ohmarisha.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9a:8f:26:77:bd:2b:90:f8:fd:6b:6f:b4:1a:9a:ca:53:9b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ohmarisha.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9a:8f:26:77:bd:2b:90:f8:fd:6b:6f:b4:1a:9a:ca:53:9b
Serial Number (int): 401042907572137725919437154329193947485083
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:93:3d:1b:08:6c:c1:4c:d2:92:c5:bf:e7:15:4f:4c:ad:d5:35:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:ec:c8:ab:8b:68:2b:2b:bb:fb:95:43:57:ae:bf:d9:74:b5:a8:41
Fingerprint (sha256): 7f:09:01:17:4c:cc:8a:1e:ff:f8:79:8f:8c:18:be:83:8c:f1:d2:ec:c1:0f:a6:29:24:61:07:77:6e:e3:8a:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ohmarisha.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ohmarisha.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.affinity-crictracker.com
*.anncestory.com
*.brittamiron.com
*.bsonlyapparel.com
*.callool.com
*.capstonelibrary.com
*.cccamfree.com
*.cetesdirwcro.com
*.chicagotribuje.com
*.clensingcleaner.com
*.deepstater.com
*.driveyouforward.com
*.easycodesolution.com
*.excams-24.com
*.excercisefriends.com
*.filepirduit.com
*.fragnance.net
*.hermann.tv
*.hoki138.me
*.httasianovel.com
*.iget-intopc.com
*.javnopreduzecerbije.com
*.kurumbavillageresort.com
*.laboratoriosdelamixteca.com
*.lohannybrando.com
*.monstreem.com
*.motosikletparcalari.net
*.myprofootballhofphotos.com
*.nagualeb.com
*.nongmoorganicrestaurants.com
*.ohmarisha.com
*.petitdomainedelagare.com
*.preppypaleo.com
*.pursuepkg.com
*.qualiterics.com
*.rhondaking.com
*.securitycontractor.com
*.sejie10.buzz
*.sjasiway.com
*.skngmytng.com
*.sofialmediagirls.com
*.stewartsarchery.net
*.tapractica.com
*.technetworkingsolution.com
*.thesecondsite.com
*.ultimat-champions.com
*.usa-auswandern.com
*.webscapeworldwide.com
*.weedingcollectibles.com
*.wifisyncapp.com
affinity-crictracker.com
anncestory.com
brittamiron.com
bsonlyapparel.com
callool.com
capstonelibrary.com
cccamfree.com
cetesdirwcro.com
chicagotribuje.com
clensingcleaner.com
deepstater.com
driveyouforward.com
easycodesolution.com
excams-24.com
excercisefriends.com
filepirduit.com
fragnance.net
hermann.tv
hoki138.me
httasianovel.com
iget-intopc.com
javnopreduzecerbije.com
kurumbavillageresort.com
laboratoriosdelamixteca.com
lohannybrando.com
monstreem.com
motosikletparcalari.net
myprofootballhofphotos.com
nagualeb.com
nongmoorganicrestaurants.com
ohmarisha.com
petitdomainedelagare.com
preppypaleo.com
pursuepkg.com
qualiterics.com
rhondaking.com
securitycontractor.com
sejie10.buzz
sjasiway.com
skngmytng.com
sofialmediagirls.com
stewartsarchery.net
tapractica.com
technetworkingsolution.com
thesecondsite.com
ultimat-champions.com
usa-auswandern.com
webscapeworldwide.com
weedingcollectibles.com
wifisyncapp.com

Other certificates including the domain name ohmarisha.com

(limited to 100 certificates)
quickenloands.com
quickenloands.com
ohmarisha.com
ohmarisha.com

Certificate

The complete raw certificate details for ohmarisha.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN1jCCDL6gAwIBAgISBJqPJne9K5D4/WtvtBqaylObMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjgwNzE0MTRaFw0yNDAzMjcwNzE0MTNaMBgxFjAUBgNVBAMT
DW9obWFyaXNoYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCu
bqbrWgek123J4f2e4iE7vqIcD6yByrag/RdlLBBBtbKBOWYTARPSAhb6BIoDJEfi
xxxJuwCLH8VnJBYAOc8fHVi7MPA6a/0oq0PQLIpF3rlBmVwwrk2G1wjkB29QUTCn
ixI7K/jSPFkxeeG4WBgF4uUF0/vhe8US1Gbe9NLcgW29IQXXDkFlyQb3Bo+xnZK4
Wf3SWEfIoX42MTRLEFn5Kika6Aj6JpZ8uV+8jQwxc5/fz5lwFkuYhltOHT8Ll7QC
OoI4rE4XUlbzg1R4PULZqzMWrgLb6NbtCDC3KJrOnCp3mcdYZcyrOKsUfYcczQuo
d0E+0tLSiahawyAyGCeNKlurft69K3CoYHGlEl9JmDF6fXgIoRl770GxGK+QP90E
DDGVAIjz3FX4deUukmciAvHP5u1IplqDl5Q+tNUA/k/AP894kTyNDzIIJbiD7sII
f7FLIKQ2KI1SZjr7EUl7n2Pifo848zBopgvbcMG/DtB3t0aSzAzf+X/DbLHyaske
wkyfLm0k1mktOmjGqhaETJQJTpUTEzAF+VoJ9ZZipau2Q4fxJ9uIurTkxPV+O6De
MiUf1sBCvaqkIVNTgAWuuYB8cKsLT8JhOiT+tZlxTn1/rdkdYpde/v2uw/0Zpv/P
SlgaS6iqmt37Gc4sKIJd1cK+7p1E7W0B7m0s00ivZwIDAQABo4IJ/jCCCfowDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBQKkz0bCGzBTNKSxb/nFU9MrdU1BzAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCCAcGA1UdEQSCB/4wggf6ghoqLmFmZmluaXR5LWNy
aWN0cmFja2VyLmNvbYIQKi5hbm5jZXN0b3J5LmNvbYIRKi5icml0dGFtaXJvbi5j
b22CEyouYnNvbmx5YXBwYXJlbC5jb22CDSouY2FsbG9vbC5jb22CFSouY2Fwc3Rv
bmVsaWJyYXJ5LmNvbYIPKi5jY2NhbWZyZWUuY29tghIqLmNldGVzZGlyd2Nyby5j
b22CFCouY2hpY2Fnb3RyaWJ1amUuY29tghUqLmNsZW5zaW5nY2xlYW5lci5jb22C
ECouZGVlcHN0YXRlci5jb22CFSouZHJpdmV5b3Vmb3J3YXJkLmNvbYIWKi5lYXN5
Y29kZXNvbHV0aW9uLmNvbYIPKi5leGNhbXMtMjQuY29tghYqLmV4Y2VyY2lzZWZy
aWVuZHMuY29tghEqLmZpbGVwaXJkdWl0LmNvbYIPKi5mcmFnbmFuY2UubmV0ggwq
Lmhlcm1hbm4udHaCDCouaG9raTEzOC5tZYISKi5odHRhc2lhbm92ZWwuY29tghEq
LmlnZXQtaW50b3BjLmNvbYIZKi5qYXZub3ByZWR1emVjZXJiaWplLmNvbYIaKi5r
dXJ1bWJhdmlsbGFnZXJlc29ydC5jb22CHSoubGFib3JhdG9yaW9zZGVsYW1peHRl
Y2EuY29tghMqLmxvaGFubnlicmFuZG8uY29tgg8qLm1vbnN0cmVlbS5jb22CGSou
bW90b3Npa2xldHBhcmNhbGFyaS5uZXSCHCoubXlwcm9mb290YmFsbGhvZnBob3Rv
cy5jb22CDioubmFndWFsZWIuY29tgh4qLm5vbmdtb29yZ2FuaWNyZXN0YXVyYW50
cy5jb22CDyoub2htYXJpc2hhLmNvbYIaKi5wZXRpdGRvbWFpbmVkZWxhZ2FyZS5j
b22CESoucHJlcHB5cGFsZW8uY29tgg8qLnB1cnN1ZXBrZy5jb22CESoucXVhbGl0
ZXJpY3MuY29tghAqLnJob25kYWtpbmcuY29tghgqLnNlY3VyaXR5Y29udHJhY3Rv
ci5jb22CDiouc2VqaWUxMC5idXp6gg4qLnNqYXNpd2F5LmNvbYIPKi5za25nbXl0
bmcuY29tghYqLnNvZmlhbG1lZGlhZ2lybHMuY29tghUqLnN0ZXdhcnRzYXJjaGVy
eS5uZXSCECoudGFwcmFjdGljYS5jb22CHCoudGVjaG5ldHdvcmtpbmdzb2x1dGlv
bi5jb22CEyoudGhlc2Vjb25kc2l0ZS5jb22CFyoudWx0aW1hdC1jaGFtcGlvbnMu
Y29tghQqLnVzYS1hdXN3YW5kZXJuLmNvbYIXKi53ZWJzY2FwZXdvcmxkd2lkZS5j
b22CGSoud2VlZGluZ2NvbGxlY3RpYmxlcy5jb22CESoud2lmaXN5bmNhcHAuY29t
ghhhZmZpbml0eS1jcmljdHJhY2tlci5jb22CDmFubmNlc3RvcnkuY29tgg9icml0
dGFtaXJvbi5jb22CEWJzb25seWFwcGFyZWwuY29tggtjYWxsb29sLmNvbYITY2Fw
c3RvbmVsaWJyYXJ5LmNvbYINY2NjYW1mcmVlLmNvbYIQY2V0ZXNkaXJ3Y3JvLmNv
bYISY2hpY2Fnb3RyaWJ1amUuY29tghNjbGVuc2luZ2NsZWFuZXIuY29tgg5kZWVw
c3RhdGVyLmNvbYITZHJpdmV5b3Vmb3J3YXJkLmNvbYIUZWFzeWNvZGVzb2x1dGlv
bi5jb22CDWV4Y2Ftcy0yNC5jb22CFGV4Y2VyY2lzZWZyaWVuZHMuY29tgg9maWxl
cGlyZHVpdC5jb22CDWZyYWduYW5jZS5uZXSCCmhlcm1hbm4udHaCCmhva2kxMzgu
bWWCEGh0dGFzaWFub3ZlbC5jb22CD2lnZXQtaW50b3BjLmNvbYIXamF2bm9wcmVk
dXplY2VyYmlqZS5jb22CGGt1cnVtYmF2aWxsYWdlcmVzb3J0LmNvbYIbbGFib3Jh
dG9yaW9zZGVsYW1peHRlY2EuY29tghFsb2hhbm55YnJhbmRvLmNvbYINbW9uc3Ry
ZWVtLmNvbYIXbW90b3Npa2xldHBhcmNhbGFyaS5uZXSCGm15cHJvZm9vdGJhbGxo
b2ZwaG90b3MuY29tggxuYWd1YWxlYi5jb22CHG5vbmdtb29yZ2FuaWNyZXN0YXVy
YW50cy5jb22CDW9obWFyaXNoYS5jb22CGHBldGl0ZG9tYWluZWRlbGFnYXJlLmNv
bYIPcHJlcHB5cGFsZW8uY29tgg1wdXJzdWVwa2cuY29tgg9xdWFsaXRlcmljcy5j
b22CDnJob25kYWtpbmcuY29tghZzZWN1cml0eWNvbnRyYWN0b3IuY29tggxzZWpp
ZTEwLmJ1enqCDHNqYXNpd2F5LmNvbYINc2tuZ215dG5nLmNvbYIUc29maWFsbWVk
aWFnaXJscy5jb22CE3N0ZXdhcnRzYXJjaGVyeS5uZXSCDnRhcHJhY3RpY2EuY29t
ghp0ZWNobmV0d29ya2luZ3NvbHV0aW9uLmNvbYIRdGhlc2Vjb25kc2l0ZS5jb22C
FXVsdGltYXQtY2hhbXBpb25zLmNvbYISdXNhLWF1c3dhbmRlcm4uY29tghV3ZWJz
Y2FwZXdvcmxkd2lkZS5jb22CF3dlZWRpbmdjb2xsZWN0aWJsZXMuY29tgg93aWZp
c3luY2FwcC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggECBgorBgEEAdZ5AgQC
BIHzBIHwAO4AdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYyv
fQLiAAAEAwBGMEQCIGoGGRv50UvZBmZ7qovN42rTmfEnFjxyA0fz/iwFILkOAiBj
RL6yko+NW058K4Mc6Y/htYPGeTl9TXCDgHkYkRPvygB1AEiw42vapkc0D+VqAvqd
MOscUgHLVt0sgdm7v6s52IRzAAABjK99BMwAAAQDAEYwRAIgCe5k5W54fmsMGAGo
4D7LVVbnzI3iWlf/Tr/R7mQyElMCIHAOn34Wsm+JUs06tZW64tlx+hd7utdWcLmp
Vcp+hZLlMA0GCSqGSIb3DQEBCwUAA4IBAQCNhrlx59CJQVDv0k+hzK2iTV4QEPHz
WMXla0gBrrA9C6KROANPapqQC0Dc6UlhboO9W4iplPdO6Mf0H44yDQnDXiOQATOs
spz+35MKJYO6gKCAsKQD5g6Cw2CDwyGK3v15dhyr1+Vhj5ZuKN96q+l1XkS8WYd/
9N4FuVPpoC+e+U3LPBa/8mGRCp3/1/nh10QPQ8V7V7k6o7Y3O+68UXQGQiXyOCtx
JnLCx4RjI7fTTYyLUXrOguZFxNcbeuGw3UgurR+1HOXFyxyPMFd22+EEnLZA284L
wRVpihQjCpyzwZYapBUq6Ua+mmTGKbvxRbQkgO83BNANN/TvVhwHg6Ta
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401042907572137725919437154329193947485083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 07:14:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 07:14:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ohmarisha.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711621430696538791249557210449492599189324249467455014697578255315091586380627693327018129804135080125895738410048180265743184480564991675346133573127387425294594865704795307184869221062274221623836691370625158822420482249995397997015360498069542289725227863901442789390079186512954464909255328323563913208571876129876750146778987853493370750362818118216696200638094057704394730014110105160144023927724024616553935260501291945090125892133006204084383429184513675805523021448694674602568338628361061221787350982536813246607852287294004574412531516905444890015494107943760956259088075593364139752284550673013706941044197179525181029433685274994639581902128374193251386751751542531614081004880748085573903207153061875327407440668152219884048107155495277699213218833964147126806052469401159446553798518442260010140093661284553861484734056581778483156961359063391887853016533353425880231274007468029418963873979297497331792207066281701670248790081566724536569266140028374237053787154079266343219214508281402330989753077949289804435773057953487744145143092434213357667319470062570974770157794402187863013899348752758063425454101905680005462984696149508564151163963323012671778149817208730668630739412151486869113185018870110679612000874343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a933d1b086cc14cd292c5bfe7154f4cadd53507
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2046 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affinity-crictracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anncestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brittamiron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsonlyapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capstonelibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cccamfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cetesdirwcro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicagotribuje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clensingcleaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepstater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driveyouforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easycodesolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excams-24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excercisefriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filepirduit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fragnance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hermann.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoki138.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.httasianovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iget-intopc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javnopreduzecerbije.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurumbavillageresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laboratoriosdelamixteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lohannybrando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monstreem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motosikletparcalari.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myprofootballhofphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nagualeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nongmoorganicrestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohmarisha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petitdomainedelagare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preppypaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pursuepkg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualiterics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhondaking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitycontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sejie10.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjasiway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skngmytng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sofialmediagirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stewartsarchery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapractica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technetworkingsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesecondsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultimat-champions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usa-auswandern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webscapeworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weedingcollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wifisyncapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinity-crictracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anncestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brittamiron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsonlyapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capstonelibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccamfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetesdirwcro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagotribuje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clensingcleaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepstater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driveyouforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easycodesolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excams-24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excercisefriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filepirduit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fragnance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermann.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoki138.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httasianovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iget-intopc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javnopreduzecerbije.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurumbavillageresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laboratoriosdelamixteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lohannybrando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monstreem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motosikletparcalari.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myprofootballhofphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagualeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nongmoorganicrestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohmarisha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petitdomainedelagare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preppypaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pursuepkg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualiterics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhondaking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitycontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sejie10.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjasiway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skngmytng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofialmediagirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartsarchery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapractica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technetworkingsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecondsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimat-champions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa-auswandern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webscapeworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedingcollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifisyncapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018caf7d02e2000004030046304402206a06191bf9d14bd906667baa8bcde36ad399f127163c720347f3fe2c0520b90e02206344beb2928f8d5b4e7c2b831ce98fe1b583c679397d4d70838079189113efca00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018caf7d04cc0000040300463044022009ee64e56e787e6b0c1801a8e03ecb5556e7cc8de25a57ff4ebfd1ee643212530220700e9f7e16b26f8952cd3ab595bae2d971fa177bbad75670b9a955ca7e8592e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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