNebcODyRVTCMuqKrfcrZ
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391038683651239897352990941835907321621860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 01:01:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 01:01:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gemalings.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24883956676110145172492793332678353753226875561921517298179517399579461450207000764343551598718119178328232257732342476743226881158069736336019183960876260942571680211899853941064259173086394390730826837601135739633223553126648062461480481576731449237015327842069227806175260431727231523983546421765488185074567025975959993548935296922399391502546252895501144261974218605198791677950758354303000892193192067490309302894442220454148848662877061354792658149601664801435054262348747754814984804185687996060807256415182157917648166056325061673876848125307730481651326131192273814034149359374664314454645307723743245293891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3603665c10cfaeaa795b2eb90b71c11558b1bba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1930 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dmonsterporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advoxate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcoartviolinshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banneradservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batchelorlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackcombskirentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobdecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxbuttecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandingsecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-forms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonoffsetmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasethemonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chubbinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlesoftrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clecell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsysdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costarosada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crochetpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerassistancedesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadboltlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainsforpurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dswhited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainmentiplaw.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estateclearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euphoria.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findability.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firearmsinsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridaprivateschooldirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodshomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemalings.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growkoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardnigganews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haywardlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypnotise.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isanyoneup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivkerrville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobforecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansastrophyoutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksb-giw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laportegarbage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendingblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locationseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lock.bdsmsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logintmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'london4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattgolaboff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miimagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monstrantviam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morethanapatch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murdermustard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicalmemorycare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netzeroeconomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neverquitwater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oestringen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourmissionloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paversealingclermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplefriendlyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbilt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectgowild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatehogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoverymasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontreadultes.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reneecarrington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintelizabethsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samanmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sargentcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipwrecks101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopmovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shotsbyjcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skate.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpowerelpaso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffingguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockinvestingvideotutorials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarreformulated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supervisedresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplyhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tannergerritsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasbitcoinbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traveltolearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trempealeaucounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfructose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstatesweekly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetzelcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitetrashnegro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professorschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnxdating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zapmedia.org.zapmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeroerythritol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff5942b2f000004030047304502205a54a494c42cb4d6b21cda9c3ae41390167548db00d4c518fe9bfa462335118a02210085090c681b2fe5275af66660bada9a47402e52fa81fe0a26511695d158c6a41c00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ff5942b5e000004030046304402201134761bc374a86fd1dc3f76a86777d5afff1911b0e00d95226028ab2b36bfcc02200d682192ae011ef58177c411a3154454ff3d489a6b6f2445d4b7010a72b463b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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