romuf.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9d:cd:bd:c8:2d:f9:0c:6a:46:8f:38:68:d5:5d:6e:44:52 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=romuf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:cd:bd:c8:2d:f9:0c:6a:46:8f:38:68:d5:5d:6e:44:52
Serial Number (int): 315034666545234514359892354247525376345170
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:90:1e:a2:5f:0c:e0:ba:bb:b9:08:a4:cb:c6:72:de:83:b9:c3:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:40:2c:ba:8d:7d:bb:82:7a:99:ac:6c:dd:54:e0:14:2f:17:85:57
Fingerprint (sha256): 73:ff:70:6b:7b:de:52:e7:6d:9d:78:ea:6a:1d:e8:c6:4b:b6:c8:35:dd:31:55:f9:5d:ae:4d:22:94:6c:fc:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate romuf.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for romuf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.18miny.top
*.3062.au
*.4007.au
*.7183.au
*.anncoulter.org
*.apeedtest.net
*.astons.tv
*.bbth91.xyz
*.biit.fm
*.coasterzombies.com
*.creditoycasa.com
*.dateat40.com
*.espbn.com
*.finansimgroup.com
*.flimyweb.com
*.gaigoi.one
*.gigisdancecloset.com
*.giveawaytion.com
*.goziga.com
*.hdpoz.com
*.hickorygov.com
*.jaggerschile.com
*.javsup.net
*.jiali172.xyz
*.juicyset.com
*.kat.org
*.lpimatch.com
*.madgrilltremblant.com
*.msmsp.top
*.mtciti.com
*.nlottery.com
*.orbitza.com
*.parkbooks.com
*.quamut.com
*.rds301.top
*.reddity.com
*.revolveclothing.us
*.romuf.com
*.salesorce.com
*.saxsfifth.com
*.seasonbot.com
*.seattleymca.com
*.softwaresurplus.com
*.strictlyhustlers.net
*.thebigchalenge.com
*.vcsd.com
*.wackywakky.com
*.webdesignanddevelopment.com.au
*.whereistheiss.at
*.worldcubeassociation.com
18miny.top
3062.au
4007.au
7183.au
anncoulter.org
apeedtest.net
astons.tv
bbth91.xyz
biit.fm
coasterzombies.com
creditoycasa.com
dateat40.com
espbn.com
finansimgroup.com
flimyweb.com
gaigoi.one
gigisdancecloset.com
giveawaytion.com
goziga.com
hdpoz.com
hickorygov.com
jaggerschile.com
javsup.net
jiali172.xyz
juicyset.com
kat.org
lpimatch.com
madgrilltremblant.com
msmsp.top
mtciti.com
nlottery.com
orbitza.com
parkbooks.com
quamut.com
rds301.top
reddity.com
revolveclothing.us
romuf.com
salesorce.com
saxsfifth.com
seasonbot.com
seattleymca.com
softwaresurplus.com
strictlyhustlers.net
thebigchalenge.com
vcsd.com
wackywakky.com
webdesignanddevelopment.com.au
whereistheiss.at
worldcubeassociation.com

Other certificates including the domain name romuf.com

(limited to 100 certificates)
romuf.com
romuf.com
romuf.com
romuf.com
romuf.com
romuf.com
romuf.com

Certificate

The complete raw certificate details for romuf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMITCCCwmgAwIBAgISA53Nvcgt+QxqRo84aNVdbkRSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMjIxNDA1MTVaFw0yNDAxMjAxNDA1MTRaMBQxEjAQBgNVBAMT
CXJvbXVmLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKGcsyXg
7vWaGXRnRoBnP8efiswKN9ghWA8ksWwnRg7BPQwoCBhI9+BLpVJaE+1jQeBBquKb
IXT2xT4j7A2JPwOxgZWrldo1zcJQ0RfCd5oRDkoNoZ38Dmic3WRK7yq+eZw8FHGD
FOkAwYhZdEc6yb67fSxvPHWdfxTejV4DhSDHPxJFOSwUXRo29jGYIhSHXT+B2lqP
iWGEKSDbF1WoBGZ2uPN64lownyqDwzUubpXyyeAfiVXoOM3CNYY7OwNEeObEugRm
H4tTRKH/XZN2QQD7xfhH4yFtVrJQ/jHl24h32KJf2NUqrAtCaSFO4ArI0WXK6IEw
Fw31AaJUeCTjTfiNInyvpvvq4LrF2pLgubFR8movxC8MGdy+QDGT3xhInEE/KajU
ybQc4PzE7uYXGg0aZ3fnqyWV8NtLfRcM94oTA7+gcVkTtn5xRKIkdOoGyrDD2cgO
8GZU84fhm+MyPki8aUksiDP6OnEcefOvMf9tG3bc0ZFNoWMwSBgDUNnbu3tUCmgL
0ZOpJ9SgpjQgbx655zokjWsdUdNG8ofzSHmN4Yv/peEFhFF68gfnXAR0z+UPfOZb
J1MxLe/ybvYCrhTMBWdYXSKcb9v9LCVAbo+2NGXzLZgtnGse666CrSWnqG5VUwT1
+mKlplLS2zZw12P8nRAJpEP+FJWv9WFDB0bpAgMBAAGjgghNMIIISTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFGmQHqJfDOC6u7kIpMvGct6DucNTMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIGUwYDVR0RBIIGSjCCBkaCDCouMThtaW55LnRvcIIJKi4z
MDYyLmF1ggkqLjQwMDcuYXWCCSouNzE4My5hdYIQKi5hbm5jb3VsdGVyLm9yZ4IP
Ki5hcGVlZHRlc3QubmV0ggsqLmFzdG9ucy50doIMKi5iYnRoOTEueHl6ggkqLmJp
aXQuZm2CFCouY29hc3RlcnpvbWJpZXMuY29tghIqLmNyZWRpdG95Y2FzYS5jb22C
DiouZGF0ZWF0NDAuY29tggsqLmVzcGJuLmNvbYITKi5maW5hbnNpbWdyb3VwLmNv
bYIOKi5mbGlteXdlYi5jb22CDCouZ2FpZ29pLm9uZYIWKi5naWdpc2RhbmNlY2xv
c2V0LmNvbYISKi5naXZlYXdheXRpb24uY29tggwqLmdvemlnYS5jb22CCyouaGRw
b3ouY29tghAqLmhpY2tvcnlnb3YuY29tghIqLmphZ2dlcnNjaGlsZS5jb22CDCou
amF2c3VwLm5ldIIOKi5qaWFsaTE3Mi54eXqCDiouanVpY3lzZXQuY29tggkqLmth
dC5vcmeCDioubHBpbWF0Y2guY29tghcqLm1hZGdyaWxsdHJlbWJsYW50LmNvbYIL
Ki5tc21zcC50b3CCDCoubXRjaXRpLmNvbYIOKi5ubG90dGVyeS5jb22CDSoub3Ji
aXR6YS5jb22CDyoucGFya2Jvb2tzLmNvbYIMKi5xdWFtdXQuY29tggwqLnJkczMw
MS50b3CCDSoucmVkZGl0eS5jb22CFCoucmV2b2x2ZWNsb3RoaW5nLnVzggsqLnJv
bXVmLmNvbYIPKi5zYWxlc29yY2UuY29tgg8qLnNheHNmaWZ0aC5jb22CDyouc2Vh
c29uYm90LmNvbYIRKi5zZWF0dGxleW1jYS5jb22CFSouc29mdHdhcmVzdXJwbHVz
LmNvbYIWKi5zdHJpY3RseWh1c3RsZXJzLm5ldIIUKi50aGViaWdjaGFsZW5nZS5j
b22CCioudmNzZC5jb22CECoud2Fja3l3YWtreS5jb22CICoud2ViZGVzaWduYW5k
ZGV2ZWxvcG1lbnQuY29tLmF1ghIqLndoZXJlaXN0aGVpc3MuYXSCGioud29ybGRj
dWJlYXNzb2NpYXRpb24uY29tggoxOG1pbnkudG9wggczMDYyLmF1ggc0MDA3LmF1
ggc3MTgzLmF1gg5hbm5jb3VsdGVyLm9yZ4INYXBlZWR0ZXN0Lm5ldIIJYXN0b25z
LnR2ggpiYnRoOTEueHl6ggdiaWl0LmZtghJjb2FzdGVyem9tYmllcy5jb22CEGNy
ZWRpdG95Y2FzYS5jb22CDGRhdGVhdDQwLmNvbYIJZXNwYm4uY29tghFmaW5hbnNp
bWdyb3VwLmNvbYIMZmxpbXl3ZWIuY29tggpnYWlnb2kub25lghRnaWdpc2RhbmNl
Y2xvc2V0LmNvbYIQZ2l2ZWF3YXl0aW9uLmNvbYIKZ296aWdhLmNvbYIJaGRwb3ou
Y29tgg5oaWNrb3J5Z292LmNvbYIQamFnZ2Vyc2NoaWxlLmNvbYIKamF2c3VwLm5l
dIIMamlhbGkxNzIueHl6ggxqdWljeXNldC5jb22CB2thdC5vcmeCDGxwaW1hdGNo
LmNvbYIVbWFkZ3JpbGx0cmVtYmxhbnQuY29tggltc21zcC50b3CCCm10Y2l0aS5j
b22CDG5sb3R0ZXJ5LmNvbYILb3JiaXR6YS5jb22CDXBhcmtib29rcy5jb22CCnF1
YW11dC5jb22CCnJkczMwMS50b3CCC3JlZGRpdHkuY29tghJyZXZvbHZlY2xvdGhp
bmcudXOCCXJvbXVmLmNvbYINc2FsZXNvcmNlLmNvbYINc2F4c2ZpZnRoLmNvbYIN
c2Vhc29uYm90LmNvbYIPc2VhdHRsZXltY2EuY29tghNzb2Z0d2FyZXN1cnBsdXMu
Y29tghRzdHJpY3RseWh1c3RsZXJzLm5ldIISdGhlYmlnY2hhbGVuZ2UuY29tggh2
Y3NkLmNvbYIOd2Fja3l3YWtreS5jb22CHndlYmRlc2lnbmFuZGRldmVsb3BtZW50
LmNvbS5hdYIQd2hlcmVpc3RoZWlzcy5hdIIYd29ybGRjdWJlYXNzb2NpYXRpb24u
Y29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx
AHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLV+s7sgAABAMA
RzBFAiEAsIJSJ7Vn/1eV4bBBU5lF2r5rusDrFmls5dYP48APLs4CIAlQz30MP4+Q
eIuIighOk12sx10cgukvN1BNM0npgJSdAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp
3GhCCp/mZ0xaOnQAAAGLV+s8SQAABAMASDBGAiEA9q5jlAtps2zZn7wNt94eqdEk
udGetXxfjLnNjEVLFYYCIQCvCTPp1Ar1ocJJtBYi2WzLHOZkwKqzG22bDeTxuGbz
7TANBgkqhkiG9w0BAQsFAAOCAQEAsMoVoftDfCU8WZu9fauFCya1lXs+Z1P40lLs
eUy/Sh+3LluDKIq+zTPDuDraY5SnNXH4SB5mfmp28TreADgpMGaagNvfgQv8eZIi
SfuZ82km5gy0FpXX4do0ZPynewc6V4f4Gi56lf3eKn8HsMbbRJkYgbGIXwY/TDHF
RZ6syhdHe1GZLqRG7AH6n9pDSsUgxVuB57i5c/nHz0/3bheUg1zfaHOxpSMTOVoc
9opdIknZZ8VOONNd+a4IWdG0OITflmhefJa7zsO16EWbetr/KHxJphZsbMI06JhO
IbGDQYAJGF52dpSft//OvcXfcc05GRYFGOHWB767Qu0eYRA7yQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315034666545234514359892354247525376345170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 14:05:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 14:05:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'romuf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659319880092641914142700026929473773101887681038476887855397085196104924567291041514296991820303543366810112175405725985550626470781270817855631434680489641302830652371226386473226479523040528973627402997681505566981107303893808839055434925263646141183294067047896336751996550316508287996599464534339819235059292111151531918014349949536402084455830434757230869124520125540634110181888392350408031063694246610736126623665474707260863417545667487212138147199547723159464050596175882285325475859338153987969629353806745835546318442370580850771522327749185559111698559141436870722286663193733137207926073370945613667242199737875233894409172582952061243941173000552627351805873031097739674578706755461385144560719122108028781131918361244413165075962407176569266939405459265910639017352108418262142926488301222929633277055459321677366876019950361381286279191005857462826116057556352164567736906930116720042417934760660705472669643372136381627138360341490446210702440820524937128038161512375781410035079424547152993412115403592733160278462741032760699736581745538136964137199518043918883491375528264616948254029411356129848590853992147869085217526218420726515493435543115924453675754438429084817740409838259400974103724053546599380276430569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69901ea25f0ce0babbb908a4cbc672de83b9c353
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1610 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.18miny.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3062.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4007.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7183.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anncoulter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apeedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astons.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbth91.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biit.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coasterzombies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditoycasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dateat40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espbn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finansimgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flimyweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaigoi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigisdancecloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giveawaytion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goziga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdpoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hickorygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaggerschile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javsup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiali172.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juicyset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madgrilltremblant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msmsp.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtciti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nlottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orbitza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quamut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rds301.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reddity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revolveclothing.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romuf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salesorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saxsfifth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seasonbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seattleymca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.softwaresurplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strictlyhustlers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebigchalenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wackywakky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webdesignanddevelopment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whereistheiss.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldcubeassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '18miny.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3062.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4007.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7183.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anncoulter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apeedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astons.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbth91.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biit.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coasterzombies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditoycasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dateat40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espbn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finansimgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flimyweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaigoi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigisdancecloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveawaytion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goziga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdpoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hickorygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaggerschile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javsup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiali172.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicyset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madgrilltremblant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msmsp.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtciti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quamut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rds301.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revolveclothing.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romuf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saxsfifth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasonbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleymca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwaresurplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strictlyhustlers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebigchalenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wackywakky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdesignanddevelopment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whereistheiss.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldcubeassociation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b57eb3bb20000040300473045022100b0825227b567ff5795e1b041539945dabe6bbac0eb16696ce5d60fe3c00f2ece02200950cf7d0c3f8f90788b888a084e935dacc75d1c82e92f37504d3349e980949d00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b57eb3c490000040300483046022100f6ae63940b69b36cd99fbc0db7de1ea9d124b9d19eb57c5f8cb9cd8c454b1586022100af0933e9d40af5a1c249b41622d96ccb1ce664c0aab31b6d9b0de4f1b866f3ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b0ca15a1fb437c253c599bbd7dab850b26b5957b3e6753f8d252ec794cbf4a1fb72e5b83288abecd33c3b83ada6394a73571f8481e667e6a76f13ade00382930669a80dbdf810bfc79922249fb99f36926e60cb41695d7e1da3464fca77b073a5787f81a2e7a95fdde2a7f07b0c6db44991881b1885f063f4c31c5459eacca17477b51992ea446ec01fa9fda434ac520c55b81e7b8b973f9c7cf4ff76e1794835cdf6873b1a52313395a1cf68a5d2249d967c54e38d35df9ae0859d1b43884df96685e7c96bbcec3b5e8459b7adaff287c49a6166c6cc234e8984e21b183418009185e7676949fb7ffcebdc5df71cd3919160518e1d607bebb42ed1e61103bc9