ultil.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:40:89:3a:af:fb:a7:45:bc:17:b5:23:af:5a:d1:19:e8:09 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ultil.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:89:3a:af:fb:a7:45:bc:17:b5:23:af:5a:d1:19:e8:09
Serial Number (int): 370409624167981094473628466546586175531017
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:2e:eb:c8:10:24:90:cb:3d:0e:26:0f:05:13:45:3b:ad:56:de:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:49:15:b4:9f:7a:8e:98:ab:77:15:99:17:50:b4:f2:47:b5:5e:5e
Fingerprint (sha256): 79:31:1f:77:2b:5b:a0:bf:65:62:4a:a6:d8:b9:4f:e9:10:be:7e:e8:14:4c:60:b7:5c:cf:ec:35:21:27:d1:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ultil.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ultil.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advisormatch.com.au
*.allround-roofing.co.uk
*.americanfrieght.us
*.annieappleseed.org
*.auzoscout24.de
*.bedsets.com.au
*.betaplay.net
*.burningman.com.au
*.chrunchyroll.de
*.constitioncenter.org
*.deccu.org
*.denver-electronics.de
*.diogutiar23.net
*.escalators.au
*.experin.co.uk
*.filezilla-projekt.org
*.friend.com.au
*.healthallience.org
*.hymal.net
*.japanhd.net
*.japanhdv.net
*.jumstart.org
*.lanesherrif.org
*.leschools.net
*.livingpai.com
*.metabattle.net
*.metopers.org
*.mindreader.com.au
*.mistake.com.au
*.muticare.org
*.narcotic.com.au
*.njcti.org
*.papercraftplanet.net
*.peakfitnesssthelens.co.uk
*.penile.com.au
*.postings.com.au
*.potionsandsnitches.net
*.researchgat.net
*.scooterdepo.us
*.sosch.fr
*.taxicaborlando.com
*.tecnovales.com
*.the-countryman-inn.co.uk
*.tic-direct.co.uk
*.toydogrescue.org
*.ultil.com.br
*.warnersholidays.co.uk
*.windelmom.de
*.wwwicrimewatch.net
*.xepedia.com
advisormatch.com.au
allround-roofing.co.uk
americanfrieght.us
annieappleseed.org
auzoscout24.de
bedsets.com.au
betaplay.net
burningman.com.au
chrunchyroll.de
constitioncenter.org
deccu.org
denver-electronics.de
diogutiar23.net
escalators.au
experin.co.uk
filezilla-projekt.org
friend.com.au
healthallience.org
hymal.net
japanhd.net
japanhdv.net
jumstart.org
lanesherrif.org
leschools.net
livingpai.com
metabattle.net
metopers.org
mindreader.com.au
mistake.com.au
muticare.org
narcotic.com.au
njcti.org
papercraftplanet.net
peakfitnesssthelens.co.uk
penile.com.au
postings.com.au
potionsandsnitches.net
researchgat.net
scooterdepo.us
sosch.fr
taxicaborlando.com
tecnovales.com
the-countryman-inn.co.uk
tic-direct.co.uk
toydogrescue.org
ultil.com.br
warnersholidays.co.uk
windelmom.de
wwwicrimewatch.net
xepedia.com

Other certificates including the domain name ultil.com.br

(limited to 100 certificates)
ultil.com.br
teamworld.com.au
gams2win.com
persafe.net
ultil.com.br
persafe.net
nylotteryny.org
ultil.com.br
bikeriding.com.au
ktht.info
ultil.com.br

Certificate

The complete raw certificate details for ultil.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINAjCCC+qgAwIBAgISBECJOq/7p0W8F7Ujr1rRGegJMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTMwNDUyMDVaFw0yNDA2MTEwNDUyMDRaMBcxFTATBgNVBAMT
DHVsdGlsLmNvbS5icjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL/c
czAiFWRU86k8YNrCUuSjLluZmmPCSZjINcdY8a3JTSPEh7a1RS5nzXpfNkhYUOJe
CKUrSZCS3FRpopmaENBW0Vtgx+vb555GizSx5G3BxwsdreFLJSzo5tboyRbS8I1u
m0hgePXrYCjlLqCmD7tHjHGUUDGAr0PV+eD3f6kv6WYo9IxCaAa6yeku6STCc0g+
s3PGMkio15ra0MEeh7JOQXXiZM7nAJ8zq931yTZjveewJDz8hefCJt7GGx+zDHW+
jfsGJ/PuHk5oZOginZGcUVy6iGyQoalkv+t115qAbYMfccVY3jIdE7jVxkA3RMn4
C+HWXuChZtq46UQR/wJ2gNQ4UUjxIx//Lol0DfR0JcFmMptzDPX5GDJsDrJZjZEY
tb80sy/r5KLjWY9JomI7u5uCCFQApbJcvUkgDWbwDv4Ec+8RH6gDjzAf+Y20k9Eh
vElxIjHAULh2HMJw2LhKb/Mx2bPUD4i3UIM7pEWicHZRYFEpo1mf1uVcBz/2mu5F
rfGWDyeAfzIz+7xD/b6qmiiAxfM7g5vekZ1NalAl8ZFXWthbkrhry2NXpSgxkhuO
qjWf/kUvqb5ucAQACpitG7LN55cdkp1qS6IKGELhWgkS0mlC/ipKtPw5kb/lLKHF
MyY7W+TAijY/wk+ayG7DkeIfZ8DIqqYkS4vqe91NAgMBAAGjggkrMIIJJzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFOAu68gQJJDLPQ4mDwUTRTutVt4LMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIHMQYDVR0RBIIHKDCCBySCFSouYWR2aXNvcm1hdGNo
LmNvbS5hdYIYKi5hbGxyb3VuZC1yb29maW5nLmNvLnVrghQqLmFtZXJpY2FuZnJp
ZWdodC51c4IUKi5hbm5pZWFwcGxlc2VlZC5vcmeCECouYXV6b3Njb3V0MjQuZGWC
ECouYmVkc2V0cy5jb20uYXWCDiouYmV0YXBsYXkubmV0ghMqLmJ1cm5pbmdtYW4u
Y29tLmF1ghEqLmNocnVuY2h5cm9sbC5kZYIWKi5jb25zdGl0aW9uY2VudGVyLm9y
Z4ILKi5kZWNjdS5vcmeCFyouZGVudmVyLWVsZWN0cm9uaWNzLmRlghEqLmRpb2d1
dGlhcjIzLm5ldIIPKi5lc2NhbGF0b3JzLmF1gg8qLmV4cGVyaW4uY28udWuCFyou
ZmlsZXppbGxhLXByb2pla3Qub3Jngg8qLmZyaWVuZC5jb20uYXWCFCouaGVhbHRo
YWxsaWVuY2Uub3JnggsqLmh5bWFsLm5ldIINKi5qYXBhbmhkLm5ldIIOKi5qYXBh
bmhkdi5uZXSCDiouanVtc3RhcnQub3JnghEqLmxhbmVzaGVycmlmLm9yZ4IPKi5s
ZXNjaG9vbHMubmV0gg8qLmxpdmluZ3BhaS5jb22CECoubWV0YWJhdHRsZS5uZXSC
DioubWV0b3BlcnMub3JnghMqLm1pbmRyZWFkZXIuY29tLmF1ghAqLm1pc3Rha2Uu
Y29tLmF1gg4qLm11dGljYXJlLm9yZ4IRKi5uYXJjb3RpYy5jb20uYXWCCyoubmpj
dGkub3JnghYqLnBhcGVyY3JhZnRwbGFuZXQubmV0ghsqLnBlYWtmaXRuZXNzc3Ro
ZWxlbnMuY28udWuCDyoucGVuaWxlLmNvbS5hdYIRKi5wb3N0aW5ncy5jb20uYXWC
GCoucG90aW9uc2FuZHNuaXRjaGVzLm5ldIIRKi5yZXNlYXJjaGdhdC5uZXSCECou
c2Nvb3RlcmRlcG8udXOCCiouc29zY2guZnKCFCoudGF4aWNhYm9ybGFuZG8uY29t
ghAqLnRlY25vdmFsZXMuY29tghoqLnRoZS1jb3VudHJ5bWFuLWlubi5jby51a4IS
Ki50aWMtZGlyZWN0LmNvLnVrghIqLnRveWRvZ3Jlc2N1ZS5vcmeCDioudWx0aWwu
Y29tLmJyghcqLndhcm5lcnNob2xpZGF5cy5jby51a4IOKi53aW5kZWxtb20uZGWC
FCoud3d3aWNyaW1ld2F0Y2gubmV0gg0qLnhlcGVkaWEuY29tghNhZHZpc29ybWF0
Y2guY29tLmF1ghZhbGxyb3VuZC1yb29maW5nLmNvLnVrghJhbWVyaWNhbmZyaWVn
aHQudXOCEmFubmllYXBwbGVzZWVkLm9yZ4IOYXV6b3Njb3V0MjQuZGWCDmJlZHNl
dHMuY29tLmF1ggxiZXRhcGxheS5uZXSCEWJ1cm5pbmdtYW4uY29tLmF1gg9jaHJ1
bmNoeXJvbGwuZGWCFGNvbnN0aXRpb25jZW50ZXIub3JngglkZWNjdS5vcmeCFWRl
bnZlci1lbGVjdHJvbmljcy5kZYIPZGlvZ3V0aWFyMjMubmV0gg1lc2NhbGF0b3Jz
LmF1gg1leHBlcmluLmNvLnVrghVmaWxlemlsbGEtcHJvamVrdC5vcmeCDWZyaWVu
ZC5jb20uYXWCEmhlYWx0aGFsbGllbmNlLm9yZ4IJaHltYWwubmV0ggtqYXBhbmhk
Lm5ldIIMamFwYW5oZHYubmV0ggxqdW1zdGFydC5vcmeCD2xhbmVzaGVycmlmLm9y
Z4INbGVzY2hvb2xzLm5ldIINbGl2aW5ncGFpLmNvbYIObWV0YWJhdHRsZS5uZXSC
DG1ldG9wZXJzLm9yZ4IRbWluZHJlYWRlci5jb20uYXWCDm1pc3Rha2UuY29tLmF1
ggxtdXRpY2FyZS5vcmeCD25hcmNvdGljLmNvbS5hdYIJbmpjdGkub3JnghRwYXBl
cmNyYWZ0cGxhbmV0Lm5ldIIZcGVha2ZpdG5lc3NzdGhlbGVucy5jby51a4INcGVu
aWxlLmNvbS5hdYIPcG9zdGluZ3MuY29tLmF1ghZwb3Rpb25zYW5kc25pdGNoZXMu
bmV0gg9yZXNlYXJjaGdhdC5uZXSCDnNjb290ZXJkZXBvLnVzgghzb3NjaC5mcoIS
dGF4aWNhYm9ybGFuZG8uY29tgg50ZWNub3ZhbGVzLmNvbYIYdGhlLWNvdW50cnlt
YW4taW5uLmNvLnVrghB0aWMtZGlyZWN0LmNvLnVrghB0b3lkb2dyZXNjdWUub3Jn
ggx1bHRpbC5jb20uYnKCFXdhcm5lcnNob2xpZGF5cy5jby51a4IMd2luZGVsbW9t
LmRlghJ3d3dpY3JpbWV3YXRjaC5uZXSCC3hlcGVkaWEuY29tMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAO1N3dT4tuYBOizBb
Bv5AO2fYT8P0x70ADS1yb+H61BcAAAGONl4uyAAABAMASDBGAiEAoNEfuFYpo/yp
LMWnbUVdZFLNhCPV4EDgq51nuqGLXa8CIQCRVWu1PUznX+LOQeP+pEZtUO/qJHZU
pXp0l04OCL3m2gB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAAB
jjZeL14AAAQDAEcwRQIhANwIKfQ5vXjGQSGbhMwTFjxfFkfO+2cPs8kXFT0uLMdv
AiAqwYNBBepaLYZQ6e0ds34evESsEWJ38QVlhBKAAvL3cTANBgkqhkiG9w0BAQsF
AAOCAQEAX2lJvOU8eBP93ER8ev1B+8H0wiV2GLUbPIUhUGs9tfrbs64jNjIYEv8R
pEl2W1x8t9r+9B4x6DZ+DZMF8mw4lZZWfoSw5Uh9JcF4fUO6Eyo7YjNCxgO5SXkb
AUuMiACH55T2n8ftiX/s1xO3efMvHWiSSfCdll/KrEDeDutNk+HRZqvVCcK3dEjh
c962+xgpzSUZ3OvjmkklhmJkJwrZ77S/faiUix364I1TWgwOK+Q30NpNDW2o6+VY
yzm1lFEkdmI8DOjVGTSciEGVRv5+e4yv5CJf8M2JP8XXlUUYQvJN/kUh8GHlynj0
pto0AHEvHlpcpTtLbr1hojfZ9JxGfA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv9xzMCIVZFTzqTxg2sJS
5KMuW5maY8JJmMg1x1jxrclNI8SHtrVFLmfNel82SFhQ4l4IpStJkJLcVGmimZoQ
0FbRW2DH69vnnkaLNLHkbcHHCx2t4UslLOjm1ujJFtLwjW6bSGB49etgKOUuoKYP
u0eMcZRQMYCvQ9X54Pd/qS/pZij0jEJoBrrJ6S7pJMJzSD6zc8YySKjXmtrQwR6H
sk5BdeJkzucAnzOr3fXJNmO957AkPPyF58Im3sYbH7MMdb6N+wYn8+4eTmhk6CKd
kZxRXLqIbJChqWS/63XXmoBtgx9xxVjeMh0TuNXGQDdEyfgL4dZe4KFm2rjpRBH/
AnaA1DhRSPEjH/8uiXQN9HQlwWYym3MM9fkYMmwOslmNkRi1vzSzL+vkouNZj0mi
Yju7m4IIVAClsly9SSANZvAO/gRz7xEfqAOPMB/5jbST0SG8SXEiMcBQuHYcwnDY
uEpv8zHZs9QPiLdQgzukRaJwdlFgUSmjWZ/W5VwHP/aa7kWt8ZYPJ4B/MjP7vEP9
vqqaKIDF8zuDm96RnU1qUCXxkVda2FuSuGvLY1elKDGSG46qNZ/+RS+pvm5wBAAK
mK0bss3nlx2SnWpLogoYQuFaCRLSaUL+Kkq0/DmRv+UsocUzJjtb5MCKNj/CT5rI
bsOR4h9nwMiqpiRLi+p73U0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370409624167981094473628466546586175531017
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 04:52:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 04:52:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ultil.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782725131616381834884208736389621181980062321056163026766343089418247610837701147511835094170270857745666919523222230865704298659000953526218199873546762430487272808266611166488895189087835294982199442305061180792283098416185062199990194208073426402465150788071380751860824568830294595267008797782946848000114490006871952142666195200777740404146991061463045955405579383117128219653381985673283349349495100046484123737632719287322867090729676573146537424661857275508584708472189300109831216225601000151614999626774963315430431487419272588751462117708754790152988179116438856317442962587609432678828422777991114387987149271937515466704760379266073573716447384535354819344878911228119830092704874382335319773644130722004158234920888072870923163508746300930228110278871204218617680554084251365878272324950940172861824717419992533109975109494121971830544548287030657765436120056687214849343980737276455918315492231983560316605790391435053236398013587944483823892716140607798450425674987864955703850791192121723017080750227832094687997345046607229813977618003754501680048129271232336412197603165784499876442762307738525603353827010411650242967595942435775022768983253306900409469436783407258036179690227170046339392201578845951185131396429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e02eebc8102490cb3d0e260f0513453bad56de0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1832 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advisormatch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allround-roofing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanfrieght.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annieappleseed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auzoscout24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedsets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betaplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burningman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chrunchyroll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constitioncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deccu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denver-electronics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diogutiar23.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escalators.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filezilla-projekt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friend.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthallience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hymal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanhdv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jumstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lanesherrif.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingpai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metabattle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metopers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindreader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mistake.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narcotic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njcti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papercraftplanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peakfitnesssthelens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penile.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potionsandsnitches.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.researchgat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scooterdepo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sosch.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxicaborlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnovales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-countryman-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tic-direct.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toydogrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnersholidays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windelmom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwicrimewatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xepedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisormatch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allround-roofing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfrieght.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annieappleseed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auzoscout24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedsets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betaplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burningman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrunchyroll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constitioncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deccu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-electronics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diogutiar23.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escalators.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filezilla-projekt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friend.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthallience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hymal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanhdv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanesherrif.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingpai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabattle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metopers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindreader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistake.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narcotic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njcti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papercraftplanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakfitnesssthelens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penile.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potionsandsnitches.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchgat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scooterdepo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosch.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxicaborlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnovales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-countryman-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tic-direct.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toydogrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnersholidays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windelmom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwicrimewatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xepedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e365e2ec80000040300483046022100a0d11fb85629a3fca92cc5a76d455d6452cd8423d5e040e0ab9d67baa18b5daf02210091556bb53d4ce75fe2ce41e3fea4466d50efea247654a57a74974e0e08bde6da007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e365e2f5e0000040300473045022100dc0829f439bd78c641219b84cc13163c5f1647cefb670fb3c917153d2e2cc76f02202ac1834105ea5a2d8650e9ed1db37e1ebc44ac116277f1056584128002f2f771
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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