parafrasit.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ff:5c:99:61:b7:34:5c:96:42:09:ca:e1:69:19:34:88:d7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=parafrasit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:5c:99:61:b7:34:5c:96:42:09:ca:e1:69:19:34:88:d7
Serial Number (int): 435344232670820553304172120876120144120023
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 50:07:67:e0:8f:88:d1:96:60:6e:66:00:c8:c7:1e:ce:6d:78:98:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:61:79:b1:74:fc:06:e6:9d:5f:5c:31:86:1c:6b:38:b2:f3:d3:ce
Fingerprint (sha256): 69:b1:b4:d0:a0:5b:9b:6c:6e:b0:8d:28:61:11:06:0c:80:a7:22:db:9a:5b:68:13:08:47:82:3a:e2:b2:48:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate parafrasit.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for parafrasit.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2158.com.au
*.2217.net.au
*.29billion.com
*.4056.in
*.60sp.xyz
*.aac-india.com
*.acer-coe.org
*.allium-sativum.de
*.amovies.cc
*.ap.co.za
*.asiafilmlab.com
*.assmaa.us
*.attictobasementmn.com
*.bay.co.za
*.biblesoftexchange.com
*.binnenbanden.nl
*.bipaare.de
*.businessrapid.us
*.debbieandsons.com
*.dociletrader.us
*.download1.club
*.eurodelisedona.com
*.fermoya.com
*.florals.au
*.flowerspictures.org
*.greenest-green.de
*.ikmaakbezwaar.net
*.laburritaberkeley.net
*.lillika-eden.com
*.luxottia.com
*.menschat24.com
*.mishelcarra.com
*.muslemzad.com
*.njmassagecenter.com
*.odn.co.in
*.oilcooler.com.au
*.onit.nl
*.parafrasit.com
*.planetcards.de
*.propertyreports.net.au
*.rvy.info
*.soloiver.de
*.thanzir.com
*.thevioletbutterfly.com
*.turbotimer.com.au
*.voedegol.com
*.xn--truhenbeschlge-hib.de
*.yakulinar.net
*.yuflow-events.com
*.znuewa.pl
2158.com.au
2217.net.au
29billion.com
4056.in
60sp.xyz
aac-india.com
acer-coe.org
allium-sativum.de
amovies.cc
ap.co.za
asiafilmlab.com
assmaa.us
attictobasementmn.com
bay.co.za
biblesoftexchange.com
binnenbanden.nl
bipaare.de
businessrapid.us
debbieandsons.com
dociletrader.us
download1.club
eurodelisedona.com
fermoya.com
florals.au
flowerspictures.org
greenest-green.de
ikmaakbezwaar.net
laburritaberkeley.net
lillika-eden.com
luxottia.com
menschat24.com
mishelcarra.com
muslemzad.com
njmassagecenter.com
odn.co.in
oilcooler.com.au
onit.nl
parafrasit.com
planetcards.de
propertyreports.net.au
rvy.info
soloiver.de
thanzir.com
thevioletbutterfly.com
turbotimer.com.au
voedegol.com
xn--truhenbeschlge-hib.de
yakulinar.net
yuflow-events.com
znuewa.pl

Other certificates including the domain name parafrasit.com

(limited to 100 certificates)
parafrasit.com
parafrasit.com
parafrasit.com
parafrasit.com
parafrasit.com
parafrasit.com
parafrasit.com
parafrasit.com

Certificate

The complete raw certificate details for parafrasit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMhjCCC26gAwIBAgISBP9cmWG3NFyWQgnK4WkZNIjXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTQxOTU0MzhaFw0yNDAzMTMxOTU0MzdaMBkxFzAVBgNVBAMT
DnBhcmFmcmFzaXQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
t5rp4+XnHl8KYK8dv19NhQLpTSvT1BvkQMXXCDfHy08CjAlZctJB/I3fNOBYUSzE
z8QIovSLSbIyU//tXR8L8HMM6s5y+PqpZ29DT3mmIGXtF0ELLSv5SCgAX2dgMNBw
qaLxbrouNLB9aLY2dC51LCsMsFfDJfdEGQPcT30m+7lhhzqwMHpwPTKoirdK2Qv7
sKtaaxEH030dqxG5qRT7t9c5td9e5ayWhHiBKCs7zNRjqJkzn6ocIba0nMHDwHYK
xkGymKKE5nsGWycS6YISNjeQ4P8pIiLfQnUyFY/ocnlsJqPtXiYs4C43PI9XaDgD
avJqo1Shjiwkw+s2+A+1OvLxJLUpupiHhtYT503/De9M5g1UZnRCYsqRcQC8PbT5
Px5GsMGp1+Qg0czL1d3cGLWUwYxR8I23IWUvMHCEuSkxN065x+cdY8rtj9SU4pkj
R8MOCpmntLeFtoIjylcBwipb/bR6jo/Z5kkztfiv34CE+3UpliF9iUz8BsEJf9X9
58ywT+Q2wVeFtIpEOS1pBRqNUCxxSgufSq8uzUmJPSS2OQRCtNs9mPGK6n0QseeF
JgfoDo4hJr9APklVJ939FkeHvswu3Ddls1Jrozwdd94ePwbwae/BskAD8UIkNUVm
EaOJ47NXNO19AZNAcPTsTbeTQKxuln62aIj3cAMZjfsCAwEAAaOCCK0wggipMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUUAdn4I+I0ZZgbmYAyMcezm14mM4wHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggazBgNVHREEggaqMIIGpoINKi4yMTU4LmNvbS5h
dYINKi4yMjE3Lm5ldC5hdYIPKi4yOWJpbGxpb24uY29tggkqLjQwNTYuaW6CCiou
NjBzcC54eXqCDyouYWFjLWluZGlhLmNvbYIOKi5hY2VyLWNvZS5vcmeCEyouYWxs
aXVtLXNhdGl2dW0uZGWCDCouYW1vdmllcy5jY4IKKi5hcC5jby56YYIRKi5hc2lh
ZmlsbWxhYi5jb22CCyouYXNzbWFhLnVzghcqLmF0dGljdG9iYXNlbWVudG1uLmNv
bYILKi5iYXkuY28uemGCFyouYmlibGVzb2Z0ZXhjaGFuZ2UuY29tghEqLmJpbm5l
bmJhbmRlbi5ubIIMKi5iaXBhYXJlLmRlghIqLmJ1c2luZXNzcmFwaWQudXOCEyou
ZGViYmllYW5kc29ucy5jb22CESouZG9jaWxldHJhZGVyLnVzghAqLmRvd25sb2Fk
MS5jbHVighQqLmV1cm9kZWxpc2Vkb25hLmNvbYINKi5mZXJtb3lhLmNvbYIMKi5m
bG9yYWxzLmF1ghUqLmZsb3dlcnNwaWN0dXJlcy5vcmeCEyouZ3JlZW5lc3QtZ3Jl
ZW4uZGWCEyouaWttYWFrYmV6d2Fhci5uZXSCFyoubGFidXJyaXRhYmVya2VsZXku
bmV0ghIqLmxpbGxpa2EtZWRlbi5jb22CDioubHV4b3R0aWEuY29tghAqLm1lbnNj
aGF0MjQuY29tghEqLm1pc2hlbGNhcnJhLmNvbYIPKi5tdXNsZW16YWQuY29tghUq
Lm5qbWFzc2FnZWNlbnRlci5jb22CCyoub2RuLmNvLmlughIqLm9pbGNvb2xlci5j
b20uYXWCCSoub25pdC5ubIIQKi5wYXJhZnJhc2l0LmNvbYIQKi5wbGFuZXRjYXJk
cy5kZYIYKi5wcm9wZXJ0eXJlcG9ydHMubmV0LmF1ggoqLnJ2eS5pbmZvgg0qLnNv
bG9pdmVyLmRlgg0qLnRoYW56aXIuY29tghgqLnRoZXZpb2xldGJ1dHRlcmZseS5j
b22CEyoudHVyYm90aW1lci5jb20uYXWCDioudm9lZGVnb2wuY29tghsqLnhuLS10
cnVoZW5iZXNjaGxnZS1oaWIuZGWCDyoueWFrdWxpbmFyLm5ldIITKi55dWZsb3ct
ZXZlbnRzLmNvbYILKi56bnVld2EucGyCCzIxNTguY29tLmF1ggsyMjE3Lm5ldC5h
dYINMjliaWxsaW9uLmNvbYIHNDA1Ni5pboIINjBzcC54eXqCDWFhYy1pbmRpYS5j
b22CDGFjZXItY29lLm9yZ4IRYWxsaXVtLXNhdGl2dW0uZGWCCmFtb3ZpZXMuY2OC
CGFwLmNvLnphgg9hc2lhZmlsbWxhYi5jb22CCWFzc21hYS51c4IVYXR0aWN0b2Jh
c2VtZW50bW4uY29tggliYXkuY28uemGCFWJpYmxlc29mdGV4Y2hhbmdlLmNvbYIP
YmlubmVuYmFuZGVuLm5sggpiaXBhYXJlLmRlghBidXNpbmVzc3JhcGlkLnVzghFk
ZWJiaWVhbmRzb25zLmNvbYIPZG9jaWxldHJhZGVyLnVzgg5kb3dubG9hZDEuY2x1
YoISZXVyb2RlbGlzZWRvbmEuY29tggtmZXJtb3lhLmNvbYIKZmxvcmFscy5hdYIT
Zmxvd2Vyc3BpY3R1cmVzLm9yZ4IRZ3JlZW5lc3QtZ3JlZW4uZGWCEWlrbWFha2Jl
endhYXIubmV0ghVsYWJ1cnJpdGFiZXJrZWxleS5uZXSCEGxpbGxpa2EtZWRlbi5j
b22CDGx1eG90dGlhLmNvbYIObWVuc2NoYXQyNC5jb22CD21pc2hlbGNhcnJhLmNv
bYINbXVzbGVtemFkLmNvbYITbmptYXNzYWdlY2VudGVyLmNvbYIJb2RuLmNvLmlu
ghBvaWxjb29sZXIuY29tLmF1ggdvbml0Lm5sgg5wYXJhZnJhc2l0LmNvbYIOcGxh
bmV0Y2FyZHMuZGWCFnByb3BlcnR5cmVwb3J0cy5uZXQuYXWCCHJ2eS5pbmZvggtz
b2xvaXZlci5kZYILdGhhbnppci5jb22CFnRoZXZpb2xldGJ1dHRlcmZseS5jb22C
EXR1cmJvdGltZXIuY29tLmF1ggx2b2VkZWdvbC5jb22CGXhuLS10cnVoZW5iZXNj
aGxnZS1oaWIuZGWCDXlha3VsaW5hci5uZXSCEXl1Zmxvdy1ldmVudHMuY29tggl6
bnVld2EucGwwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2
BIHzAPEAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYxqHCT0
AAAEAwBIMEYCIQDHKIZrd+THfqfpkkfpQdaWjbXLc/gX/2iyVHcOKDBRigIhAK7g
h/MyS14PWANcCGr9lUZAuO96SCphAUmrEtRyOIJtAHYAdv+IPwq2+5VRwmHM9Ye6
NLSkzbsp3GhCCp/mZ0xaOnQAAAGMahwlRwAABAMARzBFAiEA0+Rx7jQis5ugjnhu
DV20qn+O6WXypznDPQ5VZibLnhACIFBmXPu1ofieeg2gIsR94vT4W5Ett3KsW00u
8ulhdZdtMA0GCSqGSIb3DQEBCwUAA4IBAQCX5kxoplDpcv7UevPC/bCZxUPeU2W/
5erIXHiRmwjdkAeKl9eLfFSzik8FuXqioXuEdY0ijpjBWH0EgS9Kn71ncMFZaWx4
/i0AlG+dfa9rDaHo5hHhn8w16u+vXue12bggwZgU6cELDxywM0K3NE/R6vgVWVwq
vKCKuo8W86tzGCLg0OvKdpxoDhCogfIoc6z93UQDGnsaFlptYhEmW2kppHP5PnH1
AoauaIu754ngLpQsGJqrTJpztVTjKcLT9b/uZbWHBKlhJ8r4/2EL0XYyK1dmqXrc
WF36Z+5Poqm2FuY/u0okXnuktrLGSuFflS2KjTO4lYAt2ZH+d58v8Rqc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435344232670820553304172120876120144120023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 19:54:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 19:54:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'parafrasit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749043585099140616750959502709890091471279391083866441063720927459230987829317323149446553787105881518778944132452956539387503588301630619083966412750454208205656460991892191826762840857135392038404508891042924457554396597055890156016115300003668664952058779031209189504215255537108762158991230415805560693115693644145156548472008448939410272714373786221436797203630012100802912234569138372887046828674468422627375903834609161104640247215355806973007038219897096968713131605978017300783328963336102806307112453925872022628222701638438360424175005731432369988193920163694117461448060254971482842663427139177964005749442150257371576832348082331100476430436117112603750717240953789196986556351454788984732282638147092669857782155388506131237823984691561240347994412993490224922483937472453160539137038242882246036096855419444664811550177804528838884848026988014112004803201801101110249696375963745097276316106197617038750392062945670226264168019198619156730680100750048892077617116556264484505131767840713925150516442227931356644122136293158336053046269843843604403011416501462557323865335314732170538566309375339543675022886250928326767369487934262949533473546398254593600858124991037762109026946041306916083858637192485439304386579963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							500767e08f88d196606e6600c8c71ece6d7898ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1706 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2158.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2217.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.29billion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4056.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.60sp.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aac-india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acer-coe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allium-sativum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amovies.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asiafilmlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assmaa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attictobasementmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bay.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biblesoftexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binnenbanden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bipaare.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessrapid.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.debbieandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dociletrader.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.download1.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurodelisedona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fermoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florals.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowerspictures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenest-green.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikmaakbezwaar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laburritaberkeley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lillika-eden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxottia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menschat24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mishelcarra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muslemzad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njmassagecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.odn.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oilcooler.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parafrasit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planetcards.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propertyreports.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soloiver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thanzir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thevioletbutterfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turbotimer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voedegol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--truhenbeschlge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yakulinar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yuflow-events.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.znuewa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2158.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2217.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '29billion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4056.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '60sp.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aac-india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acer-coe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allium-sativum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amovies.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiafilmlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assmaa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attictobasementmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bay.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblesoftexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binnenbanden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bipaare.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessrapid.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debbieandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dociletrader.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download1.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurodelisedona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fermoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florals.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowerspictures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenest-green.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikmaakbezwaar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laburritaberkeley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lillika-eden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxottia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menschat24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishelcarra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muslemzad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njmassagecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odn.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilcooler.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafrasit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetcards.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertyreports.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soloiver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanzir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevioletbutterfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotimer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voedegol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--truhenbeschlge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakulinar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuflow-events.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'znuewa.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c6a1c24f40000040300483046022100c728866b77e4c77ea7e99247e941d6968db5cb73f817ff68b254770e2830518a022100aee087f3324b5e0f58035c086afd954640b8ef7a482a610149ab12d47238826d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c6a1c25470000040300473045022100d3e471ee3422b39ba08e786e0d5db4aa7f8ee965f2a739c33d0e556626cb9e10022050665cfbb5a1f89e7a0da022c47de2f4f85b912db772ac5b4d2ef2e96175976d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0097e64c68a650e972fed47af3c2fdb099c543de5365bfe5eac85c78919b08dd90078a97d78b7c54b38a4f05b97aa2a17b84758d228e98c1587d04812f4a9fbd6770c159696c78fe2d00946f9d7daf6b0da1e8e611e19fcc35eaefaf5ee7b5d9b820c19814e9c10b0f1cb03342b7344fd1eaf815595c2abca08aba8f16f3ab731822e0d0ebca769c680e10a881f22873acfddd44031a7b1a165a6d6211265b6929a473f93e71f50286ae688bbbe789e02e942c189aab4c9a73b554e329c2d3f5bfee65b58704a96127caf8ff610bd176322b5766a97adc585dfa67ee4fa2a9b616e63fbb4a245e7ba4b6b2c64ae15f952d8a8d33b895802dd991fe779f2ff11a9c