luxuretv.co

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:11:86:64:23:66:a9:72:a6:24:9b:86:84:36:89:c2:39 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=luxuretv.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:11:86:64:23:66:a9:72:a6:24:9b:86:84:36:89:c2:39
Serial Number (int): 343027920531059076781869354790879362662969
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:04:e5:9f:69:53:ee:c6:20:77:1c:34:a0:83:ea:35:15:01:53:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:64:fc:58:37:ff:82:c0:d5:7b:d2:85:fd:9a:12:59:9a:06:ad:8f
Fingerprint (sha256): 71:f3:7f:b4:f6:b7:c8:68:75:f3:eb:5f:a9:44:6c:7f:f2:85:a6:ce:f5:2e:48:25:10:ab:02:dc:b2:3a:62:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate luxuretv.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for luxuretv.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.6shirts.com
*.adverhealth.com
*.andrealarose.com
*.apiary.com.au
*.asicsgellyt3.es
*.backcountryrentals.com
*.clesbian.com
*.cutleryset.com.au
*.de-borreliose.de
*.deedelmar.com
*.doritios.com
*.elmwoodresort.com
*.fightingirls.com
*.flossenfaeule.de
*.foodallergy.com.au
*.forbe.com
*.fourwheel.com.au
*.fullbodyhaptic.com
*.girls.net.au
*.goomaps.de
*.handyrakten.de
*.hatpins.com.au
*.luoli98.com
*.luxuretv.co
*.mapnaver.com
*.michaeis.com
*.mp3juicy.cc
*.mylogitec.com
*.pelletemilia.com
*.phytolacca-americana.de
*.pokiesnet14.net
*.porn3dpictures.com
*.qqkristal.us
*.reikaballet.com
*.reloger.com
*.rogerswaters.com
*.shareyourbusiness.com.au
*.sodasteam.de
*.speiseroehrentumor.de
*.stmath.co
*.stormpeak.com
*.swim21under.top
*.updating.com.au
*.upskirtfan.com
*.valvehitherto.top
*.veltind.de
*.warrorcats.com
*.watchstreamseries.com
*.xn--hhmorriden-r5a.de
*.xn--hmoirrhoiden-gcb.de
6shirts.com
adverhealth.com
andrealarose.com
apiary.com.au
asicsgellyt3.es
backcountryrentals.com
clesbian.com
cutleryset.com.au
de-borreliose.de
deedelmar.com
doritios.com
elmwoodresort.com
fightingirls.com
flossenfaeule.de
foodallergy.com.au
forbe.com
fourwheel.com.au
fullbodyhaptic.com
girls.net.au
goomaps.de
handyrakten.de
hatpins.com.au
luoli98.com
luxuretv.co
mapnaver.com
michaeis.com
mp3juicy.cc
mylogitec.com
pelletemilia.com
phytolacca-americana.de
pokiesnet14.net
porn3dpictures.com
qqkristal.us
reikaballet.com
reloger.com
rogerswaters.com
shareyourbusiness.com.au
sodasteam.de
speiseroehrentumor.de
stmath.co
stormpeak.com
swim21under.top
updating.com.au
upskirtfan.com
valvehitherto.top
veltind.de
warrorcats.com
watchstreamseries.com
xn--hhmorriden-r5a.de
xn--hmoirrhoiden-gcb.de

Other certificates including the domain name luxuretv.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for luxuretv.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM3jCCC8agAwIBAgISA/ARhmQjZqlypiSbhoQ2icI5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTQwNjA5MjJaFw0yNDA0MTMwNjA5MjFaMBYxFDASBgNVBAMT
C2x1eHVyZXR2LmNvMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuXYJ
t0DULIL9BfXT0pqLZd6iIh1kDlBqxpvV3i8tL4XRSlBkZaPZ02b8rqmZ442W1DIp
ilbwKw7PF7O3uGQIVCaoU0drmQL6GYcN2QpBM75GyvB1xPS02ox2b9JK9UW+XsaJ
++WnOKWl0lIdBgpWnbaoBwmCIVpKDarRce3He9WpViXgDmvpBrPUkJ+BmvGUBhbE
z5WeMGPfLrkisXTX84cnvzvgYjXzos5eBNKucTdDA2pFy9BRyHbx4KJ0Esb2zTnl
pLQrQfiontxIVZZEufBkLmzA+ip+hlyBkmWGYWpUvxMMqPyW85Ps6i6yARthPn+M
L9ko0oKWdyXa/naz+3LAJMkydi4AqVjMHJ7SzdKAZc80hEwdOGb7kXFC+s+ct5sO
r0ljVAUoPln1GeFxLnRFAwDzgDQIhsYgaxXO/UcBQQg6+9mczxw1/Fw5zA+fwYGm
FH8gCjkFoCKEA1BUJMeoHP/AyCVi1t7lZ2ugjABH/FgiaYl/Q7oh+9k/z2iTRK+m
KoAEexhmU8uiWvA1IyRcIKZoU/3Qq5se5IX8vM89Hej/nXcouY5uNvEG0VI4cvje
4SH01LQhKBSxQD2WW5sYjtcO/lEEPqtlbEekSk4Kzbpoe0z0i4t255S/E9VErHse
xyTbZXSMQBTbwl1Ttr4iafS7qMIf8RVNTfqWRRMCAwEAAaOCCQgwggkEMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUogTln2lT7sYgdxw0oIPqNRUBU9gwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggcPBgNVHREEggcGMIIHAoINKi42c2hpcnRzLmNvbYIR
Ki5hZHZlcmhlYWx0aC5jb22CEiouYW5kcmVhbGFyb3NlLmNvbYIPKi5hcGlhcnku
Y29tLmF1ghEqLmFzaWNzZ2VsbHl0My5lc4IYKi5iYWNrY291bnRyeXJlbnRhbHMu
Y29tgg4qLmNsZXNiaWFuLmNvbYITKi5jdXRsZXJ5c2V0LmNvbS5hdYISKi5kZS1i
b3JyZWxpb3NlLmRlgg8qLmRlZWRlbG1hci5jb22CDiouZG9yaXRpb3MuY29tghMq
LmVsbXdvb2RyZXNvcnQuY29tghIqLmZpZ2h0aW5naXJscy5jb22CEiouZmxvc3Nl
bmZhZXVsZS5kZYIUKi5mb29kYWxsZXJneS5jb20uYXWCCyouZm9yYmUuY29tghIq
LmZvdXJ3aGVlbC5jb20uYXWCFCouZnVsbGJvZHloYXB0aWMuY29tgg4qLmdpcmxz
Lm5ldC5hdYIMKi5nb29tYXBzLmRlghAqLmhhbmR5cmFrdGVuLmRlghAqLmhhdHBp
bnMuY29tLmF1gg0qLmx1b2xpOTguY29tgg0qLmx1eHVyZXR2LmNvgg4qLm1hcG5h
dmVyLmNvbYIOKi5taWNoYWVpcy5jb22CDSoubXAzanVpY3kuY2OCDyoubXlsb2dp
dGVjLmNvbYISKi5wZWxsZXRlbWlsaWEuY29tghkqLnBoeXRvbGFjY2EtYW1lcmlj
YW5hLmRlghEqLnBva2llc25ldDE0Lm5ldIIUKi5wb3JuM2RwaWN0dXJlcy5jb22C
DioucXFrcmlzdGFsLnVzghEqLnJlaWthYmFsbGV0LmNvbYINKi5yZWxvZ2VyLmNv
bYISKi5yb2dlcnN3YXRlcnMuY29tghoqLnNoYXJleW91cmJ1c2luZXNzLmNvbS5h
dYIOKi5zb2Rhc3RlYW0uZGWCFyouc3BlaXNlcm9laHJlbnR1bW9yLmRlggsqLnN0
bWF0aC5jb4IPKi5zdG9ybXBlYWsuY29tghEqLnN3aW0yMXVuZGVyLnRvcIIRKi51
cGRhdGluZy5jb20uYXWCECoudXBza2lydGZhbi5jb22CEyoudmFsdmVoaXRoZXJ0
by50b3CCDCoudmVsdGluZC5kZYIQKi53YXJyb3JjYXRzLmNvbYIXKi53YXRjaHN0
cmVhbXNlcmllcy5jb22CFyoueG4tLWhobW9ycmlkZW4tcjVhLmRlghkqLnhuLS1o
bW9pcnJob2lkZW4tZ2NiLmRlggs2c2hpcnRzLmNvbYIPYWR2ZXJoZWFsdGguY29t
ghBhbmRyZWFsYXJvc2UuY29tgg1hcGlhcnkuY29tLmF1gg9hc2ljc2dlbGx5dDMu
ZXOCFmJhY2tjb3VudHJ5cmVudGFscy5jb22CDGNsZXNiaWFuLmNvbYIRY3V0bGVy
eXNldC5jb20uYXWCEGRlLWJvcnJlbGlvc2UuZGWCDWRlZWRlbG1hci5jb22CDGRv
cml0aW9zLmNvbYIRZWxtd29vZHJlc29ydC5jb22CEGZpZ2h0aW5naXJscy5jb22C
EGZsb3NzZW5mYWV1bGUuZGWCEmZvb2RhbGxlcmd5LmNvbS5hdYIJZm9yYmUuY29t
ghBmb3Vyd2hlZWwuY29tLmF1ghJmdWxsYm9keWhhcHRpYy5jb22CDGdpcmxzLm5l
dC5hdYIKZ29vbWFwcy5kZYIOaGFuZHlyYWt0ZW4uZGWCDmhhdHBpbnMuY29tLmF1
ggtsdW9saTk4LmNvbYILbHV4dXJldHYuY2+CDG1hcG5hdmVyLmNvbYIMbWljaGFl
aXMuY29tggttcDNqdWljeS5jY4INbXlsb2dpdGVjLmNvbYIQcGVsbGV0ZW1pbGlh
LmNvbYIXcGh5dG9sYWNjYS1hbWVyaWNhbmEuZGWCD3Bva2llc25ldDE0Lm5ldIIS
cG9ybjNkcGljdHVyZXMuY29tggxxcWtyaXN0YWwudXOCD3JlaWthYmFsbGV0LmNv
bYILcmVsb2dlci5jb22CEHJvZ2Vyc3dhdGVycy5jb22CGHNoYXJleW91cmJ1c2lu
ZXNzLmNvbS5hdYIMc29kYXN0ZWFtLmRlghVzcGVpc2Vyb2VocmVudHVtb3IuZGWC
CXN0bWF0aC5jb4INc3Rvcm1wZWFrLmNvbYIPc3dpbTIxdW5kZXIudG9wgg91cGRh
dGluZy5jb20uYXWCDnVwc2tpcnRmYW4uY29tghF2YWx2ZWhpdGhlcnRvLnRvcIIK
dmVsdGluZC5kZYIOd2Fycm9yY2F0cy5jb22CFXdhdGNoc3RyZWFtc2VyaWVzLmNv
bYIVeG4tLWhobW9ycmlkZW4tcjVhLmRlghd4bi0taG1vaXJyaG9pZGVuLWdjYi5k
ZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjQbNu3cAAAQDAEcw
RQIhALDTGkhRrpLaK7Z0FX1VfrtjRT4KMs0H4n4b0+FIngxAAiBO59gdtjcKTECS
6XTatGqVX8P3T0/qSDqW9crm94lwFQB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i
2reK+Jpt9RfYAAABjQbNu4EAAAQDAEcwRQIhAM2DmakSyQmJMmRYDLhDg4PjYkI/
W86bPrfQeHtrupRqAiAC6YZkypYf+JQK1APZnGAutrs2OgU/BsxfQAuQ2I8TlDAN
BgkqhkiG9w0BAQsFAAOCAQEAaf/N0MZHPRRUhGYpsYQ0k0qP0qN+p2UPFA/cNR/o
DuxTIZhj0x2nOuhf48dFi9qeg6lzu3Jh/xhrIqHY287h7wH4Y8mUw+TrCEOrb8Bz
x1z3Qv+NvCermp08TssxVp+bsmFKLeQmhRQkYvFj9gERfUv5yI/GlPR4pUiVH/E6
Mv1lDwNK9Dnj49ZsnJszNcCXxxKg5R6j6OPqfY5TQPAtYzV0lrfi8SXpgle3ErNa
MyFtYDGF35meW/vamhcsiLw4yOoRD1by+yCKHCAofJ1+o6AqVeaUoZM05uuQKYL8
lAKQ7nigBs4HU2vPEB0Ecb/e+Oz40/9vQ6ulvcdgK5YPBw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343027920531059076781869354790879362662969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 06:09:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 06:09:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luxuretv.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756615218336089354993393691377258509485906671031770355507946401330723818247748008585883036696274312636893599235544310300233749006348968964723572396257404888544735625002192127509664278184625136724540631118259044331668020850852511800847048500196290473691543422663127228396427516976466001934228618250349650119327685441563190858528033574951330930750973281129976614664822197710782891406693403308754714145235697057046385674323020686598594622896260555274437634835423952036229712160020117196055930975099904368579640080196201992105888875062682834584460567735625959814027494720434232376017964912170794442946582865753360662977584799063394778308137436207629629480301603547197162919323500634750657592730210104886859143035648949640515578810357273898228294527816490826660007373141689700551774434792498973133294906172290037405470773978336425689329802223290685970426638663710781284634063984831971304771711272336706786356203694279040943177936689584860565667419211362171026955573302411432786523017620788111608802287906378825342608298957617356565218587546109132225231588262764530222324275231782528531342334549034145658840134000991120563880176306305578175711440686070591735867892728151721515540354644672901907219813121456265603398043313934165037242795283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a204e59f6953eec620771c34a083ea35150153d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1798 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6shirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adverhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andrealarose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apiary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asicsgellyt3.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backcountryrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clesbian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cutleryset.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-borreliose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deedelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doritios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmwoodresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fightingirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flossenfaeule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodallergy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fourwheel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullbodyhaptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girls.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goomaps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handyrakten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hatpins.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luoli98.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxuretv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapnaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaeis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp3juicy.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylogitec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelletemilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phytolacca-americana.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokiesnet14.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porn3dpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qqkristal.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reikaballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reloger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rogerswaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shareyourbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodasteam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speiseroehrentumor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stmath.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stormpeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swim21under.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updating.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upskirtfan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valvehitherto.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veltind.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warrorcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchstreamseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hhmorriden-r5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hmoirrhoiden-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6shirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adverhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrealarose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asicsgellyt3.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backcountryrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clesbian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutleryset.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-borreliose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deedelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doritios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmwoodresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightingirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flossenfaeule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodallergy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourwheel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullbodyhaptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girls.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goomaps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyrakten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hatpins.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luoli98.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuretv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapnaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaeis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp3juicy.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylogitec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelletemilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phytolacca-americana.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokiesnet14.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porn3dpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qqkristal.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reikaballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reloger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerswaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareyourbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodasteam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speiseroehrentumor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmath.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stormpeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim21under.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updating.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upskirtfan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valvehitherto.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veltind.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrorcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchstreamseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hhmorriden-r5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hmoirrhoiden-gcb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d06cdbb770000040300473045022100b0d31a4851ae92da2bb674157d557ebb63453e0a32cd07e27e1bd3e1489e0c4002204ee7d81db6370a4c4092e974dab46a955fc3f74f4fea483a96f5cae6f7897015007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d06cdbb810000040300473045022100cd8399a912c909893264580cb8438383e362423f5bce9b3eb7d0787b6bba946a022002e98664ca961ff8940ad403d99c602eb6bb363a053f06cc5f400b90d88f1394
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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