bestvaluerate.net

Issued by R3

About this certificate

This digital certificate with serial number 04:4c:0d:eb:20:97:7a:e3:a3:a9:ed:43:55:1f:2d:f9:e4:80 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bestvaluerate.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:4c:0d:eb:20:97:7a:e3:a3:a9:ed:43:55:1f:2d:f9:e4:80
Serial Number (int): 374329104427777861627299480553922219336832
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:01:02:3f:57:33:21:7b:ac:8c:22:3c:12:64:da:db:24:a1:66:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:4b:b4:fd:af:4f:27:97:97:9f:c8:ef:2e:5c:98:0b:16:db:d3:3e
Fingerprint (sha256): 78:c0:26:12:d6:c6:eb:cf:31:b7:cf:00:6a:69:26:07:88:af:93:e1:26:0f:15:90:0e:64:eb:f3:d1:29:99:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bestvaluerate.net

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bestvaluerate.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.b9d631z.net
*.bestvaluerate.net
*.bilaltextlies.net
*.chaoticwholesomeinc.com
*.cubpack43.com
*.fabricaauthenticite.com
*.ferrerbartomeu.com
*.fishinglanguage.com
*.freshcatchalaska.net
*.funndeal.net
*.g1novidades.com
*.get2naukri.com
*.giftscardsallaround.net
*.glorymassagebali.com
*.goatmemes.com
*.goksuhukukdanismanlik.com
*.hasantech786.com
*.hotdeu.com
*.hotrodpowertour.net
*.huasea2.com
*.inhinhlenao.net
*.interbrawl.com
*.jewelhoki.com
*.jillianpatricktravel.com
*.kisanfoundation.org
*.lagentogmbh.com
*.leeufashion.com
*.leisixiaoshuo.com
*.lilliputworld.org
*.lilydeal.com
*.loanmaza.com
*.lobinaschildcare.com
*.lojaanre.com
*.losangelescriminallawyerattorney.com
*.luxuriesoflindsey.com
*.maasmediatech.com
*.magicutie.com
*.makronics.com
*.malkvoip.com
*.mangoindiancuisinebanus.com
*.mao-de-obra.com
*.marianajuliette.com
*.marketingdigitalmotivacao.com
*.mat3aqlik.com
*.maurersercan.com
*.maxmicrobe.com
b9d631z.net
bestvaluerate.net
bilaltextlies.net
chaoticwholesomeinc.com
cubpack43.com
fabricaauthenticite.com
ferrerbartomeu.com
fishinglanguage.com
freshcatchalaska.net
funndeal.net
g1novidades.com
get2naukri.com
giftscardsallaround.net
glorymassagebali.com
goatmemes.com
goksuhukukdanismanlik.com
hasantech786.com
hotdeu.com
hotrodpowertour.net
huasea2.com
inhinhlenao.net
interbrawl.com
jewelhoki.com
jillianpatricktravel.com
kisanfoundation.org
lagentogmbh.com
leeufashion.com
leisixiaoshuo.com
lilliputworld.org
lilydeal.com
loanmaza.com
lobinaschildcare.com
lojaanre.com
losangelescriminallawyerattorney.com
luxuriesoflindsey.com
maasmediatech.com
magicutie.com
makronics.com
malkvoip.com
mangoindiancuisinebanus.com
mao-de-obra.com
marianajuliette.com
marketingdigitalmotivacao.com
mat3aqlik.com
maurersercan.com
maxmicrobe.com

Other certificates including the domain name bestvaluerate.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for bestvaluerate.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINIDCCDAigAwIBAgISBEwN6yCXeuOjqe1DVR8t+eSAMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDIxNTE5NDVaFw0yNDA3MzExNTE5NDRaMBwxGjAYBgNVBAMT
EWJlc3R2YWx1ZXJhdGUubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAp/0E9c3/Y+pAgz9TZZwY5H+d9+H/D3+ZvZrtsZW0ckcL8sl8+goVS+nFkpqq
suVMINBCdUiEwzIuxXM0SUr1WDEH7t8WkUpIP4iNBfSs6PviDdszPBR0Vy6MHasZ
l1+pYLM+7Vyq1BJEZBdyYftdjXLgxwWTgUPPH2CWTEoAeZbcxvwKH3lZiBzALScg
VOlNoIV5WHEJwfLFG1BsQoXznLJI0Q63SjI26OsZ9BWsPhgjV5zNo7Oqff9fkRGr
nvExUp8KZRWVrpTLliRAsFharocYABsXINZBcjxi2zozbg2b8RFiiaNM84woA/cU
FbFC4JjtSnlP8VfNGj75drPuf4Sniwa/ryVRXnUvh5PiyFYL/TeE4OYW1Rk7AC0P
PF1dKMQ04uTt45ib3FEKKl8GUZ1UPmSHxorM5Lez+x3ovxb1hkLmg4zzL5/WfGYZ
ByYZBgi7olc3TOvG10eXJ8+MLG/1QVWTpGm5+CbW4siWMnoZoxr8B8fod9tS9igS
BEFhOpi7FxEUvctzM1ZoiToYma7id7eeXrxRFOMYADDijr/IEwajdRyeoqsNVhRg
GhNV3LkspAd5GQAjcn4Gk/cinxGUVd1t9xz7yAWlaRz3mqaRpicZNQQnAwJ15uCT
MNed/1EMUWv9aLCus9G3cZK7rZ6ooY1qnL7fBQ7L++gG8+0CAwEAAaOCCUQwgglA
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUMgECP1czIXusjCI8EmTa2yShZtMwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggdLBgNVHREEggdCMIIHPoINKi5iOWQ2MzF6
Lm5ldIITKi5iZXN0dmFsdWVyYXRlLm5ldIITKi5iaWxhbHRleHRsaWVzLm5ldIIZ
Ki5jaGFvdGljd2hvbGVzb21laW5jLmNvbYIPKi5jdWJwYWNrNDMuY29tghkqLmZh
YnJpY2FhdXRoZW50aWNpdGUuY29tghQqLmZlcnJlcmJhcnRvbWV1LmNvbYIVKi5m
aXNoaW5nbGFuZ3VhZ2UuY29tghYqLmZyZXNoY2F0Y2hhbGFza2EubmV0gg4qLmZ1
bm5kZWFsLm5ldIIRKi5nMW5vdmlkYWRlcy5jb22CECouZ2V0Mm5hdWtyaS5jb22C
GSouZ2lmdHNjYXJkc2FsbGFyb3VuZC5uZXSCFiouZ2xvcnltYXNzYWdlYmFsaS5j
b22CDyouZ29hdG1lbWVzLmNvbYIbKi5nb2tzdWh1a3VrZGFuaXNtYW5saWsuY29t
ghIqLmhhc2FudGVjaDc4Ni5jb22CDCouaG90ZGV1LmNvbYIVKi5ob3Ryb2Rwb3dl
cnRvdXIubmV0gg0qLmh1YXNlYTIuY29tghEqLmluaGluaGxlbmFvLm5ldIIQKi5p
bnRlcmJyYXdsLmNvbYIPKi5qZXdlbGhva2kuY29tghoqLmppbGxpYW5wYXRyaWNr
dHJhdmVsLmNvbYIVKi5raXNhbmZvdW5kYXRpb24ub3JnghEqLmxhZ2VudG9nbWJo
LmNvbYIRKi5sZWV1ZmFzaGlvbi5jb22CEyoubGVpc2l4aWFvc2h1by5jb22CEyou
bGlsbGlwdXR3b3JsZC5vcmeCDioubGlseWRlYWwuY29tgg4qLmxvYW5tYXphLmNv
bYIWKi5sb2JpbmFzY2hpbGRjYXJlLmNvbYIOKi5sb2phYW5yZS5jb22CJioubG9z
YW5nZWxlc2NyaW1pbmFsbGF3eWVyYXR0b3JuZXkuY29tghcqLmx1eHVyaWVzb2Zs
aW5kc2V5LmNvbYITKi5tYWFzbWVkaWF0ZWNoLmNvbYIPKi5tYWdpY3V0aWUuY29t
gg8qLm1ha3Jvbmljcy5jb22CDioubWFsa3ZvaXAuY29tgh0qLm1hbmdvaW5kaWFu
Y3Vpc2luZWJhbnVzLmNvbYIRKi5tYW8tZGUtb2JyYS5jb22CFSoubWFyaWFuYWp1
bGlldHRlLmNvbYIfKi5tYXJrZXRpbmdkaWdpdGFsbW90aXZhY2FvLmNvbYIPKi5t
YXQzYXFsaWsuY29tghIqLm1hdXJlcnNlcmNhbi5jb22CECoubWF4bWljcm9iZS5j
b22CC2I5ZDYzMXoubmV0ghFiZXN0dmFsdWVyYXRlLm5ldIIRYmlsYWx0ZXh0bGll
cy5uZXSCF2NoYW90aWN3aG9sZXNvbWVpbmMuY29tgg1jdWJwYWNrNDMuY29tghdm
YWJyaWNhYXV0aGVudGljaXRlLmNvbYISZmVycmVyYmFydG9tZXUuY29tghNmaXNo
aW5nbGFuZ3VhZ2UuY29tghRmcmVzaGNhdGNoYWxhc2thLm5ldIIMZnVubmRlYWwu
bmV0gg9nMW5vdmlkYWRlcy5jb22CDmdldDJuYXVrcmkuY29tghdnaWZ0c2NhcmRz
YWxsYXJvdW5kLm5ldIIUZ2xvcnltYXNzYWdlYmFsaS5jb22CDWdvYXRtZW1lcy5j
b22CGWdva3N1aHVrdWtkYW5pc21hbmxpay5jb22CEGhhc2FudGVjaDc4Ni5jb22C
CmhvdGRldS5jb22CE2hvdHJvZHBvd2VydG91ci5uZXSCC2h1YXNlYTIuY29tgg9p
bmhpbmhsZW5hby5uZXSCDmludGVyYnJhd2wuY29tgg1qZXdlbGhva2kuY29tghhq
aWxsaWFucGF0cmlja3RyYXZlbC5jb22CE2tpc2FuZm91bmRhdGlvbi5vcmeCD2xh
Z2VudG9nbWJoLmNvbYIPbGVldWZhc2hpb24uY29tghFsZWlzaXhpYW9zaHVvLmNv
bYIRbGlsbGlwdXR3b3JsZC5vcmeCDGxpbHlkZWFsLmNvbYIMbG9hbm1hemEuY29t
ghRsb2JpbmFzY2hpbGRjYXJlLmNvbYIMbG9qYWFucmUuY29tgiRsb3NhbmdlbGVz
Y3JpbWluYWxsYXd5ZXJhdHRvcm5leS5jb22CFWx1eHVyaWVzb2ZsaW5kc2V5LmNv
bYIRbWFhc21lZGlhdGVjaC5jb22CDW1hZ2ljdXRpZS5jb22CDW1ha3Jvbmljcy5j
b22CDG1hbGt2b2lwLmNvbYIbbWFuZ29pbmRpYW5jdWlzaW5lYmFudXMuY29tgg9t
YW8tZGUtb2JyYS5jb22CE21hcmlhbmFqdWxpZXR0ZS5jb22CHW1hcmtldGluZ2Rp
Z2l0YWxtb3RpdmFjYW8uY29tgg1tYXQzYXFsaWsuY29tghBtYXVyZXJzZXJjYW4u
Y29tgg5tYXhtaWNyb2JlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5
2IRzAAABjzoazGgAAAQDAEcwRQIhAJyod5Ea0Ffy2/RR0aw+Qr8DyXaj2gyqyAKe
/iH6oFs6AiANmPZ3Cv5HEUx/l1KsPV3fiTGOzGacpc5669kWNx4nWgB2ABmYEHEJ
8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAABjzoazHYAAAQDAEcwRQIhAIy7
v6kXrHGbfKvR2b0k0mxonoadOBUp8iZpPwDVbwVBAiB0ubcq/ylmIuYhi8gTJWva
Von5fHjaHzUM+a5N5XWkHzANBgkqhkiG9w0BAQsFAAOCAQEAj5GqfpHEp+jSaLZY
AhrfPizcTyT/ci/341A1sKWalGmBXmxdl6s4a8Ui06Gn8m02gdMQnLdKVlwZOU4T
2aUs6IUsz6BzOZlnyg8KmgR083N2/jtz191Ba7Lyz/My0LXwh3DieT7pYx5of6ZC
REyA+J9bqr0RdivBegcd1DxTz8KSuGHAuepXBElKl1DKc4UMUd9MToTCe/p6P5VY
Vr9hZ1wHNoJTuNocJHPEXv9W9LnBO731TJ1iAwB+yyIo5bnMO4UM+M+BMkld7Utr
9bc4fkf2lv1C/UtnVMKr4jqSntaIOVAQZAES8ib24HvG0cuq4b8STBwHMkWWWBUP
kW3qBg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374329104427777861627299480553922219336832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 15:19:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 15:19:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bestvaluerate.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685332703871447716825308785219453689192889341015004624656458662126086379460556785112744688938537376479456608127508689102636058023525286408609795970887482525921405373942534475005350290037158392183090064067450556658562395687105973941933351456805053429461321497353512768375139108262592454813980552295178895549204181600030947192868364516408345211291760657106528290422069414409198482973080394979548397842120469055824923977665204773430804645487469838397980197471558883747742443818518186797820978884093238821403708670003707968355682568919324706032887400714265605608556079001835915196556229715038968297297043418642094796377925758844380346126632507547263493475843882141277698272555217752922004983042583517170649926819692585352856252109487572525693172316588903180462323014674637844559789297205566978450344202780063147742677180621685067664763171453429390015906429378468129630702879006115588763286547295483726663727692167417629388970420671488914224109485795946739035215058810359705813519239749938136879306396399947048633790082793178348335534746369190272730400439422815024803564792387709663216933728285465333763953098444566556027736372693868350868372992827978812603212419011087929300520204816907530619798602378575546852539913065525407089498190829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3201023f5733217bac8c223c1264dadb24a166d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1858 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b9d631z.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestvaluerate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bilaltextlies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaoticwholesomeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cubpack43.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabricaauthenticite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferrerbartomeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishinglanguage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshcatchalaska.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funndeal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g1novidades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.get2naukri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giftscardsallaround.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glorymassagebali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goatmemes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goksuhukukdanismanlik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasantech786.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotdeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotrodpowertour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huasea2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inhinhlenao.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interbrawl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewelhoki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jillianpatricktravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kisanfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagentogmbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leeufashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leisixiaoshuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lilliputworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lilydeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loanmaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lobinaschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojaanre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losangelescriminallawyerattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxuriesoflindsey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maasmediatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicutie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malkvoip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangoindiancuisinebanus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mao-de-obra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marianajuliette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketingdigitalmotivacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mat3aqlik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maurersercan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxmicrobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b9d631z.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestvaluerate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilaltextlies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaoticwholesomeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubpack43.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabricaauthenticite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferrerbartomeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishinglanguage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshcatchalaska.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funndeal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g1novidades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get2naukri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftscardsallaround.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glorymassagebali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goatmemes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goksuhukukdanismanlik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasantech786.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotdeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotrodpowertour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huasea2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inhinhlenao.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interbrawl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewelhoki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jillianpatricktravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kisanfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagentogmbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeufashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leisixiaoshuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilliputworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilydeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanmaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobinaschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojaanre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangelescriminallawyerattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuriesoflindsey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maasmediatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicutie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malkvoip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangoindiancuisinebanus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mao-de-obra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marianajuliette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingdigitalmotivacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mat3aqlik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maurersercan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxmicrobe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f3a1acc6800000403004730450221009ca877911ad057f2dbf451d1ac3e42bf03c976a3da0caac8029efe21faa05b3a02200d98f6770afe47114c7f9752ac3d5ddf89318ecc669ca5ce7aebd916371e275a0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f3a1acc7600000403004730450221008cbbbfa917ac719b7cabd1d9bd24d26c689e869d381529f226693f00d56f0541022074b9b72aff296622e6218bc813256bda5689f97c78da1f350cf9ae4de575a41f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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