legistlation.com

Issued by R3

About this certificate

This digital certificate with serial number 03:fe:cd:03:e3:e5:6c:80:78:18:50:7d:17:56:7b:08:50:9a was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legistlation.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:cd:03:e3:e5:6c:80:78:18:50:7d:17:56:7b:08:50:9a
Serial Number (int): 348041090931509401953390849938699592421530
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:dd:5d:e4:de:3e:e1:73:be:0f:0f:2a:6b:b8:d1:4d:0e:c5:04:a0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:78:93:3b:de:18:3e:ab:cb:11:99:08:81:d5:b3:e3:ec:39:77:33
Fingerprint (sha256): 58:d3:52:b8:ad:82:21:58:42:69:fb:61:16:b1:30:3f:aa:ce:60:1d:4d:ac:e3:4e:5e:e9:d4:bd:84:b6:39:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate legistlation.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legistlation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

911coverup.net
africaneconomicoutlook.net
agentsltd.com
aimachinelearning.net
anguillafinance.com
boogiehd.com
brasiltrending.com
chinaafricandevfunds.com
chineseafricandevfunds.com
coloradoseismic.com
commodityby.net
constructioncompaniesinuae.com
domainintelligence.net
dubaibag.com
enotaire.org
foodfunny.net
footsoldiers.net
holidaysinuae.com
ibbsolar.com
importexcel.com
innovationphilippines.com
jewishnation.net
lawcayenne.com
legistlation.com
liverpoolenergy.com
llcstaff.com
manhattanstaff.com
manilainteractive.com
marineholdingtanks.com
minskcafe.com
motorsuperbike.com
offshoreguaranty.com
offshoresalvage.net
offshorestuff.com
olimpiade.net
onlinelotterychina.com
orleansbusiness.com
outdoorbirmingham.com
pariscatering.com
royalbitcoinexchange.com
royalfamilyprivate.net
schoolfortraders.com
semisubmersibleoilrig.com
sipingtechnology.com
tamilenglish.com
tamilprivate.com
theancientgreeks.com
tokenfarming.com
www.aimachinelearning.net
www.boogiehd.com
www.brasiltrending.com
www.caribbeandancing.com
www.chinaafricadevelopmentfunds.com
www.chinaafricandevfunds.com
www.coloradoseismic.com
www.commodityby.net
www.conferencewomen.com
www.constructioncompaniesinuae.com
www.domainintelligence.net
www.dubaibag.com
www.foodfunny.net
www.holidaysinuae.com
www.homeenergysystem.com
www.ibbsolar.com
www.importexcel.com
www.jewishnation.net
www.lawskopje.com
www.liverpoolenergy.com
www.llcstaff.com
www.manhattanstaff.com
www.manilainteractive.com
www.minskcafe.com
www.motorsuperbike.com
www.northcarolinawaste.com
www.offshoresalvage.net
www.offshorestuff.com
www.oiltradingltd.com
www.olimpiade.net
www.outdoorisrael.com
www.pariscatering.com
www.playlistsongs.com
www.quarterlyearning.com
www.resourcesschool.com
www.royalfamilyprivate.net
www.salvadorbusiness.com
www.schoolfortraders.com
www.semisubmersibleoilrig.com
www.sipingtechnology.com
www.sportlicence.com
www.subseattorney.com
www.theancientgreeks.com
www.tokendreaming.com

Other certificates including the domain name legistlation.com

(limited to 100 certificates)
www.deepwateraccommodation.net
www.manilainteractive.com
www.pariscatering.com
riginstallation.com
riginstallation.com
www.boogiehd.com
www.physicalregeneration.net
colonialdomination.net
www.floatingaccommodation.net
www.sipingtechnology.com
offshorescaffolding.net
theancientgreeks.com
royalfamilyprivatewealth.net
www.amsterdamrehab.com
www.manilainteractive.com
www.blockchaincareers.net
energyregeneration.net
foodfunny.net
www.adelaidecar.com
energyregeneration.net
www.tissueregeneration.net
dubaicivilaviation.com
www.solarpowerbroadband.com
911coverup.net
911coverup.net
www.interestspeculation.com
holidaysinuae.com
www.footsoldiers.net
fleecefabrication.net
adelaidecar.com
www.dronemining.org
www.female-genital-mutilation.com
worldrecruiting.net
www.chittagongbitcoin.com
domainintelligence.net
tamilenglish.com
legistlation.com
manilatraveller.com
floatingaccommodation.net
floatingaccommodation.net
royalbitcoinexchange.com
royalfamilyprivate.net
www.female-genital-mutilation.com
www.bespokeeventscompany.com
www.footsoldiers.net
semisubmersibleoilrig.com
riginstallation.com
alloffshoreinstallation.com
tamilenglish.com
www.solarpowerbroadband.com
holidaysinuae.com
manilatraveller.com
www.playlistsongs.com
dubaicivilaviation.com
manilatraveller.com
adelaidecar.com
tamilnadustate.com
squareshanghai.com
www.amsterdamrehab.com
www.installation.com
www.constructionships.net
www.blackpublicrelation.com
maritimetransportation.net
www.physicalregeneration.net
www.bespokegiftcompany.com
sipingtechnology.com
squareshanghai.com
www.legistlation.com
tamilprivate.com
www.aseaconstructioninstallation.com
globalsolarinstallation.com
www.consumerinflation.com
www.playlistsongs.com
www.coastalaccommodation.net
singaporegrowing.net
www.blockchaincareers.net
ibbsolar.com
www.gulfaccommodation.net
www.blackpublicrelation.com
amsterdamrehab.com
blockchainmonaco.net
singaporegrowing.net
www.physicalregeneration.net
www.female-genital-mutilation.com
abudhabilifestyle.com
constructioncompaniesinuae.com
boogiehd.com
manilatraveller.com
www.theancientgreeks.com
www.maritimetransportation.net
comanchenation.net
holidaysinuae.com
ultradeepwaterpipelineinstallation.com
riginstallation.com
www.aimachinelearning.net
www.spreadingdisinformation.net
www.floatingaccommodation.net
www.quarterlyearning.com
www.dronemining.org
www.amsterdamrehab.com

Certificate

The complete raw certificate details for legistlation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM2jCCC8KgAwIBAgISA/7NA+PlbIB4GFB9F1Z7CFCaMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjcxMTM3NThaFw0yNDAzMjYxMTM3NTdaMBsxGTAXBgNVBAMT
EGxlZ2lzdGxhdGlvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/6uRR+uKJ4S9/LINCu2KAbwoAnha47Whn3qsHkqpJtd4yoOEqNPqzHkYhFmVq
dpkjmFXiECgNU+psoDx5bOFsBbDK/7yX2rBW3zRmJukkEJHhmPn75dYeZwGQn6Ng
+x4v8H1Ac7x4YlARn6B+yBrkUQ4uI3n/OeGDHu8bb0M2X+SDxgaxyk0QcJGdhN0O
EQs+EBQX2tzedSW2WusIoYgrBpocsnxC2ms1W1QiSaRpAHVQsSWbpKCYkxuBmXtJ
/9+iNqUgnHHh6jI6ldwRAFfkpJO5yXcJx2KQ58WrWZKykbJUV7yQHfZV2mL+z3Dl
r+nikH5gUMzvGMtEAjycLy4pAgMBAAGjggn/MIIJ+zAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFEXdXeTePuFzvg8PKmu40U0OxQSgMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIIIBwYDVR0RBIIH/jCCB/qCDjkxMWNvdmVydXAubmV0ghphZnJpY2FuZWNv
bm9taWNvdXRsb29rLm5ldIINYWdlbnRzbHRkLmNvbYIVYWltYWNoaW5lbGVhcm5p
bmcubmV0ghNhbmd1aWxsYWZpbmFuY2UuY29tggxib29naWVoZC5jb22CEmJyYXNp
bHRyZW5kaW5nLmNvbYIYY2hpbmFhZnJpY2FuZGV2ZnVuZHMuY29tghpjaGluZXNl
YWZyaWNhbmRldmZ1bmRzLmNvbYITY29sb3JhZG9zZWlzbWljLmNvbYIPY29tbW9k
aXR5YnkubmV0gh5jb25zdHJ1Y3Rpb25jb21wYW5pZXNpbnVhZS5jb22CFmRvbWFp
bmludGVsbGlnZW5jZS5uZXSCDGR1YmFpYmFnLmNvbYIMZW5vdGFpcmUub3Jngg1m
b29kZnVubnkubmV0ghBmb290c29sZGllcnMubmV0ghFob2xpZGF5c2ludWFlLmNv
bYIMaWJic29sYXIuY29tgg9pbXBvcnRleGNlbC5jb22CGWlubm92YXRpb25waGls
aXBwaW5lcy5jb22CEGpld2lzaG5hdGlvbi5uZXSCDmxhd2NheWVubmUuY29tghBs
ZWdpc3RsYXRpb24uY29tghNsaXZlcnBvb2xlbmVyZ3kuY29tggxsbGNzdGFmZi5j
b22CEm1hbmhhdHRhbnN0YWZmLmNvbYIVbWFuaWxhaW50ZXJhY3RpdmUuY29tghZt
YXJpbmVob2xkaW5ndGFua3MuY29tgg1taW5za2NhZmUuY29tghJtb3RvcnN1cGVy
YmlrZS5jb22CFG9mZnNob3JlZ3VhcmFudHkuY29tghNvZmZzaG9yZXNhbHZhZ2Uu
bmV0ghFvZmZzaG9yZXN0dWZmLmNvbYINb2xpbXBpYWRlLm5ldIIWb25saW5lbG90
dGVyeWNoaW5hLmNvbYITb3JsZWFuc2J1c2luZXNzLmNvbYIVb3V0ZG9vcmJpcm1p
bmdoYW0uY29tghFwYXJpc2NhdGVyaW5nLmNvbYIYcm95YWxiaXRjb2luZXhjaGFu
Z2UuY29tghZyb3lhbGZhbWlseXByaXZhdGUubmV0ghRzY2hvb2xmb3J0cmFkZXJz
LmNvbYIZc2VtaXN1Ym1lcnNpYmxlb2lscmlnLmNvbYIUc2lwaW5ndGVjaG5vbG9n
eS5jb22CEHRhbWlsZW5nbGlzaC5jb22CEHRhbWlscHJpdmF0ZS5jb22CFHRoZWFu
Y2llbnRncmVla3MuY29tghB0b2tlbmZhcm1pbmcuY29tghl3d3cuYWltYWNoaW5l
bGVhcm5pbmcubmV0ghB3d3cuYm9vZ2llaGQuY29tghZ3d3cuYnJhc2lsdHJlbmRp
bmcuY29tghh3d3cuY2FyaWJiZWFuZGFuY2luZy5jb22CI3d3dy5jaGluYWFmcmlj
YWRldmVsb3BtZW50ZnVuZHMuY29tghx3d3cuY2hpbmFhZnJpY2FuZGV2ZnVuZHMu
Y29tghd3d3cuY29sb3JhZG9zZWlzbWljLmNvbYITd3d3LmNvbW1vZGl0eWJ5Lm5l
dIIXd3d3LmNvbmZlcmVuY2V3b21lbi5jb22CInd3dy5jb25zdHJ1Y3Rpb25jb21w
YW5pZXNpbnVhZS5jb22CGnd3dy5kb21haW5pbnRlbGxpZ2VuY2UubmV0ghB3d3cu
ZHViYWliYWcuY29tghF3d3cuZm9vZGZ1bm55Lm5ldIIVd3d3LmhvbGlkYXlzaW51
YWUuY29tghh3d3cuaG9tZWVuZXJneXN5c3RlbS5jb22CEHd3dy5pYmJzb2xhci5j
b22CE3d3dy5pbXBvcnRleGNlbC5jb22CFHd3dy5qZXdpc2huYXRpb24ubmV0ghF3
d3cubGF3c2tvcGplLmNvbYIXd3d3LmxpdmVycG9vbGVuZXJneS5jb22CEHd3dy5s
bGNzdGFmZi5jb22CFnd3dy5tYW5oYXR0YW5zdGFmZi5jb22CGXd3dy5tYW5pbGFp
bnRlcmFjdGl2ZS5jb22CEXd3dy5taW5za2NhZmUuY29tghZ3d3cubW90b3JzdXBl
cmJpa2UuY29tghp3d3cubm9ydGhjYXJvbGluYXdhc3RlLmNvbYIXd3d3Lm9mZnNo
b3Jlc2FsdmFnZS5uZXSCFXd3dy5vZmZzaG9yZXN0dWZmLmNvbYIVd3d3Lm9pbHRy
YWRpbmdsdGQuY29tghF3d3cub2xpbXBpYWRlLm5ldIIVd3d3Lm91dGRvb3Jpc3Jh
ZWwuY29tghV3d3cucGFyaXNjYXRlcmluZy5jb22CFXd3dy5wbGF5bGlzdHNvbmdz
LmNvbYIYd3d3LnF1YXJ0ZXJseWVhcm5pbmcuY29tghd3d3cucmVzb3VyY2Vzc2No
b29sLmNvbYIad3d3LnJveWFsZmFtaWx5cHJpdmF0ZS5uZXSCGHd3dy5zYWx2YWRv
cmJ1c2luZXNzLmNvbYIYd3d3LnNjaG9vbGZvcnRyYWRlcnMuY29tgh13d3cuc2Vt
aXN1Ym1lcnNpYmxlb2lscmlnLmNvbYIYd3d3LnNpcGluZ3RlY2hub2xvZ3kuY29t
ghR3d3cuc3BvcnRsaWNlbmNlLmNvbYIVd3d3LnN1YnNlYXR0b3JuZXkuY29tghh3
d3cudGhlYW5jaWVudGdyZWVrcy5jb22CFXd3dy50b2tlbmRyZWFtaW5nLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjKtIGokAAAQDAEcwRQIh
AIvTRGCG3bMZJwwWy+Y2sL/Fz1VBQfGgTrl1xQAJSPKmAiADmk9HL+OPRix3DjqT
tsu6ZHs8cAhv9CbGgZUsE7j49wB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0t
cm/h+tQXAAABjKtIGo8AAAQDAEYwRAIgKseU5l9r+FgfnpHiuFHKdjgSj71K3dyP
w4oHYQo8QFoCICdC8EGPWIdHjx05PLyiN3u6pBUUkjadhZBUQLLDgXnbMA0GCSqG
SIb3DQEBCwUAA4IBAQATPt+t04POoIG/U4h6vV+ICCDRLvszhq5O7VFwIkn0yz5u
Sw+IkRB8ucKPdOv3tkfiPjy5K+4QbvJNV8pJrwCIwLBlRoq+5eXXNKKG3L2dn/CD
qHpkZjnpGZQqX5v7ntC31cKtw5GN7TVqTBix2mbtPt65MW0b/gx0fiZ313lheQTQ
pGoVS9BamZk+ReccnVn2e2gWYP0ByNWwKiupYBUUBSnea6IlbU3ObHVVPs4JpF0w
ZMa1aGJXJkTInO9f2LmBFmV8CMiMok4mCOcw0krAXTXZxxUAv2f/d+dbsotSC15Z
5ZDdDTJVzEvwMyS6CxYR5/VpZpDW3k9DG9yZc7b5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+rkUfriieEvfyyDQrti
gG8KAJ4WuO1oZ96rB5KqSbXeMqDhKjT6sx5GIRZlanaZI5hV4hAoDVPqbKA8eWzh
bAWwyv+8l9qwVt80ZibpJBCR4Zj5++XWHmcBkJ+jYPseL/B9QHO8eGJQEZ+gfsga
5FEOLiN5/znhgx7vG29DNl/kg8YGscpNEHCRnYTdDhELPhAUF9rc3nUltlrrCKGI
KwaaHLJ8QtprNVtUIkmkaQB1ULElm6SgmJMbgZl7Sf/fojalIJxx4eoyOpXcEQBX
5KSTucl3CcdikOfFq1mSspGyVFe8kB32Vdpi/s9w5a/p4pB+YFDM7xjLRAI8nC8u
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348041090931509401953390849938699592421530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 11:37:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 11:37:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legistlation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24227345749555911438807811743625492153242612089523154376407070452773581510157701020928314547189856460300830343288274201773360532273229469601392767952646622652845576642995334891731744575888320090982694884862523760397128280069304486640855869093613119589793135993896253893647664443304416252233930830607814365513547601533165023402705647163699983684824666966451929048908866496497233569053119794172084130271800343017557051724741748681400616044089874398169958738794621703668399909664195248067958380083735632344720884015453162552172382686799641327373815846022599210229275043284636063716984148836826361206369108810082699652649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45dd5de4de3ee173be0f0f2a6bb8d14d0ec504a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2046 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '911coverup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africaneconomicoutlook.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentsltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimachinelearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anguillafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boogiehd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasiltrending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaafricandevfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chineseafricandevfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoseismic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityby.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructioncompaniesinuae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainintelligence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaibag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enotaire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodfunny.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footsoldiers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidaysinuae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibbsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'importexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovationphilippines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewishnation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawcayenne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legistlation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liverpoolenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llcstaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattanstaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manilainteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marineholdingtanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minskcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorsuperbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreguaranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoresalvage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorestuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olimpiade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinelotterychina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orleansbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoorbirmingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pariscatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalbitcoinexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalfamilyprivate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolfortraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamilenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamilprivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theancientgreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenfarming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimachinelearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boogiehd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brasiltrending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caribbeandancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaafricadevelopmentfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinaafricandevfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoseismic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commodityby.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conferencewomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.constructioncompaniesinuae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainintelligence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubaibag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodfunny.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holidaysinuae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeenergysystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibbsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.importexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jewishnation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawskopje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liverpoolenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llcstaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manhattanstaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manilainteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minskcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motorsuperbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcarolinawaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoresalvage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorestuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oiltradingltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olimpiade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outdoorisrael.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pariscatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playlistsongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quarterlyearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcesschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalfamilyprivate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salvadorbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolfortraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semisubmersibleoilrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sipingtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportlicence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subseattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theancientgreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokendreaming.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cab481a8900000403004730450221008bd3446086ddb319270c16cbe636b0bfc5cf554141f1a04eb975c5000948f2a60220039a4f472fe38f462c770e3a93b6cbba647b3c70086ff426c681952c13b8f8f70075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cab481a8f000004030046304402202ac794e65f6bf8581f9e91e2b851ca7638128fbd4adddc8fc38a07610a3c405a02202742f0418f5887478f1d393cbca2377bbaa4151492369d85905440b2c38179db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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