brazosmall.com

Issued by R3

About this certificate

This digital certificate with serial number 04:95:7b:7b:e7:b8:03:fd:ae:f6:79:d4:33:55:c4:9d:13:2b was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brazosmall.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:7b:7b:e7:b8:03:fd:ae:f6:79:d4:33:55:c4:9d:13:2b
Serial Number (int): 399315354794071797564364670381809530114859
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1b:08:5b:1e:65:e2:eb:e9:ae:a4:c1:20:88:f2:d8:7c:6b:53:a9:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:1d:56:ee:50:32:57:b7:52:28:48:d7:f3:87:f4:c9:da:d0:25:7e
Fingerprint (sha256): 60:02:a6:ea:2e:11:4e:6e:6d:5b:d0:ed:b2:c2:74:22:c8:c4:25:99:8d:63:ef:a4:20:5a:e3:07:f0:bb:e2:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brazosmall.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brazosmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.805922.com
*.absoluteplastics.net
*.ancestrydana.com
*.antixibalation-overesurufen-nonufatize.info
*.anytimeplumbingllc.com
*.brazosmall.com
*.cam18.net
*.castables.com
*.cinexcusas.com
*.civate.com
*.claystore.com
*.cleanmyreg.com
*.consumerrating.com.au
*.curtainshop.com.au
*.eastmountaininn.com
*.fixedhomeloanrates.com.au
*.freebaseballcardspriceguide.com
*.freeproducttesters.com
*.guessmelody.com
*.hajcommitte.com
*.homemedicalservices.com
*.horsebarn.com.au
*.hqdesire.com
*.iappnet.org
*.kitchenremodel.com.au
*.larousse.gr
*.lastanzarestaurant.com
*.leboncoin.gr
*.magicegg.com
*.modernkitchen.com.au
*.mtmarkets.com
*.nbagame.xyz
*.oestadao.com
*.outdoorblind.com.au
*.p4ukt6z.info
*.paradisepearls.com
*.phena.com
*.rufusmedia.com
*.sexeadulte.com
*.sharkrealtor.com
*.singlepredsinl.ga
*.smhd.com
*.sportgup.com
*.sudoeste.com
*.suministrosgarte.com
*.vegaworlds.com
*.vistacolorado.com
*.wamujobs.com
*.wangiwangirealestate.com.au
805922.com
absoluteplastics.net
ancestrydana.com
antixibalation-overesurufen-nonufatize.info
anytimeplumbingllc.com
brazosmall.com
cam18.net
castables.com
cinexcusas.com
civate.com
claystore.com
cleanmyreg.com
consumerrating.com.au
curtainshop.com.au
eastmountaininn.com
fixedhomeloanrates.com.au
freebaseballcardspriceguide.com
freeproducttesters.com
guessmelody.com
hajcommitte.com
homemedicalservices.com
horsebarn.com.au
hqdesire.com
iappnet.org
kitchenremodel.com.au
larousse.gr
lastanzarestaurant.com
leboncoin.gr
magicegg.com
modernkitchen.com.au
mtmarkets.com
nbagame.xyz
oestadao.com
outdoorblind.com.au
p4ukt6z.info
paradisepearls.com
phena.com
rufusmedia.com
sexeadulte.com
sharkrealtor.com
singlepredsinl.ga
smhd.com
sportgup.com
sudoeste.com
suministrosgarte.com
vegaworlds.com
vistacolorado.com
wamujobs.com
wangiwangirealestate.com.au

Other certificates including the domain name brazosmall.com

(limited to 100 certificates)
888teens.com
brazosmall.com
usaamylife.com
brazosmall.com
brazosmall.com
brazosmall.com
brazosmall.com
arukas.com
brazosmall.com
brazosmall.com

Certificate

The complete raw certificate details for brazosmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINSDCCDDCgAwIBAgISBJV7e+e4A/2u9nnUM1XEnRMrMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMjgxMzEwMjZaFw0yNDAxMjYxMzEwMjVaMBkxFzAVBgNVBAMT
DmJyYXpvc21hbGwuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
sO6fMjMPLiEpUnezmZgUTDywug1luht1fwnnr4bVKRNsgVzb/6Q7WXgrkFI0pvuB
1N0vVLoQN0yxi9v7JgBsJEtfOrzJmADxgsoF9GDHSmXWF3MiA4+QK+Q+RnY00Nly
bbC5iRmkpWOKQZs+8EO28WlswPAdOJ/a6a4Cl5k6iaSHHyhATizjuYQed0duF0yD
bWMhh0dJ310cFFwLuJ7xGsS8oPmgdAK1xgLkQawfBZud0L8RprYJrEpmJF3M4Kc7
rE5K39VvxwLuuE9EAESP5dNbTFVKduXzLec9e6EBC/0G7j9Irc4oKwzKgt62kAp1
EQARIHUyjzTcjmfU6FguehLslKTCExC3GYKEJ5bJ0evH1gxYi42m/1wVFTkCI50t
nXgNl55mFxbwR9OepZyCI0Z0ZJJdIozayGavYWjFt6oRRHROUqUCbH6OOIGGRsUo
zYx0Emh7ojiXiqdqHhBl0liOmVQVGCAlHdz8iB8epXU6Gu7Btz6+PcfX+JMYn1Ta
f2ewD5Htsv0pmqyUgblqMBet9FIWzsCeRGjCpq2lbh9MJCPt54clcTMpcGNllZ/8
twwyqhvvMvvKUN1yukQ03g3Kl9eCO26nWkDf5ANBMCdOi+OOZvQr34UnL46N0Q6+
GWFvV5lLLfpbprWIaAoiHL+vDJq0SMUFXmIhx/qMiV8CAwEAAaOCCW8wgglrMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUGwhbHmXi6+mupMEgiPLYfGtTqbUwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggd1BgNVHREEggdsMIIHaIIMKi44MDU5MjIuY29t
ghYqLmFic29sdXRlcGxhc3RpY3MubmV0ghIqLmFuY2VzdHJ5ZGFuYS5jb22CLSou
YW50aXhpYmFsYXRpb24tb3ZlcmVzdXJ1ZmVuLW5vbnVmYXRpemUuaW5mb4IYKi5h
bnl0aW1lcGx1bWJpbmdsbGMuY29tghAqLmJyYXpvc21hbGwuY29tggsqLmNhbTE4
Lm5ldIIPKi5jYXN0YWJsZXMuY29tghAqLmNpbmV4Y3VzYXMuY29tggwqLmNpdmF0
ZS5jb22CDyouY2xheXN0b3JlLmNvbYIQKi5jbGVhbm15cmVnLmNvbYIXKi5jb25z
dW1lcnJhdGluZy5jb20uYXWCFCouY3VydGFpbnNob3AuY29tLmF1ghUqLmVhc3Rt
b3VudGFpbmlubi5jb22CGyouZml4ZWRob21lbG9hbnJhdGVzLmNvbS5hdYIhKi5m
cmVlYmFzZWJhbGxjYXJkc3ByaWNlZ3VpZGUuY29tghgqLmZyZWVwcm9kdWN0dGVz
dGVycy5jb22CESouZ3Vlc3NtZWxvZHkuY29tghEqLmhhamNvbW1pdHRlLmNvbYIZ
Ki5ob21lbWVkaWNhbHNlcnZpY2VzLmNvbYISKi5ob3JzZWJhcm4uY29tLmF1gg4q
LmhxZGVzaXJlLmNvbYINKi5pYXBwbmV0Lm9yZ4IXKi5raXRjaGVucmVtb2RlbC5j
b20uYXWCDSoubGFyb3Vzc2UuZ3KCGCoubGFzdGFuemFyZXN0YXVyYW50LmNvbYIO
Ki5sZWJvbmNvaW4uZ3KCDioubWFnaWNlZ2cuY29tghYqLm1vZGVybmtpdGNoZW4u
Y29tLmF1gg8qLm10bWFya2V0cy5jb22CDSoubmJhZ2FtZS54eXqCDioub2VzdGFk
YW8uY29tghUqLm91dGRvb3JibGluZC5jb20uYXWCDioucDR1a3Q2ei5pbmZvghQq
LnBhcmFkaXNlcGVhcmxzLmNvbYILKi5waGVuYS5jb22CECoucnVmdXNtZWRpYS5j
b22CECouc2V4ZWFkdWx0ZS5jb22CEiouc2hhcmtyZWFsdG9yLmNvbYITKi5zaW5n
bGVwcmVkc2lubC5nYYIKKi5zbWhkLmNvbYIOKi5zcG9ydGd1cC5jb22CDiouc3Vk
b2VzdGUuY29tghYqLnN1bWluaXN0cm9zZ2FydGUuY29tghAqLnZlZ2F3b3JsZHMu
Y29tghMqLnZpc3RhY29sb3JhZG8uY29tgg4qLndhbXVqb2JzLmNvbYIdKi53YW5n
aXdhbmdpcmVhbGVzdGF0ZS5jb20uYXWCCjgwNTkyMi5jb22CFGFic29sdXRlcGxh
c3RpY3MubmV0ghBhbmNlc3RyeWRhbmEuY29tgithbnRpeGliYWxhdGlvbi1vdmVy
ZXN1cnVmZW4tbm9udWZhdGl6ZS5pbmZvghZhbnl0aW1lcGx1bWJpbmdsbGMuY29t
gg5icmF6b3NtYWxsLmNvbYIJY2FtMTgubmV0gg1jYXN0YWJsZXMuY29tgg5jaW5l
eGN1c2FzLmNvbYIKY2l2YXRlLmNvbYINY2xheXN0b3JlLmNvbYIOY2xlYW5teXJl
Zy5jb22CFWNvbnN1bWVycmF0aW5nLmNvbS5hdYISY3VydGFpbnNob3AuY29tLmF1
ghNlYXN0bW91bnRhaW5pbm4uY29tghlmaXhlZGhvbWVsb2FucmF0ZXMuY29tLmF1
gh9mcmVlYmFzZWJhbGxjYXJkc3ByaWNlZ3VpZGUuY29tghZmcmVlcHJvZHVjdHRl
c3RlcnMuY29tgg9ndWVzc21lbG9keS5jb22CD2hhamNvbW1pdHRlLmNvbYIXaG9t
ZW1lZGljYWxzZXJ2aWNlcy5jb22CEGhvcnNlYmFybi5jb20uYXWCDGhxZGVzaXJl
LmNvbYILaWFwcG5ldC5vcmeCFWtpdGNoZW5yZW1vZGVsLmNvbS5hdYILbGFyb3Vz
c2UuZ3KCFmxhc3RhbnphcmVzdGF1cmFudC5jb22CDGxlYm9uY29pbi5ncoIMbWFn
aWNlZ2cuY29tghRtb2Rlcm5raXRjaGVuLmNvbS5hdYINbXRtYXJrZXRzLmNvbYIL
bmJhZ2FtZS54eXqCDG9lc3RhZGFvLmNvbYITb3V0ZG9vcmJsaW5kLmNvbS5hdYIM
cDR1a3Q2ei5pbmZvghJwYXJhZGlzZXBlYXJscy5jb22CCXBoZW5hLmNvbYIOcnVm
dXNtZWRpYS5jb22CDnNleGVhZHVsdGUuY29tghBzaGFya3JlYWx0b3IuY29tghFz
aW5nbGVwcmVkc2lubC5nYYIIc21oZC5jb22CDHNwb3J0Z3VwLmNvbYIMc3Vkb2Vz
dGUuY29tghRzdW1pbmlzdHJvc2dhcnRlLmNvbYIOdmVnYXdvcmxkcy5jb22CEXZp
c3RhY29sb3JhZG8uY29tggx3YW11am9icy5jb22CG3dhbmdpd2FuZ2lyZWFsZXN0
YXRlLmNvbS5hdTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIE
gfYEgfMA8QB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi3af
M/0AAAQDAEcwRQIhAPdOoODuE1IZIjy5r3HKXST5BCzrPXpVqFf7CUJc9r0fAiBs
nV7RGJo6WXCLhVjdNLPREbDMCnu0IWr5kLJNS8G+4gB3AHb/iD8KtvuVUcJhzPWH
ujS0pM27KdxoQgqf5mdMWjp0AAABi3afNFgAAAQDAEgwRgIhAO5l1QTwdskGlX+4
eQSN27IaSdRiQZoUZzZWNRNCdnFGAiEA0Me5DJednM49tYa+lbeESCKta6jSJnh9
ta/l5GGYZnEwDQYJKoZIhvcNAQELBQADggEBAKpNkUKnKvoWtWucEJTp1uoT1lNS
+TXGia/TD3/GOy6toSQCLkHI0fRuq7yPw5DedZCrHtMvnBFs0/xEHcCrkAQi4o59
SGdcK8JS1cZ9UAWeE5CLTDhIcd2aDkJ8wKV9S+QjrE0nZelY9MbwqeFU7mjG8d9g
NhVGc/uHvowVj4VV18qnx40LRjZUqjL5h0jRbJuaKpAh94utHlCZIfHDaew20gZ+
YFBgZ4ZdJgUOfz+Rj26kRT/iMD/2UH1Afm7tHHUk6DWgSnNqbZAXIMk0KSiOhcI8
5h0WSi43UncQuo0kz8xCeMl26y5WyEeTNN2chodUse+3pK3EU8ugigc7Yh8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399315354794071797564364670381809530114859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 13:10:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 13:10:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brazosmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721820060090913238813306960233229294181496738226614367099292769561608335562785752570337741404964741916580398709300178780891275481939774972822097470798234645658755728429554634304821053762240722938771838875129254220729646527682931131114640941068490012893419899436082216500211005037976426155768301548925340053140385654182179861784083563060760303710751714645447573998689181555915979910187880115106405941374390926755867697265730106877992674361822093790585864087354994088557857497202884533567363769687216108517907450395511282712138023267114303193738737995132599497379312945481093634558191918804162169526935487908753789137819481666701953004286537137791463621694735067042925320100436988109689113672366109605898884265244918778405936162310598694752151125129987919172134098308902408299038767372799249408513819967220623126957590902519167050319311121956824466223962946075681338338380210197685472453988221551060920232104918975552507396481442133663188541607550281821578635835835774202981952190173665980322061633191009181118486814890263254957328728870833723932170167618227594935642674778068384540553449009709911079314005836323761384698221245689755054369548377174089389654268019673898449096613808372185750675580584678061410072416335676972573710387551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b085b1e65e2ebe9aea4c12088f2d87c6b53a9b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1900 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.805922.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.absoluteplastics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancestrydana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antixibalation-overesurufen-nonufatize.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimeplumbingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazosmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cam18.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinexcusas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.civate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleanmyreg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumerrating.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curtainshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastmountaininn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixedhomeloanrates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freebaseballcardspriceguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeproducttesters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guessmelody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hajcommitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homemedicalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horsebarn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqdesire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iappnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchenremodel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larousse.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastanzarestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leboncoin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernkitchen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbagame.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oestadao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outdoorblind.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p4ukt6z.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paradisepearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rufusmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexeadulte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharkrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.singlepredsinl.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportgup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sudoeste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suministrosgarte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vegaworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistacolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wamujobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wangiwangirealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '805922.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absoluteplastics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancestrydana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antixibalation-overesurufen-nonufatize.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimeplumbingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazosmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cam18.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinexcusas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanmyreg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerrating.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curtainshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmountaininn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixedhomeloanrates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freebaseballcardspriceguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeproducttesters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guessmelody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hajcommitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homemedicalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsebarn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqdesire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iappnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenremodel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larousse.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastanzarestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leboncoin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernkitchen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbagame.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oestadao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoorblind.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4ukt6z.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisepearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rufusmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexeadulte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singlepredsinl.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportgup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudoeste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suministrosgarte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegaworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistacolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wamujobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wangiwangirealestate.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b769f33fd0000040300473045022100f74ea0e0ee135219223cb9af71ca5d24f9042ceb3d7a55a857fb09425cf6bd1f02206c9d5ed1189a3a59708b8558dd34b3d111b0cc0a7bb4216af990b24d4bc1bee200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b769f34580000040300483046022100ee65d504f076c906957fb879048ddbb21a49d462419a14673656351342767146022100d0c7b90c979d9cce3db586be95b7844822ad6ba8d226787db5afe5e461986671
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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