antiquewritingdesk.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7b:6a:be:13:75:49:68:c3:5d:40:43:f0:11:69:ee:00:8b was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=antiquewritingdesk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7b:6a:be:13:75:49:68:c3:5d:40:43:f0:11:69:ee:00:8b
Serial Number (int): 390445759956930936832402404899059156254859
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d7:ad:29:08:3c:fa:38:42:ed:70:68:fe:5a:e4:03:46:bd:8f:fc:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:35:99:f4:02:26:75:b9:40:2d:85:2b:19:40:17:4e:a1:ce:57:21
Fingerprint (sha256): 6b:17:4a:91:a1:ce:a1:1e:00:29:49:f3:90:56:82:97:68:22:b2:be:10:72:a1:82:6b:bc:41:37:2a:cd:2e:d9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate antiquewritingdesk.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for antiquewritingdesk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

19thcenturywritingdesk.com
abudhabiglobal.net
acceptchange.net
alaskadaily.com
antiquewritingdesk.com
bankingmerchant.com
bermudaoffshore.net
bigsurenergy.com
braziliancook.com
brisbaneartist.com
cranebarge.net
czechrepublictv.com
defencesecretary.com
defencework.net
defensework.net
dentistalarm.com
digitalmetalxchange.net
digitaloilxchange.net
documentarycanal.com
farsilovestory.com
filmsreview.com
guidemerchant.com
hydrogenclinic.org
interactivexchange.net
iraq-daily.com
lapazattorney.com
macphotoeditor.com
malaysiadj.com
menloparkdaily.com
mineral-drink.com
muhldorf.com
offshorecoinexchange.net
offshoresubcontractors.com
onlinepersonal.com
osloattractions.com
pariscitizen.com
parishotelsin.com
parissoul.com
publicnatural.com
reykjavikscholarship.com
romanticcabins.net
saudiimmigration.com
scandinaviancouncil.com
teamfiduciary.com
tobaccostory.com
tokencyber.com
wavepowerplant.net
www.19thcenturywritingdesk.com
www.abudhabiglobal.net
www.acceptchange.net
www.afrosolar.net
www.antiquewritingdesk.com
www.bankingmerchant.com
www.bigsurenergy.com
www.cinnamonchallenge.net
www.cranebarge.net
www.defencesecretary.com
www.defencework.net
www.defensework.net
www.digitalmetalxchange.net
www.digitaloilxchange.net
www.documentarycanal.com
www.farsilovestory.com
www.filmsreview.com
www.guidemerchant.com
www.helsinkischolarship.com
www.historydream.com
www.hydrogenclinic.org
www.interactivexchange.net
www.investigativesystem.com
www.iraq-daily.com
www.lapazattorney.com
www.macphotoeditor.com
www.mediavacancy.com
www.menloparkdaily.com
www.mineral-drink.com
www.nftantiques.org
www.offshorecoinexchange.net
www.offshorehawaii.com
www.onlinepersonal.com
www.pariscitizen.com
www.parisgrandhotel.com
www.parissoul.com
www.pereiratv.com
www.privatebankcrypto.com
www.publicnatural.com
www.saudiimmigration.com
www.scandinaviancouncil.com
www.teamfiduciary.com
www.tidalcurrents.net
yshanghai.com

Other certificates including the domain name antiquewritingdesk.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for antiquewritingdesk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMtTCCC52gAwIBAgISBHtqvhN1SWjDXUBD8BFp7gCLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMzExMTM0MzBaFw0yNDAzMzAxMTM0MjlaMCExHzAdBgNVBAMT
FmFudGlxdWV3cml0aW5nZGVzay5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDoOa7/oyuPccUfij6W85WBQwQaNCySAwLIPHvk75OtZJcomhTdfE8H
5gIdUKjf1IiAFdfx55AeG3oGSFkVJP/8ZG+1KiLjdbkMttGSJSujDpBPZwCWhNKD
tEQe4nS7VF4M+u+zXMG4cL76AbnpoXxK9do+HiMXXxyZQsTy7CazbtUFX8BgwXWN
zsWXXgJi00G/d/0ONp2yNdRJ55GJPOdoSjqSg1XTdehytdo+RWmXIhBDIFsvof+x
O6q7TVecb8eBlXMUfKCZvbYbvf/rkacmomszZNtsIWNFO88fqLmOebT007qFduce
dE0wmYj7PgQee3Bn5Xy2H9WU+yeET8grAgMBAAGjggnUMIIJ0DAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFNetKQg8+jhC7XBo/lrkA0a9j/yTMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIIH2wYDVR0RBIIH0jCCB86CGjE5dGhjZW50dXJ5d3JpdGluZ2Rl
c2suY29tghJhYnVkaGFiaWdsb2JhbC5uZXSCEGFjY2VwdGNoYW5nZS5uZXSCD2Fs
YXNrYWRhaWx5LmNvbYIWYW50aXF1ZXdyaXRpbmdkZXNrLmNvbYITYmFua2luZ21l
cmNoYW50LmNvbYITYmVybXVkYW9mZnNob3JlLm5ldIIQYmlnc3VyZW5lcmd5LmNv
bYIRYnJhemlsaWFuY29vay5jb22CEmJyaXNiYW5lYXJ0aXN0LmNvbYIOY3JhbmVi
YXJnZS5uZXSCE2N6ZWNocmVwdWJsaWN0di5jb22CFGRlZmVuY2VzZWNyZXRhcnku
Y29tgg9kZWZlbmNld29yay5uZXSCD2RlZmVuc2V3b3JrLm5ldIIQZGVudGlzdGFs
YXJtLmNvbYIXZGlnaXRhbG1ldGFseGNoYW5nZS5uZXSCFWRpZ2l0YWxvaWx4Y2hh
bmdlLm5ldIIUZG9jdW1lbnRhcnljYW5hbC5jb22CEmZhcnNpbG92ZXN0b3J5LmNv
bYIPZmlsbXNyZXZpZXcuY29tghFndWlkZW1lcmNoYW50LmNvbYISaHlkcm9nZW5j
bGluaWMub3JnghZpbnRlcmFjdGl2ZXhjaGFuZ2UubmV0gg5pcmFxLWRhaWx5LmNv
bYIRbGFwYXphdHRvcm5leS5jb22CEm1hY3Bob3RvZWRpdG9yLmNvbYIObWFsYXlz
aWFkai5jb22CEm1lbmxvcGFya2RhaWx5LmNvbYIRbWluZXJhbC1kcmluay5jb22C
DG11aGxkb3JmLmNvbYIYb2Zmc2hvcmVjb2luZXhjaGFuZ2UubmV0ghpvZmZzaG9y
ZXN1YmNvbnRyYWN0b3JzLmNvbYISb25saW5lcGVyc29uYWwuY29tghNvc2xvYXR0
cmFjdGlvbnMuY29tghBwYXJpc2NpdGl6ZW4uY29tghFwYXJpc2hvdGVsc2luLmNv
bYINcGFyaXNzb3VsLmNvbYIRcHVibGljbmF0dXJhbC5jb22CGHJleWtqYXZpa3Nj
aG9sYXJzaGlwLmNvbYIScm9tYW50aWNjYWJpbnMubmV0ghRzYXVkaWltbWlncmF0
aW9uLmNvbYIXc2NhbmRpbmF2aWFuY291bmNpbC5jb22CEXRlYW1maWR1Y2lhcnku
Y29tghB0b2JhY2Nvc3RvcnkuY29tgg50b2tlbmN5YmVyLmNvbYISd2F2ZXBvd2Vy
cGxhbnQubmV0gh53d3cuMTl0aGNlbnR1cnl3cml0aW5nZGVzay5jb22CFnd3dy5h
YnVkaGFiaWdsb2JhbC5uZXSCFHd3dy5hY2NlcHRjaGFuZ2UubmV0ghF3d3cuYWZy
b3NvbGFyLm5ldIIad3d3LmFudGlxdWV3cml0aW5nZGVzay5jb22CF3d3dy5iYW5r
aW5nbWVyY2hhbnQuY29tghR3d3cuYmlnc3VyZW5lcmd5LmNvbYIZd3d3LmNpbm5h
bW9uY2hhbGxlbmdlLm5ldIISd3d3LmNyYW5lYmFyZ2UubmV0ghh3d3cuZGVmZW5j
ZXNlY3JldGFyeS5jb22CE3d3dy5kZWZlbmNld29yay5uZXSCE3d3dy5kZWZlbnNl
d29yay5uZXSCG3d3dy5kaWdpdGFsbWV0YWx4Y2hhbmdlLm5ldIIZd3d3LmRpZ2l0
YWxvaWx4Y2hhbmdlLm5ldIIYd3d3LmRvY3VtZW50YXJ5Y2FuYWwuY29tghZ3d3cu
ZmFyc2lsb3Zlc3RvcnkuY29tghN3d3cuZmlsbXNyZXZpZXcuY29tghV3d3cuZ3Vp
ZGVtZXJjaGFudC5jb22CG3d3dy5oZWxzaW5raXNjaG9sYXJzaGlwLmNvbYIUd3d3
Lmhpc3RvcnlkcmVhbS5jb22CFnd3dy5oeWRyb2dlbmNsaW5pYy5vcmeCGnd3dy5p
bnRlcmFjdGl2ZXhjaGFuZ2UubmV0ght3d3cuaW52ZXN0aWdhdGl2ZXN5c3RlbS5j
b22CEnd3dy5pcmFxLWRhaWx5LmNvbYIVd3d3LmxhcGF6YXR0b3JuZXkuY29tghZ3
d3cubWFjcGhvdG9lZGl0b3IuY29tghR3d3cubWVkaWF2YWNhbmN5LmNvbYIWd3d3
Lm1lbmxvcGFya2RhaWx5LmNvbYIVd3d3Lm1pbmVyYWwtZHJpbmsuY29tghN3d3cu
bmZ0YW50aXF1ZXMub3Jnghx3d3cub2Zmc2hvcmVjb2luZXhjaGFuZ2UubmV0ghZ3
d3cub2Zmc2hvcmVoYXdhaWkuY29tghZ3d3cub25saW5lcGVyc29uYWwuY29tghR3
d3cucGFyaXNjaXRpemVuLmNvbYIXd3d3LnBhcmlzZ3JhbmRob3RlbC5jb22CEXd3
dy5wYXJpc3NvdWwuY29tghF3d3cucGVyZWlyYXR2LmNvbYIZd3d3LnByaXZhdGVi
YW5rY3J5cHRvLmNvbYIVd3d3LnB1YmxpY25hdHVyYWwuY29tghh3d3cuc2F1ZGlp
bW1pZ3JhdGlvbi5jb22CG3d3dy5zY2FuZGluYXZpYW5jb3VuY2lsLmNvbYIVd3d3
LnRlYW1maWR1Y2lhcnkuY29tghV3d3cudGlkYWxjdXJyZW50cy5uZXSCDXlzaGFu
Z2hhaS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1
BIHyAPAAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYy/3l4d
AAAEAwBGMEQCIDbO99KWePFf77EMtB/UauKppgxt04/BbOTvDSjiV3PMAiA1sRg3
Br7gn/tCVkbj95Oc5y9EAMFhTtR3fwIzrN/CwAB3AO7N0GTV2xrOxVy3nbTNE6Iy
h0Z8vOzew1FIWUZxH7WbAAABjL/eXisAAAQDAEgwRgIhAKYtK9rTk8lRgL6PXuW+
lXlnegwCQWuxnbeRTn6pOhKEAiEAqBzeglStn64cQMtiiFXCNgDp/zZP+eTGtsCa
xeEDufUwDQYJKoZIhvcNAQELBQADggEBAD0M14HngBhGoiZNMjetPmkVLYMYh9Uk
RygRMfH0TocySMilWfOeU2LrrlQdY4snhoN6fWeZg8QTOpnyV2SqHpm/Xp0z0lZl
w1eyiTWi77r6efcYgEex87h0cnElr9t5qlVoaIuq0Jj5CSX7gHXW4ZiXLqeVVKTj
gBESVguNcukM41geJFzhppRhtoQyWRGu/BAhLrUsLaOZym5Hg1+Qt7otik6uGHn7
/gqtIA4vquCFgtU5AOI33pGVNldwmErvWATi+eRnyTfpShDyEqgTKE1a7IaicyYm
qDBAYayMpnF9+LeDFw3DXGbysiTKghoz5WGujCHMJYr6OuhqOVRdpRw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dmu/6Mrj3HFH4o+lvOV
gUMEGjQskgMCyDx75O+TrWSXKJoU3XxPB+YCHVCo39SIgBXX8eeQHht6BkhZFST/
/GRvtSoi43W5DLbRkiUrow6QT2cAloTSg7REHuJ0u1ReDPrvs1zBuHC++gG56aF8
SvXaPh4jF18cmULE8uwms27VBV/AYMF1jc7Fl14CYtNBv3f9DjadsjXUSeeRiTzn
aEo6koNV03XocrXaPkVplyIQQyBbL6H/sTuqu01XnG/HgZVzFHygmb22G73/65Gn
JqJrM2TbbCFjRTvPH6i5jnm09NO6hXbnHnRNMJmI+z4EHntwZ+V8th/VlPsnhE/I
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390445759956930936832402404899059156254859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 11:34:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 11:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'antiquewritingdesk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29315731589628970903325102013278481703414408422951774305667465474409258164477947359535489348211640803782712304916919389654745286223343424975422500705494988030878231015544342519969428199603614593170905088629285577211359386777068629272300129805608639504948429899055120975400512388640144383093959146291912837443610531116470806146961647351184575379641653967681025571760013803079516899791030973324778626839283965470936078615665011350086757502616379935545248395184987213568757647522950062527347042271930308809306524771470739334137615089399007827222500056979681892409077995195797717046825313431301626050707290444236470601771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7ad29083cfa3842ed7068fe5ae40346bd8ffc93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2002 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '19thcenturywritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abudhabiglobal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskadaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquewritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingmerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudaoffshore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigsurenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braziliancook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbaneartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cranebarge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechrepublictv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defencesecretary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defencework.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defensework.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistalarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmetalxchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaloilxchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentarycanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farsilovestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmsreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidemerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrogenclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iraq-daily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapazattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macphotoeditor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysiadj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menloparkdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineral-drink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhldorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorecoinexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoresubcontractors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osloattractions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pariscitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parishotelsin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parissoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavikscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanticcabins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudiimmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scandinaviancouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamfiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobaccostory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokencyber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavepowerplant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.19thcenturywritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abudhabiglobal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acceptchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afrosolar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antiquewritingdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankingmerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigsurenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinnamonchallenge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cranebarge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defencesecretary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defencework.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defensework.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalmetalxchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaloilxchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.documentarycanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farsilovestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmsreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidemerchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkischolarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historydream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrogenclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interactivexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investigativesystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iraq-daily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapazattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macphotoeditor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediavacancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menloparkdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineral-drink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nftantiques.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorecoinexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorehawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinepersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pariscitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parisgrandhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parissoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pereiratv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankcrypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudiimmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scandinaviancouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamfiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tidalcurrents.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshanghai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cbfde5e1d0000040300463044022036cef7d29678f15fefb10cb41fd46ae2a9a60c6dd38fc16ce4ef0d28e25773cc022035b1183706bee09ffb425646e3f7939ce72f4400c1614ed4777f0233acdfc2c0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cbfde5e2b0000040300483046022100a62d2bdad393c95180be8f5ee5be9579677a0c02416bb19db7914e7ea93a1284022100a81cde8254ad9fae1c40cb628855c23600e9ff364ff9e4c6b6c09ac5e103b9f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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