gaiasurfhouse.com

Issued by R3

About this certificate

This digital certificate with serial number 04:40:bb:27:54:5d:6c:8e:61:b6:f9:78:60:e2:38:36:60:98 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gaiasurfhouse.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:bb:27:54:5d:6c:8e:61:b6:f9:78:60:e2:38:36:60:98
Serial Number (int): 370475985055894532705200919532134953541784
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 72:53:53:11:34:55:de:81:cb:d3:3d:97:e3:e3:b4:f2:18:14:7c:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:a8:eb:6f:d8:23:a7:fc:46:31:0a:6b:4c:bc:ef:e8:c9:83:82:f2
Fingerprint (sha256): 5e:e9:2c:f9:69:01:a5:e6:4d:ba:f7:6a:f2:ab:09:28:03:2d:1b:08:8e:d7:c1:be:f4:81:dc:ae:2a:55:7c:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gaiasurfhouse.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaiasurfhouse.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.644209.com
*.alwostaplas.com
*.anahuarquehotelcusco.com
*.atlantisinsurrection.com
*.attelage.net
*.axhadh.com
*.casinosgazette.com
*.cesartinoco.com
*.china-tai-e.com
*.cocaigi.com
*.dangkytenmien.com
*.deststores.com
*.dijanaphoto.com
*.easyhealthyskin.com
*.electricfireplacestore.com.au
*.embogareven.com
*.excellentsupplieslimited.com
*.ffburnfund.com
*.figarochicago.com
*.finefairbd.com
*.fordwindstarrecall.info
*.freepawpatrolprintables.com
*.gaiasurfhouse.com
*.gnishow.com
*.housecleaningsuperior.com
*.houstonhousingauthority.org
*.ia.cn
*.internationalwinnerscircle.com
*.jardinesenelparaiso.com
*.mediumwriterblog.com
*.mycampusnotes.com
*.orobosaikponmwen.com
*.pisosgranilite.com
*.rgmdistribuidora.com
*.roadwayinn.com
*.rocketlawer.com
*.roenskeep.net
*.scrapyoursocksoff.com.au
*.seriesonlinebr.me
*.sjabbo.net
*.srisharadawaterpurifiers.com
*.tadashi.com.au
*.takasu-pta.net
*.thepinkfork.com
*.toelatingsexamen.org
*.turfcheval.net
*.videostarsantandreu.com
*.villamaheswari.com
*.xgtongde.com
*.zzzfix.com
644209.com
alwostaplas.com
anahuarquehotelcusco.com
atlantisinsurrection.com
attelage.net
axhadh.com
casinosgazette.com
cesartinoco.com
china-tai-e.com
cocaigi.com
dangkytenmien.com
deststores.com
dijanaphoto.com
easyhealthyskin.com
electricfireplacestore.com.au
embogareven.com
excellentsupplieslimited.com
ffburnfund.com
figarochicago.com
finefairbd.com
fordwindstarrecall.info
freepawpatrolprintables.com
gaiasurfhouse.com
gnishow.com
housecleaningsuperior.com
houstonhousingauthority.org
ia.cn
internationalwinnerscircle.com
jardinesenelparaiso.com
mediumwriterblog.com
mycampusnotes.com
orobosaikponmwen.com
pisosgranilite.com
rgmdistribuidora.com
roadwayinn.com
rocketlawer.com
roenskeep.net
scrapyoursocksoff.com.au
seriesonlinebr.me
sjabbo.net
srisharadawaterpurifiers.com
tadashi.com.au
takasu-pta.net
thepinkfork.com
toelatingsexamen.org
turfcheval.net
videostarsantandreu.com
villamaheswari.com
xgtongde.com
zzzfix.com

Other certificates including the domain name gaiasurfhouse.com

(limited to 100 certificates)
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
leliene.eu
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
remoch2022.xyz
wbsex.com
gaiasurfhouse.com
gaiasurfhouse.com

Certificate

The complete raw certificate details for gaiasurfhouse.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN7TCCDNWgAwIBAgISBEC7J1RdbI5htvl4YOI4NmCYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjkxNjMyMTJaFw0yMzEyMjgxNjMyMTFaMBwxGjAYBgNVBAMT
EWdhaWFzdXJmaG91c2UuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAqq4xjwm2B54YzYnDXZOd6aq09I1ErVaZnmY0r1GiXl7KodbryFAqota+EtpB
1wZQDeR5rdMhEeXTKX9UTaGqFM9YImb+Cl9oX+t30M1j8i+aCHT1VDa+fuWOUUqW
Li+Kq+Fec+YHeU4btNFhJRdhg/yMTf2dhmm+YtcTeFaqdXM715LRzIF9PWdjyvZl
P6+hKnoHF3RvMDsUA3rJh/87cZefkeyFaoZ+rcWnGsoQE9xQn3ukJg3TtiZ/z1r8
cP7f5BwU5xeX3/OWfxRzVXyxN6gAW64Z/SIqXUdP1r4L8i+qirHGEvNVhAoD9BAb
am8+swlwOeQhOvM62CQaJ8WLWZoSCfV/A1+46OqghP9tpyJ/4Woaq7DqD7N8Gou2
UgRtwZlRGwQpAD1j5AamilNbKVfFxmVTPH/aYrAGhJ/SpLo2Wr3VTbKRV6Ss+9PB
azsfSNcwU4KaEP1GfIqWGeIa1ocA91QxEGhUTccGPwxUGXhj5kkQIFbgIXp12Y+/
dB6CZByvXmLMVHDcgzS78ofW46oqCgyTqh2L8w/StgQyVzTxEVVkSbSx0TWtS+M6
0UicI4F2htJi+fiu2T0iR1wapglK4B6b6FT2WU+ula+5B/UIfQB6owdCc+i+0c8i
Zs4StzP0RQC0NTIBEoPvne7CrL8xGaToYsU0pWWC4cJW4zcCAwEAAaOCChEwggoN
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUclNTETRV3oHL0z2X4+O08hgUfAMwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgggZBgNVHREEgggQMIIIDIIMKi42NDQyMDku
Y29tghEqLmFsd29zdGFwbGFzLmNvbYIaKi5hbmFodWFycXVlaG90ZWxjdXNjby5j
b22CGiouYXRsYW50aXNpbnN1cnJlY3Rpb24uY29tgg4qLmF0dGVsYWdlLm5ldIIM
Ki5heGhhZGguY29tghQqLmNhc2lub3NnYXpldHRlLmNvbYIRKi5jZXNhcnRpbm9j
by5jb22CESouY2hpbmEtdGFpLWUuY29tgg0qLmNvY2FpZ2kuY29tghMqLmRhbmdr
eXRlbm1pZW4uY29tghAqLmRlc3RzdG9yZXMuY29tghEqLmRpamFuYXBob3RvLmNv
bYIVKi5lYXN5aGVhbHRoeXNraW4uY29tgh8qLmVsZWN0cmljZmlyZXBsYWNlc3Rv
cmUuY29tLmF1ghEqLmVtYm9nYXJldmVuLmNvbYIeKi5leGNlbGxlbnRzdXBwbGll
c2xpbWl0ZWQuY29tghAqLmZmYnVybmZ1bmQuY29tghMqLmZpZ2Fyb2NoaWNhZ28u
Y29tghAqLmZpbmVmYWlyYmQuY29tghkqLmZvcmR3aW5kc3RhcnJlY2FsbC5pbmZv
gh0qLmZyZWVwYXdwYXRyb2xwcmludGFibGVzLmNvbYITKi5nYWlhc3VyZmhvdXNl
LmNvbYINKi5nbmlzaG93LmNvbYIbKi5ob3VzZWNsZWFuaW5nc3VwZXJpb3IuY29t
gh0qLmhvdXN0b25ob3VzaW5nYXV0aG9yaXR5Lm9yZ4IHKi5pYS5jboIgKi5pbnRl
cm5hdGlvbmFsd2lubmVyc2NpcmNsZS5jb22CGSouamFyZGluZXNlbmVscGFyYWlz
by5jb22CFioubWVkaXVtd3JpdGVyYmxvZy5jb22CEyoubXljYW1wdXNub3Rlcy5j
b22CFioub3JvYm9zYWlrcG9ubXdlbi5jb22CFCoucGlzb3NncmFuaWxpdGUuY29t
ghYqLnJnbWRpc3RyaWJ1aWRvcmEuY29tghAqLnJvYWR3YXlpbm4uY29tghEqLnJv
Y2tldGxhd2VyLmNvbYIPKi5yb2Vuc2tlZXAubmV0ghoqLnNjcmFweW91cnNvY2tz
b2ZmLmNvbS5hdYITKi5zZXJpZXNvbmxpbmVici5tZYIMKi5zamFiYm8ubmV0gh4q
LnNyaXNoYXJhZGF3YXRlcnB1cmlmaWVycy5jb22CECoudGFkYXNoaS5jb20uYXWC
ECoudGFrYXN1LXB0YS5uZXSCESoudGhlcGlua2ZvcmsuY29tghYqLnRvZWxhdGlu
Z3NleGFtZW4ub3JnghAqLnR1cmZjaGV2YWwubmV0ghkqLnZpZGVvc3RhcnNhbnRh
bmRyZXUuY29tghQqLnZpbGxhbWFoZXN3YXJpLmNvbYIOKi54Z3RvbmdkZS5jb22C
DCouenp6Zml4LmNvbYIKNjQ0MjA5LmNvbYIPYWx3b3N0YXBsYXMuY29tghhhbmFo
dWFycXVlaG90ZWxjdXNjby5jb22CGGF0bGFudGlzaW5zdXJyZWN0aW9uLmNvbYIM
YXR0ZWxhZ2UubmV0ggpheGhhZGguY29tghJjYXNpbm9zZ2F6ZXR0ZS5jb22CD2Nl
c2FydGlub2NvLmNvbYIPY2hpbmEtdGFpLWUuY29tggtjb2NhaWdpLmNvbYIRZGFu
Z2t5dGVubWllbi5jb22CDmRlc3RzdG9yZXMuY29tgg9kaWphbmFwaG90by5jb22C
E2Vhc3loZWFsdGh5c2tpbi5jb22CHWVsZWN0cmljZmlyZXBsYWNlc3RvcmUuY29t
LmF1gg9lbWJvZ2FyZXZlbi5jb22CHGV4Y2VsbGVudHN1cHBsaWVzbGltaXRlZC5j
b22CDmZmYnVybmZ1bmQuY29tghFmaWdhcm9jaGljYWdvLmNvbYIOZmluZWZhaXJi
ZC5jb22CF2ZvcmR3aW5kc3RhcnJlY2FsbC5pbmZvghtmcmVlcGF3cGF0cm9scHJp
bnRhYmxlcy5jb22CEWdhaWFzdXJmaG91c2UuY29tggtnbmlzaG93LmNvbYIZaG91
c2VjbGVhbmluZ3N1cGVyaW9yLmNvbYIbaG91c3RvbmhvdXNpbmdhdXRob3JpdHku
b3JnggVpYS5jboIeaW50ZXJuYXRpb25hbHdpbm5lcnNjaXJjbGUuY29tghdqYXJk
aW5lc2VuZWxwYXJhaXNvLmNvbYIUbWVkaXVtd3JpdGVyYmxvZy5jb22CEW15Y2Ft
cHVzbm90ZXMuY29tghRvcm9ib3NhaWtwb25td2VuLmNvbYIScGlzb3NncmFuaWxp
dGUuY29tghRyZ21kaXN0cmlidWlkb3JhLmNvbYIOcm9hZHdheWlubi5jb22CD3Jv
Y2tldGxhd2VyLmNvbYINcm9lbnNrZWVwLm5ldIIYc2NyYXB5b3Vyc29ja3NvZmYu
Y29tLmF1ghFzZXJpZXNvbmxpbmVici5tZYIKc2phYmJvLm5ldIIcc3Jpc2hhcmFk
YXdhdGVycHVyaWZpZXJzLmNvbYIOdGFkYXNoaS5jb20uYXWCDnRha2FzdS1wdGEu
bmV0gg90aGVwaW5rZm9yay5jb22CFHRvZWxhdGluZ3NleGFtZW4ub3Jngg50dXJm
Y2hldmFsLm5ldIIXdmlkZW9zdGFyc2FudGFuZHJldS5jb22CEnZpbGxhbWFoZXN3
YXJpLmNvbYIMeGd0b25nZGUuY29tggp6enpmaXguY29tMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAtz77JN+cTbp18jnFulj0
bF38Qs96nzXEnh0JgSXttJkAAAGK4f+AtAAABAMARjBEAiAGG3TOAUkzZ1ipssUT
mpeE1h/GcP5B6UQm/coerZuaDgIgeifQ0fRQdjYtDA0pjN1A09IkaLsYGISZrYiB
oWGDuokAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYrh/4Co
AAAEAwBHMEUCIQC4A38Hgq1XZk8ZLGnOP7405JJdlsZoaCrY4xDJkP9XrwIgQzPO
U9IHIK1TWlYDhasGx/tPnaCUp1+jDKqrrERzGsswDQYJKoZIhvcNAQELBQADggEB
AI0AAchEJozzSoI+fSnmTAkvySKkECVb5zJhtnqdzLXmenGrEsAkFSRg3CoUBxS2
XZlSlTr2R1oYwE4nLo/0IP+iC7BMV5oMV6m7uLJFnLRqSy9QH5zn+/Geek/q2+nG
Yf3OLX1TdRHgOezcyLEpfyzTb5SPU6BnDk8cjMWbHH1/5kYWzsPq8E4sYlgmzNvK
qW3IiYQsSn2a1e97+YMJHS02eqqb7KxjYGEa0h7oPcQyDOJ9cUnWjfWAdFfNo4dq
Hzkp6uz7J1v4DazNW/zFNX3Jen+hN9rxCMiqv/F2rtLWadzPyVKz1WUd49DwEjxi
A/DDEcOhI4ezTCJrqu7x41g=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370475985055894532705200919532134953541784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 16:32:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 16:32:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaiasurfhouse.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696315459693814307988150917621126511390158550270274801482445993749991151954137336547007660448362629687339733758974785805536091091543238877943874042155337707889530621700949728553991280894127371642889383134820996096520352180943424068466564708494176517255125334513116804896237814225335155860016090633478617696133945069562660886883623741117596180911202553863481365475754364751582595217617923155373931595235305754278379248284167019527890938212103056546240764390157474734971592844560806367639105888436802056378273458596558501123371273434400353903323397467795962063721694449188634381013230614527410632517471040212283095479310638536819059176203232750446110511218713479165069800411871121953716955250106903295282086642027093375031875700739929980128848373724603613890251524025569559072656410787434008696116452710686576070516057044359871562697492274706813701098119863236920086980940285657609883254328954151870753026183775633269371187362116835448885817250558127950965628259940345968384449511139251877644320516022169519267697971596930706310902811295440326133904177718924909523233518472436831880269737026367485567413766088558478441932321288483660665883265711089363735535818884786778282645135787038267455949157565792298725568176801411585209322103607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							725353113455de81cbd33d97e3e3b4f218147c03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2064 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.644209.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alwostaplas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anahuarquehotelcusco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantisinsurrection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attelage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axhadh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casinosgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cesartinoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.china-tai-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocaigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dangkytenmien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deststores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dijanaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyhealthyskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electricfireplacestore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embogareven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excellentsupplieslimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffburnfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.figarochicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finefairbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fordwindstarrecall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freepawpatrolprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaiasurfhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gnishow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housecleaningsuperior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonhousingauthority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internationalwinnerscircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jardinesenelparaiso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediumwriterblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycampusnotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orobosaikponmwen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pisosgranilite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rgmdistribuidora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadwayinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketlawer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roenskeep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrapyoursocksoff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seriesonlinebr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjabbo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srisharadawaterpurifiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tadashi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takasu-pta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepinkfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toelatingsexamen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turfcheval.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videostarsantandreu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villamaheswari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xgtongde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zzzfix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '644209.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwostaplas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anahuarquehotelcusco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantisinsurrection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attelage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axhadh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinosgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesartinoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china-tai-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocaigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dangkytenmien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deststores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dijanaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyhealthyskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricfireplacestore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embogareven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excellentsupplieslimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffburnfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figarochicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finefairbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fordwindstarrecall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freepawpatrolprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaiasurfhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnishow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housecleaningsuperior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonhousingauthority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalwinnerscircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jardinesenelparaiso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediumwriterblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycampusnotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orobosaikponmwen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pisosgranilite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgmdistribuidora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadwayinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketlawer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roenskeep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrapyoursocksoff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seriesonlinebr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjabbo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srisharadawaterpurifiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadashi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takasu-pta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepinkfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toelatingsexamen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turfcheval.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videostarsantandreu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villamaheswari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xgtongde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzzfix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae1ff80b400000403004630440220061b74ce0149336758a9b2c5139a9784d61fc670fe41e94426fdca1ead9b9a0e02207a27d0d1f45076362d0c0d298cdd40d3d22468bb18188499ad8881a16183ba89007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae1ff80a80000040300473045022100b8037f0782ad57664f192c69ce3fbe34e4925d96c668682ad8e310c990ff57af02204333ce53d20720ad535a560385ab06c7fb4f9da094a75fa30caaabac44731acb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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