bnwusa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:42:ea:bb:05:fa:71:3d:73:e3:17:c1:a8:54:8f:5a:e4:bc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bnwusa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:ea:bb:05:fa:71:3d:73:e3:17:c1:a8:54:8f:5a:e4:bc
Serial Number (int): 284107504443843029600150961925437435602108
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:0c:ea:a3:45:f5:2a:5b:ec:4e:59:65:11:21:b2:59:17:87:5d:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 14:97:22:48:3d:4f:0b:42:b3:10:9c:bd:35:ce:5e:f5:c3:cb:54:c5
Fingerprint (sha256): 70:3b:80:cb:70:bb:b3:d9:e3:7d:1e:19:8f:ed:42:13:1c:81:72:f7:be:7f:d4:56:ae:34:41:a5:4b:1d:20:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bnwusa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnwusa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3cdn.net
*.6weekchallenge.com.au
*.77sezonghe.xyz
*.a2zbetexch.club
*.adams-web.com
*.azabu-studio.com
*.bnwusa.com
*.businnes.online
*.buylensesonline.com
*.comdomain4ik.ru
*.dance-zest.com
*.disneycruiseship.com
*.dvd-urasen.com
*.e-u.me
*.fiabe.online
*.forexraptor.com
*.fujiyamakyousei.com
*.go294.com
*.greatres.click
*.hagukumi-farm.com
*.hotmonza.com
*.idealweightlossofnorthprovidence.com
*.inuyama-iyh.com
*.ipol.online
*.itakimo.com
*.itayasoba.com
*.kingdomforex.com
*.lohas-island.com
*.mariaxxx.com
*.mepcore.com
*.minesandbox.site
*.myfamilymovile.com
*.naruhodo-koyohoken.com
*.nissanysa.com
*.ntmlfby.com
*.oneroom.online
*.otowa-family.com
*.porndube.com
*.preschoology.com
*.sabrakhehainpaisa.online
*.sha1.online
*.soarmovie.id
*.sumailoan.com
*.tdameride.com
*.the-bar.online
*.tienlen.online
*.unitedmilesplus.com
*.vxayv3x.cn
*.which.co.nz
*.yes88.net
3cdn.net
6weekchallenge.com.au
77sezonghe.xyz
a2zbetexch.club
adams-web.com
azabu-studio.com
bnwusa.com
businnes.online
buylensesonline.com
comdomain4ik.ru
dance-zest.com
disneycruiseship.com
dvd-urasen.com
e-u.me
fiabe.online
forexraptor.com
fujiyamakyousei.com
go294.com
greatres.click
hagukumi-farm.com
hotmonza.com
idealweightlossofnorthprovidence.com
inuyama-iyh.com
ipol.online
itakimo.com
itayasoba.com
kingdomforex.com
lohas-island.com
mariaxxx.com
mepcore.com
minesandbox.site
myfamilymovile.com
naruhodo-koyohoken.com
nissanysa.com
ntmlfby.com
oneroom.online
otowa-family.com
porndube.com
preschoology.com
sabrakhehainpaisa.online
sha1.online
soarmovie.id
sumailoan.com
tdameride.com
the-bar.online
tienlen.online
unitedmilesplus.com
vxayv3x.cn
which.co.nz
yes88.net

Other certificates including the domain name bnwusa.com

(limited to 100 certificates)
bnwusa.com
bnwusa.com
bnwusa.com
bnwusa.com
bnwusa.com
all-stargamehistory.com
bnwusa.com
bnwusa.com
bnwusa.com

Certificate

The complete raw certificate details for bnwusa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMtDCCC5ygAwIBAgISA0LquwX6cT1z4xfBqFSPWuS8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTUwMTA4MzVaFw0yNDA2MTMwMTA4MzRaMBUxEzARBgNVBAMT
CmJud3VzYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC4pLtz
7rvtqlT9lOgBUeKW+5RU+I2RxjOgTz+HE2E45Feh3+189V1blIwyUkYI2CetJaxR
GiJM0koHSyQbOFeO8JXSELpsI2VfPqcqxV+bwo46/8Ji3UrfMZ2qbcb/tF6FkC9n
Q3dggcE26ZrupoHy3a5UDIMU+o7+e+0WxLb7GXdiBAdxa0bz+vtXHfVim17mKzes
WgD92scxJZAXP0YvoF7vQe768+RvePQjk5Gf5zS0EDoZn28zjUq7Dy7CysWDOuId
Zo7GXDEhrfXkbbwX+4efeNogLPN6vReEkfvmyaEedOfyZAxxHvu0TQYSC8/WSaqf
Q3L9vWrsfbeILIgOpBT8a8lTYxBU+RO3OmRZHfZyKOEdXfD+oue97i+oBpp8qMds
qBReiNKDpPVRmXMe0+uF9B+v6suff7+aU/CTsXzaROGoOzqkKrhTgbGUlsXbpex8
tVe2nksPfewskM1F37Ti9COg5cVQP95OmwWc6oqT3Y+pzxEVk3Z5Ic7bkpWtMZ28
xE4LZe3hyFfUuaGudGXdOhsnGs2uu+jn+ylevu3md1Kz5qhL4maxBeq/uCrgCbRJ
0Lrgh6WIdpoXIyMsyu2A+cqWOJHTHvhjSqSvZoh2DDoFPy3aD0c9ZxkOTsRUdX2L
g7NDSW5nWxuIYftKuzpk7RR6qkEBQxotLh2CRQIDAQABo4II3zCCCNswDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBSEDOqjRfUqW+xOWWURIbJZF4ddMDAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCBucGA1UdEQSCBt4wggbaggoqLjNjZG4ubmV0ghcqLjZ3
ZWVrY2hhbGxlbmdlLmNvbS5hdYIQKi43N3Nlem9uZ2hlLnh5eoIRKi5hMnpiZXRl
eGNoLmNsdWKCDyouYWRhbXMtd2ViLmNvbYISKi5hemFidS1zdHVkaW8uY29tggwq
LmJud3VzYS5jb22CESouYnVzaW5uZXMub25saW5lghUqLmJ1eWxlbnNlc29ubGlu
ZS5jb22CESouY29tZG9tYWluNGlrLnJ1ghAqLmRhbmNlLXplc3QuY29tghYqLmRp
c25leWNydWlzZXNoaXAuY29tghAqLmR2ZC11cmFzZW4uY29tgggqLmUtdS5tZYIO
Ki5maWFiZS5vbmxpbmWCESouZm9yZXhyYXB0b3IuY29tghUqLmZ1aml5YW1ha3lv
dXNlaS5jb22CCyouZ28yOTQuY29tghAqLmdyZWF0cmVzLmNsaWNrghMqLmhhZ3Vr
dW1pLWZhcm0uY29tgg4qLmhvdG1vbnphLmNvbYImKi5pZGVhbHdlaWdodGxvc3Nv
Zm5vcnRocHJvdmlkZW5jZS5jb22CESouaW51eWFtYS1peWguY29tgg0qLmlwb2wu
b25saW5lgg0qLml0YWtpbW8uY29tgg8qLml0YXlhc29iYS5jb22CEioua2luZ2Rv
bWZvcmV4LmNvbYISKi5sb2hhcy1pc2xhbmQuY29tgg4qLm1hcmlheHh4LmNvbYIN
Ki5tZXBjb3JlLmNvbYISKi5taW5lc2FuZGJveC5zaXRlghQqLm15ZmFtaWx5bW92
aWxlLmNvbYIYKi5uYXJ1aG9kby1rb3lvaG9rZW4uY29tgg8qLm5pc3NhbnlzYS5j
b22CDSoubnRtbGZieS5jb22CECoub25lcm9vbS5vbmxpbmWCEioub3Rvd2EtZmFt
aWx5LmNvbYIOKi5wb3JuZHViZS5jb22CEioucHJlc2Nob29sb2d5LmNvbYIaKi5z
YWJyYWtoZWhhaW5wYWlzYS5vbmxpbmWCDSouc2hhMS5vbmxpbmWCDiouc29hcm1v
dmllLmlkgg8qLnN1bWFpbG9hbi5jb22CDyoudGRhbWVyaWRlLmNvbYIQKi50aGUt
YmFyLm9ubGluZYIQKi50aWVubGVuLm9ubGluZYIVKi51bml0ZWRtaWxlc3BsdXMu
Y29tggwqLnZ4YXl2M3guY26CDSoud2hpY2guY28ubnqCCyoueWVzODgubmV0gggz
Y2RuLm5ldIIVNndlZWtjaGFsbGVuZ2UuY29tLmF1gg43N3Nlem9uZ2hlLnh5eoIP
YTJ6YmV0ZXhjaC5jbHVigg1hZGFtcy13ZWIuY29tghBhemFidS1zdHVkaW8uY29t
ggpibnd1c2EuY29tgg9idXNpbm5lcy5vbmxpbmWCE2J1eWxlbnNlc29ubGluZS5j
b22CD2NvbWRvbWFpbjRpay5ydYIOZGFuY2UtemVzdC5jb22CFGRpc25leWNydWlz
ZXNoaXAuY29tgg5kdmQtdXJhc2VuLmNvbYIGZS11Lm1lggxmaWFiZS5vbmxpbmWC
D2ZvcmV4cmFwdG9yLmNvbYITZnVqaXlhbWFreW91c2VpLmNvbYIJZ28yOTQuY29t
gg5ncmVhdHJlcy5jbGlja4IRaGFndWt1bWktZmFybS5jb22CDGhvdG1vbnphLmNv
bYIkaWRlYWx3ZWlnaHRsb3Nzb2Zub3J0aHByb3ZpZGVuY2UuY29tgg9pbnV5YW1h
LWl5aC5jb22CC2lwb2wub25saW5lggtpdGFraW1vLmNvbYINaXRheWFzb2JhLmNv
bYIQa2luZ2RvbWZvcmV4LmNvbYIQbG9oYXMtaXNsYW5kLmNvbYIMbWFyaWF4eHgu
Y29tggttZXBjb3JlLmNvbYIQbWluZXNhbmRib3guc2l0ZYISbXlmYW1pbHltb3Zp
bGUuY29tghZuYXJ1aG9kby1rb3lvaG9rZW4uY29tgg1uaXNzYW55c2EuY29tggtu
dG1sZmJ5LmNvbYIOb25lcm9vbS5vbmxpbmWCEG90b3dhLWZhbWlseS5jb22CDHBv
cm5kdWJlLmNvbYIQcHJlc2Nob29sb2d5LmNvbYIYc2FicmFraGVoYWlucGFpc2Eu
b25saW5lggtzaGExLm9ubGluZYIMc29hcm1vdmllLmlkgg1zdW1haWxvYW4uY29t
gg10ZGFtZXJpZGUuY29tgg50aGUtYmFyLm9ubGluZYIOdGllbmxlbi5vbmxpbmWC
E3VuaXRlZG1pbGVzcGx1cy5jb22CCnZ4YXl2M3guY26CC3doaWNoLmNvLm56ggl5
ZXM4OC5uZXQwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0
BIHxAO8AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY4/3kUf
AAAEAwBGMEQCIEXb2M0qLCLb29QHSV1zgw8NcqvH57BoDLFRtEg2JvGnAiB7UuAl
+pFOgUqrvhnZ2rlnRTdzQmkcVYLciD/X7zGKcAB2AKLiv9Ye3i8vB6DWTm03p9xl
Q7DGtS6i2reK+Jpt9RfYAAABjj/eRRsAAAQDAEcwRQIhALTiqODyvV2vE/BWknVw
DDqjVVxIgw2oWesUPmDBbMbsAiAthbwknHj/mbObwKsiG8dNpG317iq4LTqt9/fp
xhlYKzANBgkqhkiG9w0BAQsFAAOCAQEAsUUFVBQFzS9KZ+AXLtKK/X78aK/xtJPi
5Vm3EG+hY6aQBj3QkJoW+cwS12opD5D6yyz8ursUxdIjoxrmpyJBBI+5OZxZgnz9
ZASCGsg9B/RhJf5KWasVTNcsdKmkJOe4L94FTi0JxOoDGXGEMdGa1SN0vOILOeWU
gXBuBUcPjPedmDNhDQQRbyp/p6gmpaBGXuvFrH5N1B1EpQvwW+8QAARJoOU3WIaf
gOEbNdVwKQVL0BhObs8jHh45zPZezl1QqGiEyurJ7OptPwF/mK2J2o53mdXhnUQl
cSh8Qia2dl30h4Doe4LGiyGotTwpwVGZ+N8xQjL+ivsRXofrHWZcSw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284107504443843029600150961925437435602108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 01:08:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 01:08:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnwusa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753279699517692883382803564902901679361047317114003279244583567235846453280881675022350655091749568318660265702907801263722340109616493027051880502833271850594160413160895472808822479325572925899303727724125210036190328680885137356706597672406030882853490017067896447725265936299116304546055423813160756428941372534289356719736202494471356113698112645677757451073394000266389220403481215937151310451897559590455533501143869127454832818620350527227165254147834835755138786667556782970432799555607389611106766591872317208079166472987901495442689923488427152532274245070473101586729407903879332328808370861272806716809874177244970067153731019898215932441919248133291292540116450744435546414207590489654633449810525814531189651041409132510167261886103835857030582208837669804201366933134532601029595274136904482957092533752627992490036365386450978722421047376263109625124661160347730981640179347037539514205338539172400096862668855938510034907543261460397814375305010700018605808430724861089494664481998003048552129499508942153239573749986268047796991897376020621152093334341587056396384714670821393936131263702979715387710597628629312151006773292503500536463810025724165907015543639230713128182511819155524162606392193107321647043281477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							840ceaa345f52a5bec4e59651121b25917875d30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1758 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6weekchallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.77sezonghe.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a2zbetexch.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adams-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azabu-studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businnes.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buylensesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comdomain4ik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dance-zest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneycruiseship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dvd-urasen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-u.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiabe.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forexraptor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fujiyamakyousei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go294.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatres.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hagukumi-farm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotmonza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idealweightlossofnorthprovidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inuyama-iyh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipol.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itakimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itayasoba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingdomforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lohas-island.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mariaxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mepcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minesandbox.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfamilymovile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naruhodo-koyohoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nissanysa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntmlfby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneroom.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otowa-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porndube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preschoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabrakhehainpaisa.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sha1.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soarmovie.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sumailoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdameride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-bar.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tienlen.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedmilesplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vxayv3x.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.which.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yes88.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6weekchallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '77sezonghe.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2zbetexch.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adams-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azabu-studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businnes.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buylensesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comdomain4ik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dance-zest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneycruiseship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvd-urasen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-u.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiabe.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexraptor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fujiyamakyousei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go294.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatres.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hagukumi-farm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmonza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idealweightlossofnorthprovidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inuyama-iyh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipol.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itakimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itayasoba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingdomforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lohas-island.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariaxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mepcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minesandbox.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfamilymovile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naruhodo-koyohoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nissanysa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntmlfby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneroom.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otowa-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porndube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preschoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabrakhehainpaisa.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sha1.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soarmovie.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumailoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdameride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-bar.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienlen.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedmilesplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vxayv3x.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'which.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes88.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e3fde451f0000040300463044022045dbd8cd2a2c22dbdbd407495d73830f0d72abc7e7b0680cb151b4483626f1a702207b52e025fa914e814aabbe19d9dab96745377342691c5582dc883fd7ef318a70007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e3fde451b0000040300473045022100b4e2a8e0f2bd5daf13f0569275700c3aa3555c48830da859eb143e60c16cc6ec02202d85bc249c78ff99b39bc0ab221bc74da46df5ee2ab82d3aadf7f7e9c619582b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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