valentinaproject.org

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:8c:09:9d:1b:e8:b5:1e:79:c6:26:6f:ca:20:0a:94:ca was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=valentinaproject.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:8c:09:9d:1b:e8:b5:1e:79:c6:26:6f:ca:20:0a:94:ca
Serial Number (int): 328898908282257658384241685262153961608394
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:44:a4:16:71:fa:09:c1:2e:b2:db:b1:8d:a8:06:9b:20:4f:12:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:c6:b4:e2:8b:a7:09:68:4d:2f:00:55:bd:c9:ee:a3:6b:b2:8d:e6
Fingerprint (sha256): 6d:b3:3a:6f:92:a1:ac:f1:77:aa:31:c1:4f:b9:5a:0f:72:4b:9f:85:0a:f6:48:27:5d:46:c9:9f:08:08:82:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate valentinaproject.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for valentinaproject.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accordparts.com
*.afterpau.com
*.altramobile.com
*.aluxier.com
*.argim.com
*.bele.me
*.cabotelecon.com.br
*.chatking.org
*.chwbenefitconnect.com
*.counselingexams.com
*.currystew.org
*.durhamwatermeterappt.com
*.easymoney.au
*.eggclub.org
*.fantasyfutbol.com
*.firstchoicefcu.org
*.globlesources.com
*.goleaks.org
*.grammarely.com
*.hudhomesotre.com
*.ignitiascools.com
*.invitationtemplatesword.com
*.johls.com
*.lotzabbws.com
*.magicproductsinc.com
*.marriagemechanics.org
*.mimicpap.com
*.mindaugas.com
*.minicruisers.com
*.myplick.com
*.nampabingo.org
*.nyapass.org
*.offese.com
*.olympiccollege.com
*.paplessemployee.com
*.peliculaspormega.com
*.raleighsurgical.com
*.serein.de
*.southwesterrailway.com
*.suitssupply.com
*.tap4offers.com
*.tellthebl.com
*.thefunpark.org
*.transmedreports.org
*.valentinaproject.org
*.waherungsrechner.de
*.webstrant.com
*.westgateplace.com
*.whatsgoingon.com
*.wwwhouzz.com
accordparts.com
afterpau.com
altramobile.com
aluxier.com
argim.com
bele.me
cabotelecon.com.br
chatking.org
chwbenefitconnect.com
counselingexams.com
currystew.org
durhamwatermeterappt.com
easymoney.au
eggclub.org
fantasyfutbol.com
firstchoicefcu.org
globlesources.com
goleaks.org
grammarely.com
hudhomesotre.com
ignitiascools.com
invitationtemplatesword.com
johls.com
lotzabbws.com
magicproductsinc.com
marriagemechanics.org
mimicpap.com
mindaugas.com
minicruisers.com
myplick.com
nampabingo.org
nyapass.org
offese.com
olympiccollege.com
paplessemployee.com
peliculaspormega.com
raleighsurgical.com
serein.de
southwesterrailway.com
suitssupply.com
tap4offers.com
tellthebl.com
thefunpark.org
transmedreports.org
valentinaproject.org
waherungsrechner.de
webstrant.com
westgateplace.com
whatsgoingon.com
wwwhouzz.com

Other certificates including the domain name valentinaproject.org

(limited to 100 certificates)
wiki.valentinaproject.org
thcdoctor.org
wiki.valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
valentinaproject.org
wiki.valentinaproject.org
valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
valentinaproject.org
wiki.valentinaproject.org
thcdoctor.org
wiki.valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
wiki.valentinaproject.org
eggclub.org

Certificate

The complete raw certificate details for valentinaproject.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINCjCCC/KgAwIBAgISA8aMCZ0b6LUeecYmb8ogCpTKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDgxMTM1MDZaFw0yNDAyMDYxMTM1MDVaMB8xHTAbBgNVBAMT
FHZhbGVudGluYXByb2plY3Qub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAuOf5CIJXHfOYrIOH9ZWD/4dbhZ9S/glllLvNVKMZGn1jvgSN1LsZreOT
9ZVzUzOJLX3UlB1UTSTe2fGQ/a4Op1SZ1z7+udHQRYLX7PnYb7Tv+zaGxL3M5Gad
4zLb24IaE615xsGn0sAFDiDu6x+bXCGTE4s4A7ilMeK2OHtP01L314eFGzpUwWvt
qrEW698BTrBWeBRgYWUSXRpewqVp2HTLD82lwO//g3CC3K0HiJ4fDR5eywsVzGqm
Am2Vy9HKSFnSI99gx42MknGNCcdiHNS0SwL6SYR/lDorZuwAOsfU+Vumu+igDjaa
2VbePwgks0K2YPFETohbM+0c0UBHJgP3Ls+xsovHRXeOd0OaRRtLGZUkPoVG0ttu
N7B6uxndJb5cKjuLnI3KopKfztWGLgEYfrHME5L9A+XYSoJqtNRfhNe/Rv5ucPxd
9wQdLnBga8t0pjH+tokvsOCfl7jKtqmP1VIjGBN5vfQ85+aAurNWcPXuXzrV+8m2
eeyI/5M6gjtPip/ezUfIkRNsWQclphnHb0zLkRraLssqW0p8vXf26945+obCdY7b
Z8uPi7r6PUqBHLDha0vIQv8jCKy/5kCswgYKZZXcR6DHj6u6GnfJaNWevur+T6la
phpfPE2m6F8DmdyAawMYMZNgkEPvGrtw1CI0YAi/XLYY2WGd+OMCAwEAAaOCCSsw
ggknMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUq0SkFnH6CcEustuxjagGmyBPEvUw
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggczBgNVHREEggcqMIIHJoIRKi5hY2Nv
cmRwYXJ0cy5jb22CDiouYWZ0ZXJwYXUuY29tghEqLmFsdHJhbW9iaWxlLmNvbYIN
Ki5hbHV4aWVyLmNvbYILKi5hcmdpbS5jb22CCSouYmVsZS5tZYIUKi5jYWJvdGVs
ZWNvbi5jb20uYnKCDiouY2hhdGtpbmcub3JnghcqLmNod2JlbmVmaXRjb25uZWN0
LmNvbYIVKi5jb3Vuc2VsaW5nZXhhbXMuY29tgg8qLmN1cnJ5c3Rldy5vcmeCGiou
ZHVyaGFtd2F0ZXJtZXRlcmFwcHQuY29tgg4qLmVhc3ltb25leS5hdYINKi5lZ2dj
bHViLm9yZ4ITKi5mYW50YXN5ZnV0Ym9sLmNvbYIUKi5maXJzdGNob2ljZWZjdS5v
cmeCEyouZ2xvYmxlc291cmNlcy5jb22CDSouZ29sZWFrcy5vcmeCECouZ3JhbW1h
cmVseS5jb22CEiouaHVkaG9tZXNvdHJlLmNvbYITKi5pZ25pdGlhc2Nvb2xzLmNv
bYIdKi5pbnZpdGF0aW9udGVtcGxhdGVzd29yZC5jb22CCyouam9obHMuY29tgg8q
LmxvdHphYmJ3cy5jb22CFioubWFnaWNwcm9kdWN0c2luYy5jb22CFyoubWFycmlh
Z2VtZWNoYW5pY3Mub3Jngg4qLm1pbWljcGFwLmNvbYIPKi5taW5kYXVnYXMuY29t
ghIqLm1pbmljcnVpc2Vycy5jb22CDSoubXlwbGljay5jb22CECoubmFtcGFiaW5n
by5vcmeCDSoubnlhcGFzcy5vcmeCDCoub2ZmZXNlLmNvbYIUKi5vbHltcGljY29s
bGVnZS5jb22CFSoucGFwbGVzc2VtcGxveWVlLmNvbYIWKi5wZWxpY3VsYXNwb3Jt
ZWdhLmNvbYIVKi5yYWxlaWdoc3VyZ2ljYWwuY29tggsqLnNlcmVpbi5kZYIYKi5z
b3V0aHdlc3RlcnJhaWx3YXkuY29tghEqLnN1aXRzc3VwcGx5LmNvbYIQKi50YXA0
b2ZmZXJzLmNvbYIPKi50ZWxsdGhlYmwuY29tghAqLnRoZWZ1bnBhcmsub3JnghUq
LnRyYW5zbWVkcmVwb3J0cy5vcmeCFioudmFsZW50aW5hcHJvamVjdC5vcmeCFSou
d2FoZXJ1bmdzcmVjaG5lci5kZYIPKi53ZWJzdHJhbnQuY29tghMqLndlc3RnYXRl
cGxhY2UuY29tghIqLndoYXRzZ29pbmdvbi5jb22CDioud3d3aG91enouY29tgg9h
Y2NvcmRwYXJ0cy5jb22CDGFmdGVycGF1LmNvbYIPYWx0cmFtb2JpbGUuY29tggth
bHV4aWVyLmNvbYIJYXJnaW0uY29tggdiZWxlLm1lghJjYWJvdGVsZWNvbi5jb20u
YnKCDGNoYXRraW5nLm9yZ4IVY2h3YmVuZWZpdGNvbm5lY3QuY29tghNjb3Vuc2Vs
aW5nZXhhbXMuY29tgg1jdXJyeXN0ZXcub3JnghhkdXJoYW13YXRlcm1ldGVyYXBw
dC5jb22CDGVhc3ltb25leS5hdYILZWdnY2x1Yi5vcmeCEWZhbnRhc3lmdXRib2wu
Y29tghJmaXJzdGNob2ljZWZjdS5vcmeCEWdsb2JsZXNvdXJjZXMuY29tggtnb2xl
YWtzLm9yZ4IOZ3JhbW1hcmVseS5jb22CEGh1ZGhvbWVzb3RyZS5jb22CEWlnbml0
aWFzY29vbHMuY29tghtpbnZpdGF0aW9udGVtcGxhdGVzd29yZC5jb22CCWpvaGxz
LmNvbYINbG90emFiYndzLmNvbYIUbWFnaWNwcm9kdWN0c2luYy5jb22CFW1hcnJp
YWdlbWVjaGFuaWNzLm9yZ4IMbWltaWNwYXAuY29tgg1taW5kYXVnYXMuY29tghBt
aW5pY3J1aXNlcnMuY29tggtteXBsaWNrLmNvbYIObmFtcGFiaW5nby5vcmeCC255
YXBhc3Mub3JnggpvZmZlc2UuY29tghJvbHltcGljY29sbGVnZS5jb22CE3BhcGxl
c3NlbXBsb3llZS5jb22CFHBlbGljdWxhc3Bvcm1lZ2EuY29tghNyYWxlaWdoc3Vy
Z2ljYWwuY29tgglzZXJlaW4uZGWCFnNvdXRod2VzdGVycmFpbHdheS5jb22CD3N1
aXRzc3VwcGx5LmNvbYIOdGFwNG9mZmVycy5jb22CDXRlbGx0aGVibC5jb22CDnRo
ZWZ1bnBhcmsub3JnghN0cmFuc21lZHJlcG9ydHMub3JnghR2YWxlbnRpbmFwcm9q
ZWN0Lm9yZ4ITd2FoZXJ1bmdzcmVjaG5lci5kZYINd2Vic3RyYW50LmNvbYIRd2Vz
dGdhdGVwbGFjZS5jb22CEHdoYXRzZ29pbmdvbi5jb22CDHd3d2hvdXp6LmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ADtT
d3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi67t4K0AAAQDAEYwRAIg
MuUcAaXY+KiIjVINQRb8QlKsT/E5qEu8fCsKicbX1twCIDdJfe0esUo+1mez8q9e
WG14DInveAaP51cOzcyOo4rvAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ
RnEftZsAAAGLru3gqAAABAMARzBFAiAQY2N67e6dsdt/wtTjLCUKhQbXQP/NiNA0
59BMvWgf+gIhAMZfC7IzkU0mAiAdSCZISmo63tFGpYu/b3neOzDZZ8NxMA0GCSqG
SIb3DQEBCwUAA4IBAQC6orTselfDnWjiIIoKoMBsApTrdqQtGt6W0/QiemFK+BT2
wpLrZ7uNAGKGPmSrHBvT/GJnbiH7nWXkaR+AxwaiW2Y8/lKqzx0wbNBwcxJzLBkt
jH2MTtCGHdX7ACzzCaizxaJEb2xIy0p/TUQ3RbbKLkV6GiYpKfF4qlr7PTifJ8qu
y3hJVBeTjXyxoUH2zxkP8Rv6QZt0cVtYviNt6a9m7biHS1qVxLb+5kdWlmMegW32
0qATm2TYSGX2jNv5Ah7kaVht3tLTPeIexqA96h8a7dSRBYbSatGJS3T5fcdalj+L
jzWsFJLWxN7nH3osekclhX4n+xr4qiOqeEV0kmCw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328898908282257658384241685262153961608394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 11:35:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 11:35:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'valentinaproject.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754351252268480340383452293156384288998057936877022456502121457354965871585851231400647570312024170032179906194209133282617350859625225736641898810035227530445115799208543227538863375773384238947194534529471671314548601326951205242612956318754531693637888013586446802892495002817628323116979283088711602577427295973808335700655563450185066177306032753893394511781035936349999402868332574603809699816323571825078508643893953085990756142930435779940302810511488992096412929698765665025483809746033814344312234896740495111671846864024695050268805022248181134063300583731444437073181140447211419961324308966242345026663559686891365246917847008521613531199611720332994657313411271625342013754151927367032720882663147488423220564620568656196823418560604388589235044437368767279330768458918337869080305477790006023778796086129162651949983307404287187059539132209939370380453730276987824864100531909956643123126812530093748689200419016428594329144129638022745050010740481356783097069569673638813503574792110911740954142982746471441610829008322511550778562173863752175358983934877697099925806369079851084265898382195987367374103436017392628541432451114574833053098584227030340032478810485290709258192802893907696153257470549771356040501000419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab44a41671fa09c12eb2dbb18da8069b204f12f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accordparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afterpau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altramobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aluxier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bele.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabotelecon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chwbenefitconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.counselingexams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currystew.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.durhamwatermeterappt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easymoney.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eggclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasyfutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstchoicefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globlesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goleaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grammarely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hudhomesotre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ignitiascools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invitationtemplatesword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotzabbws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicproductsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marriagemechanics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mimicpap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindaugas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minicruisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myplick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nampabingo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyapass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olympiccollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paplessemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peliculaspormega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raleighsurgical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southwesterrailway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitssupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tap4offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tellthebl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefunpark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transmedreports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valentinaproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waherungsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webstrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westgateplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatsgoingon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwhouzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accordparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterpau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altramobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluxier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bele.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabotelecon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chwbenefitconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counselingexams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currystew.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durhamwatermeterappt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easymoney.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eggclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasyfutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstchoicefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globlesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goleaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudhomesotre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitiascools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitationtemplatesword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotzabbws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicproductsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriagemechanics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimicpap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindaugas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minicruisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nampabingo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyapass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympiccollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paplessemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peliculaspormega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighsurgical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwesterrailway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitssupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tap4offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellthebl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefunpark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transmedreports.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentinaproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waherungsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westgateplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsgoingon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwhouzz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018baeede0ad0000040300463044022032e51c01a5d8f8a8888d520d4116fc4252ac4ff139a84bbc7c2b0a89c6d7d6dc022037497ded1eb14a3ed667b3f2af5e586d780c89ef78068fe7570ecdcc8ea38aef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018baeede0a8000004030047304502201063637aedee9db1db7fc2d4e32c250a8506d740ffcd88d034e7d04cbd681ffa022100c65f0bb233914d2602201d4826484a6a3aded146a58bbf6f79de3b30d967c371
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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