patrimonium-europae.org
Issued by R3
About this certificate
This digital certificate with serial number 03:51:b5:d1:34:7a:76:ba:4e:40:c9:0a:d3:ec:40:25:4b:3d was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=patrimonium-europae.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:51:b5:d1:34:7a:76:ba:4e:40:c9:0a:d3:ec:40:25:4b:3dSerial Number (int): 289141406037545138709903135840732979743549
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 85:8a:73:0a:6b:b9:00:dd:d1:0a:c3:11:0d:56:1e:6e:13:f3:83:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a3:0e:ad:8f:6d:fa:4f:fc:6a:3b:43:c0:a2:4a:76:a0:2e:35:60:48
Fingerprint (sha256): 85:0f:03:6f:ca:ec:c0:41:18:35:bd:cc:5b:6d:3c:03:52:6f:0e:6e:82:99:30:4e:00:38:e8:2d:71:f2:2f:cd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate patrimonium-europae.org
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for patrimonium-europae.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.2-fit.com
*.2chums.com
*.711wallets2.com
*.amat-3.com
*.bayaplay.com
*.betspread.com
*.canvateach.com
*.cashbackforex.co
*.centrafinance.com
*.colorunnel.info
*.deadtribe.com
*.fcavangard.com
*.getfreeshein.com
*.gsamadrid.net
*.holisticlifecenter.com
*.iifuxima.com
*.investboost.cc
*.kkr-hotel-sapporo.com
*.learnandstudywithus.com
*.lekinarecepte.org
*.lookings.com
*.lowesthoteldeals.com
*.makemodels.net
*.mflw.us
*.movinglines.com
*.muktangan.com
*.muttus.com
*.neongenesisoddity.com
*.nhacaiwin365.com
*.offeraat.net
*.ongrave.com
*.pandhcattleco.com
*.patrimonium-europae.org
*.prounhb.com
*.randytuggle.com
*.realendpodz.com
*.semitrike.net
*.shopwithshodney.com
*.soothes.com
*.ss1115.com
*.streamthisepisode.com
*.techmango.org
*.toproofingsandiego.com
*.touchfamily.com
*.trademarkname.com
*.willowapartments.com
*.xvedieo.com
*.yeezysuply.com
*.zenzapi.xyz
*.zhongcai818.com
2-fit.com
2chums.com
711wallets2.com
amat-3.com
bayaplay.com
betspread.com
canvateach.com
cashbackforex.co
centrafinance.com
colorunnel.info
deadtribe.com
fcavangard.com
getfreeshein.com
gsamadrid.net
holisticlifecenter.com
iifuxima.com
investboost.cc
kkr-hotel-sapporo.com
learnandstudywithus.com
lekinarecepte.org
lookings.com
lowesthoteldeals.com
makemodels.net
mflw.us
movinglines.com
muktangan.com
muttus.com
neongenesisoddity.com
nhacaiwin365.com
offeraat.net
ongrave.com
pandhcattleco.com
patrimonium-europae.org
prounhb.com
randytuggle.com
realendpodz.com
semitrike.net
shopwithshodney.com
soothes.com
ss1115.com
streamthisepisode.com
techmango.org
toproofingsandiego.com
touchfamily.com
trademarkname.com
willowapartments.com
xvedieo.com
yeezysuply.com
zenzapi.xyz
zhongcai818.com
*.2chums.com
*.711wallets2.com
*.amat-3.com
*.bayaplay.com
*.betspread.com
*.canvateach.com
*.cashbackforex.co
*.centrafinance.com
*.colorunnel.info
*.deadtribe.com
*.fcavangard.com
*.getfreeshein.com
*.gsamadrid.net
*.holisticlifecenter.com
*.iifuxima.com
*.investboost.cc
*.kkr-hotel-sapporo.com
*.learnandstudywithus.com
*.lekinarecepte.org
*.lookings.com
*.lowesthoteldeals.com
*.makemodels.net
*.mflw.us
*.movinglines.com
*.muktangan.com
*.muttus.com
*.neongenesisoddity.com
*.nhacaiwin365.com
*.offeraat.net
*.ongrave.com
*.pandhcattleco.com
*.patrimonium-europae.org
*.prounhb.com
*.randytuggle.com
*.realendpodz.com
*.semitrike.net
*.shopwithshodney.com
*.soothes.com
*.ss1115.com
*.streamthisepisode.com
*.techmango.org
*.toproofingsandiego.com
*.touchfamily.com
*.trademarkname.com
*.willowapartments.com
*.xvedieo.com
*.yeezysuply.com
*.zenzapi.xyz
*.zhongcai818.com
2-fit.com
2chums.com
711wallets2.com
amat-3.com
bayaplay.com
betspread.com
canvateach.com
cashbackforex.co
centrafinance.com
colorunnel.info
deadtribe.com
fcavangard.com
getfreeshein.com
gsamadrid.net
holisticlifecenter.com
iifuxima.com
investboost.cc
kkr-hotel-sapporo.com
learnandstudywithus.com
lekinarecepte.org
lookings.com
lowesthoteldeals.com
makemodels.net
mflw.us
movinglines.com
muktangan.com
muttus.com
neongenesisoddity.com
nhacaiwin365.com
offeraat.net
ongrave.com
pandhcattleco.com
patrimonium-europae.org
prounhb.com
randytuggle.com
realendpodz.com
semitrike.net
shopwithshodney.com
soothes.com
ss1115.com
streamthisepisode.com
techmango.org
toproofingsandiego.com
touchfamily.com
trademarkname.com
willowapartments.com
xvedieo.com
yeezysuply.com
zenzapi.xyz
zhongcai818.com
Other certificates including the domain name patrimonium-europae.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for patrimonium-europae.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIM2zCCC8OgAwIBAgISA1G10TR6drpOQMkK0+xAJUs9MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMDYyMDE3MDJaFw0yNDA2MDQyMDE3MDFaMCIxIDAeBgNVBAMT F3BhdHJpbW9uaXVtLWV1cm9wYWUub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvtc8n1a3v5S9OqW7kbhB7Cyh1olSwepYUQCpmDkJBASLoyR7ifaO ZtsA1J8rH1IjOGOTjJ12cdeLb+RIUWzQhEo8VFyI6ExxWws50N0pMXRPGeeIscux 65jpWna7xgVAcGGKXaIuhBuJE0buMy1uoIP0crtEU7eDtZT85TE4Fa+DfPDeHxOC Ir1OFV0Ub8Gt9VVZ3Yd6ptI2e+UwQ6l0Qb3Jqr2moHnD0mjHnikTi0Pw9DAzXT5P x9FdhF6weJS0cktqkf1x24GXAZFjdmE9xCWoQR43kfzhbLXofuCM8+XM/KPpVKW3 ojV3RJZK3RXE31NI+If6jzinzkWeCfmA9Glfg2pbLHBgS8nxyut9T1MCyx/dzKaH a4pp1irBvLla5RLB8WveTM7Hn8gYDdgr4eg4Tue/Fg+/lbSqsJtjYJm+5UtjkpSr V7+hvUfs8z/eSZrLGgKee3EZI6vk7M0ZC6L1erY72QzND8yiwp5bVG9e2vhd0KG3 G8Y1ZTwWxX8c+inPmVoIA5Cp/HEiEFSj796AqTS+CzjXCIj0e1AX7R6Xp9re24Fg aE0MgjURhZrcYBSAqPwyXAL4/+q8rhX0TSu3dxBamghouUQCr6G6YqdB2vWMw/2V rGBgu5c/qvxTzcUDqkRsm5udaEiKQpn6IkNE5mTwpaheH0RfLSRitPUCAwEAAaOC CPkwggj1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhYpzCmu5AN3RCsMRDVYebhPz g/0wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEE STBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUH MAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggcBBgNVHREEggb4MIIG9IILKi4y LWZpdC5jb22CDCouMmNodW1zLmNvbYIRKi43MTF3YWxsZXRzMi5jb22CDCouYW1h dC0zLmNvbYIOKi5iYXlhcGxheS5jb22CDyouYmV0c3ByZWFkLmNvbYIQKi5jYW52 YXRlYWNoLmNvbYISKi5jYXNoYmFja2ZvcmV4LmNvghMqLmNlbnRyYWZpbmFuY2Uu Y29tghEqLmNvbG9ydW5uZWwuaW5mb4IPKi5kZWFkdHJpYmUuY29tghAqLmZjYXZh bmdhcmQuY29tghIqLmdldGZyZWVzaGVpbi5jb22CDyouZ3NhbWFkcmlkLm5ldIIY Ki5ob2xpc3RpY2xpZmVjZW50ZXIuY29tgg4qLmlpZnV4aW1hLmNvbYIQKi5pbnZl c3Rib29zdC5jY4IXKi5ra3ItaG90ZWwtc2FwcG9yby5jb22CGSoubGVhcm5hbmRz dHVkeXdpdGh1cy5jb22CEyoubGVraW5hcmVjZXB0ZS5vcmeCDioubG9va2luZ3Mu Y29tghYqLmxvd2VzdGhvdGVsZGVhbHMuY29tghAqLm1ha2Vtb2RlbHMubmV0ggkq Lm1mbHcudXOCESoubW92aW5nbGluZXMuY29tgg8qLm11a3Rhbmdhbi5jb22CDCou bXV0dHVzLmNvbYIXKi5uZW9uZ2VuZXNpc29kZGl0eS5jb22CEioubmhhY2Fpd2lu MzY1LmNvbYIOKi5vZmZlcmFhdC5uZXSCDSoub25ncmF2ZS5jb22CEyoucGFuZGhj YXR0bGVjby5jb22CGSoucGF0cmltb25pdW0tZXVyb3BhZS5vcmeCDSoucHJvdW5o Yi5jb22CESoucmFuZHl0dWdnbGUuY29tghEqLnJlYWxlbmRwb2R6LmNvbYIPKi5z ZW1pdHJpa2UubmV0ghUqLnNob3B3aXRoc2hvZG5leS5jb22CDSouc29vdGhlcy5j b22CDCouc3MxMTE1LmNvbYIXKi5zdHJlYW10aGlzZXBpc29kZS5jb22CDyoudGVj aG1hbmdvLm9yZ4IYKi50b3Byb29maW5nc2FuZGllZ28uY29tghEqLnRvdWNoZmFt aWx5LmNvbYITKi50cmFkZW1hcmtuYW1lLmNvbYIWKi53aWxsb3dhcGFydG1lbnRz LmNvbYINKi54dmVkaWVvLmNvbYIQKi55ZWV6eXN1cGx5LmNvbYINKi56ZW56YXBp Lnh5eoIRKi56aG9uZ2NhaTgxOC5jb22CCTItZml0LmNvbYIKMmNodW1zLmNvbYIP NzExd2FsbGV0czIuY29tggphbWF0LTMuY29tggxiYXlhcGxheS5jb22CDWJldHNw cmVhZC5jb22CDmNhbnZhdGVhY2guY29tghBjYXNoYmFja2ZvcmV4LmNvghFjZW50 cmFmaW5hbmNlLmNvbYIPY29sb3J1bm5lbC5pbmZvgg1kZWFkdHJpYmUuY29tgg5m Y2F2YW5nYXJkLmNvbYIQZ2V0ZnJlZXNoZWluLmNvbYINZ3NhbWFkcmlkLm5ldIIW aG9saXN0aWNsaWZlY2VudGVyLmNvbYIMaWlmdXhpbWEuY29tgg5pbnZlc3Rib29z dC5jY4IVa2tyLWhvdGVsLXNhcHBvcm8uY29tghdsZWFybmFuZHN0dWR5d2l0aHVz LmNvbYIRbGVraW5hcmVjZXB0ZS5vcmeCDGxvb2tpbmdzLmNvbYIUbG93ZXN0aG90 ZWxkZWFscy5jb22CDm1ha2Vtb2RlbHMubmV0ggdtZmx3LnVzgg9tb3ZpbmdsaW5l cy5jb22CDW11a3Rhbmdhbi5jb22CCm11dHR1cy5jb22CFW5lb25nZW5lc2lzb2Rk aXR5LmNvbYIQbmhhY2Fpd2luMzY1LmNvbYIMb2ZmZXJhYXQubmV0ggtvbmdyYXZl LmNvbYIRcGFuZGhjYXR0bGVjby5jb22CF3BhdHJpbW9uaXVtLWV1cm9wYWUub3Jn ggtwcm91bmhiLmNvbYIPcmFuZHl0dWdnbGUuY29tgg9yZWFsZW5kcG9kei5jb22C DXNlbWl0cmlrZS5uZXSCE3Nob3B3aXRoc2hvZG5leS5jb22CC3Nvb3RoZXMuY29t ggpzczExMTUuY29tghVzdHJlYW10aGlzZXBpc29kZS5jb22CDXRlY2htYW5nby5v cmeCFnRvcHJvb2ZpbmdzYW5kaWVnby5jb22CD3RvdWNoZmFtaWx5LmNvbYIRdHJh ZGVtYXJrbmFtZS5jb22CFHdpbGxvd2FwYXJ0bWVudHMuY29tggt4dmVkaWVvLmNv bYIOeWVlenlzdXBseS5jb22CC3plbnphcGkueHl6gg96aG9uZ2NhaTgxOC5jb20w EwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBI sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY4VoHq8AAAEAwBHMEUC IC5ZYCQ1OALpWcjhMFPlm5KgvevljK79JlcPwULQWWOAAiEAwn+ew5MqZFzkPAes 7HgmFz64ZqM4qljsv8POPLobdyMAdQCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3 iviabfUX2AAAAY4VoHrUAAAEAwBGMEQCIDR5FQ1ppUyl2MwCbVQQPwrAlEfoyh+E sMLVLEuOeqNAAiAvDaZHYsXSwqLKCToOY5ww+oTe6PuOq8PLg0hDrEL2XjANBgkq hkiG9w0BAQsFAAOCAQEAXvkjjZgGsZj6xUo3n7nE3D8/Ybz/jjcWMvbFLK+s1nbM mKLuUqVR8vKdmDvbx16PkXe/lYKmjTIyqXk3wlc8SB11YqBLl8CLq0vrccwgPeT7 W3+a02HID2LVPzBcjnLULQoIYKfrhOj4Sp4lPa6bQoRvaLjmV57qChfhhshtT2C/ Ji1mLRdGihT7FHsO5Cv3ighih/EC71tUrbTegV1D7oJMyHuvaMoGX6OsNfyppzeJ ujasAnVWTv6vbjbqb/fI96i26TTtiJo8GG0+6bYQBDC/OfjVDVt37Tg6ShGZr0A6 tJMTuWR3CjADIYG0UUhTn/ThqT2oFUY+1+9FeY2Rqw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvtc8n1a3v5S9OqW7kbhB 7Cyh1olSwepYUQCpmDkJBASLoyR7ifaOZtsA1J8rH1IjOGOTjJ12cdeLb+RIUWzQ hEo8VFyI6ExxWws50N0pMXRPGeeIscux65jpWna7xgVAcGGKXaIuhBuJE0buMy1u oIP0crtEU7eDtZT85TE4Fa+DfPDeHxOCIr1OFV0Ub8Gt9VVZ3Yd6ptI2e+UwQ6l0 Qb3Jqr2moHnD0mjHnikTi0Pw9DAzXT5Px9FdhF6weJS0cktqkf1x24GXAZFjdmE9 xCWoQR43kfzhbLXofuCM8+XM/KPpVKW3ojV3RJZK3RXE31NI+If6jzinzkWeCfmA 9Glfg2pbLHBgS8nxyut9T1MCyx/dzKaHa4pp1irBvLla5RLB8WveTM7Hn8gYDdgr 4eg4Tue/Fg+/lbSqsJtjYJm+5UtjkpSrV7+hvUfs8z/eSZrLGgKee3EZI6vk7M0Z C6L1erY72QzND8yiwp5bVG9e2vhd0KG3G8Y1ZTwWxX8c+inPmVoIA5Cp/HEiEFSj 796AqTS+CzjXCIj0e1AX7R6Xp9re24FgaE0MgjURhZrcYBSAqPwyXAL4/+q8rhX0 TSu3dxBamghouUQCr6G6YqdB2vWMw/2VrGBgu5c/qvxTzcUDqkRsm5udaEiKQpn6 IkNE5mTwpaheH0RfLSRitPUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289141406037545138709903135840732979743549 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 20:17:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 20:17:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'patrimonium-europae.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778562410267994658390153004178466752969780290877662608984855367545736036575653472952845842157033934011751563924789609819665901939000835158223255452344636810207383870072886911037079162486601528307716653796358851073181506306514410939155120058371810053589182644998371250794854010474428960462948894937338011296958083236696254079059082133496399798642951281479515998339399121711154702191133785373827879683622307947097597757374263511497240300828240319608093666831908272324725464358225072088573489575877433766615896291595455990066188270362696798228088894060727257249826046141568803364795147205434863262907131046418757007074973783179102601313697480906095844563539031795097455350442481235130897756292927850720814840756058710585029953109311541561870054291058526710946945303623943051963801144051339193459346590707740999491877839197888017968898788001743511556425969601003994709408838250251850973041126233857530422122108047350013580761954142515446183792141650171909613349103894926564896055184867524020993277083941522600892552892680990619825510107185090768542674356936722597567507512020490865830491082598181154391272510090729276127094327439852907204846638254700563268543507602737546364094040568511923589560262278204004259586574498152304857873298677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 858a730a6bb900ddd10ac3110d561e6e13f383fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1784 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2-fit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2chums.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.711wallets2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amat-3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayaplay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betspread.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canvateach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashbackforex.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centrafinance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorunnel.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadtribe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcavangard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getfreeshein.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsamadrid.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holisticlifecenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iifuxima.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investboost.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkr-hotel-sapporo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learnandstudywithus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lekinarecepte.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lookings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowesthoteldeals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makemodels.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mflw.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movinglines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muktangan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muttus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neongenesisoddity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhacaiwin365.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offeraat.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ongrave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandhcattleco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patrimonium-europae.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prounhb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randytuggle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realendpodz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.semitrike.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopwithshodney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soothes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ss1115.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamthisepisode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techmango.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toproofingsandiego.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchfamily.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trademarkname.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willowapartments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvedieo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeezysuply.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zenzapi.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhongcai818.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-fit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2chums.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '711wallets2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amat-3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayaplay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betspread.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvateach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashbackforex.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrafinance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorunnel.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadtribe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcavangard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getfreeshein.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsamadrid.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holisticlifecenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iifuxima.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investboost.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkr-hotel-sapporo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnandstudywithus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekinarecepte.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowesthoteldeals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemodels.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mflw.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movinglines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muktangan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muttus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neongenesisoddity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhacaiwin365.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offeraat.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ongrave.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandhcattleco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrimonium-europae.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prounhb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randytuggle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realendpodz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semitrike.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopwithshodney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soothes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss1115.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamthisepisode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techmango.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toproofingsandiego.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchfamily.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trademarkname.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowapartments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvedieo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeezysuply.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenzapi.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhongcai818.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e15a07abc000004030047304502202e596024353802e959c8e13053e59b92a0bdebe58caefd26570fc142d0596380022100c27f9ec3932a645ce43c07acec7826173eb866a338aa58ecbfc3ce3cba1b7723007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e15a07ad4000004030046304402203479150d69a54ca5d8cc026d54103f0ac09447e8ca1f84b0c2d52c4b8e7aa34002202f0da64762c5d2c2a2ca093a0e639c30fa84dee8fb8eabc3cb834843ac42f65e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005ef9238d9806b198fac54a379fb9c4dc3f3f61bcff8e371632f6c52cafacd676cc98a2ee52a551f2f29d983bdbc75e8f9177bf9582a68d3232a97937c2573c481d7562a04b97c08bab4beb71cc203de4fb5b7f9ad361c80f62d53f305c8e72d42d0a0860a7eb84e8f84a9e253dae9b42846f68b8e6579eea0a17e186c86d4f60bf262d662d17468a14fb147b0ee42bf78a086287f102ef5b54adb4de815d43ee824cc87baf68ca065fa3ac35fca9a73789ba36ac0275564efeaf6e36ea6ff7c8f7a8b6e934ed889a3c186d3ee9b6100430bf39f8d50d5b77ed383a4a1199af403ab49313b964770a30032181b45148539ff4e1a93da815463ed7ef45798d91ab