fansmini.com

Issued by R3

About this certificate

This digital certificate with serial number 04:73:a1:63:43:2b:e4:fe:5e:54:08:8c:67:29:f5:89:f6:ca was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fansmini.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:a1:63:43:2b:e4:fe:5e:54:08:8c:67:29:f5:89:f6:ca
Serial Number (int): 387796137030058400815881740905710778709706
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:af:cc:aa:5f:83:8d:10:81:92:eb:b3:eb:94:7a:75:31:fb:e1:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:a2:3f:91:63:a9:42:a6:25:a9:4b:1b:25:c6:92:d6:02:14:a0:8f
Fingerprint (sha256): 85:6d:fc:97:01:59:c0:b6:c1:18:75:c7:02:6d:8c:75:10:ff:4c:4b:02:ea:f0:06:a1:10:62:16:ef:de:8d:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fansmini.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fansmini.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3dprinted.in
*.8bgme.info
*.abbiemalley.com
*.acastlouisco.com
*.aliguimi.com
*.asb-sakray.net
*.austin8282.com
*.bidding.au
*.composingprograms.org
*.copperprice.org
*.danitavares.com
*.databuzzword.com
*.digitalplauground.com
*.doimei.com
*.doublestroller.de
*.drinkliquidfocus.com
*.drycleanerforsale.net
*.fansmini.com
*.giovannafrank.com
*.handelsregisterauszuege.de
*.haokaisen.com
*.i-b.be
*.italienfotos.de
*.jaspreetsinghattorney.com
*.kleiderkoffer.de
*.lascourt.org
*.leetocode.com
*.lliureonline.com
*.lotofbooty.com
*.loungedecorplus.com
*.medizinschrank.de
*.mittelspitz.de
*.nuclearstress.cc
*.ottawarocklottery.com
*.papaq.cc
*.pholevancouver.com
*.pnv.de
*.privateinvestment.co.za
*.romanrentals.com
*.sglib.org
*.southeast-home-educators.co.uk
*.sovgracepub.com
*.steelseriesgg.com
*.summerhillrealestate.com.au
*.wfmbenefits.com
*.whkqzg.com
*.wwwendometriose.de
*.xahard.top
*.xn--khlkombi-65a.de
*.youkuzhuan.com
3dprinted.in
8bgme.info
abbiemalley.com
acastlouisco.com
aliguimi.com
asb-sakray.net
austin8282.com
bidding.au
composingprograms.org
copperprice.org
danitavares.com
databuzzword.com
digitalplauground.com
doimei.com
doublestroller.de
drinkliquidfocus.com
drycleanerforsale.net
fansmini.com
giovannafrank.com
handelsregisterauszuege.de
haokaisen.com
i-b.be
italienfotos.de
jaspreetsinghattorney.com
kleiderkoffer.de
lascourt.org
leetocode.com
lliureonline.com
lotofbooty.com
loungedecorplus.com
medizinschrank.de
mittelspitz.de
nuclearstress.cc
ottawarocklottery.com
papaq.cc
pholevancouver.com
pnv.de
privateinvestment.co.za
romanrentals.com
sglib.org
southeast-home-educators.co.uk
sovgracepub.com
steelseriesgg.com
summerhillrealestate.com.au
wfmbenefits.com
whkqzg.com
wwwendometriose.de
xahard.top
xn--khlkombi-65a.de
youkuzhuan.com

Other certificates including the domain name fansmini.com

(limited to 100 certificates)
fansmini.com
composingprograms.org
composingprograms.org
faffen.de
fansmini.com

Certificate

The complete raw certificate details for fansmini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINLTCCDBWgAwIBAgISBHOhY0Mr5P5eVAiMZyn1ifbKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMDQyMjM2MjlaFw0yNDAxMDIyMjM2MjhaMBcxFTATBgNVBAMT
DGZhbnNtaW5pLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOA3
KvJyZ2wLcuQLt2vzFlgPEMEoJA+FgCLfTnv2BzANPBMo2bzc52Ce1MljUODhUp5X
Nhz+zMvE8uVbJNbOyOyUg/TxCHd/MlJIQg/1Ay91CtYjrx71KPea8cujnWnd1+F4
QPisL4dizoviIt0V9rJpe49+3b8wKRyo8i3rJZvFg9zi9We/T11cwzW9cLFOnTYP
IwmfiqKRYtXOb15EfR7mTPJcnxTy3B00QHlEJjEHSHp8PK6pnrfXV66R8BZ2/16u
4VoZ7XhQNX33exzp0SKmGUTVNvKw8VrfyGKrzNLvGziqoFJzYTmKlH5jLSS8m2ot
57dJd3y1BDpMdSfyKRX5XweyzOrMwT92L4NosKPT0C0PwCBvV2W7NWMc1HrAtEeT
lET/+4WWJczP0egnHDhlWH8OG50c0gPIFJqngrPDijGGfHnNm2G/SK3cCn2uvWiS
s0k6xBSPXJG0Rzl53ZN5cbVOw9xcIvKuqvlufqspOppZBbqyKHWwdbkvQ3/IvdIt
y8xp9fDumM4CM9hJ3yRfoVyWHgFUqPwraB5JqM3kdthzzP+5yEuhHDSHuRw3kekv
iwgaIOYOSci4ebHF0S/ODf+jDs3X5sfoUJozehj0r1HifcNgExBPfL6O60o7/GP0
3FTpCUH22VgSzzLEafj3I4K+aknQhi6FugwwVuopAgMBAAGjgglWMIIJUjAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFJGvzKpfg40QgZLrs+uUenUx++EkMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIHXQYDVR0RBIIHVDCCB1CCDiouM2RwcmludGVkLmlu
ggwqLjhiZ21lLmluZm+CESouYWJiaWVtYWxsZXkuY29tghIqLmFjYXN0bG91aXNj
by5jb22CDiouYWxpZ3VpbWkuY29tghAqLmFzYi1zYWtyYXkubmV0ghAqLmF1c3Rp
bjgyODIuY29tggwqLmJpZGRpbmcuYXWCFyouY29tcG9zaW5ncHJvZ3JhbXMub3Jn
ghEqLmNvcHBlcnByaWNlLm9yZ4IRKi5kYW5pdGF2YXJlcy5jb22CEiouZGF0YWJ1
enp3b3JkLmNvbYIXKi5kaWdpdGFscGxhdWdyb3VuZC5jb22CDCouZG9pbWVpLmNv
bYITKi5kb3VibGVzdHJvbGxlci5kZYIWKi5kcmlua2xpcXVpZGZvY3VzLmNvbYIX
Ki5kcnljbGVhbmVyZm9yc2FsZS5uZXSCDiouZmFuc21pbmkuY29tghMqLmdpb3Zh
bm5hZnJhbmsuY29tghwqLmhhbmRlbHNyZWdpc3RlcmF1c3p1ZWdlLmRlgg8qLmhh
b2thaXNlbi5jb22CCCouaS1iLmJlghEqLml0YWxpZW5mb3Rvcy5kZYIbKi5qYXNw
cmVldHNpbmdoYXR0b3JuZXkuY29tghIqLmtsZWlkZXJrb2ZmZXIuZGWCDioubGFz
Y291cnQub3Jngg8qLmxlZXRvY29kZS5jb22CEioubGxpdXJlb25saW5lLmNvbYIQ
Ki5sb3RvZmJvb3R5LmNvbYIVKi5sb3VuZ2VkZWNvcnBsdXMuY29tghMqLm1lZGl6
aW5zY2hyYW5rLmRlghAqLm1pdHRlbHNwaXR6LmRlghIqLm51Y2xlYXJzdHJlc3Mu
Y2OCFyoub3R0YXdhcm9ja2xvdHRlcnkuY29tggoqLnBhcGFxLmNjghQqLnBob2xl
dmFuY291dmVyLmNvbYIIKi5wbnYuZGWCGSoucHJpdmF0ZWludmVzdG1lbnQuY28u
emGCEioucm9tYW5yZW50YWxzLmNvbYILKi5zZ2xpYi5vcmeCICouc291dGhlYXN0
LWhvbWUtZWR1Y2F0b3JzLmNvLnVrghEqLnNvdmdyYWNlcHViLmNvbYITKi5zdGVl
bHNlcmllc2dnLmNvbYIdKi5zdW1tZXJoaWxscmVhbGVzdGF0ZS5jb20uYXWCESou
d2ZtYmVuZWZpdHMuY29tggwqLndoa3F6Zy5jb22CFCoud3d3ZW5kb21ldHJpb3Nl
LmRlggwqLnhhaGFyZC50b3CCFSoueG4tLWtobGtvbWJpLTY1YS5kZYIQKi55b3Vr
dXpodWFuLmNvbYIMM2RwcmludGVkLmluggo4YmdtZS5pbmZvgg9hYmJpZW1hbGxl
eS5jb22CEGFjYXN0bG91aXNjby5jb22CDGFsaWd1aW1pLmNvbYIOYXNiLXNha3Jh
eS5uZXSCDmF1c3RpbjgyODIuY29tggpiaWRkaW5nLmF1ghVjb21wb3Npbmdwcm9n
cmFtcy5vcmeCD2NvcHBlcnByaWNlLm9yZ4IPZGFuaXRhdmFyZXMuY29tghBkYXRh
YnV6endvcmQuY29tghVkaWdpdGFscGxhdWdyb3VuZC5jb22CCmRvaW1laS5jb22C
EWRvdWJsZXN0cm9sbGVyLmRlghRkcmlua2xpcXVpZGZvY3VzLmNvbYIVZHJ5Y2xl
YW5lcmZvcnNhbGUubmV0ggxmYW5zbWluaS5jb22CEWdpb3Zhbm5hZnJhbmsuY29t
ghpoYW5kZWxzcmVnaXN0ZXJhdXN6dWVnZS5kZYINaGFva2Fpc2VuLmNvbYIGaS1i
LmJlgg9pdGFsaWVuZm90b3MuZGWCGWphc3ByZWV0c2luZ2hhdHRvcm5leS5jb22C
EGtsZWlkZXJrb2ZmZXIuZGWCDGxhc2NvdXJ0Lm9yZ4INbGVldG9jb2RlLmNvbYIQ
bGxpdXJlb25saW5lLmNvbYIObG90b2Zib290eS5jb22CE2xvdW5nZWRlY29ycGx1
cy5jb22CEW1lZGl6aW5zY2hyYW5rLmRlgg5taXR0ZWxzcGl0ei5kZYIQbnVjbGVh
cnN0cmVzcy5jY4IVb3R0YXdhcm9ja2xvdHRlcnkuY29tgghwYXBhcS5jY4IScGhv
bGV2YW5jb3V2ZXIuY29tggZwbnYuZGWCF3ByaXZhdGVpbnZlc3RtZW50LmNvLnph
ghByb21hbnJlbnRhbHMuY29tgglzZ2xpYi5vcmeCHnNvdXRoZWFzdC1ob21lLWVk
dWNhdG9ycy5jby51a4IPc292Z3JhY2VwdWIuY29tghFzdGVlbHNlcmllc2dnLmNv
bYIbc3VtbWVyaGlsbHJlYWxlc3RhdGUuY29tLmF1gg93Zm1iZW5lZml0cy5jb22C
Cndoa3F6Zy5jb22CEnd3d2VuZG9tZXRyaW9zZS5kZYIKeGFoYXJkLnRvcIITeG4t
LWtobGtvbWJpLTY1YS5kZYIOeW91a3V6aHVhbi5jb20wEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwA7U3d1Pi25gE6LMFsG/kA7
Z9hPw/THvQANLXJv4frUFwAAAYr9DNBNAAAEAwBIMEYCIQD1gAPambQLj0xbS3c+
A440i3I81G6ibx8onIhy2ZTXZQIhAM9DJmONJDXCg71/CZJUZFFaYhRoQ3EQbSr0
e7c8EY1+AHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGK/QzQ
agAABAMARjBEAiAQCsJbYDWgUNJtEdVfYmo8TcPZv64f7JyAOjwajkiTwgIgEtnm
NaGkLnXVNvR6SFIQ7oMJ2fvMAbxn62iIAMw/ajIwDQYJKoZIhvcNAQELBQADggEB
ABiCMuixPstsE/7UfrFkVrTuHzO8ojbreTVYnUQneKA1q49zKfxxMPV+zwBliZlY
/qEQwxba7ytCF/OUkY11qS6vmBZxMIQihXBQXQ2snTrEYTk4r9QTnJigb1AK94V+
9aZlVNw+r3SrwWjhceBs+4p5A6CJhbuI87OYphielCFssRPiFU1ygA4VVF8lly+9
CfY5ciRO1xoNmFeTPrj1cbIf5412R5RGL84iJ5On5NZ+DGXkTujmNVSaXAkDoPLX
cdo1c3iUEsNil+LkKlKdxCqrZC2jwSYQxzPGIiuAsLScdf4SUcHgI0LAwQ4oUpR7
T6YjFBn8OeEya8xssMhw3+Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4Dcq8nJnbAty5Au3a/MW
WA8QwSgkD4WAIt9Oe/YHMA08EyjZvNznYJ7UyWNQ4OFSnlc2HP7My8Ty5Vsk1s7I
7JSD9PEId38yUkhCD/UDL3UK1iOvHvUo95rxy6Odad3X4XhA+Kwvh2LOi+Ii3RX2
sml7j37dvzApHKjyLeslm8WD3OL1Z79PXVzDNb1wsU6dNg8jCZ+KopFi1c5vXkR9
HuZM8lyfFPLcHTRAeUQmMQdIenw8rqmet9dXrpHwFnb/Xq7hWhnteFA1ffd7HOnR
IqYZRNU28rDxWt/IYqvM0u8bOKqgUnNhOYqUfmMtJLybai3nt0l3fLUEOkx1J/Ip
FflfB7LM6szBP3Yvg2iwo9PQLQ/AIG9XZbs1YxzUesC0R5OURP/7hZYlzM/R6Ccc
OGVYfw4bnRzSA8gUmqeCs8OKMYZ8ec2bYb9IrdwKfa69aJKzSTrEFI9ckbRHOXnd
k3lxtU7D3Fwi8q6q+W5+qyk6mlkFurIodbB1uS9Df8i90i3LzGn18O6YzgIz2Enf
JF+hXJYeAVSo/CtoHkmozeR22HPM/7nIS6EcNIe5HDeR6S+LCBog5g5JyLh5scXR
L84N/6MOzdfmx+hQmjN6GPSvUeJ9w2ATEE98vo7rSjv8Y/TcVOkJQfbZWBLPMsRp
+Pcjgr5qSdCGLoW6DDBW6ikCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387796137030058400815881740905710778709706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 22:36:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 22:36:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fansmini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914719430739511537938911029933507423241370657506537627221743725165572888098413405871077382272846791784701050456603699655527054984902250793587102470865874188997596363122165577146143923609266408963587111556775521996425304883855141453874778662859809655668354579238755971120867784308035987924249136871356294578833518288662624746302676527560809705738144036873170476454444178906046406823242304844293222778444508539597559380894456738418980199095221124440851740119692016397635282789380426531664679199965578900358618119189158136898432421950373231766678391820964805699145318547744042914920227508599735832046275265898017285017145919037587396118136562986973670316348557102101306507107595817334853442128422126412160588798479567217082010823487019997418942445457365767637648929543551376055993835724867428606745139865344144461396234228091342662951835688782061533459552617480849960147845544869732651205633973045436260991131824779315429623503374976787945886867650510039612507610770326901239855244743493505600460347146386067366080675568749593024895947528005345908932402724911581672927865138289894219276918317638908830611705746223899569118845097588549564062566860662790119211876375291338867400523695552318249185452430446029906810309368065089662963083817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91afccaa5f838d108192ebb3eb947a7531fbe124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dprinted.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8bgme.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abbiemalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acastlouisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliguimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asb-sakray.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austin8282.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bidding.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.composingprograms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copperprice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danitavares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.databuzzword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalplauground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doimei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doublestroller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drinkliquidfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drycleanerforsale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fansmini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giovannafrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handelsregisterauszuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haokaisen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-b.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.italienfotos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaspreetsinghattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleiderkoffer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lascourt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leetocode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lliureonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotofbooty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loungedecorplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medizinschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mittelspitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuclearstress.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ottawarocklottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papaq.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pholevancouver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pnv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privateinvestment.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romanrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sglib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southeast-home-educators.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sovgracepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steelseriesgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.summerhillrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wfmbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whkqzg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwendometriose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xahard.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--khlkombi-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youkuzhuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dprinted.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8bgme.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbiemalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acastlouisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliguimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asb-sakray.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin8282.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidding.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'composingprograms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copperprice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danitavares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'databuzzword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalplauground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doimei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doublestroller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drinkliquidfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drycleanerforsale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fansmini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giovannafrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelsregisterauszuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haokaisen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-b.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italienfotos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspreetsinghattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleiderkoffer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lascourt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leetocode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lliureonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotofbooty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loungedecorplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medizinschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mittelspitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuclearstress.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawarocklottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papaq.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pholevancouver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateinvestment.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sglib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeast-home-educators.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovgracepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelseriesgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhillrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfmbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whkqzg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwendometriose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xahard.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--khlkombi-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youkuzhuan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afd0cd04d0000040300483046022100f58003da99b40b8f4c5b4b773e038e348b723cd46ea26f1f289c8872d994d765022100cf4326638d2435c283bd7f09925464515a6214684371106d2af47bb73c118d7e007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afd0cd06a00000403004630440220100ac25b6035a050d26d11d55f626a3c4dc3d9bfae1fec9c803a3c1a8e4893c2022012d9e635a1a42e75d536f47a485210ee8309d9fbcc01bc67eb688800cc3f6a32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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