ta1.org

Issued by R3

About this certificate

This digital certificate with serial number 04:49:f6:07:5c:67:fc:53:e7:cd:e8:91:fd:05:ba:50:a2:cb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ta1.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:f6:07:5c:67:fc:53:e7:cd:e8:91:fd:05:ba:50:a2:cb
Serial Number (int): 373616784819530869400755591881663255192267
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c0:5f:01:65:43:3a:ad:f7:a2:66:6c:ed:68:e1:f8:99:5c:19:e5:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:27:8a:ce:5f:fc:41:ba:92:af:7e:39:e5:33:9a:81:1e:fa:e7:53
Fingerprint (sha256): 60:68:fa:59:58:29:71:25:2c:46:d4:ad:fb:2b:a9:85:d9:1b:67:22:10:12:26:8b:eb:ae:41:67:30:7f:ea:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ta1.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ta1.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abddriver.com
*.adrianachechik.co
*.andalib.com
*.bbchauda.com
*.billonaire.com
*.carringtonlabs.com
*.dairesi.com
*.demingonline.com
*.downloader.org
*.dte.info
*.flohoop.com
*.fybp.eu
*.gaybostube.com
*.geostamp.com
*.grandmasrevenge.com
*.harborgreens.com
*.iroast.com.au
*.jpenney.com
*.karyanet.com
*.kilansh.com
*.kindermund.com
*.koreanaircargo.com
*.linasfacepainting.com
*.lpl20.net
*.luna.org
*.maakhir.com
*.mbasicfacebook.com
*.mein-pflegeservice.de
*.mellody.com
*.myflixer.com.au
*.nehentai.net
*.netlifx.de
*.onlinebankingtd.com
*.ourhotwives.com
*.peupliers.com
*.printablemultiplicationflashcards.com
*.rapping.com
*.realcouples.uk
*.sefmls.com
*.ta1.org
*.tailwinui.com
*.thedungeontattoo.com
*.traunch.com
*.travent.com
*.truro.us
*.umcollege.com
*.wangkj.me
*.wardrop.com
*.whichpodiatrist.com.au
*.yeatman.com
abddriver.com
adrianachechik.co
andalib.com
bbchauda.com
billonaire.com
carringtonlabs.com
dairesi.com
demingonline.com
downloader.org
dte.info
flohoop.com
fybp.eu
gaybostube.com
geostamp.com
grandmasrevenge.com
harborgreens.com
iroast.com.au
jpenney.com
karyanet.com
kilansh.com
kindermund.com
koreanaircargo.com
linasfacepainting.com
lpl20.net
luna.org
maakhir.com
mbasicfacebook.com
mein-pflegeservice.de
mellody.com
myflixer.com.au
nehentai.net
netlifx.de
onlinebankingtd.com
ourhotwives.com
peupliers.com
printablemultiplicationflashcards.com
rapping.com
realcouples.uk
sefmls.com
ta1.org
tailwinui.com
thedungeontattoo.com
traunch.com
travent.com
truro.us
umcollege.com
wangkj.me
wardrop.com
whichpodiatrist.com.au
yeatman.com

Other certificates including the domain name ta1.org

(limited to 100 certificates)
kvbettiah.org
ta1.org
diversitymusic.com
ta1.org
loansandgrants.org
ta1.org
www.couponclaimer.com
whitestoneyoga.com
ta1.org
sosteam.club
ta1.org
ta1.org
sosteam.club

Certificate

The complete raw certificate details for ta1.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMWjCCC0KgAwIBAgISBEn2B1xn/FPnzeiR/QW6UKLLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTcyMzI5MDRaFw0yMzEwMTUyMzI5MDNaMBIxEDAOBgNVBAMT
B3RhMS5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2rW0azTJC
l17I6WemUejYA9MgGCbJ0CiATrcJmikP5oz12+2gJ4/eLf5ELu5dxxEgvpgoR2Uy
H65mo31DMWP4TGOto+xYpISkmJT/WGX0JXA9y30EwoHohDqYQMVKB95sXkjI8yQ3
o9M5STDIn/Op2tzSqYmMfE/dpNO1QYvuWpspadbgEBOrEimJR1P/K70I+sA79IQR
JttwrgFe17yyOOLOnzjRTzEymDkBH1FSIJRtAKFkMn6Vxezn978SMboN8Jbzazz1
D/mcudgteiMg20rnfEWk6gKDQZGKHLxNeXnDjzpaax9uzDNgb/AuKO/hBz0uXKPe
77HLaTRoy5Dpwz3EedZIQ2gBxQRJBcgocc0sZ4SqeQhmPlQDPWAxKN5t9BNWzVQ8
xwxqzicYNGHlB5sr3ardrTcm/wI3ZSFY8hP0+j/3iHXd2268B6TN10tAQ2JuAUyG
8PE8nIF9CDiyV4mIPN3cX+bycok114OQAPaF9hFv2u/bo8wPGEt2fKlj3jJO0gEy
ECrJ/KLjvkke6d/P/RiDIWJ9bTTKBPSXUBw9mObj16zFms/XgYSZ9nin4nWoo4ty
lldFdZPuvz3sYp6EIogCHfXeOSOU5Dj+8jj3d+Y4kQ7dRYwS+dDCvW8fiIHthDbM
ckduOrQc3TURARY5eXEJBg+XzUDZv7zQMwIDAQABo4IIiDCCCIQwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBTAXwFlQzqt96JmbO1o4fiZXBnliDAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCBo8GA1UdEQSCBoYwggaCgg8qLmFiZGRyaXZlci5jb22CEyou
YWRyaWFuYWNoZWNoaWsuY2+CDSouYW5kYWxpYi5jb22CDiouYmJjaGF1ZGEuY29t
ghAqLmJpbGxvbmFpcmUuY29tghQqLmNhcnJpbmd0b25sYWJzLmNvbYINKi5kYWly
ZXNpLmNvbYISKi5kZW1pbmdvbmxpbmUuY29tghAqLmRvd25sb2FkZXIub3Jnggoq
LmR0ZS5pbmZvgg0qLmZsb2hvb3AuY29tggkqLmZ5YnAuZXWCECouZ2F5Ym9zdHVi
ZS5jb22CDiouZ2Vvc3RhbXAuY29tghUqLmdyYW5kbWFzcmV2ZW5nZS5jb22CEiou
aGFyYm9yZ3JlZW5zLmNvbYIPKi5pcm9hc3QuY29tLmF1gg0qLmpwZW5uZXkuY29t
gg4qLmthcnlhbmV0LmNvbYINKi5raWxhbnNoLmNvbYIQKi5raW5kZXJtdW5kLmNv
bYIUKi5rb3JlYW5haXJjYXJnby5jb22CFyoubGluYXNmYWNlcGFpbnRpbmcuY29t
ggsqLmxwbDIwLm5ldIIKKi5sdW5hLm9yZ4INKi5tYWFraGlyLmNvbYIUKi5tYmFz
aWNmYWNlYm9vay5jb22CFyoubWVpbi1wZmxlZ2VzZXJ2aWNlLmRlgg0qLm1lbGxv
ZHkuY29tghEqLm15ZmxpeGVyLmNvbS5hdYIOKi5uZWhlbnRhaS5uZXSCDCoubmV0
bGlmeC5kZYIVKi5vbmxpbmViYW5raW5ndGQuY29tghEqLm91cmhvdHdpdmVzLmNv
bYIPKi5wZXVwbGllcnMuY29tgicqLnByaW50YWJsZW11bHRpcGxpY2F0aW9uZmxh
c2hjYXJkcy5jb22CDSoucmFwcGluZy5jb22CECoucmVhbGNvdXBsZXMudWuCDCou
c2VmbWxzLmNvbYIJKi50YTEub3Jngg8qLnRhaWx3aW51aS5jb22CFioudGhlZHVu
Z2VvbnRhdHRvby5jb22CDSoudHJhdW5jaC5jb22CDSoudHJhdmVudC5jb22CCiou
dHJ1cm8udXOCDyoudW1jb2xsZWdlLmNvbYILKi53YW5na2oubWWCDSoud2FyZHJv
cC5jb22CGCoud2hpY2hwb2RpYXRyaXN0LmNvbS5hdYINKi55ZWF0bWFuLmNvbYIN
YWJkZHJpdmVyLmNvbYIRYWRyaWFuYWNoZWNoaWsuY2+CC2FuZGFsaWIuY29tggxi
YmNoYXVkYS5jb22CDmJpbGxvbmFpcmUuY29tghJjYXJyaW5ndG9ubGFicy5jb22C
C2RhaXJlc2kuY29tghBkZW1pbmdvbmxpbmUuY29tgg5kb3dubG9hZGVyLm9yZ4II
ZHRlLmluZm+CC2Zsb2hvb3AuY29tggdmeWJwLmV1gg5nYXlib3N0dWJlLmNvbYIM
Z2Vvc3RhbXAuY29tghNncmFuZG1hc3JldmVuZ2UuY29tghBoYXJib3JncmVlbnMu
Y29tgg1pcm9hc3QuY29tLmF1ggtqcGVubmV5LmNvbYIMa2FyeWFuZXQuY29tggtr
aWxhbnNoLmNvbYIOa2luZGVybXVuZC5jb22CEmtvcmVhbmFpcmNhcmdvLmNvbYIV
bGluYXNmYWNlcGFpbnRpbmcuY29tgglscGwyMC5uZXSCCGx1bmEub3JnggttYWFr
aGlyLmNvbYISbWJhc2ljZmFjZWJvb2suY29tghVtZWluLXBmbGVnZXNlcnZpY2Uu
ZGWCC21lbGxvZHkuY29tgg9teWZsaXhlci5jb20uYXWCDG5laGVudGFpLm5ldIIK
bmV0bGlmeC5kZYITb25saW5lYmFua2luZ3RkLmNvbYIPb3VyaG90d2l2ZXMuY29t
gg1wZXVwbGllcnMuY29tgiVwcmludGFibGVtdWx0aXBsaWNhdGlvbmZsYXNoY2Fy
ZHMuY29tggtyYXBwaW5nLmNvbYIOcmVhbGNvdXBsZXMudWuCCnNlZm1scy5jb22C
B3RhMS5vcmeCDXRhaWx3aW51aS5jb22CFHRoZWR1bmdlb250YXR0b28uY29tggt0
cmF1bmNoLmNvbYILdHJhdmVudC5jb22CCHRydXJvLnVzgg11bWNvbGxlZ2UuY29t
ggl3YW5na2oubWWCC3dhcmRyb3AuY29tghZ3aGljaHBvZGlhdHJpc3QuY29tLmF1
ggt5ZWF0bWFuLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB
iWZmkFgAAAQDAEcwRQIhAJab1xVhKF/C34rYbyemZ5ncLLzqvi8ACBgUCTlJYGhp
AiASekJsZnme9x3/9DAtK02wE5nFOuO0Us4sK7DfE4YYngB2ALc++yTfnE26dfI5
xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiWZmkEoAAAQDAEcwRQIgJi0GP0Kf+9iO
b1OyfwYwV4O3wwCr52+YX770w6EgZLUCIQChr+MEB6QnmYjhQwfcR4WNP85F6TNU
Uu5OYRhvZtR0TzANBgkqhkiG9w0BAQsFAAOCAQEAa0X+1dCDVqQzS0M6V6L5Cv2j
ivtu0EvoceBm3lbKdMp535cKMJsKIrEzjAeGJnhO613kbhILhdrjqca65CAX075d
OBb5gleR8vheBcNa5NvFHcC/eq1W0W/EssOV9C9urmYHBDrsvA5qqwlTHtHQK6QI
L0rvpOyYfA7xd8X68j9C1NWDYS0nlAh47WTYUB9LplPu/rX3GEjRcUozU/b9WfAQ
9g0IyVJ8+nAkAc04Drms0qX/TuHkJmXCFWs6ogWOfxVUMqAnr8ya7j9bJA4Cdit+
4gyvNHuNMjMTXHN07aItoaNGwwnNZdBZwC865cinO9lb8bMpvTOhbxKWdo/qdA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtq1tGs0yQpdeyOlnplHo
2APTIBgmydAogE63CZopD+aM9dvtoCeP3i3+RC7uXccRIL6YKEdlMh+uZqN9QzFj
+ExjraPsWKSEpJiU/1hl9CVwPct9BMKB6IQ6mEDFSgfebF5IyPMkN6PTOUkwyJ/z
qdrc0qmJjHxP3aTTtUGL7lqbKWnW4BATqxIpiUdT/yu9CPrAO/SEESbbcK4BXte8
sjjizp840U8xMpg5AR9RUiCUbQChZDJ+lcXs5/e/EjG6DfCW82s89Q/5nLnYLXoj
INtK53xFpOoCg0GRihy8TXl5w486WmsfbswzYG/wLijv4Qc9Llyj3u+xy2k0aMuQ
6cM9xHnWSENoAcUESQXIKHHNLGeEqnkIZj5UAz1gMSjebfQTVs1UPMcMas4nGDRh
5QebK92q3a03Jv8CN2UhWPIT9Po/94h13dtuvAekzddLQENibgFMhvDxPJyBfQg4
sleJiDzd3F/m8nKJNdeDkAD2hfYRb9rv26PMDxhLdnypY94yTtIBMhAqyfyi475J
Hunfz/0YgyFifW00ygT0l1AcPZjm49esxZrP14GEmfZ4p+J1qKOLcpZXRXWT7r89
7GKehCKIAh313jkjlOQ4/vI493fmOJEO3UWMEvnQwr1vH4iB7YQ2zHJHbjq0HN01
EQEWOXlxCQYPl81A2b+80DMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373616784819530869400755591881663255192267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 23:29:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 23:29:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ta1.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745258959161405962606524710671907826800692598458429163638896707761631055619894318054847103130730563776154362385860382498776450168971073313594975569553042097169218015090267713639095895101683165283741092957120007232359157775528615256967828371754210878118211759398941230535608629301237538988330585220532990621635353136364987830126771974790221265072411214089511243296504057343721976569166740201119283891633953143478483403572038979700441111544277541573962408418293819582793342245846356172248804060918886984034214789647025938391443718139649464621505958391714328939162964437301200806970229413769310586990026651998180998412099608719146808351522580656822196646906270616361907923462464663976141334425153893843868389442858827235836373755160261962498097430079019545142961950678443680216818979959634753603051931453940027490691880951246042658668944043165231747856141438989334127830445309064124755038882655891306110128297603527179039655650643353744912121010957949948684833755583298852924271126641649571309146679104912978323429721514830803632649296762325783830432043785411658613247617065797622466025552487252634968350085618265564013939625968317160075124829264493849600684054527326626286186242630762280097836304970141311300569675332171300485048619059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c05f0165433aadf7a2666ced68e1f8995c19e588
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1670 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adrianachechik.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andalib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbchauda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billonaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carringtonlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dairesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dte.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flohoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fybp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaybostube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geostamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grandmasrevenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harborgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iroast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karyanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kilansh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kindermund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koreanaircargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linasfacepainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpl20.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maakhir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbasicfacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mein-pflegeservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mellody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myflixer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nehentai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netlifx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinebankingtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourhotwives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peupliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printablemultiplicationflashcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realcouples.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sefmls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ta1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tailwinui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedungeontattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truro.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wangkj.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wardrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichpodiatrist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeatman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adrianachechik.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andalib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbchauda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billonaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carringtonlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dte.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flohoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fybp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaybostube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geostamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandmasrevenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harborgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iroast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karyanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kilansh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindermund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreanaircargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linasfacepainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpl20.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maakhir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbasicfacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-pflegeservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mellody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myflixer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nehentai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netlifx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinebankingtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourhotwives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peupliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printablemultiplicationflashcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcouples.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sefmls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ta1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tailwinui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedungeontattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truro.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wangkj.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichpodiatrist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeatman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189666690580000040300473045022100969bd71561285fc2df8ad86f27a66799dc2cbceabe2f000818140939496068690220127a426c66799ef71dfff4302d2b4db01399c53ae3b452ce2c2bb0df1386189e007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001896666904a00000403004730450220262d063f429ffbd88e6f53b27f06305783b7c300abe76f985fbef4c3a12064b5022100a1afe30407a4279988e14307dc47858d3fce45e9335452ee4e61186f66d4744f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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