kakteen.shop

Issued by R3

About this certificate

This digital certificate with serial number 04:6b:bf:f7:81:b7:88:8c:d0:36:c0:4a:f9:87:d3:54:95:0b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kakteen.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6b:bf:f7:81:b7:88:8c:d0:36:c0:4a:f9:87:d3:54:95:0b
Serial Number (int): 385114524663072232016614071411113538655499
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:ac:30:04:27:90:8a:c6:27:e8:06:c2:65:d7:99:77:9e:e0:5e:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:ad:15:02:a3:2c:45:95:bf:83:94:f0:31:b2:a9:9f:46:c4:47:b2
Fingerprint (sha256): 7a:2a:06:1b:7b:64:3a:ac:75:e0:5e:58:96:e2:2d:15:7a:2f:40:19:fc:bb:fe:24:8e:38:96:22:f2:26:01:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kakteen.shop

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kakteen.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aaubaseball.com
*.abletonlive.com
*.addinctinggames.com
*.advaceauto.com
*.aevconversions.com
*.arabicom.us
*.armeniangirl.com
*.ay33.com
*.beeble.com.au
*.blachanddecker.com
*.chianbabe.com
*.cititbank.com
*.companyguards.com
*.cryptobreaker.com
*.custombuildingspecialtiesid.com
*.douglascountylibrary.com
*.eroteka.com
*.examine1.com
*.freevoiceline.com
*.freezingpipes.com
*.fteeslots.com
*.happybirdscraftinghaven.com
*.hugehooters.com
*.jipinvip.net
*.jomeadvisor.com
*.kakteen.shop
*.latex-to-word.com
*.loadfleet.com
*.longerection.com
*.loyalsales.com
*.metroexchange.com
*.minihookah.com
*.movieszone.com
*.nickaloden.com
*.northcruises.com
*.nylotterynumbers.com
*.originaltattoos.com
*.personalizedphotos.com
*.plasticdinnerware.com
*.polkdirectory.com
*.pornstars1.com
*.punani.com
*.rlswealth.co
*.sportcouch.com
*.swappingwife.com
*.switchcabinet.com
*.tentation.shop
*.timeflayer.com
*.u-video.xyz
*.uloan.com
aaubaseball.com
abletonlive.com
addinctinggames.com
advaceauto.com
aevconversions.com
arabicom.us
armeniangirl.com
ay33.com
beeble.com.au
blachanddecker.com
chianbabe.com
cititbank.com
companyguards.com
cryptobreaker.com
custombuildingspecialtiesid.com
douglascountylibrary.com
eroteka.com
examine1.com
freevoiceline.com
freezingpipes.com
fteeslots.com
happybirdscraftinghaven.com
hugehooters.com
jipinvip.net
jomeadvisor.com
kakteen.shop
latex-to-word.com
loadfleet.com
longerection.com
loyalsales.com
metroexchange.com
minihookah.com
movieszone.com
nickaloden.com
northcruises.com
nylotterynumbers.com
originaltattoos.com
personalizedphotos.com
plasticdinnerware.com
polkdirectory.com
pornstars1.com
punani.com
rlswealth.co
sportcouch.com
swappingwife.com
switchcabinet.com
tentation.shop
timeflayer.com
u-video.xyz
uloan.com

Other certificates including the domain name kakteen.shop

(limited to 100 certificates)
kakteen.shop
kakteen.shop
kakteen.shop
shoemycolor.com
shoemycolor.com

Certificate

The complete raw certificate details for kakteen.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINHTCCDAWgAwIBAgISBGu/94G3iIzQNsBK+YfTVJULMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMzEwNTM5MjFaFw0yNDA0MzAwNTM5MjBaMBcxFTATBgNVBAMT
DGtha3RlZW4uc2hvcDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOF3
CZyUcZyx/5XfGwWrhDPBwlEdOJuGSRVpP7xZZjslZEVqdgGzTZgggoxj7Y8nED30
6sj8N94H2hwq5GF6RHgWugdI55wp5FQX26IW6Lb/dRWWOJitvvKZQP6HLiRTAjQs
S64uvOUkqxkDA+QQXBH1PQ1/O0l9+jV4aoZQEVDTJsXGJTB818EnMPYF9L4A6KG0
vEsEpapunwCGnvOglyp8Q6Y40WaX1eaFf9zx/3//WWUboGeh6If3QdrEHxTbb1Ke
nstO5pi6fhC6AFMMqdQi2E7eC0vxDqNJnsJsEHMUAKPDKg4LejDPkhz6V8lKey6H
h3GATv1tUjz+eWny/P/1X3gu5oR+n5Z7jpT3DHQCUn8zIdfHlJhQ9+09q9uCDt5f
JRtA93vzANlwcZinQXItxoMfGx54zdaU+dpGFTYbm1tBhqMrBez53PsVq/aBkjy7
XaSBi29g1cfI8Koz+DCs7lUVeTENTu98LjJU6AMd129ya9cX1Z7vi3JU6MqAOPXi
pzawRQnJDTUhAl64cWLfnRD66Irt7JCYWJrjerwx1WZKz0DCcThUB/Al/pbTq4vx
7u7qyDv1s8OdlftdINeiFFgCfO0EAw4tDXK/45olLl7y3XmdUmYHfmCo4c8nCAdO
pDAVVQuvMS4xDW1fgU8fItabZjyH+curXB44scQNAgMBAAGjgglGMIIJQjAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFG6sMAQnkIrGJ+gGwmXXmXee4F4qMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIHTQYDVR0RBIIHRDCCB0CCESouYWF1YmFzZWJhbGwu
Y29tghEqLmFibGV0b25saXZlLmNvbYIVKi5hZGRpbmN0aW5nZ2FtZXMuY29tghAq
LmFkdmFjZWF1dG8uY29tghQqLmFldmNvbnZlcnNpb25zLmNvbYINKi5hcmFiaWNv
bS51c4ISKi5hcm1lbmlhbmdpcmwuY29tggoqLmF5MzMuY29tgg8qLmJlZWJsZS5j
b20uYXWCFCouYmxhY2hhbmRkZWNrZXIuY29tgg8qLmNoaWFuYmFiZS5jb22CDyou
Y2l0aXRiYW5rLmNvbYITKi5jb21wYW55Z3VhcmRzLmNvbYITKi5jcnlwdG9icmVh
a2VyLmNvbYIhKi5jdXN0b21idWlsZGluZ3NwZWNpYWx0aWVzaWQuY29tghoqLmRv
dWdsYXNjb3VudHlsaWJyYXJ5LmNvbYINKi5lcm90ZWthLmNvbYIOKi5leGFtaW5l
MS5jb22CEyouZnJlZXZvaWNlbGluZS5jb22CEyouZnJlZXppbmdwaXBlcy5jb22C
DyouZnRlZXNsb3RzLmNvbYIdKi5oYXBweWJpcmRzY3JhZnRpbmdoYXZlbi5jb22C
ESouaHVnZWhvb3RlcnMuY29tgg4qLmppcGludmlwLm5ldIIRKi5qb21lYWR2aXNv
ci5jb22CDioua2FrdGVlbi5zaG9wghMqLmxhdGV4LXRvLXdvcmQuY29tgg8qLmxv
YWRmbGVldC5jb22CEioubG9uZ2VyZWN0aW9uLmNvbYIQKi5sb3lhbHNhbGVzLmNv
bYITKi5tZXRyb2V4Y2hhbmdlLmNvbYIQKi5taW5paG9va2FoLmNvbYIQKi5tb3Zp
ZXN6b25lLmNvbYIQKi5uaWNrYWxvZGVuLmNvbYISKi5ub3J0aGNydWlzZXMuY29t
ghYqLm55bG90dGVyeW51bWJlcnMuY29tghUqLm9yaWdpbmFsdGF0dG9vcy5jb22C
GCoucGVyc29uYWxpemVkcGhvdG9zLmNvbYIXKi5wbGFzdGljZGlubmVyd2FyZS5j
b22CEyoucG9sa2RpcmVjdG9yeS5jb22CECoucG9ybnN0YXJzMS5jb22CDCoucHVu
YW5pLmNvbYIOKi5ybHN3ZWFsdGguY2+CECouc3BvcnRjb3VjaC5jb22CEiouc3dh
cHBpbmd3aWZlLmNvbYITKi5zd2l0Y2hjYWJpbmV0LmNvbYIQKi50ZW50YXRpb24u
c2hvcIIQKi50aW1lZmxheWVyLmNvbYINKi51LXZpZGVvLnh5eoILKi51bG9hbi5j
b22CD2FhdWJhc2ViYWxsLmNvbYIPYWJsZXRvbmxpdmUuY29tghNhZGRpbmN0aW5n
Z2FtZXMuY29tgg5hZHZhY2VhdXRvLmNvbYISYWV2Y29udmVyc2lvbnMuY29tggth
cmFiaWNvbS51c4IQYXJtZW5pYW5naXJsLmNvbYIIYXkzMy5jb22CDWJlZWJsZS5j
b20uYXWCEmJsYWNoYW5kZGVja2VyLmNvbYINY2hpYW5iYWJlLmNvbYINY2l0aXRi
YW5rLmNvbYIRY29tcGFueWd1YXJkcy5jb22CEWNyeXB0b2JyZWFrZXIuY29tgh9j
dXN0b21idWlsZGluZ3NwZWNpYWx0aWVzaWQuY29tghhkb3VnbGFzY291bnR5bGli
cmFyeS5jb22CC2Vyb3Rla2EuY29tggxleGFtaW5lMS5jb22CEWZyZWV2b2ljZWxp
bmUuY29tghFmcmVlemluZ3BpcGVzLmNvbYINZnRlZXNsb3RzLmNvbYIbaGFwcHli
aXJkc2NyYWZ0aW5naGF2ZW4uY29tgg9odWdlaG9vdGVycy5jb22CDGppcGludmlw
Lm5ldIIPam9tZWFkdmlzb3IuY29tggxrYWt0ZWVuLnNob3CCEWxhdGV4LXRvLXdv
cmQuY29tgg1sb2FkZmxlZXQuY29tghBsb25nZXJlY3Rpb24uY29tgg5sb3lhbHNh
bGVzLmNvbYIRbWV0cm9leGNoYW5nZS5jb22CDm1pbmlob29rYWguY29tgg5tb3Zp
ZXN6b25lLmNvbYIObmlja2Fsb2Rlbi5jb22CEG5vcnRoY3J1aXNlcy5jb22CFG55
bG90dGVyeW51bWJlcnMuY29tghNvcmlnaW5hbHRhdHRvb3MuY29tghZwZXJzb25h
bGl6ZWRwaG90b3MuY29tghVwbGFzdGljZGlubmVyd2FyZS5jb22CEXBvbGtkaXJl
Y3RvcnkuY29tgg5wb3Juc3RhcnMxLmNvbYIKcHVuYW5pLmNvbYIMcmxzd2VhbHRo
LmNvgg5zcG9ydGNvdWNoLmNvbYIQc3dhcHBpbmd3aWZlLmNvbYIRc3dpdGNoY2Fi
aW5ldC5jb22CDnRlbnRhdGlvbi5zaG9wgg50aW1lZmxheWVyLmNvbYILdS12aWRl
by54eXqCCXVsb2FuLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB1AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfY
AAABjV4+X44AAAQDAEYwRAIgbpvyBtTmfJYE9hG1mX4Eq4fl7wVl1zxS6Kol75xM
ZIwCIH5vmKRPyUMrfJ5iCTrLc2lwnrOk1ncZVIPyaR6PyAqRAHcA7s3QZNXbGs7F
XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGNXj5feAAABAMASDBGAiEA9dV64YgL
3YNe3JdoR90/zWGLeKOF+iaXdsE0A/rdeiICIQDFVnJQ9RjkChJFnF6UO49wT6aY
+VJ+Qfl2sWVhD2rBIjANBgkqhkiG9w0BAQsFAAOCAQEAOvDvpgdg4izul2RZ5Mv+
qaTtATBuAHjwsqKF9ti2PUrKUlRslgFd993BqE9C2oaoOkH3BKbctRGVYgkpVpA/
MvsoOkc+xz/bYuglXOp//QbUE9gMqTsvKaAhgvcBdV8KdKrZVeVhiU0+AXJDxMUB
hBIsQitl1l1yzC6Z9sdSWvOpHO11upwMM6I4P1cK2PbZriY/PRl4kq807sCps+y4
ZwJUjmffqAnE795jUF5lr4saRVwipErkoqJftCEN18fBl/hHwP0lB4m/pFYpMYSo
OT1eLnOnFJVSM8fUoa+kyzYZkbQa0ir+tLnKiZZFXXal9Cl94lBp4CniyiroPaQV
FA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4XcJnJRxnLH/ld8bBauE
M8HCUR04m4ZJFWk/vFlmOyVkRWp2AbNNmCCCjGPtjycQPfTqyPw33gfaHCrkYXpE
eBa6B0jnnCnkVBfbohbotv91FZY4mK2+8plA/ocuJFMCNCxLri685SSrGQMD5BBc
EfU9DX87SX36NXhqhlARUNMmxcYlMHzXwScw9gX0vgDoobS8SwSlqm6fAIae86CX
KnxDpjjRZpfV5oV/3PH/f/9ZZRugZ6Hoh/dB2sQfFNtvUp6ey07mmLp+ELoAUwyp
1CLYTt4LS/EOo0mewmwQcxQAo8MqDgt6MM+SHPpXyUp7LoeHcYBO/W1SPP55afL8
//VfeC7mhH6flnuOlPcMdAJSfzMh18eUmFD37T2r24IO3l8lG0D3e/MA2XBxmKdB
ci3Ggx8bHnjN1pT52kYVNhubW0GGoysF7Pnc+xWr9oGSPLtdpIGLb2DVx8jwqjP4
MKzuVRV5MQ1O73wuMlToAx3Xb3Jr1xfVnu+LclToyoA49eKnNrBFCckNNSECXrhx
Yt+dEProiu3skJhYmuN6vDHVZkrPQMJxOFQH8CX+ltOri/Hu7urIO/Wzw52V+10g
16IUWAJ87QQDDi0Ncr/jmiUuXvLdeZ1SZgd+YKjhzycIB06kMBVVC68xLjENbV+B
Tx8i1ptmPIf5y6tcHjixxA0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385114524663072232016614071411113538655499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 05:39:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 05:39:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kakteen.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919816910680483331578954212011010189798801628950110230176716146279050966841503796366311151052799582283757205116335239013336348343043751003782765008265468036519280892588679777542094614690883279443312012908964988114512476759678118645474413844247947523948530374447950472721742392586436674607202428287048250018367712015505999056637715436289886581850231969280768315584575814367170782309989222567701220918847720416355661421026047759398689953111191697177141271408372973665674601331088806554420716957452885468999485034992552844867074751983380760860832303690953737095888389391783441476672247826283327570913487242542733862178956942104985037191854416323316414695097174303011883649606945486946531617799352752978390172894458464337436258755172278196712415132136204934804593160413934210655463506713871574008211512678905143944323958738057596973439126999285071497478531667965626839962582016457866322998614400095987731777533586140680342111166261336878609036187758069851243950050189368791403666938581187296116766292155271154037476932357647298085904752139466215045831111819697998828452780044386429539381228068022358896798944260788244391776938995645372242385630378724349088151385282100863626238632577326256032849499419823970947140920076302566915581264909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6eac300427908ac627e806c265d799779ee05e2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaubaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abletonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addinctinggames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advaceauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aevconversions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arabicom.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armeniangirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ay33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beeble.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blachanddecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chianbabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cititbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.companyguards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptobreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custombuildingspecialtiesid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.douglascountylibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eroteka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examine1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freevoiceline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freezingpipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fteeslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happybirdscraftinghaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hugehooters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jipinvip.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jomeadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kakteen.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latex-to-word.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loadfleet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longerection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loyalsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metroexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minihookah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movieszone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickaloden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northcruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nylotterynumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.originaltattoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalizedphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plasticdinnerware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polkdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornstars1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.punani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rlswealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportcouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swappingwife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.switchcabinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tentation.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timeflayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u-video.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaubaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abletonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addinctinggames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advaceauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aevconversions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabicom.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armeniangirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ay33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beeble.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blachanddecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chianbabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cititbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyguards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptobreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custombuildingspecialtiesid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douglascountylibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroteka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examine1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freevoiceline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freezingpipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fteeslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happybirdscraftinghaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugehooters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jipinvip.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jomeadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kakteen.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latex-to-word.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadfleet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longerection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyalsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metroexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minihookah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieszone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickaloden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nylotterynumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originaltattoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalizedphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasticdinnerware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polkdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornstars1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlswealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swappingwife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchcabinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tentation.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeflayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u-video.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uloan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d5e3e5f8e000004030046304402206e9bf206d4e67c9604f611b5997e04ab87e5ef0565d73c52e8aa25ef9c4c648c02207e6f98a44fc9432b7c9e62093acb7369709eb3a4d677195483f2691e8fc80a91007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d5e3e5f780000040300483046022100f5d57ae1880bdd835edc976847dd3fcd618b78a385fa269776c13403fadd7a22022100c5567250f518e40a12459c5e943b8f704fa698f9527e41f976b165610f6ac122
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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