kvr-movie.com

Issued by R3

About this certificate

This digital certificate with serial number 03:18:b3:ce:27:40:ea:dd:92:5b:ee:62:35:a7:54:d9:1b:a7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kvr-movie.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:18:b3:ce:27:40:ea:dd:92:5b:ee:62:35:a7:54:d9:1b:a7
Serial Number (int): 269742636821938885478127679111650560514983
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:e1:7e:89:22:d2:44:13:5a:6d:19:ce:41:1f:4e:6d:c7:b4:17:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:8c:1a:27:f0:ea:ee:b2:81:fe:41:dc:e1:3e:e2:64:5f:14:70:68
Fingerprint (sha256): 59:69:e1:f5:25:d4:d9:46:7a:03:65:c2:d3:c7:fd:04:81:55:45:d4:69:68:78:94:42:6b:ef:a8:a2:2a:31:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kvr-movie.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kvr-movie.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.15-horas.de
*.1plc.de
*.3dzgroup.de
*.7meiia.de
*.aalphabet.com
*.abriram.de
*.alemu.com
*.ampong.com
*.annapoorani.com
*.apophasis.com
*.aprooo.de
*.bacbo.com
*.bajrami.com
*.bestlien.com
*.burquest.com
*.chleuh.com
*.citels.com
*.cochonnet.com
*.commanet.org
*.crispypink.de
*.dkwatch.com
*.ebbbay.de
*.eletrohouse.com
*.elvena.com
*.espiritos.com
*.fietsroutes.net
*.gulver.com
*.jevansaathi.com
*.kabaren.com
*.ksrv.com
*.kvr-movie.com
*.mickelsenglass.com
*.mismaterias.com
*.nncomic.com
*.nytes.com
*.ourgarud.com
*.parfumes.store
*.partyinheaven.com
*.pixelect.com
*.playadelesteresort.com
*.protraction.com
*.removalcosts.com
*.shafina.com
*.sheppartonpetrolprices.com.au
*.shivaun.com
*.tacas.com
*.thementallyill.com
*.weiki.com
*.westsideoptometry.com
*.www-philips.com
15-horas.de
1plc.de
3dzgroup.de
7meiia.de
aalphabet.com
abriram.de
alemu.com
ampong.com
annapoorani.com
apophasis.com
aprooo.de
bacbo.com
bajrami.com
bestlien.com
burquest.com
chleuh.com
citels.com
cochonnet.com
commanet.org
crispypink.de
dkwatch.com
ebbbay.de
eletrohouse.com
elvena.com
espiritos.com
fietsroutes.net
gulver.com
jevansaathi.com
kabaren.com
ksrv.com
kvr-movie.com
mickelsenglass.com
mismaterias.com
nncomic.com
nytes.com
ourgarud.com
parfumes.store
partyinheaven.com
pixelect.com
playadelesteresort.com
protraction.com
removalcosts.com
shafina.com
sheppartonpetrolprices.com.au
shivaun.com
tacas.com
thementallyill.com
weiki.com
westsideoptometry.com
www-philips.com

Other certificates including the domain name kvr-movie.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kvr-movie.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL+zCCCuOgAwIBAgISAxizzidA6t2SW+5iNadU2RunMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MTQyMjE4MzNaFw0yNDA4MTIyMjE4MzJaMBgxFjAUBgNVBAMT
DWt2ci1tb3ZpZS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDP
RMSPCpV1RofT0dgzs+z3kkr8RcWE0mNP4tv6GnCn2YPfVcbajgX7qkzKO8BUwQOJ
8ZhTuyyctl3YM9Hpo9K3XTJOM8ZaxQUmLvfuS98Xok9uU8i2XfDkIdPxx/3RQuRr
FqAKCKXWckQtau09MlhDrG3K1A5GkK2vthBmfPEqcAZvvASH03IGqybCoTSLa+Z1
zLPEMpENHVxQujNyqqvKWssGAGiUCS1qrEElNEEybrfC/WeMvfTFdckDp7bd8jtF
/0Sp5naAX+wv1RREi8CMSf1ovi6SQDXUx9EJhsdZ98EmMpOdx06jLXrGjk51iY20
TtjAqlQC+0whD07sGmj4Kp5m6pC6m18isgniaLMwMZ/6RpGxkbKdsxk0Cyxx1dnx
AVTaCfWe5Jb1VZJ7My+Np3JUEW9hEPI+xEoW3tb5PnjHOkOlUQs7eRu2AIAa9fSH
KGous8DWDyS1zlKhh+uLAaQqwIxAeBhv7AjW2KYR6NijaTSiWGu6ULAq7unjdI/W
Q/AAUAYtHnWyUm+hsx07T3K73b1G5AcB4zSjH/EP+rSKvncxHZXMuTw+JrkJ34Cb
W+iMLJ+97r2GgOAC6zMquB/zaFnGmKKkelhkBiM5Bx78qPsrK5+0BLjt3EXwbZW+
lbTw/pTz65Sl9bE54PorhQlLCh1qke7MFYflM/W2QQIDAQABo4IIIzCCCB8wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBTY4X6JItJEE1ptGc5BH05tx7QXXDAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBisGA1UdEQSCBiIwggYegg0qLjE1LWhvcmFzLmRl
ggkqLjFwbGMuZGWCDSouM2R6Z3JvdXAuZGWCCyouN21laWlhLmRlgg8qLmFhbHBo
YWJldC5jb22CDCouYWJyaXJhbS5kZYILKi5hbGVtdS5jb22CDCouYW1wb25nLmNv
bYIRKi5hbm5hcG9vcmFuaS5jb22CDyouYXBvcGhhc2lzLmNvbYILKi5hcHJvb28u
ZGWCCyouYmFjYm8uY29tgg0qLmJhanJhbWkuY29tgg4qLmJlc3RsaWVuLmNvbYIO
Ki5idXJxdWVzdC5jb22CDCouY2hsZXVoLmNvbYIMKi5jaXRlbHMuY29tgg8qLmNv
Y2hvbm5ldC5jb22CDiouY29tbWFuZXQub3Jngg8qLmNyaXNweXBpbmsuZGWCDSou
ZGt3YXRjaC5jb22CCyouZWJiYmF5LmRlghEqLmVsZXRyb2hvdXNlLmNvbYIMKi5l
bHZlbmEuY29tgg8qLmVzcGlyaXRvcy5jb22CESouZmlldHNyb3V0ZXMubmV0ggwq
Lmd1bHZlci5jb22CESouamV2YW5zYWF0aGkuY29tgg0qLmthYmFyZW4uY29tggoq
LmtzcnYuY29tgg8qLmt2ci1tb3ZpZS5jb22CFCoubWlja2Vsc2VuZ2xhc3MuY29t
ghEqLm1pc21hdGVyaWFzLmNvbYINKi5ubmNvbWljLmNvbYILKi5ueXRlcy5jb22C
Dioub3VyZ2FydWQuY29tghAqLnBhcmZ1bWVzLnN0b3JlghMqLnBhcnR5aW5oZWF2
ZW4uY29tgg4qLnBpeGVsZWN0LmNvbYIYKi5wbGF5YWRlbGVzdGVyZXNvcnQuY29t
ghEqLnByb3RyYWN0aW9uLmNvbYISKi5yZW1vdmFsY29zdHMuY29tgg0qLnNoYWZp
bmEuY29tgh8qLnNoZXBwYXJ0b25wZXRyb2xwcmljZXMuY29tLmF1gg0qLnNoaXZh
dW4uY29tggsqLnRhY2FzLmNvbYIUKi50aGVtZW50YWxseWlsbC5jb22CCyoud2Vp
a2kuY29tghcqLndlc3RzaWRlb3B0b21ldHJ5LmNvbYIRKi53d3ctcGhpbGlwcy5j
b22CCzE1LWhvcmFzLmRlggcxcGxjLmRlggszZHpncm91cC5kZYIJN21laWlhLmRl
gg1hYWxwaGFiZXQuY29tggphYnJpcmFtLmRlgglhbGVtdS5jb22CCmFtcG9uZy5j
b22CD2FubmFwb29yYW5pLmNvbYINYXBvcGhhc2lzLmNvbYIJYXByb29vLmRlggli
YWNiby5jb22CC2JhanJhbWkuY29tggxiZXN0bGllbi5jb22CDGJ1cnF1ZXN0LmNv
bYIKY2hsZXVoLmNvbYIKY2l0ZWxzLmNvbYINY29jaG9ubmV0LmNvbYIMY29tbWFu
ZXQub3Jngg1jcmlzcHlwaW5rLmRlggtka3dhdGNoLmNvbYIJZWJiYmF5LmRlgg9l
bGV0cm9ob3VzZS5jb22CCmVsdmVuYS5jb22CDWVzcGlyaXRvcy5jb22CD2ZpZXRz
cm91dGVzLm5ldIIKZ3VsdmVyLmNvbYIPamV2YW5zYWF0aGkuY29tggtrYWJhcmVu
LmNvbYIIa3Nydi5jb22CDWt2ci1tb3ZpZS5jb22CEm1pY2tlbHNlbmdsYXNzLmNv
bYIPbWlzbWF0ZXJpYXMuY29tggtubmNvbWljLmNvbYIJbnl0ZXMuY29tggxvdXJn
YXJ1ZC5jb22CDnBhcmZ1bWVzLnN0b3JlghFwYXJ0eWluaGVhdmVuLmNvbYIMcGl4
ZWxlY3QuY29tghZwbGF5YWRlbGVzdGVyZXNvcnQuY29tgg9wcm90cmFjdGlvbi5j
b22CEHJlbW92YWxjb3N0cy5jb22CC3NoYWZpbmEuY29tgh1zaGVwcGFydG9ucGV0
cm9scHJpY2VzLmNvbS5hdYILc2hpdmF1bi5jb22CCXRhY2FzLmNvbYISdGhlbWVu
dGFsbHlpbGwuY29tggl3ZWlraS5jb22CFXdlc3RzaWRlb3B0b21ldHJ5LmNvbYIP
d3d3LXBoaWxpcHMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHUAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4A
AAGPeWaI/AAABAMARjBEAiBcPLUFk7fOdh8Vm7iR9U8+phHoQyjYGVUq28M8YyYQ
3wIgHQQA1roleZxgMTa0qghZDbwqBdb81+HulRa8k+RGWPcAdgAZmBBxCfDWUi4w
gNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY95ZokZAAAEAwBHMEUCIQCfLXIkdf+a
bvYW+Pt7RnZEeX/YpLXNJCsNOs6hspsobAIgErzanb1TSQAI8VQm60NtgxURs8j7
tWCsvFi/W8Unx1IwDQYJKoZIhvcNAQELBQADggEBAEwHH+PDNWVgSSDEeJV0STfs
Y0Orx4oSsaOeBRjIkjaOBz2r2+8v7QxAK55wDU8KT0Rm9cX97+OByVdMECcFVaeg
sdxowX5SZuN9fyq5o4FLIR11N7Qb1gBrbD2Ov1sjrmN+3L0tKdS7Cjc2rQcDjWvx
J4/G04dp2ivBe13Db+N6gyoK7lzxMZ0AOMLd+5M13ozLjv4VQFyoIT5WZIfJwriU
DUXlna2JXIRg9uTjlm4ONfSxl6+GjzonIkXRr6Nd+JO8UFH5SPSAjXVUulVKwdcd
QKziftwe1Ljz9IQe01ArSNNTg8rppRg8YRI0rEamLA/zIcaetJnDUsP4JINzXOo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269742636821938885478127679111650560514983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 22:18:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 22:18:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kvr-movie.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845582213402431182007370366455770017840119068195796617295218712898111218546008484213384960131571883102304727334886176245134389611133949415900230557538979425220452955148322496355654042323102699868194824310462850060327739618132475675639677047455207088296857269900332277023953528149064253992289918487224904365936751402880229778453856961740544253364890507033797817705647441134416480793164084763116363518214919111790682154067892158319639413204911097976219211695916939126539043262625303625684609106080371363037010335822835530335107064501588403193672785259677396134182636111817471375989930835827189045547856302665099261624794909460376266351086078734154280823940378992631059790656072178440739771166910777638079717589288308776184842292653369556906106168642271967051601649956402960735677883449031195356339560751607691837454204158502126035548732441048979627920594753226946524767914061871597768463734034065894167956852537199124147775983898356813505685111878346404155449173815787645339663721260140062378792360341589551827175928211622785913015461335594144252650710570779068584851072058145252970214280687988709381805042724994200803622717725543227963942952264074562575607905318447323945606850358899081308468080085868740724968379532558015872867087937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8e17e8922d244135a6d19ce411f4e6dc7b4175c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.15-horas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1plc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dzgroup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7meiia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aalphabet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abriram.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annapoorani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apophasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprooo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bacbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bajrami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestlien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chleuh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cochonnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crispypink.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dkwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebbbay.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eletrohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elvena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espiritos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fietsroutes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jevansaathi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kabaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ksrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kvr-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mickelsenglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mismaterias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nncomic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nytes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourgarud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parfumes.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partyinheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playadelesteresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.removalcosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shafina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheppartonpetrolprices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shivaun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tacas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thementallyill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westsideoptometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '15-horas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1plc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dzgroup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7meiia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aalphabet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abriram.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annapoorani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apophasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprooo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bajrami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestlien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chleuh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cochonnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crispypink.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebbbay.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eletrohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espiritos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fietsroutes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jevansaathi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kvr-movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mickelsenglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mismaterias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nncomic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nytes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourgarud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parfumes.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyinheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playadelesteresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removalcosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shafina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheppartonpetrolprices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shivaun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thementallyill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westsideoptometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-philips.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f796688fc000004030046304402205c3cb50593b7ce761f159bb891f54f3ea611e84328d819552adbc33c632610df02201d0400d6ba25799c603136b4aa08590dbc2a05d6fcd7e1ee9516bc93e44658f70076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f7966891900000403004730450221009f2d722475ff9a6ef616f8fb7b467644797fd8a4b5cd242b0d3acea1b29b286c022012bcda9dbd53490008f15426eb436d831511b3c8fbb560acbc58bf5bc527c752
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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