tcumet.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:01:8a:cf:63:77:ea:fb:c4:1f:ed:4a:e6:91:ac:fa:82 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tcumet.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:01:8a:cf:63:77:ea:fb:c4:1f:ed:4a:e6:91:ac:fa:82
Serial Number (int): 297749121027122907091088749199664719133314
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:4b:54:fc:3a:28:55:2e:a0:50:06:63:cb:21:10:15:f3:fb:5b:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:5a:af:db:25:e5:d7:19:5d:d0:21:32:70:05:fe:19:15:4c:62:5f
Fingerprint (sha256): 56:84:e6:e5:b6:89:6e:24:ca:ba:f6:57:2c:b1:ad:d4:7d:aa:e8:d2:19:f1:b9:2b:d1:06:22:af:2e:65:50:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tcumet.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tcumet.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acquaefiltri.net
*.alegiantairlines.com
*.alexipress.com
*.algorafinancial.com
*.aligiant.com
*.allcreditreport.com
*.allenandsonhogroasts.com
*.allergyandasthmaassociates.com
*.arsko.xyz
*.artisiticchecks.com
*.bentoncountysheriff.org
*.blackenedout.com
*.burligtonenglish.com
*.dairyfreedom.info
*.darkgip.info
*.detucevuth-iroxapian.info
*.deviceuodsb.info
*.digitalwizardgames.com
*.eclipseprivatejet.com
*.fisherci.com
*.gemologistapprentice.com
*.gorgetopgardens.com
*.guidinglaketexoma.com
*.helpaddictions.org
*.hometownusastores.com
*.hoteltravago.com
*.howsweettreats.com
*.jarmancertified.com
*.keyeffort.com
*.mchomes.biz
*.medihelp-mail.com
*.mkuwqs.info
*.movieszuzu.com
*.mydorway.com
*.panafricanenetwork.com
*.personellservicecenter.com
*.playtamil.online
*.reliasleaming.com
*.rigidconnect.com
*.segoinsulation.com
*.smarschool.be
*.swinginmarket.com
*.tcumet.com
*.teamworkathletics.com
*.treadbeast.com
*.txsmartchildsupport.com
*.urologyassociatespc.com
*.wafyair.de
*.weightslim.com
*.witchbook.net
acquaefiltri.net
alegiantairlines.com
alexipress.com
algorafinancial.com
aligiant.com
allcreditreport.com
allenandsonhogroasts.com
allergyandasthmaassociates.com
arsko.xyz
artisiticchecks.com
bentoncountysheriff.org
blackenedout.com
burligtonenglish.com
dairyfreedom.info
darkgip.info
detucevuth-iroxapian.info
deviceuodsb.info
digitalwizardgames.com
eclipseprivatejet.com
fisherci.com
gemologistapprentice.com
gorgetopgardens.com
guidinglaketexoma.com
helpaddictions.org
hometownusastores.com
hoteltravago.com
howsweettreats.com
jarmancertified.com
keyeffort.com
mchomes.biz
medihelp-mail.com
mkuwqs.info
movieszuzu.com
mydorway.com
panafricanenetwork.com
personellservicecenter.com
playtamil.online
reliasleaming.com
rigidconnect.com
segoinsulation.com
smarschool.be
swinginmarket.com
tcumet.com
teamworkathletics.com
treadbeast.com
txsmartchildsupport.com
urologyassociatespc.com
wafyair.de
weightslim.com
witchbook.net

Other certificates including the domain name tcumet.com

(limited to 100 certificates)
tcumet.com
xtuebe.com
tcumet.com
tcumet.com
iciciprulufe.com
javhihihd.com
gitarrenstunde.tv
trans7nion.com
tcumet.com
tcumet.com
massmustual.com

Certificate

The complete raw certificate details for tcumet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN2zCCDMOgAwIBAgISA2sBis9jd+r7xB/tSuaRrPqCMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA2MjkxMDU4MzdaFw0yMzA5MjcxMDU4MzZaMBUxEzARBgNVBAMT
CnRjdW1ldC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVjTWv
IYElDvG5n4148SQCTe4VFvXPNbqaN1Q/HrK4uUrkVlpIjCbSJhTwWqt3rZdBgGh2
NFW3wLOnkwNFUQumsVLxYXsx2iSeHhUIql1Kd4+u49JVsUjMY0sOEg2A4MhpnD1X
UokTZstbidq1MWF1oewiiK+EHZ0rAoRTebwVNxT72/nXERMxEbSgzgdzF+b7s8s4
DtIzXZUVyVUAyPubg5a4t7/m/dn574anhdV8gFIxEid3Lh26pM/f7RqZeekMn7BB
RYMRktX0vs/4BH46XEpCwrjYDgSUWnt8U76KX7l3Hmwj7FcjVXTL4e9oc1kcBsgr
UXfJjohDp/hDr2NLcDL2+uFl6bSBjcFfyLmmQDo+CucA0qGQ7BluFXidRFL8kLdq
N1g7VCJ7yWROK5J96bHpzpv91ZOrmUftcO5d6ZMT5vcSKjAXty9dX9JIgnfXpJGS
6B60SN/rECGc3i1AmHGQZ4xXpSeky3vc4pak35dyZpfqj6IQhmtG8sAiqfjFpUJX
AVzWzUDM3z5x/wqe6bhGXPBqp/0uACCWnOxg9NQwV6D6Ow8OSAPSvJ0rbw2OVEQD
KkyVHVjRPbBGCop9FRx7usBZpm01bel6xbaPdh3yygZ+jQUGcZkyMDz5M8S3F4q5
P2EzubY2yMMDvOZi/rIMZJWoPeSwMc7KYanpyQIDAQABo4IKBjCCCgIwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQWS1T8OihVLqBQBmPLIRAV8/tbgzAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCCAsGA1UdEQSCCAIwggf+ghIqLmFjcXVhZWZpbHRyaS5u
ZXSCFiouYWxlZ2lhbnRhaXJsaW5lcy5jb22CECouYWxleGlwcmVzcy5jb22CFSou
YWxnb3JhZmluYW5jaWFsLmNvbYIOKi5hbGlnaWFudC5jb22CFSouYWxsY3JlZGl0
cmVwb3J0LmNvbYIaKi5hbGxlbmFuZHNvbmhvZ3JvYXN0cy5jb22CICouYWxsZXJn
eWFuZGFzdGhtYWFzc29jaWF0ZXMuY29tggsqLmFyc2tvLnh5eoIVKi5hcnRpc2l0
aWNjaGVja3MuY29tghkqLmJlbnRvbmNvdW50eXNoZXJpZmYub3JnghIqLmJsYWNr
ZW5lZG91dC5jb22CFiouYnVybGlndG9uZW5nbGlzaC5jb22CEyouZGFpcnlmcmVl
ZG9tLmluZm+CDiouZGFya2dpcC5pbmZvghsqLmRldHVjZXZ1dGgtaXJveGFwaWFu
LmluZm+CEiouZGV2aWNldW9kc2IuaW5mb4IYKi5kaWdpdGFsd2l6YXJkZ2FtZXMu
Y29tghcqLmVjbGlwc2Vwcml2YXRlamV0LmNvbYIOKi5maXNoZXJjaS5jb22CGiou
Z2Vtb2xvZ2lzdGFwcHJlbnRpY2UuY29tghUqLmdvcmdldG9wZ2FyZGVucy5jb22C
FyouZ3VpZGluZ2xha2V0ZXhvbWEuY29tghQqLmhlbHBhZGRpY3Rpb25zLm9yZ4IX
Ki5ob21ldG93bnVzYXN0b3Jlcy5jb22CEiouaG90ZWx0cmF2YWdvLmNvbYIUKi5o
b3dzd2VldHRyZWF0cy5jb22CFSouamFybWFuY2VydGlmaWVkLmNvbYIPKi5rZXll
ZmZvcnQuY29tgg0qLm1jaG9tZXMuYml6ghMqLm1lZGloZWxwLW1haWwuY29tgg0q
Lm1rdXdxcy5pbmZvghAqLm1vdmllc3p1enUuY29tgg4qLm15ZG9yd2F5LmNvbYIY
Ki5wYW5hZnJpY2FuZW5ldHdvcmsuY29tghwqLnBlcnNvbmVsbHNlcnZpY2VjZW50
ZXIuY29tghIqLnBsYXl0YW1pbC5vbmxpbmWCEyoucmVsaWFzbGVhbWluZy5jb22C
EioucmlnaWRjb25uZWN0LmNvbYIUKi5zZWdvaW5zdWxhdGlvbi5jb22CDyouc21h
cnNjaG9vbC5iZYITKi5zd2luZ2lubWFya2V0LmNvbYIMKi50Y3VtZXQuY29tghcq
LnRlYW13b3JrYXRobGV0aWNzLmNvbYIQKi50cmVhZGJlYXN0LmNvbYIZKi50eHNt
YXJ0Y2hpbGRzdXBwb3J0LmNvbYIZKi51cm9sb2d5YXNzb2NpYXRlc3BjLmNvbYIM
Ki53YWZ5YWlyLmRlghAqLndlaWdodHNsaW0uY29tgg8qLndpdGNoYm9vay5uZXSC
EGFjcXVhZWZpbHRyaS5uZXSCFGFsZWdpYW50YWlybGluZXMuY29tgg5hbGV4aXBy
ZXNzLmNvbYITYWxnb3JhZmluYW5jaWFsLmNvbYIMYWxpZ2lhbnQuY29tghNhbGxj
cmVkaXRyZXBvcnQuY29tghhhbGxlbmFuZHNvbmhvZ3JvYXN0cy5jb22CHmFsbGVy
Z3lhbmRhc3RobWFhc3NvY2lhdGVzLmNvbYIJYXJza28ueHl6ghNhcnRpc2l0aWNj
aGVja3MuY29tghdiZW50b25jb3VudHlzaGVyaWZmLm9yZ4IQYmxhY2tlbmVkb3V0
LmNvbYIUYnVybGlndG9uZW5nbGlzaC5jb22CEWRhaXJ5ZnJlZWRvbS5pbmZvggxk
YXJrZ2lwLmluZm+CGWRldHVjZXZ1dGgtaXJveGFwaWFuLmluZm+CEGRldmljZXVv
ZHNiLmluZm+CFmRpZ2l0YWx3aXphcmRnYW1lcy5jb22CFWVjbGlwc2Vwcml2YXRl
amV0LmNvbYIMZmlzaGVyY2kuY29tghhnZW1vbG9naXN0YXBwcmVudGljZS5jb22C
E2dvcmdldG9wZ2FyZGVucy5jb22CFWd1aWRpbmdsYWtldGV4b21hLmNvbYISaGVs
cGFkZGljdGlvbnMub3JnghVob21ldG93bnVzYXN0b3Jlcy5jb22CEGhvdGVsdHJh
dmFnby5jb22CEmhvd3N3ZWV0dHJlYXRzLmNvbYITamFybWFuY2VydGlmaWVkLmNv
bYINa2V5ZWZmb3J0LmNvbYILbWNob21lcy5iaXqCEW1lZGloZWxwLW1haWwuY29t
ggtta3V3cXMuaW5mb4IObW92aWVzenV6dS5jb22CDG15ZG9yd2F5LmNvbYIWcGFu
YWZyaWNhbmVuZXR3b3JrLmNvbYIacGVyc29uZWxsc2VydmljZWNlbnRlci5jb22C
EHBsYXl0YW1pbC5vbmxpbmWCEXJlbGlhc2xlYW1pbmcuY29tghByaWdpZGNvbm5l
Y3QuY29tghJzZWdvaW5zdWxhdGlvbi5jb22CDXNtYXJzY2hvb2wuYmWCEXN3aW5n
aW5tYXJrZXQuY29tggp0Y3VtZXQuY29tghV0ZWFtd29ya2F0aGxldGljcy5jb22C
DnRyZWFkYmVhc3QuY29tghd0eHNtYXJ0Y2hpbGRzdXBwb3J0LmNvbYIXdXJvbG9n
eWFzc29jaWF0ZXNwYy5jb22CCndhZnlhaXIuZGWCDndlaWdodHNsaW0uY29tgg13
aXRjaGJvb2submV0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIE
AgSB9wSB9ADyAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJ
BwUHzAAABAMASDBGAiEAlx3Os1+JFlHNBVuHDvtNaa2mKmyIxc9O5a+T1ZEwev0C
IQCghPPMTC0efG0TGKdh6S73b0/cemws2roihRlNJeErCwB3ALc++yTfnE26dfI5
xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiQcFCYoAAAQDAEgwRgIhAOLf/RgZASxY
F3CQnGzqP6lOcoaesu2Agwrpzc5xEerNAiEA5IDTpFprY+0+FlIU867otJ/aR4BE
/zQjv1X/0mpFhaMwDQYJKoZIhvcNAQELBQADggEBACjd4uEsjMTeZ/Mi3xG+OY0V
3pUvUO1Xc66nW/jQyb4LReXGqwdO5j3+UDrnZzdQ28IolGtuPWVmIxjud3FUiZAm
UKi0LbransiosuS7XaHnP4W9+o9ir1ZKWEkqoyHIUvA9hlDuqdm7gZ0TTup91HlZ
8xaYuwoXezmXcWPmcKMCHl+CRoqc4bv0RQ9PWsdRsm0a0iJ1L9xnDB7w012qp//x
SL9iyLoqKlluwJbKTCA3EtMA+8j6TLDPBhfBfifu4ukxz4g48dJHPxBc9GCIOoyL
ahdvQPMLhj0rXcDE1ce5bqRqV/ev6R39xHmambYd5Ql/9fP1sT91Smcc0PEI1Gw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297749121027122907091088749199664719133314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 10:58:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 10:58:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tcumet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871214519806153782530845197959108781445564351563469537386646566891975214344891120692503010311636476038832559376296647846507562526396510239239625509374878075220677666023158492193185022650802652370536613200044509560915781763832138647693185158746735495435906063273153084683602094170420788817373731651588530712461149363338739142068071588255331964867932033731189999215520711986560521502893407841197276966672982110141244996113231627333956034729921544865752954653933283859323838016644711321860049619168139223598684293336562473241805087553453653900170957895218931231339679090989944956438167243924254728325572659778388656146490688426473032997403827001155913728107522616577098506984174134178748867344969038387921772905311302761807980015471766553689018852728024541160914690071707095173876272565536260996581177583656212426680916478195413558109432560959104965268006852110726440969667224594237416539208718700152749236524613815535823512503732785229694425896558612037699528978233306495030755624955336676122606384273178639590963958040507125187977913446630625050465184060744281241880977561779538746324760329506099460051288370734400984495286724819892777180925974413840754049681090342560583309634368574005661400399373003434716776119953573556179100625353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							164b54fc3a28552ea0500663cb211015f3fb5b83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acquaefiltri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alegiantairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexipress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algorafinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aligiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allcreditreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allenandsonhogroasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allergyandasthmaassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arsko.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisiticchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bentoncountysheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackenedout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burligtonenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dairyfreedom.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkgip.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detucevuth-iroxapian.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deviceuodsb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalwizardgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eclipseprivatejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fisherci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemologistapprentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gorgetopgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guidinglaketexoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helpaddictions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hometownusastores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteltravago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howsweettreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jarmancertified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keyeffort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mchomes.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medihelp-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkuwqs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movieszuzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydorway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panafricanenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personellservicecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playtamil.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reliasleaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rigidconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segoinsulation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smarschool.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swinginmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamworkathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treadbeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txsmartchildsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urologyassociatespc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wafyair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weightslim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.witchbook.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquaefiltri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alegiantairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexipress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algorafinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allcreditreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenandsonhogroasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allergyandasthmaassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsko.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisiticchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentoncountysheriff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackenedout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burligtonenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyfreedom.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkgip.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detucevuth-iroxapian.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviceuodsb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwizardgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipseprivatejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisherci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemologistapprentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorgetopgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidinglaketexoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpaddictions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometownusastores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteltravago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howsweettreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarmancertified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyeffort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchomes.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medihelp-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkuwqs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieszuzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydorway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panafricanenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personellservicecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playtamil.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reliasleaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigidconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segoinsulation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarschool.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swinginmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcumet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamworkathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treadbeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txsmartchildsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urologyassociatespc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wafyair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weightslim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witchbook.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189070507cc0000040300483046022100971dceb35f891651cd055b870efb4d69ada62a6c88c5cf4ee5af93d591307afd022100a084f3cc4c2d1e7c6d1318a761e92ef76f4fdc7a6c2cdaba2285194d25e12b0b007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001890705098a0000040300483046022100e2dffd1819012c581770909c6cea3fa94e72869eb2ed80830ae9cdce7111eacd022100e480d3a45a6b63ed3e165214f3aee8b49fda478044ff3423bf55ffd26a4585a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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