mtnnigeria.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3f:69:1a:83:f3:50:a0:6f:5c:c2:51:42:3f:c6:58:5f:98 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mtnnigeria.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3f:69:1a:83:f3:50:a0:6f:5c:c2:51:42:3f:c6:58:5f:98
Serial Number (int): 370026639458608902181007127429923122732952
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cd:fc:99:ff:46:f5:57:fc:b3:69:0c:44:2d:15:12:8f:a0:59:0c:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:52:80:aa:0f:87:fe:28:a6:fb:48:e1:1d:b6:4f:4f:98:85:d2:56
Fingerprint (sha256): 70:12:29:d0:89:55:21:12:95:a8:85:71:41:3d:9c:12:c0:25:84:ad:a4:f6:d1:c6:08:8b:9d:9d:c3:57:32:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mtnnigeria.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mtnnigeria.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.africanhairbraiding.com
*.amazonmoment.co
*.autopalace.com
*.banglian.com
*.blazer.de
*.brazil99.co
*.brello.com
*.camsluts.site
*.drewkyndallross.com
*.elegantfurniture1.net
*.estopilla.com
*.familyfaresurvey.com
*.fleurquartet.com
*.fuelnet.com
*.gatorpackandship.com
*.gowogle.com
*.houlei.com
*.howmade.co
*.icipaintstores.com
*.isidor.com
*.jeuxdegame.com
*.jpwa.com
*.khrys.com
*.lichaam.com
*.mainlandshops.com
*.mealla.com
*.milanoseries.com
*.mountfiles.com
*.mtnnigeria.com
*.natatorium.com
*.nercedi.com
*.noelleeming.com
*.ohleech.com
*.orthofeet.co
*.politeia.com
*.printlyrics.com
*.purebeam.co
*.saplingindia.com
*.seacoastunitedmaine.org
*.surprisegiftbaskets.com
*.teatrohostel.org
*.timperi.com
*.undress.online
*.usdirectexprress.com
*.vakeupcall.info
*.xn--kindersachenbrse-ywb.de
*.xvkdeos.com
*.xxx888.com
*.yamahaaudio.com
*.ziare.tv
africanhairbraiding.com
amazonmoment.co
autopalace.com
banglian.com
blazer.de
brazil99.co
brello.com
camsluts.site
drewkyndallross.com
elegantfurniture1.net
estopilla.com
familyfaresurvey.com
fleurquartet.com
fuelnet.com
gatorpackandship.com
gowogle.com
houlei.com
howmade.co
icipaintstores.com
isidor.com
jeuxdegame.com
jpwa.com
khrys.com
lichaam.com
mainlandshops.com
mealla.com
milanoseries.com
mountfiles.com
mtnnigeria.com
natatorium.com
nercedi.com
noelleeming.com
ohleech.com
orthofeet.co
politeia.com
printlyrics.com
purebeam.co
saplingindia.com
seacoastunitedmaine.org
surprisegiftbaskets.com
teatrohostel.org
timperi.com
undress.online
usdirectexprress.com
vakeupcall.info
xn--kindersachenbrse-ywb.de
xvkdeos.com
xxx888.com
yamahaaudio.com
ziare.tv

Other certificates including the domain name mtnnigeria.com

(limited to 100 certificates)
thescenestersmovie.com
ask-answers-online.com
1041966784.com
robinho.com
caoyise.site
mtnnigeria.com
mtnnigeria.com
tokyorevengers.xyz
tokyorevengers.xyz
mkautomilton.com

Certificate

The complete raw certificate details for mtnnigeria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMlTCCC32gAwIBAgISBD9pGoPzUKBvXMJRQj/GWF+YMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTMyMjQ2MzJaFw0yNDA0MTIyMjQ2MzFaMBkxFzAVBgNVBAMT
Dm10bm5pZ2VyaWEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
wvojtd6BuS5oXInWonjW0huBgGmgMBq/1SZ7fzIWVP6ko46Hu1JDKUFddzBVF6dY
LVVOlKMPmOu/U+Bh7xxJeviSDMHXBwnGz8f7DoWlKK2NVhKDio1vZRpQrD5ehKVB
1n40n/d83cMkWr4uNt5njYYSWOVAn+gFj/IouxCBi/BSuM6ngeLQEiPg7qTCzDtn
KtJv4FLsFcav2GjFjEWYMw2xYPhq3ntxqBHSntUwdu27vEk2R4eZw8XHHKfDP0dx
El4qXxowYo9OPSzvT5U/6kVF3yX4Eu05LWNId3fEubXaJcEkWMwKCqH9NciA2laQ
o+0ra/9Y6OJUBC2WeMthWKWzSBlxLrhjFehPnroZx+W+3HiKsKToYz2+7tXr/kFE
Uy2U3Fs7BxX/ES4hxfvhQo7Fh9jEcIaC/FOnFXw21tpWtsZwL0cts5ZNABm5Xwcp
3Fx0weHkHzPU7SAKMdb6dRICg3Rx+F5b15c7bneOLwPWSLVwc78Xl4kKCg34WrB5
MFqF24fpNL7tevuVsTGEOaiIldUD5TmJV7xW0IdhOYvuhAiGAKX1dUKsQOxZJT+Q
MQvO6r9F4G3VABteeVAsnXtNt6BX8GGiffFtUMdcj40qrQETOP1Z81GOZTQIXwnf
qjpTExhoxVHOntriXhX+0UI0P/cq6YtvnArWolWl6SMCAwEAAaOCCLwwggi4MA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUzfyZ/0b1V/yzaQxELRUSj6BZDPUwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggbDBgNVHREEgga6MIIGtoIZKi5hZnJpY2FuaGFp
cmJyYWlkaW5nLmNvbYIRKi5hbWF6b25tb21lbnQuY2+CECouYXV0b3BhbGFjZS5j
b22CDiouYmFuZ2xpYW4uY29tggsqLmJsYXplci5kZYINKi5icmF6aWw5OS5jb4IM
Ki5icmVsbG8uY29tgg8qLmNhbXNsdXRzLnNpdGWCFSouZHJld2t5bmRhbGxyb3Nz
LmNvbYIXKi5lbGVnYW50ZnVybml0dXJlMS5uZXSCDyouZXN0b3BpbGxhLmNvbYIW
Ki5mYW1pbHlmYXJlc3VydmV5LmNvbYISKi5mbGV1cnF1YXJ0ZXQuY29tgg0qLmZ1
ZWxuZXQuY29tghYqLmdhdG9ycGFja2FuZHNoaXAuY29tgg0qLmdvd29nbGUuY29t
ggwqLmhvdWxlaS5jb22CDCouaG93bWFkZS5jb4IUKi5pY2lwYWludHN0b3Jlcy5j
b22CDCouaXNpZG9yLmNvbYIQKi5qZXV4ZGVnYW1lLmNvbYIKKi5qcHdhLmNvbYIL
Ki5raHJ5cy5jb22CDSoubGljaGFhbS5jb22CEyoubWFpbmxhbmRzaG9wcy5jb22C
DCoubWVhbGxhLmNvbYISKi5taWxhbm9zZXJpZXMuY29tghAqLm1vdW50ZmlsZXMu
Y29tghAqLm10bm5pZ2VyaWEuY29tghAqLm5hdGF0b3JpdW0uY29tgg0qLm5lcmNl
ZGkuY29tghEqLm5vZWxsZWVtaW5nLmNvbYINKi5vaGxlZWNoLmNvbYIOKi5vcnRo
b2ZlZXQuY2+CDioucG9saXRlaWEuY29tghEqLnByaW50bHlyaWNzLmNvbYINKi5w
dXJlYmVhbS5jb4ISKi5zYXBsaW5naW5kaWEuY29tghkqLnNlYWNvYXN0dW5pdGVk
bWFpbmUub3JnghkqLnN1cnByaXNlZ2lmdGJhc2tldHMuY29tghIqLnRlYXRyb2hv
c3RlbC5vcmeCDSoudGltcGVyaS5jb22CECoudW5kcmVzcy5vbmxpbmWCFioudXNk
aXJlY3RleHBycmVzcy5jb22CESoudmFrZXVwY2FsbC5pbmZvgh0qLnhuLS1raW5k
ZXJzYWNoZW5icnNlLXl3Yi5kZYINKi54dmtkZW9zLmNvbYIMKi54eHg4ODguY29t
ghEqLnlhbWFoYWF1ZGlvLmNvbYIKKi56aWFyZS50doIXYWZyaWNhbmhhaXJicmFp
ZGluZy5jb22CD2FtYXpvbm1vbWVudC5jb4IOYXV0b3BhbGFjZS5jb22CDGJhbmds
aWFuLmNvbYIJYmxhemVyLmRlggticmF6aWw5OS5jb4IKYnJlbGxvLmNvbYINY2Ft
c2x1dHMuc2l0ZYITZHJld2t5bmRhbGxyb3NzLmNvbYIVZWxlZ2FudGZ1cm5pdHVy
ZTEubmV0gg1lc3RvcGlsbGEuY29tghRmYW1pbHlmYXJlc3VydmV5LmNvbYIQZmxl
dXJxdWFydGV0LmNvbYILZnVlbG5ldC5jb22CFGdhdG9ycGFja2FuZHNoaXAuY29t
ggtnb3dvZ2xlLmNvbYIKaG91bGVpLmNvbYIKaG93bWFkZS5jb4ISaWNpcGFpbnRz
dG9yZXMuY29tggppc2lkb3IuY29tgg5qZXV4ZGVnYW1lLmNvbYIIanB3YS5jb22C
CWtocnlzLmNvbYILbGljaGFhbS5jb22CEW1haW5sYW5kc2hvcHMuY29tggptZWFs
bGEuY29tghBtaWxhbm9zZXJpZXMuY29tgg5tb3VudGZpbGVzLmNvbYIObXRubmln
ZXJpYS5jb22CDm5hdGF0b3JpdW0uY29tggtuZXJjZWRpLmNvbYIPbm9lbGxlZW1p
bmcuY29tggtvaGxlZWNoLmNvbYIMb3J0aG9mZWV0LmNvggxwb2xpdGVpYS5jb22C
D3ByaW50bHlyaWNzLmNvbYILcHVyZWJlYW0uY2+CEHNhcGxpbmdpbmRpYS5jb22C
F3NlYWNvYXN0dW5pdGVkbWFpbmUub3JnghdzdXJwcmlzZWdpZnRiYXNrZXRzLmNv
bYIQdGVhdHJvaG9zdGVsLm9yZ4ILdGltcGVyaS5jb22CDnVuZHJlc3Mub25saW5l
ghR1c2RpcmVjdGV4cHJyZXNzLmNvbYIPdmFrZXVwY2FsbC5pbmZvght4bi0ta2lu
ZGVyc2FjaGVuYnJzZS15d2IuZGWCC3h2a2Rlb3MuY29tggp4eHg4ODguY29tgg95
YW1haGFhdWRpby5jb22CCHppYXJlLnR2MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70A
DS1yb+H61BcAAAGNBThPaQAABAMASDBGAiEA+aJb8AagUbr2r//emiLXUqw6e5zm
JwOKa3kChJzaQcsCIQDW1tHJnSM5OvLC9b0vaPRgSgh/HoHjltEMDuWBDiFIjAB1
AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjQU4T3AAAAQDAEYw
RAIgJLV7X2OTV4TrMePK8h2xWwzu8b+nagu7mNn+bjyDcvkCIHnZfuKs5XXUQfpq
sOA2DudDAMkst3F+MaNU3l4nJ6lfMA0GCSqGSIb3DQEBCwUAA4IBAQAurM1icQxh
7VTU2pOYnV4Ny2E7jjoeI9x9CpA1JvkaeJg4oCx38Vn7t41pjaDe87+hbuw/bQ18
smrNpPPA8CxFtx4czxGjKi3oMHVI/nSBkibu0DsZ0rale0FxLf0YkHrM5ESMKKdk
1tT0FZIDxYJA+sWUBdAEnerNmZ1EpCsZnvUzuk0REro28+kh4c1qSvLBQooL9T+6
xjibxJbkmieA7OmaAmzwM2DipeLGyzMzOxqnNkWUw/lx2sxPFK7KMxUZlTxPgOm4
wcD37AYrahSOuV3gnxxrhgUVs/ZsASfIi1yjVZZ5NfpxX2XLtSYCzFDL8F6aU/Op
2KuJLQC9qfDp
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370026639458608902181007127429923122732952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 22:46:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 22:46:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mtnnigeria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795437199595420215563464061266174712318692381581843490871180397654149263571585238266004262523738186613147883689053680733863044074328004217154937730282460456379631574487098668540125956690699873625287552417738510640972049004998428393217947372643470033364865344731460581648697523161899457588559060501041071735363877085703232439858777867099196820234860726637829119493970346931346590306676338142466451245078247483963167709604758977954594148953505229113264891413844117538908855537092826175706938959252959157218692399711159937283502583834338548286529081319426492542828209266907299667548553942124726871034862597749490370401742831273692190008515852777799724824546581344304044052949907163097721746472214878618133387472253282988715354774431157480365970713260372399191113828225026474381591359021942852426129204128587858443146449247626451859445613811413398737193462301229796069766806289856790221149893454136189087173132261353037421440996051562150191113328429482123158291565895531528528416501518831424312979009059172835582241886853109059073588466495400334043620660641776449198127280360823224574097682442851998750638384444712069675175832778763961326829074152746011928678154528649403942805619196775082530047667106392015054145261517531111921056868643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdfc99ff46f557fcb3690c442d15128fa0590cf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1722 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africanhairbraiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonmoment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autopalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banglian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blazer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazil99.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camsluts.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drewkyndallross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elegantfurniture1.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estopilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familyfaresurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fleurquartet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuelnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gatorpackandship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gowogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houlei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howmade.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icipaintstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isidor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeuxdegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khrys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lichaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainlandshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mealla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milanoseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountfiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtnnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natatorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nercedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noelleeming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohleech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orthofeet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.politeia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printlyrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purebeam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saplingindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seacoastunitedmaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surprisegiftbaskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teatrohostel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timperi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.undress.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usdirectexprress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vakeupcall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kindersachenbrse-ywb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvkdeos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxx888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamahaaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziare.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanhairbraiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonmoment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banglian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blazer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil99.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camsluts.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drewkyndallross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elegantfurniture1.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estopilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyfaresurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleurquartet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatorpackandship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gowogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houlei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howmade.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icipaintstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isidor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeuxdegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khrys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mealla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanoseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtnnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natatorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nercedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noelleeming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohleech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthofeet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politeia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printlyrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purebeam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saplingindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seacoastunitedmaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surprisegiftbaskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatrohostel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timperi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undress.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdirectexprress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakeupcall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kindersachenbrse-ywb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvkdeos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxx888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamahaaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziare.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d05384f690000040300483046022100f9a25bf006a051baf6afffde9a22d752ac3a7b9ce627038a6b7902849cda41cb022100d6d6d1c99d23393af2c2f5bd2f68f4604a087f1e81e396d10c0ee5810e21488c00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d05384f700000040300463044022024b57b5f63935784eb31e3caf21db15b0ceef1bfa76a0bbb98d9fe6e3c8372f9022079d97ee2ace575d441fa6ab0e0360ee74300c92cb7717e31a354de5e2727a95f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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