magshimim.com

Issued by R3

About this certificate

This digital certificate with serial number 03:dc:37:54:25:6f:f3:93:06:4a:0b:46:20:ad:8b:66:d5:8b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magshimim.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:37:54:25:6f:f3:93:06:4a:0b:46:20:ad:8b:66:d5:8b
Serial Number (int): 336272522969910353173721905785099451291019
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:64:db:b3:b6:6f:2d:03:a3:dc:2b:2d:3c:93:77:04:8b:cc:1e:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:63:c5:c6:af:ea:fc:69:04:b8:44:34:65:ee:cc:b5:cc:22:8a:50
Fingerprint (sha256): 84:fd:4c:bd:bb:56:7a:a2:fb:dd:14:f4:78:7d:4e:57:1f:97:1d:42:4c:cc:00:44:30:9c:82:73:e0:b8:72:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate magshimim.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magshimim.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abdoo.com
*.aleida.com
*.boroka.com
*.carlsonpartners.com
*.carrieri.com
*.coyote.cm
*.cyclicity.com
*.diffin.com
*.fanian.com
*.filipinobasketball.com
*.fliton.com
*.fundamentos.org
*.furniturepluss.com
*.greycliffe.com
*.insurancebrain.com.au
*.insuremysmallbusiness.com.au
*.jcconcursos.com
*.kp-automotive.com
*.kretchmer.com
*.kunja.com
*.lamonaca.com
*.lindseysterling.com
*.magshimim.com
*.manshirt.com.au
*.maunder.com
*.mcaliley.com
*.mp-2.com
*.naderi.com
*.naturallygreen.com
*.neufahrzeuge.com
*.omnifi.com
*.oranit.com
*.oztradienetwork.com.au
*.patnanews.in
*.pelgrim.com
*.pixiepress.com
*.pradipta.com
*.rojel.com
*.royter.com
*.samben.com
*.satterlees.com
*.shacklock.com
*.streameast.lc
*.themixtape.com
*.tienda-contrareembolso.com
*.tiengnhac.com
*.wellsy.com
*.werbel.com
*.werer.com
*.yeyo.net
abdoo.com
aleida.com
boroka.com
carlsonpartners.com
carrieri.com
coyote.cm
cyclicity.com
diffin.com
fanian.com
filipinobasketball.com
fliton.com
fundamentos.org
furniturepluss.com
greycliffe.com
insurancebrain.com.au
insuremysmallbusiness.com.au
jcconcursos.com
kp-automotive.com
kretchmer.com
kunja.com
lamonaca.com
lindseysterling.com
magshimim.com
manshirt.com.au
maunder.com
mcaliley.com
mp-2.com
naderi.com
naturallygreen.com
neufahrzeuge.com
omnifi.com
oranit.com
oztradienetwork.com.au
patnanews.in
pelgrim.com
pixiepress.com
pradipta.com
rojel.com
royter.com
samben.com
satterlees.com
shacklock.com
streameast.lc
themixtape.com
tienda-contrareembolso.com
tiengnhac.com
wellsy.com
werbel.com
werer.com
yeyo.net

Other certificates including the domain name magshimim.com

(limited to 100 certificates)
electboley.com
balancemachine.com
magshimim.com
karolys.com
magshimim.com
magshimim.com
snapcchat.com
gdgate.com
nudelive.stream
magshimim.com
cemalettin.com
deflorstion.com

Certificate

The complete raw certificate details for magshimim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMfDCCC2SgAwIBAgISA9w3VCVv85MGSgtGIK2LZtWLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MTgwOTMxNDNaFw0yMzA4MTYwOTMxNDJaMBgxFjAUBgNVBAMT
DW1hZ3NoaW1pbS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCe
Yx3KK/bJ2zPfqAD2oqxmixmHQjXEDtrxyTNNU8DhT9mv6kPZuv6PHCI0NI2NdPAv
fnqy3ioqkK82XPmgE3yeYph9I1MvUmj7AyeAFqiGT38rJkxmaKtviJe7XvPeBf3L
mTKQwJ58t/pP83yE7T4/ybVhol+kJ3zOZPfoZgEKtrZm4C6dDpig3PynZ25fU94z
wvTmCX8QiS3jzhlOemjgbOuKRmoF7aD1V2++tJ/nYlGaabFxxQ8jQcjOeJmkC9OW
EMFEHGmGaf2o4utmiyLx26juct9DvgpTNI93u90IosyjvN3zI5nsuACzY2KzZUZM
hV9KFgiFrcaCW8kBaZ4xrhlCUj4cghsOvOP+5yLw8fhnSI6KFd4P1Hgb1W53ilgZ
QWVWALkh0iQEHitdtylihbMgLjrq26elKzkmGq8Q2oiqMJx8AoYjyazmi76QU2xi
aEtI0CX1Vv0L1zPUqh1X/PDz7p83XWKTV/wbwSMahFoEJBQa7xs3liepBC1kuvlR
ZigwLC3Q93+RepWjCueFmY93JSC+NGOxNDVEl9IXOdpZlXEO9hQIs9izM88Ksbt7
+vBKzYJpR2Y1ihRb61NukdsGaYbY83Iq3AK6isIqVRLhdJF9M3P+Q15FcOraOJ8L
7ZfaI3aRDcAfO3SbBsW+JEPWzlq0+LxtllzI1SqQZQIDAQABo4IIpDCCCKAwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSfZNuztm8tA6PcKy08k3cEi8weezAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBnEGA1UdEQSCBmgwggZkggsqLmFiZG9vLmNvbYIM
Ki5hbGVpZGEuY29tggwqLmJvcm9rYS5jb22CFSouY2FybHNvbnBhcnRuZXJzLmNv
bYIOKi5jYXJyaWVyaS5jb22CCyouY295b3RlLmNtgg8qLmN5Y2xpY2l0eS5jb22C
DCouZGlmZmluLmNvbYIMKi5mYW5pYW4uY29tghgqLmZpbGlwaW5vYmFza2V0YmFs
bC5jb22CDCouZmxpdG9uLmNvbYIRKi5mdW5kYW1lbnRvcy5vcmeCFCouZnVybml0
dXJlcGx1c3MuY29tghAqLmdyZXljbGlmZmUuY29tghcqLmluc3VyYW5jZWJyYWlu
LmNvbS5hdYIeKi5pbnN1cmVteXNtYWxsYnVzaW5lc3MuY29tLmF1ghEqLmpjY29u
Y3Vyc29zLmNvbYITKi5rcC1hdXRvbW90aXZlLmNvbYIPKi5rcmV0Y2htZXIuY29t
ggsqLmt1bmphLmNvbYIOKi5sYW1vbmFjYS5jb22CFSoubGluZHNleXN0ZXJsaW5n
LmNvbYIPKi5tYWdzaGltaW0uY29tghEqLm1hbnNoaXJ0LmNvbS5hdYINKi5tYXVu
ZGVyLmNvbYIOKi5tY2FsaWxleS5jb22CCioubXAtMi5jb22CDCoubmFkZXJpLmNv
bYIUKi5uYXR1cmFsbHlncmVlbi5jb22CEioubmV1ZmFocnpldWdlLmNvbYIMKi5v
bW5pZmkuY29tggwqLm9yYW5pdC5jb22CGCoub3p0cmFkaWVuZXR3b3JrLmNvbS5h
dYIOKi5wYXRuYW5ld3MuaW6CDSoucGVsZ3JpbS5jb22CECoucGl4aWVwcmVzcy5j
b22CDioucHJhZGlwdGEuY29tggsqLnJvamVsLmNvbYIMKi5yb3l0ZXIuY29tggwq
LnNhbWJlbi5jb22CECouc2F0dGVybGVlcy5jb22CDyouc2hhY2tsb2NrLmNvbYIP
Ki5zdHJlYW1lYXN0LmxjghAqLnRoZW1peHRhcGUuY29tghwqLnRpZW5kYS1jb250
cmFyZWVtYm9sc28uY29tgg8qLnRpZW5nbmhhYy5jb22CDCoud2VsbHN5LmNvbYIM
Ki53ZXJiZWwuY29tggsqLndlcmVyLmNvbYIKKi55ZXlvLm5ldIIJYWJkb28uY29t
ggphbGVpZGEuY29tggpib3Jva2EuY29tghNjYXJsc29ucGFydG5lcnMuY29tggxj
YXJyaWVyaS5jb22CCWNveW90ZS5jbYINY3ljbGljaXR5LmNvbYIKZGlmZmluLmNv
bYIKZmFuaWFuLmNvbYIWZmlsaXBpbm9iYXNrZXRiYWxsLmNvbYIKZmxpdG9uLmNv
bYIPZnVuZGFtZW50b3Mub3JnghJmdXJuaXR1cmVwbHVzcy5jb22CDmdyZXljbGlm
ZmUuY29tghVpbnN1cmFuY2VicmFpbi5jb20uYXWCHGluc3VyZW15c21hbGxidXNp
bmVzcy5jb20uYXWCD2pjY29uY3Vyc29zLmNvbYIRa3AtYXV0b21vdGl2ZS5jb22C
DWtyZXRjaG1lci5jb22CCWt1bmphLmNvbYIMbGFtb25hY2EuY29tghNsaW5kc2V5
c3RlcmxpbmcuY29tgg1tYWdzaGltaW0uY29tgg9tYW5zaGlydC5jb20uYXWCC21h
dW5kZXIuY29tggxtY2FsaWxleS5jb22CCG1wLTIuY29tggpuYWRlcmkuY29tghJu
YXR1cmFsbHlncmVlbi5jb22CEG5ldWZhaHJ6ZXVnZS5jb22CCm9tbmlmaS5jb22C
Cm9yYW5pdC5jb22CFm96dHJhZGllbmV0d29yay5jb20uYXWCDHBhdG5hbmV3cy5p
boILcGVsZ3JpbS5jb22CDnBpeGllcHJlc3MuY29tggxwcmFkaXB0YS5jb22CCXJv
amVsLmNvbYIKcm95dGVyLmNvbYIKc2FtYmVuLmNvbYIOc2F0dGVybGVlcy5jb22C
DXNoYWNrbG9jay5jb22CDXN0cmVhbWVhc3QubGOCDnRoZW1peHRhcGUuY29tghp0
aWVuZGEtY29udHJhcmVlbWJvbHNvLmNvbYINdGllbmduaGFjLmNvbYIKd2VsbHN5
LmNvbYIKd2VyYmVsLmNvbYIJd2VyZXIuY29tggh5ZXlvLm5ldDBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ALc+
+yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiC5qYTYAAAQDAEgwRgIh
AK4/ehspFFg9Xzct+CFlPB6oYbUptK9XolR6VoO+goiHAiEAhDcgI81OJxlv5VYl
JdMOQhmJmd5qBrGq7bac3l4NFEYAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTK
hYY069yCigAAAYguamEsAAAEAwBHMEUCIQC5Ys6/5qteprsRzfLcB2hPce6AKPVe
mc1Mmf6K+hxFSgIgR1Hqd8TLHjYzUVcw/CMdZW2HS01phmALej2LMAnSloAwDQYJ
KoZIhvcNAQELBQADggEBAFCQtmV6gA/PxqNvkz1eJNuErh0lKFkGT60KEmHdbwd3
wbNrRad6uSixohRitwkvZqn0jlZZghZxJHGclKf81VcpMN1Y4PmUNFxUYcRk4dtd
VHKFSO6j+70Hwa+WHzJvcWwyBJBQpGCaT41Ygfpb481sElMnhplkyfDxQSzDH1lL
94Q+w8mu7CUOry0AGzBEmZcl+Qg7O+z+scXn1kICqPBzafd5tLT+61R+qDkDq14U
hsSf/J4xDIA+b4/V9XZtbU+qKxteNR+lY0zYOEhcXH7YQZY49CC407DAhmlddCWl
9za1/pjpUgg+maAmIJnGi3eTHMtlIiKR0FNN4XutViI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336272522969910353173721905785099451291019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 09:31:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 09:31:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magshimim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646163292025268457309190237495291253704361485822071238743360147234200751965298312372612520605738582984306250781216718399122231858113267168844020572656618374712483348181917639064157042898161518836957343079035026999200743157396519211649720534599153627171788300052606081750880051795656584925971130693382504427730850083730506421380209482190989339492012255198447773877504252066638155522401432207546452448006998450691073971750632519626723130190508850372024946593465871373742328704881572808132470816400215793299490733654108438462388171030490918930963619324039060389065213240898481634877101715851422595321082323739634160111500223827018568532358203780924895410014077821646256568623962586259395179027923315333011754240051401870957883054280504932482682613287872278235660882154764982550156965165877207594636443003543547472052004941317474015573491008844839852012575120804461766058693459228584002935138002680947464727381204139779126054863629047814500498836513183414414076183440380063717992846071130435001076389955329492027074026125111264659936163687954842599575292326027792448356531295629258141182995447704468620207709108096570803419017099929123275379577637044401299151486156899696858326911429418436894878003542595669541414237609432800146253058149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f64dbb3b66f2d03a3dc2b2d3c9377048bcc1e7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1640 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abdoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aleida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boroka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carlsonpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrieri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coyote.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyclicity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filipinobasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fliton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundamentos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniturepluss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greycliffe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insurancebrain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insuremysmallbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcconcursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kp-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kretchmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kunja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamonaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindseysterling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magshimim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manshirt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcaliley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp-2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naderi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturallygreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neufahrzeuge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omnifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oranit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oztradienetwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patnanews.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelgrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixiepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pradipta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rojel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satterlees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shacklock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streameast.lc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themixtape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tienda-contrareembolso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiengnhac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.werbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.werer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeyo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aleida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boroka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlsonpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrieri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coyote.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclicity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filipinobasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fliton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundamentos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniturepluss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greycliffe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancebrain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuremysmallbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcconcursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kretchmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamonaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindseysterling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magshimim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manshirt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcaliley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp-2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naderi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturallygreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neufahrzeuge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oranit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oztradienetwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patnanews.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelgrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixiepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pradipta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rojel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satterlees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shacklock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streameast.lc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themixtape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienda-contrareembolso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiengnhac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeyo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001882e6a61360000040300483046022100ae3f7a1b2914583d5f372df821653c1ea861b529b4af57a2547a5683be82888702210084372023cd4e27196fe5562525d30e42198999de6a06b1aaedb69cde5e0d1446007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001882e6a612c0000040300473045022100b962cebfe6ab5ea6bb11cdf2dc07684f71ee8028f55e99cd4c99fe8afa1c454a02204751ea77c4cb1e3633515730fc231d656d874b4d6986600b7a3d8b3009d29680
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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