stockhedger.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6a:83:ab:f7:2f:fd:fa:d8:17:30:60:70:93:c0:7b:78:65 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stockhedger.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:6a:83:ab:f7:2f:fd:fa:d8:17:30:60:70:93:c0:7b:78:65
Serial Number (int): 384694096384428595848019827702645942614117
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:09:be:58:91:4d:6c:63:c1:58:62:4f:40:eb:01:44:b3:95:b0:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 77:9d:34:47:85:7e:43:9a:a3:5f:f3:9a:31:ff:51:da:9d:dd:c7:3b
Fingerprint (sha256): 5a:aa:37:84:63:6b:2e:7f:ac:6f:f7:03:9b:ee:60:8a:19:20:39:a5:e6:7b:0e:44:54:98:2f:8c:9b:9b:de:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stockhedger.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stockhedger.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123movis.com
*.alliancearmament.com
*.avtivaterewards.com
*.blenderizeddiet.com
*.bmwsterling.com
*.botanicbrasil.com
*.capione.com
*.carprt.com
*.chemoneresearch.com
*.cubhousingsolutions.com
*.dupicolor.com
*.emailsrve.com
*.faringtonuniversity.org
*.funny-time.de
*.gotigergo.com
*.gurneyjourney.com
*.jcomcast.net
*.jjcpenneys.com
*.jukur.com
*.linencupboard.com.au
*.lirio.es
*.luigisdeliconcord.com
*.myspacebook.com
*.onlinemoviewatches.com
*.pegi2.com
*.pokemonplanet.com
*.questdiagontics.com
*.rarevideosfree.com
*.rekupera.com
*.rppurchase.com
*.rundfunkbeitra.de
*.shocking.au
*.smartdogscomfort.com
*.spprev.com
*.stockhedger.com
*.stupidrichlife.com
*.takeascreenshot.org
*.tarif-pool.de
*.termoglas.com
*.tinyuyrl.com
*.tonymac86.com
*.traliexpress.com
*.truly.com.au
*.wageowrks.com
*.walmart-gift.com
*.wenxuevity.com
*.www-lotto-bayern.de
*.wwwbexar.org
*.wwwstatefarmbenefits.com
*.youjuz.com
123movis.com
alliancearmament.com
avtivaterewards.com
blenderizeddiet.com
bmwsterling.com
botanicbrasil.com
capione.com
carprt.com
chemoneresearch.com
cubhousingsolutions.com
dupicolor.com
emailsrve.com
faringtonuniversity.org
funny-time.de
gotigergo.com
gurneyjourney.com
jcomcast.net
jjcpenneys.com
jukur.com
linencupboard.com.au
lirio.es
luigisdeliconcord.com
myspacebook.com
onlinemoviewatches.com
pegi2.com
pokemonplanet.com
questdiagontics.com
rarevideosfree.com
rekupera.com
rppurchase.com
rundfunkbeitra.de
shocking.au
smartdogscomfort.com
spprev.com
stockhedger.com
stupidrichlife.com
takeascreenshot.org
tarif-pool.de
termoglas.com
tinyuyrl.com
tonymac86.com
traliexpress.com
truly.com.au
wageowrks.com
walmart-gift.com
wenxuevity.com
www-lotto-bayern.de
wwwbexar.org
wwwstatefarmbenefits.com
youjuz.com

Other certificates including the domain name stockhedger.com

(limited to 100 certificates)
stigleycabinets.com
stockhedger.com
stockhedger.com
stigleycabinets.com
stigleycabinets.com
stigleycabinets.com
stigleycabinets.com

Certificate

The complete raw certificate details for stockhedger.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINBjCCC+6gAwIBAgISBGqDq/cv/frYFzBgcJPAe3hlMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTMwNTE4NTNaFw0yNDA2MTEwNTE4NTJaMBoxGDAWBgNVBAMT
D3N0b2NraGVkZ2VyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
ALQ00b25A6pWX5Nm/XHReCQbTCi6wVK3XCgpUcSmnU6+0oL/ZwCjorai+RWDEkBy
vwftY8H5DCw9+u8qM1FxDprlBLxjstJ3ifJvZRWxADZA0x86S5rfRM2iKy87bIwo
P1lh0YKfDi5srpp42EfsQShD/7Y1f7dfj9LtrrCOANPehukQ2ydtd2DMo73q58Qv
6fpf0V85Pqd8mnZ2tjp8x4GPhb4lnr1vCw0M5g/vYGlcOPoeH5CEAGxw9PLYElRd
Fffxjj5rqMuYMAEjUhTo0ygORLzp97K3qzeMJNSE7SAZjqlAcJ2v1eDoPZwAxjK5
IWTaVDocPw0j8fcxMxR35R8XnFWghghd2J5tAklsBJtzxNkFBfmeWTCsu9m2QuhE
hDtaOVWmRp/4XAiSdKX/enZUTdLXpcnLTLa4NIb6n5si2Oczvr8nkfM7ZURglSGE
7/Foq1GscjNdhJDenFhnpFMvZnX/HQUOA2/uUnLLpOz6YwGwe/LmpWx/wB5noSCl
G7B3PYmLP+X1cMBcuTZKIgvINyVFOFTeebaTMXVWctbm4o9qP4mMeMPVXSW66Xwf
pfp9YQKSWB+mbzWmXvaDk//l4R2Y/EkJ5uB5WLfMPi2+vXwHW7Fvmvp9YUcZ2ene
DNjqyk88yH7fPDrO9tPh72Pd8tZjU8zh9dAjvOcXYaPxAgMBAAGjggksMIIJKDAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAUJvliRTWxjwVhiT0DrAUSzlbDiMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMIIHMQYDVR0RBIIHKDCCBySCDiouMTIzbW92aXMu
Y29tghYqLmFsbGlhbmNlYXJtYW1lbnQuY29tghUqLmF2dGl2YXRlcmV3YXJkcy5j
b22CFSouYmxlbmRlcml6ZWRkaWV0LmNvbYIRKi5ibXdzdGVybGluZy5jb22CEyou
Ym90YW5pY2JyYXNpbC5jb22CDSouY2FwaW9uZS5jb22CDCouY2FycHJ0LmNvbYIV
Ki5jaGVtb25lcmVzZWFyY2guY29tghkqLmN1YmhvdXNpbmdzb2x1dGlvbnMuY29t
gg8qLmR1cGljb2xvci5jb22CDyouZW1haWxzcnZlLmNvbYIZKi5mYXJpbmd0b251
bml2ZXJzaXR5Lm9yZ4IPKi5mdW5ueS10aW1lLmRlgg8qLmdvdGlnZXJnby5jb22C
EyouZ3VybmV5am91cm5leS5jb22CDiouamNvbWNhc3QubmV0ghAqLmpqY3Blbm5l
eXMuY29tggsqLmp1a3VyLmNvbYIWKi5saW5lbmN1cGJvYXJkLmNvbS5hdYIKKi5s
aXJpby5lc4IXKi5sdWlnaXNkZWxpY29uY29yZC5jb22CESoubXlzcGFjZWJvb2su
Y29tghgqLm9ubGluZW1vdmlld2F0Y2hlcy5jb22CCyoucGVnaTIuY29tghMqLnBv
a2Vtb25wbGFuZXQuY29tghUqLnF1ZXN0ZGlhZ29udGljcy5jb22CFCoucmFyZXZp
ZGVvc2ZyZWUuY29tgg4qLnJla3VwZXJhLmNvbYIQKi5ycHB1cmNoYXNlLmNvbYIT
Ki5ydW5kZnVua2JlaXRyYS5kZYINKi5zaG9ja2luZy5hdYIWKi5zbWFydGRvZ3Nj
b21mb3J0LmNvbYIMKi5zcHByZXYuY29tghEqLnN0b2NraGVkZ2VyLmNvbYIUKi5z
dHVwaWRyaWNobGlmZS5jb22CFSoudGFrZWFzY3JlZW5zaG90Lm9yZ4IPKi50YXJp
Zi1wb29sLmRlgg8qLnRlcm1vZ2xhcy5jb22CDioudGlueXV5cmwuY29tgg8qLnRv
bnltYWM4Ni5jb22CEioudHJhbGlleHByZXNzLmNvbYIOKi50cnVseS5jb20uYXWC
Dyoud2FnZW93cmtzLmNvbYISKi53YWxtYXJ0LWdpZnQuY29tghAqLndlbnh1ZXZp
dHkuY29tghUqLnd3dy1sb3R0by1iYXllcm4uZGWCDioud3d3YmV4YXIub3Jnghoq
Lnd3d3N0YXRlZmFybWJlbmVmaXRzLmNvbYIMKi55b3VqdXouY29tggwxMjNtb3Zp
cy5jb22CFGFsbGlhbmNlYXJtYW1lbnQuY29tghNhdnRpdmF0ZXJld2FyZHMuY29t
ghNibGVuZGVyaXplZGRpZXQuY29tgg9ibXdzdGVybGluZy5jb22CEWJvdGFuaWNi
cmFzaWwuY29tggtjYXBpb25lLmNvbYIKY2FycHJ0LmNvbYITY2hlbW9uZXJlc2Vh
cmNoLmNvbYIXY3ViaG91c2luZ3NvbHV0aW9ucy5jb22CDWR1cGljb2xvci5jb22C
DWVtYWlsc3J2ZS5jb22CF2ZhcmluZ3RvbnVuaXZlcnNpdHkub3Jngg1mdW5ueS10
aW1lLmRlgg1nb3RpZ2VyZ28uY29tghFndXJuZXlqb3VybmV5LmNvbYIMamNvbWNh
c3QubmV0gg5qamNwZW5uZXlzLmNvbYIJanVrdXIuY29tghRsaW5lbmN1cGJvYXJk
LmNvbS5hdYIIbGlyaW8uZXOCFWx1aWdpc2RlbGljb25jb3JkLmNvbYIPbXlzcGFj
ZWJvb2suY29tghZvbmxpbmVtb3ZpZXdhdGNoZXMuY29tgglwZWdpMi5jb22CEXBv
a2Vtb25wbGFuZXQuY29tghNxdWVzdGRpYWdvbnRpY3MuY29tghJyYXJldmlkZW9z
ZnJlZS5jb22CDHJla3VwZXJhLmNvbYIOcnBwdXJjaGFzZS5jb22CEXJ1bmRmdW5r
YmVpdHJhLmRlggtzaG9ja2luZy5hdYIUc21hcnRkb2dzY29tZm9ydC5jb22CCnNw
cHJldi5jb22CD3N0b2NraGVkZ2VyLmNvbYISc3R1cGlkcmljaGxpZmUuY29tghN0
YWtlYXNjcmVlbnNob3Qub3Jngg10YXJpZi1wb29sLmRlgg10ZXJtb2dsYXMuY29t
ggx0aW55dXlybC5jb22CDXRvbnltYWM4Ni5jb22CEHRyYWxpZXhwcmVzcy5jb22C
DHRydWx5LmNvbS5hdYINd2FnZW93cmtzLmNvbYIQd2FsbWFydC1naWZ0LmNvbYIO
d2VueHVldml0eS5jb22CE3d3dy1sb3R0by1iYXllcm4uZGWCDHd3d2JleGFyLm9y
Z4IYd3d3c3RhdGVmYXJtYmVuZWZpdHMuY29tggp5b3VqdXouY29tMBMGA1UdIAQM
MAowCAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAO1N3dT4tuYBO
izBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGONna5RQAABAMASDBGAiEAmv7sIdA3
Je1gvPi8ukP9jjZXPt1AfNbG/QsU9OqT+SACIQDaDWiF/P4xNZ6/i/3s8j7kI7W4
ikYHZxuthIUVaC1YywB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz
AAABjjZ2uVkAAAQDAEgwRgIhALSfLM4zzmwkVexB7Kqv5FoUNkcQHMIPcpoiP55G
5dF+AiEAj60jEKU4AqRVSy6Oe56otim3zynl7mLmGCWVDuW2ZB0wDQYJKoZIhvcN
AQELBQADggEBAJ2dn7n3vPETWTBUE0N6aNIdVnNC+qBByWWh4eyZNyB1KKEWyMhG
7cIAcmJ3hDSuDTIjQrv1eaq2NUiryoHtbwQkzgjiy1nLPQwUU5p3czpLLMHom2Of
jT5OglgjoW3penVprhauhi2xiIPzdVhgoih7Oky26cM0bGryB4+i0OXXamTXG7eP
ZZVJD+Igzfg89gdiNAk0Bvpmm+GuVYrQ396QSv37h6Nif4j8zy7EMxZs+6gQOVke
9Ta+03ynavnA507YVrl8sXKDsDSuJwLbXHEViRLsG+Ep7d7pMvV0Js7lgIMe3QOB
JbvQqT7GqJuf3oQ4f5/VqGDslrfvDYf0otQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384694096384428595848019827702645942614117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 05:18:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 05:18:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stockhedger.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735177666418513645411686574821099522198493585365813671759354358018866177232587734109294821648536069360510285461691549551834767670889251698106007131697852522366467159887170100746341871183212314243846928453799373163805273724749824309951161381460157944717897887954123651243801028892684549291766271016009124281445063064560452894993255873176322520802934013973761010756303837808661935033424335561134493876352451848140409495295060105236034513651336040389561763531408550169650959538026968351410389475514757629819136180665630507516653639226473579092588244938174049331337493887618433600809679740487203170010269750677838939039932501174168257392489928883820892896343389195268845559450026724308188045233280698446361860644433837384519981323078569965813782018137118729420067734788778615868032634912534674772417057681696755590262651032268937043081508223573196181504623614168336321869066227818753901637285181942792240345680301151731285008556664560568595264395454987617034251510479123590391009555038719696168940108105421204898420160453551253363226053028980407274636270787574427791000487696975611771145481190678084361036968949133968613882846075682584220328345724906087051815102249286325237755943774964168778351699044320031048213030455478818795220476913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0509be58914d6c63c158624f40eb0144b395b0e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1832 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123movis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alliancearmament.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avtivaterewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blenderizeddiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmwsterling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botanicbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carprt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chemoneresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cubhousingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dupicolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailsrve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faringtonuniversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funny-time.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotigergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurneyjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcomcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjcpenneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jukur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linencupboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lirio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luigisdeliconcord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myspacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinemoviewatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pegi2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokemonplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.questdiagontics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rarevideosfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rekupera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rppurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rundfunkbeitra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shocking.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartdogscomfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spprev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockhedger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stupidrichlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takeascreenshot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarif-pool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.termoglas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinyuyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonymac86.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wageowrks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmart-gift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wenxuevity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-lotto-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbexar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwstatefarmbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youjuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123movis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliancearmament.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtivaterewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenderizeddiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwsterling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carprt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemoneresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubhousingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupicolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailsrve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faringtonuniversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funny-time.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotigergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurneyjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcomcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjcpenneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jukur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linencupboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lirio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luigisdeliconcord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myspacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinemoviewatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegi2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemonplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questdiagontics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarevideosfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rekupera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rppurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rundfunkbeitra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shocking.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdogscomfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spprev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockhedger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stupidrichlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeascreenshot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarif-pool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termoglas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyuyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonymac86.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wageowrks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmart-gift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenxuevity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-lotto-bayern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbexar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwstatefarmbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youjuz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3676b94500000403004830460221009afeec21d03725ed60bcf8bcba43fd8e36573edd407cd6c6fd0b14f4ea93f920022100da0d6885fcfe31359ebf8bfdecf23ee423b5b88a4607671bad848515682d58cb00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e3676b9590000040300483046022100b49f2cce33ce6c2455ec41ecaaafe45a143647101cc20f729a223f9e46e5d17e0221008fad2310a53802a4554b2e8e7b9ea8b629b7cf29e5ee62e61825950ee5b6641d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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