artesano.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d9:a9:9c:5a:40:de:ae:97:d0:25:53:4b:0a:6d:51:f3:39 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=artesano.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:a9:9c:5a:40:de:ae:97:d0:25:53:4b:0a:6d:51:f3:39
Serial Number (int): 335403582777278352198807941039437793850169
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:7f:60:ff:d5:85:c1:57:17:81:f3:15:ee:dd:d0:de:6d:af:e0:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:e5:48:50:f4:d8:de:11:da:4a:4c:66:14:b0:cb:fa:97:ae:1a:94
Fingerprint (sha256): 7e:de:9b:c7:3c:76:6a:43:5c:84:d9:03:dc:f2:1d:9d:1e:47:74:2b:3b:1e:0e:9a:cf:5c:5c:c9:af:a5:7e:fe

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate artesano.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artesano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agrotoxico.com
*.aimar.com
*.aranciarossa.com
*.artesano.com
*.avodessa.com
*.channellospizza.com
*.decolaar.com
*.directacn.com
*.disnaylatino.com
*.dreamcatcherbluegrass.com
*.ecletico.com
*.freelogomakr.com
*.gkassesusa.com
*.haemoorriden.de
*.hitachiserviceeu.com
*.hottersusa.com
*.kachin.com
*.kaksus.com
*.lastimosa.com
*.lesgrandscrus.com
*.lifepiintspanel.com
*.liuzmo.com
*.lockandlockusa.com
*.luchino.com
*.lumosa.com
*.luthtansa.com
*.macrocar.com
*.metissa.com
*.nataliescandyjar.com
*.nicksfightclub.com
*.noolhar.com
*.ordenadoressobremesa.com
*.pointclickcareus.com
*.praino.com
*.pricerewardsvisa.com
*.privateusa.com
*.radiantlightsolar.com
*.scuderiatopolino.com
*.sedico.com
*.senecesitaactoresporno.com
*.shimmerlightsolar.com
*.solipsus.com
*.squartetrade.com
*.ssp36.cc
*.tdameriatrade.com
*.trabajodecasa.com
*.vasegod.co
*.villachessa.com
*.wilhelmus.com
agrotoxico.com
aimar.com
aranciarossa.com
artesano.com
avodessa.com
channellospizza.com
decolaar.com
directacn.com
disnaylatino.com
dreamcatcherbluegrass.com
ecletico.com
freelogomakr.com
gkassesusa.com
haemoorriden.de
hitachiserviceeu.com
hottersusa.com
kachin.com
kaksus.com
lastimosa.com
lesgrandscrus.com
lifepiintspanel.com
liuzmo.com
lockandlockusa.com
luchino.com
lumosa.com
luthtansa.com
macrocar.com
metissa.com
nataliescandyjar.com
nicksfightclub.com
noolhar.com
ordenadoressobremesa.com
pointclickcareus.com
praino.com
pricerewardsvisa.com
privateusa.com
radiantlightsolar.com
scuderiatopolino.com
sedico.com
senecesitaactoresporno.com
shimmerlightsolar.com
solipsus.com
squartetrade.com
ssp36.cc
tdameriatrade.com
trabajodecasa.com
vasegod.co
villachessa.com
wilhelmus.com

Other certificates including the domain name artesano.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for artesano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMwjCCC6qgAwIBAgISA9mpnFpA3q6X0CVTSwptUfM5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTYyMTQ2MDBaFw0yNDAyMTQyMTQ1NTlaMBcxFTATBgNVBAMT
DGFydGVzYW5vLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANjr
4Et5+3duyCN55xsu3ij09XEJDorOP7wvOFhspt6qOfXeZF+hP7SRUq4LTV8E6PqK
5xahxAajSxhCxNCPICnwlK6hiM2Ca+cGAsQATmi+QP9DbmGNyLJIapbtZ6B2Iyfg
qeRXtO9JE5neGRNSaY1XEsiL5R+9X7PiXmIoiJwArMsn/6XNf6djcwzhVJKbXMVx
VzBjBDIBfTuHEMArdVciklTv9IADEUmwU3z9LlHbiOp+CDvxNpaetCX0Nl1auE/e
XV1jmfmw3++bAlT4rAB8fnCF42EaZuBgo96TwdFpomtgNb/7SO9Q32BG0VfS1J/3
JmgsyGjtBy7yKeMx6uWW6CCR06iUzFagT+rDtjMlbYXLoNc8ag84x9x7BiK2q+YM
kDcb9TbiDaz6jVUy0u9IpXuz4vYZKdir5x7m4Sl92jfS+Jm7jDxM9MpxX0PzofTL
pyrlu6+wpu1/dwC0HQEMBrmaRdZyt1yN1MWUnsNJG75H7L799diYEsxsRCmmt5x7
8Hh+/o/0Fpb8QUS3DLGdR76+A1RD9CdM7ddPGYsBDFAfnj7WVGYF/6t6V8EPFGSn
0pD9ES+bqmBC+81VfyNIczkKqqVlG3tYTKyV6Zgw/pdL5iFcrKaApWG+zUJuz4JC
XMDxlZoioqDGn/vYAhkW9D4akKBlgqRIkXaPpTINAgMBAAGjggjrMIII5zAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFC9/YP/VhcFXF4HzFe7d0N5tr+BwMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIG8wYDVR0RBIIG6jCCBuaCECouYWdyb3RveGljby5j
b22CCyouYWltYXIuY29tghIqLmFyYW5jaWFyb3NzYS5jb22CDiouYXJ0ZXNhbm8u
Y29tgg4qLmF2b2Rlc3NhLmNvbYIVKi5jaGFubmVsbG9zcGl6emEuY29tgg4qLmRl
Y29sYWFyLmNvbYIPKi5kaXJlY3RhY24uY29tghIqLmRpc25heWxhdGluby5jb22C
GyouZHJlYW1jYXRjaGVyYmx1ZWdyYXNzLmNvbYIOKi5lY2xldGljby5jb22CEiou
ZnJlZWxvZ29tYWtyLmNvbYIQKi5na2Fzc2VzdXNhLmNvbYIRKi5oYWVtb29ycmlk
ZW4uZGWCFiouaGl0YWNoaXNlcnZpY2VldS5jb22CECouaG90dGVyc3VzYS5jb22C
DCoua2FjaGluLmNvbYIMKi5rYWtzdXMuY29tgg8qLmxhc3RpbW9zYS5jb22CEyou
bGVzZ3JhbmRzY3J1cy5jb22CFSoubGlmZXBpaW50c3BhbmVsLmNvbYIMKi5saXV6
bW8uY29tghQqLmxvY2thbmRsb2NrdXNhLmNvbYINKi5sdWNoaW5vLmNvbYIMKi5s
dW1vc2EuY29tgg8qLmx1dGh0YW5zYS5jb22CDioubWFjcm9jYXIuY29tgg0qLm1l
dGlzc2EuY29tghYqLm5hdGFsaWVzY2FuZHlqYXIuY29tghQqLm5pY2tzZmlnaHRj
bHViLmNvbYINKi5ub29saGFyLmNvbYIaKi5vcmRlbmFkb3Jlc3NvYnJlbWVzYS5j
b22CFioucG9pbnRjbGlja2NhcmV1cy5jb22CDCoucHJhaW5vLmNvbYIWKi5wcmlj
ZXJld2FyZHN2aXNhLmNvbYIQKi5wcml2YXRldXNhLmNvbYIXKi5yYWRpYW50bGln
aHRzb2xhci5jb22CFiouc2N1ZGVyaWF0b3BvbGluby5jb22CDCouc2VkaWNvLmNv
bYIcKi5zZW5lY2VzaXRhYWN0b3Jlc3Bvcm5vLmNvbYIXKi5zaGltbWVybGlnaHRz
b2xhci5jb22CDiouc29saXBzdXMuY29tghIqLnNxdWFydGV0cmFkZS5jb22CCiou
c3NwMzYuY2OCEyoudGRhbWVyaWF0cmFkZS5jb22CEyoudHJhYmFqb2RlY2FzYS5j
b22CDCoudmFzZWdvZC5jb4IRKi52aWxsYWNoZXNzYS5jb22CDyoud2lsaGVsbXVz
LmNvbYIOYWdyb3RveGljby5jb22CCWFpbWFyLmNvbYIQYXJhbmNpYXJvc3NhLmNv
bYIMYXJ0ZXNhbm8uY29tggxhdm9kZXNzYS5jb22CE2NoYW5uZWxsb3NwaXp6YS5j
b22CDGRlY29sYWFyLmNvbYINZGlyZWN0YWNuLmNvbYIQZGlzbmF5bGF0aW5vLmNv
bYIZZHJlYW1jYXRjaGVyYmx1ZWdyYXNzLmNvbYIMZWNsZXRpY28uY29tghBmcmVl
bG9nb21ha3IuY29tgg5na2Fzc2VzdXNhLmNvbYIPaGFlbW9vcnJpZGVuLmRlghRo
aXRhY2hpc2VydmljZWV1LmNvbYIOaG90dGVyc3VzYS5jb22CCmthY2hpbi5jb22C
Cmtha3N1cy5jb22CDWxhc3RpbW9zYS5jb22CEWxlc2dyYW5kc2NydXMuY29tghNs
aWZlcGlpbnRzcGFuZWwuY29tggpsaXV6bW8uY29tghJsb2NrYW5kbG9ja3VzYS5j
b22CC2x1Y2hpbm8uY29tggpsdW1vc2EuY29tgg1sdXRodGFuc2EuY29tggxtYWNy
b2Nhci5jb22CC21ldGlzc2EuY29tghRuYXRhbGllc2NhbmR5amFyLmNvbYISbmlj
a3NmaWdodGNsdWIuY29tggtub29saGFyLmNvbYIYb3JkZW5hZG9yZXNzb2JyZW1l
c2EuY29tghRwb2ludGNsaWNrY2FyZXVzLmNvbYIKcHJhaW5vLmNvbYIUcHJpY2Vy
ZXdhcmRzdmlzYS5jb22CDnByaXZhdGV1c2EuY29tghVyYWRpYW50bGlnaHRzb2xh
ci5jb22CFHNjdWRlcmlhdG9wb2xpbm8uY29tggpzZWRpY28uY29tghpzZW5lY2Vz
aXRhYWN0b3Jlc3Bvcm5vLmNvbYIVc2hpbW1lcmxpZ2h0c29sYXIuY29tggxzb2xp
cHN1cy5jb22CEHNxdWFydGV0cmFkZS5jb22CCHNzcDM2LmNjghF0ZGFtZXJpYXRy
YWRlLmNvbYIRdHJhYmFqb2RlY2FzYS5jb22CCnZhc2Vnb2QuY2+CD3ZpbGxhY2hl
c3NhLmNvbYINd2lsaGVsbXVzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMG
CisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABi9pQCysAAAQDAEcwRQIgag1wJ0c3SJBB6rtEeUsMkG4IRtgHFCgl
favLuEzoMXMCIQCJEQN1y/SnwvfrsP3c2+f73gTiaC17MRQ7IOEClNogCQB1ADtT
d3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi9pQCzAAAAQDAEYwRAIg
O8GucCJdnDBEWBlLg1oY4Y9h65yjmWX8vwYjLwXWtOgCIB6ILgHbE05A2zwmzwss
DfJvwH5+ZkxLUCBOqwaaISVOMA0GCSqGSIb3DQEBCwUAA4IBAQCACtMAgA6CSMW5
quE00SxnPmfEpUQfHJN1xWxCmStTmkEt36tSSupRGl247HkfbYxA0VsqvHAZ5aN4
NsWPMvDXBBeazHwpOEX2ka787dBn0jaofjuA1xgfRWg4RxIvhyqFeRyf0Y51M6gp
QPIus1TfAXdtPmBDp0y5DaI2eaKdoo/hD9zQIbdC64PxQMJer3cxWd4pvFMx8xPn
cTuVly82sF40njeosZK33ojSpq314Sygq19YCWhEpOiah8Z/FtkSSYyCd0Wn349V
qNtXqNSuqoMv0baqoA75VYdPR64Q6LCu0q4OmZYHtoY39DRhxz34+7nI4Wsd4coL
D+vfbvIm
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2OvgS3n7d27II3nnGy7e
KPT1cQkOis4/vC84WGym3qo59d5kX6E/tJFSrgtNXwTo+ornFqHEBqNLGELE0I8g
KfCUrqGIzYJr5wYCxABOaL5A/0NuYY3Iskhqlu1noHYjJ+Cp5Fe070kTmd4ZE1Jp
jVcSyIvlH71fs+JeYiiInACsyyf/pc1/p2NzDOFUkptcxXFXMGMEMgF9O4cQwCt1
VyKSVO/0gAMRSbBTfP0uUduI6n4IO/E2lp60JfQ2XVq4T95dXWOZ+bDf75sCVPis
AHx+cIXjYRpm4GCj3pPB0Wmia2A1v/tI71DfYEbRV9LUn/cmaCzIaO0HLvIp4zHq
5ZboIJHTqJTMVqBP6sO2MyVthcug1zxqDzjH3HsGIrar5gyQNxv1NuINrPqNVTLS
70ile7Pi9hkp2KvnHubhKX3aN9L4mbuMPEz0ynFfQ/Oh9MunKuW7r7Cm7X93ALQd
AQwGuZpF1nK3XI3UxZSew0kbvkfsvv312JgSzGxEKaa3nHvweH7+j/QWlvxBRLcM
sZ1Hvr4DVEP0J0zt108ZiwEMUB+ePtZUZgX/q3pXwQ8UZKfSkP0RL5uqYEL7zVV/
I0hzOQqqpWUbe1hMrJXpmDD+l0vmIVyspoClYb7NQm7PgkJcwPGVmiKioMaf+9gC
GRb0PhqQoGWCpEiRdo+lMg0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335403582777278352198807941039437793850169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 21:46:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 21:45:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'artesano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884962066907145405233822414613759312650577917939295949996479032007691528999838058995608920445457708001033006481160949306730853674662599307974646477610215636913205386388051448263465023911519280413043893836391928438087149847888766973969594226554930305367608932285079463002295311451426772253179677622929602486229753288303007958359288962362117253146994314297733684062833979738874252681842397329913984003126825382580968522759904429538974184481255829655806303409399336754986908409168861318621907764319606953687681907756650108870262006796712016551381794030206996011339929183720590565769600346041157168309070660032051438426179398351885674249485734024557505053280374378240837558098721903707962299113016066606038126930428921382655792197232835430568666856158798792462626792849575458359592701134006713027308930030962661036931025823496604634696375529955302077103492637406748453459614907192851825517458257734878312251538527563130268167837304075390963818152687061261583399219898612928878353239457257973821397501512537527238338851537661956491528149057809375653518202835911087969626844780705945739385915567679826803455933718240897301416637500538242644333925102386339892524599211080133534037620991386148900239969136718652692525404486471759234205037069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f7f60ffd585c1571781f315eeddd0de6dafe070
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1770 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agrotoxico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aimar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aranciarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avodessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channellospizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decolaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directacn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disnaylatino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamcatcherbluegrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecletico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freelogomakr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gkassesusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemoorriden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitachiserviceeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hottersusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kachin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaksus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastimosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesgrandscrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifepiintspanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liuzmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lockandlockusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luthtansa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macrocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nataliescandyjar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicksfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noolhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ordenadoressobremesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pointclickcareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.praino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pricerewardsvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privateusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiantlightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scuderiatopolino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sedico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senecesitaactoresporno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shimmerlightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solipsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squartetrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssp36.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdameriatrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trabajodecasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vasegod.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villachessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilhelmus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrotoxico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aranciarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artesano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avodessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channellospizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decolaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directacn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disnaylatino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamcatcherbluegrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecletico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelogomakr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gkassesusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemoorriden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachiserviceeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hottersusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kachin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaksus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastimosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesgrandscrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifepiintspanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuzmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockandlockusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luthtansa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metissa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nataliescandyjar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicksfightclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noolhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordenadoressobremesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointclickcareus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricerewardsvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiantlightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scuderiatopolino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senecesitaactoresporno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shimmerlightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solipsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squartetrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp36.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdameriatrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trabajodecasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasegod.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villachessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilhelmus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bda500b2b000004030047304502206a0d70274737489041eabb44794b0c906e0846d8071428257dabcbb84ce8317302210089110375cbf4a7c2f7ebb0fddcdbe7fbde04e2682d7b31143b20e10294da20090075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bda500b30000004030046304402203bc1ae70225d9c304458194b835a18e18f61eb9ca39965fcbf06232f05d6b4e802201e882e01db134e40db3c26cf0b2c0df26fc07e7e664c4b50204eab069a21254e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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