news.so

Issued by R3

About this certificate

This digital certificate with serial number 03:ec:10:4e:28:84:2f:cf:43:60:24:e3:9a:7f:50:d6:38:ab was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=news.so

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:10:4e:28:84:2f:cf:43:60:24:e3:9a:7f:50:d6:38:ab
Serial Number (int): 341665169857479039646977665041299563493547
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:b2:78:05:e3:e6:00:44:e8:ad:da:de:11:05:2a:26:70:9d:64:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:80:fd:08:70:48:f1:bd:a5:b1:39:8d:29:e2:1b:ba:d0:d6:95:6b
Fingerprint (sha256): 80:a6:34:d8:70:4f:7a:33:70:1a:63:a7:25:1c:e5:12:8e:08:21:47:54:c4:f0:eb:15:17:4a:37:a2:c2:e0:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate news.so

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.so

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1dumb.com
*.796k.com
*.animebalkan.co
*.arronrents.com
*.artforgallery.com
*.betterparisphotos.com
*.boluomi.cc
*.capitalmetro.org
*.carcarnyc.com
*.cedarscabins.com
*.chateauitalia.com
*.chatosfera.com
*.christophersinn.net
*.coastalexterminating.com
*.evdmusic.com
*.fashionforwardforcharity.com
*.fclivetv.com
*.firstcupcafetx.com
*.foxyntax.com
*.garagedoorsnewhaven.com
*.gentransmx.com
*.hantco.com
*.idrojapan.org
*.jokerlu6.info
*.kingschat.at
*.kolahghermezi.com
*.mad-cuban-cafe.com
*.massbikepike.org
*.mitakoblog.com
*.news.so
*.ntgumruk.com
*.ourguarantees.com
*.rutgerssoftballcamps.com
*.saldodrugs.com
*.shirturl.at
*.slashweb.org
*.sushi.de
*.theeverydaywatch.com
*.topzac.com
*.tree.markets
*.valorlegends.com
*.vniran.com
*.webmasteriniz.com
*.welyawel.com
*.workine.com
*.ycwalkman.com
*.ypp1.xyz
*.yrxg.com
*.zdmx.at
*.znye.com
1dumb.com
796k.com
animebalkan.co
arronrents.com
artforgallery.com
betterparisphotos.com
boluomi.cc
capitalmetro.org
carcarnyc.com
cedarscabins.com
chateauitalia.com
chatosfera.com
christophersinn.net
coastalexterminating.com
evdmusic.com
fashionforwardforcharity.com
fclivetv.com
firstcupcafetx.com
foxyntax.com
garagedoorsnewhaven.com
gentransmx.com
hantco.com
idrojapan.org
jokerlu6.info
kingschat.at
kolahghermezi.com
mad-cuban-cafe.com
massbikepike.org
mitakoblog.com
news.so
ntgumruk.com
ourguarantees.com
rutgerssoftballcamps.com
saldodrugs.com
shirturl.at
slashweb.org
sushi.de
theeverydaywatch.com
topzac.com
tree.markets
valorlegends.com
vniran.com
webmasteriniz.com
welyawel.com
workine.com
ycwalkman.com
ypp1.xyz
yrxg.com
zdmx.at
znye.com

Other certificates including the domain name news.so

(limited to 100 certificates)
belinvestbank.com
news.so
news.so
news.so
news.so
belinvestbank.com
news.so
belinvestbank.com

Certificate

The complete raw certificate details for news.so in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMfTCCC2WgAwIBAgISA+wQTiiEL89DYCTjmn9Q1jirMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDMxNzQwMDNaFw0yNDA0MDIxNzQwMDJaMBIxEDAOBgNVBAMT
B25ld3Muc28wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDbouaKb0mU
g5nEo9gUsw6iE7ddfiPwypg7Ks82bdmRmjIbHguZ2AZZZ5P+LaBAjEz69BhohH2a
/KIW0JtX/Q4/efYmQY4jcpfU0JY97lXJpBpWL9Sl8bUWIscxwWrVzqAyUmgWz2gz
+cWH2508ZH1nGM2STJjX++fL3C+xr64TCXbU90KyTjdpWMkg/VKX55zkrH7I6863
1RPvzABvOy+op0vY2PKg4/Nze+QodZMGhKMH3LHuUqP3TA1mLHdDUoxJm1Fcl00Y
hEpr9zVMduUnrAkYyQnEEwbAXWbn5puUyuyerfItUu84tbcXxRtKJhxZqteepoCS
8nUyDwa8r17hpkXrV3J0wk6/XDyaelV+V52TaAO9XAgeLAmyk3oEYg/gSgVJY5nM
F6MVAjw0maBtJ0leQ3bwdE9iwB05ExTAwGDUEtO39FKRQ2NEWr7CH6k+oLL+jdVQ
OxmyijlVGf3fT7O37QU3iYezOx3w3/oSJjPLzCs6KdyeaAj5pqb6rOnlDWSwQaEt
rbPBxgvsP0oNyv3zcvtwWhspvFZK4Wynk3HI7SAPCWJ2lgzwyWsJfEiKtmPpMdxK
NLboF32BnL0Uxw8IwqHBo+FiMZRDXqJpCuY+au5FM6vfTtx2TDkRxIx0ZNzEAaj3
dLHIJyQVHdcgaVhMqUuOnUfPuEz4TFlVBQIDAQABo4IIqzCCCKcwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBTXsngF4+YAROit2t4RBSomcJ1kIzAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCBrMGA1UdEQSCBqowggamggsqLjFkdW1iLmNvbYIKKi43OTZr
LmNvbYIQKi5hbmltZWJhbGthbi5jb4IQKi5hcnJvbnJlbnRzLmNvbYITKi5hcnRm
b3JnYWxsZXJ5LmNvbYIXKi5iZXR0ZXJwYXJpc3Bob3Rvcy5jb22CDCouYm9sdW9t
aS5jY4ISKi5jYXBpdGFsbWV0cm8ub3Jngg8qLmNhcmNhcm55Yy5jb22CEiouY2Vk
YXJzY2FiaW5zLmNvbYITKi5jaGF0ZWF1aXRhbGlhLmNvbYIQKi5jaGF0b3NmZXJh
LmNvbYIVKi5jaHJpc3RvcGhlcnNpbm4ubmV0ghoqLmNvYXN0YWxleHRlcm1pbmF0
aW5nLmNvbYIOKi5ldmRtdXNpYy5jb22CHiouZmFzaGlvbmZvcndhcmRmb3JjaGFy
aXR5LmNvbYIOKi5mY2xpdmV0di5jb22CFCouZmlyc3RjdXBjYWZldHguY29tgg4q
LmZveHludGF4LmNvbYIZKi5nYXJhZ2Vkb29yc25ld2hhdmVuLmNvbYIQKi5nZW50
cmFuc214LmNvbYIMKi5oYW50Y28uY29tgg8qLmlkcm9qYXBhbi5vcmeCDyouam9r
ZXJsdTYuaW5mb4IOKi5raW5nc2NoYXQuYXSCEyoua29sYWhnaGVybWV6aS5jb22C
FCoubWFkLWN1YmFuLWNhZmUuY29tghIqLm1hc3NiaWtlcGlrZS5vcmeCECoubWl0
YWtvYmxvZy5jb22CCSoubmV3cy5zb4IOKi5udGd1bXJ1ay5jb22CEyoub3VyZ3Vh
cmFudGVlcy5jb22CGioucnV0Z2Vyc3NvZnRiYWxsY2FtcHMuY29tghAqLnNhbGRv
ZHJ1Z3MuY29tgg0qLnNoaXJ0dXJsLmF0gg4qLnNsYXNod2ViLm9yZ4IKKi5zdXNo
aS5kZYIWKi50aGVldmVyeWRheXdhdGNoLmNvbYIMKi50b3B6YWMuY29tgg4qLnRy
ZWUubWFya2V0c4ISKi52YWxvcmxlZ2VuZHMuY29tggwqLnZuaXJhbi5jb22CEyou
d2VibWFzdGVyaW5pei5jb22CDioud2VseWF3ZWwuY29tgg0qLndvcmtpbmUuY29t
gg8qLnljd2Fsa21hbi5jb22CCioueXBwMS54eXqCCioueXJ4Zy5jb22CCSouemRt
eC5hdIIKKi56bnllLmNvbYIJMWR1bWIuY29tggg3OTZrLmNvbYIOYW5pbWViYWxr
YW4uY2+CDmFycm9ucmVudHMuY29tghFhcnRmb3JnYWxsZXJ5LmNvbYIVYmV0dGVy
cGFyaXNwaG90b3MuY29tggpib2x1b21pLmNjghBjYXBpdGFsbWV0cm8ub3Jngg1j
YXJjYXJueWMuY29tghBjZWRhcnNjYWJpbnMuY29tghFjaGF0ZWF1aXRhbGlhLmNv
bYIOY2hhdG9zZmVyYS5jb22CE2NocmlzdG9waGVyc2lubi5uZXSCGGNvYXN0YWxl
eHRlcm1pbmF0aW5nLmNvbYIMZXZkbXVzaWMuY29tghxmYXNoaW9uZm9yd2FyZGZv
cmNoYXJpdHkuY29tggxmY2xpdmV0di5jb22CEmZpcnN0Y3VwY2FmZXR4LmNvbYIM
Zm94eW50YXguY29tghdnYXJhZ2Vkb29yc25ld2hhdmVuLmNvbYIOZ2VudHJhbnNt
eC5jb22CCmhhbnRjby5jb22CDWlkcm9qYXBhbi5vcmeCDWpva2VybHU2LmluZm+C
DGtpbmdzY2hhdC5hdIIRa29sYWhnaGVybWV6aS5jb22CEm1hZC1jdWJhbi1jYWZl
LmNvbYIQbWFzc2Jpa2VwaWtlLm9yZ4IObWl0YWtvYmxvZy5jb22CB25ld3Muc2+C
DG50Z3VtcnVrLmNvbYIRb3VyZ3VhcmFudGVlcy5jb22CGHJ1dGdlcnNzb2Z0YmFs
bGNhbXBzLmNvbYIOc2FsZG9kcnVncy5jb22CC3NoaXJ0dXJsLmF0ggxzbGFzaHdl
Yi5vcmeCCHN1c2hpLmRlghR0aGVldmVyeWRheXdhdGNoLmNvbYIKdG9wemFjLmNv
bYIMdHJlZS5tYXJrZXRzghB2YWxvcmxlZ2VuZHMuY29tggp2bmlyYW4uY29tghF3
ZWJtYXN0ZXJpbml6LmNvbYIMd2VseWF3ZWwuY29tggt3b3JraW5lLmNvbYINeWN3
YWxrbWFuLmNvbYIIeXBwMS54eXqCCHlyeGcuY29tggd6ZG14LmF0ggh6bnllLmNv
bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2
ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjNCgHNMAAAQDAEcw
RQIgGLJ3MIQ7FzbfrhtTO4TuPPqTVcHbjlcP5lapjkVuxH8CIQDIKKxjXbzkmRdj
awJrmmbm1uBFZl8faBuh8xeN+n3o/gB1AHb/iD8KtvuVUcJhzPWHujS0pM27Kdxo
Qgqf5mdMWjp0AAABjNCgHR8AAAQDAEYwRAIgCcdLsSNByXFMoo2J+sTBw5//rJRN
+iFqOQAAJYkefNYCIDtIvhPqQOWsNWsxi91rSWYnfvZwW38ZSpDGxXCbOxpmMA0G
CSqGSIb3DQEBCwUAA4IBAQAf6lRZ3bLmVgwcsCE0AKgUCzKima/adIK+FfqCAHif
HI9tAMXXkMb5sFXEVbsu3aLEQ8C5eKvcjpBzrYHyAT1FvhHfKrBNPB/Mt2olMqSL
eWMNsSzD1BtKjHWJYUJd1JL61EVGreqLZNfJWvdw4XOoYWPFzXaFH4TW/5JBiICN
IT9La+9mqdCHPoym7gCq1QPaRApsY1lktGsq04VqaJgGZHuHV2V5CFv1damshnld
qqjNN/4XdGU2RpLS4EzFurnvMDMuqRaHLonYQZHy9NOsKrX8xVjF1xU/8b5/5PPK
nkwOT7bkwK+ol8xIIN0svX+rH1rh5kqRuw3MUuftiONB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341665169857479039646977665041299563493547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 17:40:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 17:40:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.so'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896038051919286767490439556207033382907979128869394096579088888539213355742673443184150437715378685551824021124856630541277178538924574201213478247137230576524371182934550860018508483881478769818127443106270114329076133653570936779510842635292454923651261476512199897554716069518338643760919778013653468078069076607435387557231071016229976563748341231867754526267828007980379554495707472186978930685635160278673572151499912360301131036714715525077422501068684292698929303757622702078979756971216389910815313012413538706548932305337713270810487550535227978400723728483247813318729704930596530978414105531473984042463900989196139639534028804024373569332379330546468427146268112212036515325235672137868616049142722017655058000208489441076970433578795728830388268416376708319712805023481496824084453827961937027475899998870211464172664177022277730770546976027953866662449700416388137577491901475715222298374678110610771168524473785295019741777399514690298596627454420888081765255246786882218277823959482464294283484851695190376541732944459764572437420258455296994768178763585245010054623154404594809249834241342204566517467993186787266971991741465636537974719246443971102859390471239635913920774600522637291551175189174789913849510843653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7b27805e3e60044e8addade11052a26709d6423
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1706 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1dumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.796k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animebalkan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arronrents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artforgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterparisphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boluomi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalmetro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carcarnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedarscabins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chateauitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatosfera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christophersinn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastalexterminating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evdmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionforwardforcharity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fclivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstcupcafetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxyntax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garagedoorsnewhaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gentransmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hantco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idrojapan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jokerlu6.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingschat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolahghermezi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mad-cuban-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massbikepike.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitakoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntgumruk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourguarantees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rutgerssoftballcamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saldodrugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slashweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sushi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theeverydaywatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topzac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tree.markets'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valorlegends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vniran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webmasteriniz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welyawel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ycwalkman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ypp1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yrxg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zdmx.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.znye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1dumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '796k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animebalkan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arronrents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artforgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterparisphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boluomi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalmetro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carcarnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarscabins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chateauitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatosfera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christophersinn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalexterminating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evdmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionforwardforcharity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fclivetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstcupcafetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxyntax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garagedoorsnewhaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentransmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hantco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrojapan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokerlu6.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingschat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolahghermezi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mad-cuban-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massbikepike.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitakoblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntgumruk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourguarantees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutgerssoftballcamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldodrugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slashweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theeverydaywatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topzac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tree.markets'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valorlegends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vniran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmasteriniz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welyawel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycwalkman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ypp1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yrxg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdmx.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'znye.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cd0a01cd30000040300473045022018b27730843b1736dfae1b533b84ee3cfa9355c1db8e570fe656a98e456ec47f022100c828ac635dbce49917636b026b9a66e6d6e045665f1f681ba1f3178dfa7de8fe00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cd0a01d1f0000040300463044022009c74bb12341c9714ca28d89fac4c1c39fffac944dfa216a39000025891e7cd602203b48be13ea40e5ac356b318bdd6b4966277ef6705b7f194a90c6c5709b3b1a66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001fea5459ddb2e6560c1cb0213400a8140b32a299afda7482be15fa8200789f1c8f6d00c5d790c6f9b055c455bb2edda2c443c0b978abdc8e9073ad81f2013d45be11df2ab04d3c1fccb76a2532a48b79630db12cc3d41b4a8c758961425dd492fad44546adea8b64d7c95af770e173a86163c5cd76851f84d6ff924188808d213f4b6bef66a9d0873e8ca6ee00aad503da440a6c635964b46b2ad3856a689806647b87576579085bf575a9ac86795daaa8cd37fe177465364692d2e04cc5bab9ef30332ea916872e89d84191f2f4d3ac2ab5fcc558c5d7153ff1be7fe4f3ca9e4c0e4fb6e4c0afa897cc4820dd2cbd7fab1f5ae1e64a91bb0dcc52e7ed88e341