citypark.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:46:60:82:85:f6:78:9d:71:19:01:37:b7:03:bb:fc:a8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=citypark.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:46:60:82:85:f6:78:9d:71:19:01:37:b7:03:bb:fc:a8
Serial Number (int): 407751822638814515899804923454065404017832
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:e2:37:64:2c:ca:e6:bb:30:02:28:49:ad:bb:65:a9:c9:f2:54:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:a1:86:4e:d6:37:ba:25:f0:79:06:1a:ef:e2:6c:3b:bc:9f:01:bc
Fingerprint (sha256): 82:a9:86:19:23:96:01:66:e5:b3:43:2e:e3:7b:a6:de:f8:c1:39:68:9f:98:15:29:a5:61:ca:69:ec:b2:dd:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate citypark.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citypark.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.africomnetworkiowa.org
*.araura.com
*.arihantcrackexam.com
*.banq.com.au
*.beautyspecialist.com.au
*.brazilianhairextensions.us
*.brutaldivulga.com
*.businessspree.us
*.caliaro.com
*.capitaltacosfood.com
*.citypark.com.au
*.classicwedding.com
*.coldono.org
*.comproboards.com
*.coquet.com
*.couchcovers.com.au
*.deudadecredito.com
*.farmday.com.au
*.gutianxia01.com
*.hostedsoftware.com
*.inskippoint.com.au
*.kiaraplast.com
*.liquidaccount.com
*.liuteria.com
*.matno.co
*.maurostendel.com
*.minecraftupgrate.net
*.missourian.us
*.mnperf.com
*.omgtorrent.bz
*.orientalcatshome.com
*.partidonacional.com
*.qhf.de
*.quickonnect.to
*.quiethorses.com
*.realtorsnow.com
*.rustup.info
*.sisnet.net
*.storms.com.au
*.strimstop.com
*.studiohyrule.com
*.thespians.com.au
*.topstylejerseystore.com
*.tumbledryers.com.au
*.upq.de
*.welcomewellnessllc.com
*.xds.com.au
*.xfq.de
*.yhb.de
*.ywd.de
africomnetworkiowa.org
araura.com
arihantcrackexam.com
banq.com.au
beautyspecialist.com.au
brazilianhairextensions.us
brutaldivulga.com
businessspree.us
caliaro.com
capitaltacosfood.com
citypark.com.au
classicwedding.com
coldono.org
comproboards.com
coquet.com
couchcovers.com.au
deudadecredito.com
farmday.com.au
gutianxia01.com
hostedsoftware.com
inskippoint.com.au
kiaraplast.com
liquidaccount.com
liuteria.com
matno.co
maurostendel.com
minecraftupgrate.net
missourian.us
mnperf.com
omgtorrent.bz
orientalcatshome.com
partidonacional.com
qhf.de
quickonnect.to
quiethorses.com
realtorsnow.com
rustup.info
sisnet.net
storms.com.au
strimstop.com
studiohyrule.com
thespians.com.au
topstylejerseystore.com
tumbledryers.com.au
upq.de
welcomewellnessllc.com
xds.com.au
xfq.de
yhb.de
ywd.de

Other certificates including the domain name citypark.com.au

(limited to 100 certificates)
citypark.com.au
citypark.com.au
camelcamelcmael.com
citypark.com.au
winninggiveaways.com
citypark.com.au
beritamaju.com
hearsrmagazines.co.uk
aerolinkarizona.us
citypark.com.au
citypark.com.au
citypark.com.au
citypark.com.au
citypark.com.au
citypark.com.au
baansuan.com
leb0ncoin.fr
citypark.com.au
citypark.com.au
citypark.com.au
citypark.com.au
citypark.com.au

Certificate

The complete raw certificate details for citypark.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMyzCCC7OgAwIBAgISBK5GYIKF9nidcRkBN7cDu/yoMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTUxNTExMjlaFw0yNDAxMTMxNTExMjhaMBoxGDAWBgNVBAMT
D2NpdHlwYXJrLmNvbS5hdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
AO53L7J+yqGZWIgYQGHVeErtzhM8KejTVWcvsGD17WWH8IVrmrfd2CqOJAawA8xm
g0hZNJa6tj4Zh4EO4v5RMfBZ4kRgJPn+9KyQPZ1KnX2EI3evOF0aHaYl8L9oa9/W
eQ+0YM4eyWCLVKzONOHVxW3LfBavuqIvqKBFyFNdyNqXRen2G9TKAtpzhEdoCndQ
ftwk+TUWDf0rU14srdNH7c2B6J3lePeQzhjtz3D+O9ivbXB8c1St5pcko5UmwGCq
eNfvwKKuTCcHyDPIuf9qdY2Gmn5JUJHgvHEoa4PaEupsoZvV7PrHi18pIK5I9yOA
FDLOL2H1T7PGyW7LjXIRCWj/7bv10HeKqkTorRN4TwfwSzTfClF+6pSud2fdwzys
C4MIQFrtraGWipPnDfGOM3BcfNxxjiuaz93oB/JAyrUOTGC1E/tfberJxFh/p1ir
qiLNIXvDQNgVS+XiU06HQC+kOgYrr738tRH5SDnCaHfRdLES3pNao2+D5OHEIlzT
TLY1LXnwKA6YS2+g3rX/uzEl6R4F+eemvSIsAGymLgop4pqO1nCFbgK/c9cLKCTB
Tnp5I5ZUzNpyv87He/1jcmO5tLLkbkXCxQhSunxGidlYR7YVyqavybRy1prs7+T5
8QZwonk8PSX4m79IAWkuHfvQ9o41uSOO2d8SssD3+TJRAgMBAAGjggjxMIII7TAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFGriN2Qsyua7MAIoSa27ZanJ8lQNMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMIIG+QYDVR0RBIIG8DCCBuyCGCouYWZyaWNvbW5l
dHdvcmtpb3dhLm9yZ4IMKi5hcmF1cmEuY29tghYqLmFyaWhhbnRjcmFja2V4YW0u
Y29tgg0qLmJhbnEuY29tLmF1ghkqLmJlYXV0eXNwZWNpYWxpc3QuY29tLmF1ghwq
LmJyYXppbGlhbmhhaXJleHRlbnNpb25zLnVzghMqLmJydXRhbGRpdnVsZ2EuY29t
ghIqLmJ1c2luZXNzc3ByZWUudXOCDSouY2FsaWFyby5jb22CFiouY2FwaXRhbHRh
Y29zZm9vZC5jb22CESouY2l0eXBhcmsuY29tLmF1ghQqLmNsYXNzaWN3ZWRkaW5n
LmNvbYINKi5jb2xkb25vLm9yZ4ISKi5jb21wcm9ib2FyZHMuY29tggwqLmNvcXVl
dC5jb22CFCouY291Y2hjb3ZlcnMuY29tLmF1ghQqLmRldWRhZGVjcmVkaXRvLmNv
bYIQKi5mYXJtZGF5LmNvbS5hdYIRKi5ndXRpYW54aWEwMS5jb22CFCouaG9zdGVk
c29mdHdhcmUuY29tghQqLmluc2tpcHBvaW50LmNvbS5hdYIQKi5raWFyYXBsYXN0
LmNvbYITKi5saXF1aWRhY2NvdW50LmNvbYIOKi5saXV0ZXJpYS5jb22CCioubWF0
bm8uY2+CEioubWF1cm9zdGVuZGVsLmNvbYIWKi5taW5lY3JhZnR1cGdyYXRlLm5l
dIIPKi5taXNzb3VyaWFuLnVzggwqLm1ucGVyZi5jb22CDyoub21ndG9ycmVudC5i
eoIWKi5vcmllbnRhbGNhdHNob21lLmNvbYIVKi5wYXJ0aWRvbmFjaW9uYWwuY29t
gggqLnFoZi5kZYIQKi5xdWlja29ubmVjdC50b4IRKi5xdWlldGhvcnNlcy5jb22C
ESoucmVhbHRvcnNub3cuY29tgg0qLnJ1c3R1cC5pbmZvggwqLnNpc25ldC5uZXSC
Dyouc3Rvcm1zLmNvbS5hdYIPKi5zdHJpbXN0b3AuY29tghIqLnN0dWRpb2h5cnVs
ZS5jb22CEioudGhlc3BpYW5zLmNvbS5hdYIZKi50b3BzdHlsZWplcnNleXN0b3Jl
LmNvbYIVKi50dW1ibGVkcnllcnMuY29tLmF1gggqLnVwcS5kZYIYKi53ZWxjb21l
d2VsbG5lc3NsbGMuY29tggwqLnhkcy5jb20uYXWCCCoueGZxLmRlgggqLnloYi5k
ZYIIKi55d2QuZGWCFmFmcmljb21uZXR3b3JraW93YS5vcmeCCmFyYXVyYS5jb22C
FGFyaWhhbnRjcmFja2V4YW0uY29tggtiYW5xLmNvbS5hdYIXYmVhdXR5c3BlY2lh
bGlzdC5jb20uYXWCGmJyYXppbGlhbmhhaXJleHRlbnNpb25zLnVzghFicnV0YWxk
aXZ1bGdhLmNvbYIQYnVzaW5lc3NzcHJlZS51c4ILY2FsaWFyby5jb22CFGNhcGl0
YWx0YWNvc2Zvb2QuY29tgg9jaXR5cGFyay5jb20uYXWCEmNsYXNzaWN3ZWRkaW5n
LmNvbYILY29sZG9uby5vcmeCEGNvbXByb2JvYXJkcy5jb22CCmNvcXVldC5jb22C
EmNvdWNoY292ZXJzLmNvbS5hdYISZGV1ZGFkZWNyZWRpdG8uY29tgg5mYXJtZGF5
LmNvbS5hdYIPZ3V0aWFueGlhMDEuY29tghJob3N0ZWRzb2Z0d2FyZS5jb22CEmlu
c2tpcHBvaW50LmNvbS5hdYIOa2lhcmFwbGFzdC5jb22CEWxpcXVpZGFjY291bnQu
Y29tggxsaXV0ZXJpYS5jb22CCG1hdG5vLmNvghBtYXVyb3N0ZW5kZWwuY29tghRt
aW5lY3JhZnR1cGdyYXRlLm5ldIINbWlzc291cmlhbi51c4IKbW5wZXJmLmNvbYIN
b21ndG9ycmVudC5ieoIUb3JpZW50YWxjYXRzaG9tZS5jb22CE3BhcnRpZG9uYWNp
b25hbC5jb22CBnFoZi5kZYIOcXVpY2tvbm5lY3QudG+CD3F1aWV0aG9yc2VzLmNv
bYIPcmVhbHRvcnNub3cuY29tggtydXN0dXAuaW5mb4IKc2lzbmV0Lm5ldIINc3Rv
cm1zLmNvbS5hdYINc3RyaW1zdG9wLmNvbYIQc3R1ZGlvaHlydWxlLmNvbYIQdGhl
c3BpYW5zLmNvbS5hdYIXdG9wc3R5bGVqZXJzZXlzdG9yZS5jb22CE3R1bWJsZWRy
eWVycy5jb20uYXWCBnVwcS5kZYIWd2VsY29tZXdlbGxuZXNzbGxjLmNvbYIKeGRz
LmNvbS5hdYIGeGZxLmRlggZ5aGIuZGWCBnl3ZC5kZTATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ADtTd3U+LbmAToswWwb+QDtn
2E/D9Me9AA0tcm/h+tQXAAABizQbWP0AAAQDAEcwRQIhAOgoYaGtby9fcgu5d2Jh
065z59aRTlx0UFK85Fu489MdAiBgkUmzbR676aOhNiTyKPch8HUxnciHag+JiASj
40CcMwB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABizQbWTQA
AAQDAEYwRAIgIinP/C9ZDfCkO1FXdvPHY+homKJlA6KatnVVYECtwPcCIDJPurGk
YZL7egETT6zPcHE/b/un8cg8eDsGLMX45YkhMA0GCSqGSIb3DQEBCwUAA4IBAQAR
5QCsU00+28Ng2RITp+DWZMVnnjgiRjNc03j2wJSvKcmHmIGPqi5WT/L6To03YltQ
SW6+I2/PJCb1A14s6Q2f0ckiKyvS+npsMbmjZiGINVIgNWuUCLwzz5c+aA1uG5xn
pCdosQOFxOUp3XDVvrZCw9bCti8ETxpI8S7P6JtI4hLFcM1dG0ImmHCjz7AN8ui2
R/P7PhikGvCerFGT9mNgigRauGoJpzB7TD+nRMR/c7rROHzR5MpM1wXrtRt0WYjO
XG0LnoXeFqg+xuigmVE6NAYEFKKXcpRfvXdiNPyK1ITyMXsJmuE3flWkqU7+tuU5
EoseuJu8AKSmPTe0/gA8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407751822638814515899804923454065404017832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 15:11:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 15:11:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citypark.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 972854654410099197494553915982332747091380093593807582418828411760522890822774719809998333077913929956717773600468086600876410799776191310436955736878471447369905470866717090811606683348079265154421681327964065727187775354088628383500317265702424344268191847407780198633132773105825643300091627671553289639987618149472004872501664234821956438468638919258643386050301356155952114828807212353975551348437226913993456042156598505707318163211849742282697923430117335432087143808068402904654810612508336092867285252268455357815039676613926732047948386817198927936759211495956729775020491639826841357772439488378503450723948084428046094642600293730579656097358300292527739270493149550492207843274767291490781819332406807294944704799380526460952485388909362282257133602582881390030798670768909014814799355168907189512766297487884336671745040451935913171972477706046204396703040796563441918632166055398813720094629786088036180810173965354607913279159982004345689832057514247785244906846366110913370428351021755587960710662542233096590230757676211610611885595130202749459771509121472051328322873808046447329568292732330342189708458647674845228122221733053722120481350440915952133481728726668681587674673083758031209035351165920837456392434257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ae237642ccae6bb30022849adbb65a9c9f2540d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1776 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africomnetworkiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.araura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arihantcrackexam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautyspecialist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazilianhairextensions.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brutaldivulga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessspree.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caliaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitaltacosfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citypark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classicwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coldono.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comproboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.couchcovers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deudadecredito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gutianxia01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostedsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inskippoint.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiaraplast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liquidaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liuteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maurostendel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecraftupgrate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.missourian.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mnperf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omgtorrent.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orientalcatshome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partidonacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qhf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickonnect.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quiethorses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realtorsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rustup.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strimstop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studiohyrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespians.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topstylejerseystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tumbledryers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welcomewellnessllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ywd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africomnetworkiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'araura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arihantcrackexam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyspecialist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazilianhairextensions.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brutaldivulga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessspree.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caliaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaltacosfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citypark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coldono.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comproboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coquet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couchcovers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deudadecredito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutianxia01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostedsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inskippoint.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiaraplast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maurostendel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraftupgrate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missourian.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnperf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omgtorrent.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orientalcatshome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partidonacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickonnect.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiethorses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtorsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rustup.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strimstop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiohyrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespians.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topstylejerseystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tumbledryers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcomewellnessllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ywd.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b341b58fd0000040300473045022100e82861a1ad6f2f5f720bb9776261d3ae73e7d6914e5c745052bce45bb8f3d31d0220609149b36d1ebbe9a3a13624f228f721f075319dc8876a0f898804a3e3409c3300750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b341b5934000004030046304402202229cffc2f590df0a43b515776f3c763e86898a26503a29ab675556040adc0f70220324fbab1a46192fb7a01134faccf70713f6ffba7f1c83c783b062cc5f8e58921
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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