angkanet.win

Issued by R3

About this certificate

This digital certificate with serial number 04:76:b9:af:c9:cc:c9:db:0f:bb:31:73:9a:a5:e1:6e:ac:7f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=angkanet.win

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:b9:af:c9:cc:c9:db:0f:bb:31:73:9a:a5:e1:6e:ac:7f
Serial Number (int): 388849282947871525109408866621767977708671
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8f:f0:50:a3:db:9a:cc:42:38:40:1d:20:ba:5d:ba:88:f9:2f:6f:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:51:7b:00:bf:76:47:a0:39:04:b7:dc:dc:fb:55:74:70:3f:a0:50
Fingerprint (sha256): 85:d1:b5:a7:32:59:c0:cb:63:87:14:c2:69:b7:41:fa:c8:b4:d3:c0:19:81:dd:e1:b5:6a:cd:ec:40:3a:93:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate angkanet.win

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for angkanet.win

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acidproofbricklinings.com
*.angkanet.win
*.aroundtheworldcruises.com.au
*.artsforkidshub.com
*.callforstartups.com
*.cyndlist.com
*.dj-tayakatyusha.ru
*.dokmgt.com
*.experuan.com
*.flameupload.com
*.foodnewtork.com
*.forgottenmoney.com.au
*.gaycockworld.com
*.get2it.org
*.getcash4recycling.com
*.homeautomationservices.com.au
*.inductionstove.org
*.lolascoffeehouse.com
*.meinvmh.top
*.mmega.nz
*.myeitherwallet.com
*.new-talent.net
*.onlivevideoconverter.com
*.otbchess.org
*.paintandpartystudios.com
*.phypayment.com
*.profilekpop.com
*.robbins-nursery.com
*.roomlocks.com
*.rubbishremovalbrisbane.com.au
*.sfw.in
*.shopeketo.com
*.solo-lo.ru
*.statkick.ru
*.steelfinder.com.au
*.stockschool.com
*.tarjetas-oh.com
*.tianxiameishi.com
*.touchpayweb.com
*.ubf.in
*.vanderbiltmortage.com
*.vciticards.com
*.vipkento.ru
*.whichflight.com.au
*.whichsparkie.com.au
*.wizzaire.com
*.xn--lbk.com
*.yamahamotorcycle.com
*.zachariah.com.au
*.zarabeachresort.com
acidproofbricklinings.com
angkanet.win
aroundtheworldcruises.com.au
artsforkidshub.com
callforstartups.com
cyndlist.com
dj-tayakatyusha.ru
dokmgt.com
experuan.com
flameupload.com
foodnewtork.com
forgottenmoney.com.au
gaycockworld.com
get2it.org
getcash4recycling.com
homeautomationservices.com.au
inductionstove.org
lolascoffeehouse.com
meinvmh.top
mmega.nz
myeitherwallet.com
new-talent.net
onlivevideoconverter.com
otbchess.org
paintandpartystudios.com
phypayment.com
profilekpop.com
robbins-nursery.com
roomlocks.com
rubbishremovalbrisbane.com.au
sfw.in
shopeketo.com
solo-lo.ru
statkick.ru
steelfinder.com.au
stockschool.com
tarjetas-oh.com
tianxiameishi.com
touchpayweb.com
ubf.in
vanderbiltmortage.com
vciticards.com
vipkento.ru
whichflight.com.au
whichsparkie.com.au
wizzaire.com
xn--lbk.com
yamahamotorcycle.com
zachariah.com.au
zarabeachresort.com

Other certificates including the domain name angkanet.win

(limited to 100 certificates)
angkanet.win
angkanet.win
angkanet.win
fasoiuhfd2ee.com
angkanet.win

Certificate

The complete raw certificate details for angkanet.win in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINVzCCDD+gAwIBAgISBHa5r8nMydsPuzFzmqXhbqx/MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjQxNDE3MzVaFw0yNDA2MjIxNDE3MzRaMBcxFTATBgNVBAMT
DGFuZ2thbmV0LndpbjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKC6
Pxu5GwPmvOMiKHmCfGpANbEqaytuGyYA98vmPUkRXcvxPSZvBvY1NjuwGVCqPdDV
6f1WwE3IvLpwopxSp+8z1na8CcdJ4mb4AC77ZLmrvL3n2OutmemC/iLLrV7g1Wtn
S66hGJXJED3AR2cQ4usqSe46DsBzC9UC8MEea6ihkrStahw4WVOjEoPLyWjEIoYX
oKedzqa6vj86CoQhFr5XYXUg+svg/ML+zjpt3KpFGwzM/i8+4VRqbtID7VvQEGky
jDBuk3nP9Rv65PQBDM39njj2W8BB6lmoJZFMfXhTOlK8pkSw17hqKRrRCWZiK/1L
DyGrbRQ1z6fOroGU/40C5yF2t9Tudis1bOtLkJZDAlGjIh/A5YfTQ/WqEvO2M4lu
RflBHHO40zZ9fi+lIU4KyvYHzFZVOiE5ogkxkYTg1gbBnbsQxT5lxyifnHHqXTaV
cLVIgOq71d4ID3cOCOoA1prNt7cFmnHupOxwmEHoS6uEU8jiQjIhGKCWIlsiad/A
ShAEhe8WoPulEzYFf1pNO+WuiNiHYnuwwRrwqyOT4CqAoFYjAd+Tcib7vTu0ql3D
Jya7lQHbLGQF8/KWl/stTRvlzJNXgiM6PMfEGiBQDUmGyJHFwuycgTpdlSGo6WJT
1+O2YGGRjhvSiGPwbE9p3UxBZZSZslvraqT6MRWLAgMBAAGjggmAMIIJfDAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFI/wUKPbmsxCOEAdILpduoj5L28ZMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIHhwYDVR0RBIIHfjCCB3qCGyouYWNpZHByb29mYnJp
Y2tsaW5pbmdzLmNvbYIOKi5hbmdrYW5ldC53aW6CHiouYXJvdW5kdGhld29ybGRj
cnVpc2VzLmNvbS5hdYIUKi5hcnRzZm9ya2lkc2h1Yi5jb22CFSouY2FsbGZvcnN0
YXJ0dXBzLmNvbYIOKi5jeW5kbGlzdC5jb22CFCouZGotdGF5YWthdHl1c2hhLnJ1
ggwqLmRva21ndC5jb22CDiouZXhwZXJ1YW4uY29tghEqLmZsYW1ldXBsb2FkLmNv
bYIRKi5mb29kbmV3dG9yay5jb22CFyouZm9yZ290dGVubW9uZXkuY29tLmF1ghIq
LmdheWNvY2t3b3JsZC5jb22CDCouZ2V0Mml0Lm9yZ4IXKi5nZXRjYXNoNHJlY3lj
bGluZy5jb22CHyouaG9tZWF1dG9tYXRpb25zZXJ2aWNlcy5jb20uYXWCFCouaW5k
dWN0aW9uc3RvdmUub3JnghYqLmxvbGFzY29mZmVlaG91c2UuY29tgg0qLm1laW52
bWgudG9wggoqLm1tZWdhLm56ghQqLm15ZWl0aGVyd2FsbGV0LmNvbYIQKi5uZXct
dGFsZW50Lm5ldIIaKi5vbmxpdmV2aWRlb2NvbnZlcnRlci5jb22CDioub3RiY2hl
c3Mub3JnghoqLnBhaW50YW5kcGFydHlzdHVkaW9zLmNvbYIQKi5waHlwYXltZW50
LmNvbYIRKi5wcm9maWxla3BvcC5jb22CFSoucm9iYmlucy1udXJzZXJ5LmNvbYIP
Ki5yb29tbG9ja3MuY29tgh8qLnJ1YmJpc2hyZW1vdmFsYnJpc2JhbmUuY29tLmF1
gggqLnNmdy5pboIPKi5zaG9wZWtldG8uY29tggwqLnNvbG8tbG8ucnWCDSouc3Rh
dGtpY2sucnWCFCouc3RlZWxmaW5kZXIuY29tLmF1ghEqLnN0b2Nrc2Nob29sLmNv
bYIRKi50YXJqZXRhcy1vaC5jb22CEyoudGlhbnhpYW1laXNoaS5jb22CESoudG91
Y2hwYXl3ZWIuY29tgggqLnViZi5pboIXKi52YW5kZXJiaWx0bW9ydGFnZS5jb22C
ECoudmNpdGljYXJkcy5jb22CDSoudmlwa2VudG8ucnWCFCoud2hpY2hmbGlnaHQu
Y29tLmF1ghUqLndoaWNoc3BhcmtpZS5jb20uYXWCDioud2l6emFpcmUuY29tgg0q
LnhuLS1sYmsuY29tghYqLnlhbWFoYW1vdG9yY3ljbGUuY29tghIqLnphY2hhcmlh
aC5jb20uYXWCFSouemFyYWJlYWNocmVzb3J0LmNvbYIZYWNpZHByb29mYnJpY2ts
aW5pbmdzLmNvbYIMYW5na2FuZXQud2lughxhcm91bmR0aGV3b3JsZGNydWlzZXMu
Y29tLmF1ghJhcnRzZm9ya2lkc2h1Yi5jb22CE2NhbGxmb3JzdGFydHVwcy5jb22C
DGN5bmRsaXN0LmNvbYISZGotdGF5YWthdHl1c2hhLnJ1ggpkb2ttZ3QuY29tggxl
eHBlcnVhbi5jb22CD2ZsYW1ldXBsb2FkLmNvbYIPZm9vZG5ld3RvcmsuY29tghVm
b3Jnb3R0ZW5tb25leS5jb20uYXWCEGdheWNvY2t3b3JsZC5jb22CCmdldDJpdC5v
cmeCFWdldGNhc2g0cmVjeWNsaW5nLmNvbYIdaG9tZWF1dG9tYXRpb25zZXJ2aWNl
cy5jb20uYXWCEmluZHVjdGlvbnN0b3ZlLm9yZ4IUbG9sYXNjb2ZmZWVob3VzZS5j
b22CC21laW52bWgudG9wgghtbWVnYS5ueoISbXllaXRoZXJ3YWxsZXQuY29tgg5u
ZXctdGFsZW50Lm5ldIIYb25saXZldmlkZW9jb252ZXJ0ZXIuY29tggxvdGJjaGVz
cy5vcmeCGHBhaW50YW5kcGFydHlzdHVkaW9zLmNvbYIOcGh5cGF5bWVudC5jb22C
D3Byb2ZpbGVrcG9wLmNvbYITcm9iYmlucy1udXJzZXJ5LmNvbYINcm9vbWxvY2tz
LmNvbYIdcnViYmlzaHJlbW92YWxicmlzYmFuZS5jb20uYXWCBnNmdy5pboINc2hv
cGVrZXRvLmNvbYIKc29sby1sby5ydYILc3RhdGtpY2sucnWCEnN0ZWVsZmluZGVy
LmNvbS5hdYIPc3RvY2tzY2hvb2wuY29tgg90YXJqZXRhcy1vaC5jb22CEXRpYW54
aWFtZWlzaGkuY29tgg90b3VjaHBheXdlYi5jb22CBnViZi5pboIVdmFuZGVyYmls
dG1vcnRhZ2UuY29tgg52Y2l0aWNhcmRzLmNvbYILdmlwa2VudG8ucnWCEndoaWNo
ZmxpZ2h0LmNvbS5hdYITd2hpY2hzcGFya2llLmNvbS5hdYIMd2l6emFpcmUuY29t
ggt4bi0tbGJrLmNvbYIUeWFtYWhhbW90b3JjeWNsZS5jb22CEHphY2hhcmlhaC5j
b20uYXWCE3phcmFiZWFjaHJlc29ydC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw
ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDuzdBk1dsazsVct520zROiModGfLzs
3sNRSFlGcR+1mwAAAY5xCdxTAAAEAwBHMEUCIQDQVHZ/cICtq5LJlMLiKlRSXInf
ZnNDEoVKSq+gK2eVfQIgRDT3yetlCVRX6r78N/qSxvVvs4RFQhQAHb3TazD/fTcA
dgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY5xCeQwAAAEAwBH
MEUCIHQ7l2Oc321EYs6MtceVJhhveg4YRBzD2Iw55jNlLhsHAiEA+rB6vcpxV7ZI
EwrWgRCR6Z0Hu9lhOfFqeIrZuLKFeIUwDQYJKoZIhvcNAQELBQADggEBADtuLaSB
lpr0wJG2iYobQQawYbN/4nDzp4sNCY3xEQx929YHwPfSGxAUqsb0C5LFXHa1GlXN
FOKYZwmd0lgZh5RVJcJ/ZeeSEXqBtK65bZNPKiEyhgSE1ayWDE0ZnKYC7l8wHjDd
Tckq0nnuH0ol6ZPlPU9z8enBrkVwkG08k0lDEKL4ScRFoso/DOSh6zvbChdVqsot
5QS+aMzSD7HNQhCa3GSd3HiKPrzwZFK8TnX7wjHUn1bxjmx6zlbud813YK7pob5Y
jSZuhxwwpcMXxuDQQq/vp/QnQKRGf+bmwZTuE9YkM3kojZbca0CdCF0fBCScv+7w
cV+NxyIwXBw1B5I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388849282947871525109408866621767977708671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 14:17:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 14:17:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'angkanet.win'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655711095794673416449976395456686737706406911144277501463156128074823692299037561044891061238349929763531668552521908429905300304625497718584624412753757699697073784942199164071898833324188490603149070342113375468728506762412881021054733224422008422839123515935527627512144647376237487259829612697225027899086369940670036173262116084522854330852529496372200762403747405097158613192325492643841489508461592075230379339157437257898621914544961921582396014691690902880375897347889204644000342089996248927146592141314492366851658457156421428083564688421114391174435065269735865261310514325194976160300040332215973121374114239439131859415248258498289090288125530565202713448595674048168139923104387820858337078460685341607540554978413981934118594827802971094028889121354325112665964928535535839409186987604165852154819785392524859339001416302970296516766355504372739780001917434811086443915734302160410066954526215953793692219515981989876848038343721458277326701366331848951912069674647477916918906583612704763969023958082119084094937726535837023396825975490275530657710199062803430215281512499816074663213141213906325464282496910069130717539707698824061535311435680560074739374335564635531584158966648488621814794377813295693007422559627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ff050a3db9acc4238401d20ba5dba88f92f6f19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acidproofbricklinings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angkanet.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aroundtheworldcruises.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artsforkidshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callforstartups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyndlist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dj-tayakatyusha.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dokmgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flameupload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodnewtork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forgottenmoney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaycockworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.get2it.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getcash4recycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeautomationservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inductionstove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lolascoffeehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meinvmh.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmega.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myeitherwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.new-talent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlivevideoconverter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otbchess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paintandpartystudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phypayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profilekpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robbins-nursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roomlocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubbishremovalbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopeketo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solo-lo.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statkick.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steelfinder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarjetas-oh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tianxiameishi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchpayweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubf.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanderbiltmortage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vciticards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipkento.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichflight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichsparkie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wizzaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lbk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamahamotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zachariah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zarabeachresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acidproofbricklinings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angkanet.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aroundtheworldcruises.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsforkidshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callforstartups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyndlist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dj-tayakatyusha.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokmgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flameupload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodnewtork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgottenmoney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaycockworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get2it.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getcash4recycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeautomationservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inductionstove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lolascoffeehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinvmh.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmega.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myeitherwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-talent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlivevideoconverter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otbchess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintandpartystudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phypayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profilekpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbins-nursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomlocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubbishremovalbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopeketo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solo-lo.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statkick.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelfinder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarjetas-oh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tianxiameishi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchpayweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubf.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanderbiltmortage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vciticards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipkento.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichflight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichsparkie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizzaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lbk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamahamotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zachariah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zarabeachresort.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e7109dc530000040300473045022100d054767f7080adab92c994c2e22a54525c89df66734312854a4aafa02b67957d02204434f7c9eb65095457eabefc37fa92c6f56fb384454214001dbdd36b30ff7d37007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7109e43000000403004730450220743b97639cdf6d4462ce8cb5c79526186f7a0e18441cc3d88c39e633652e1b07022100fab07abdca7157b648130ad6811091e99d07bbd96139f16a788ad9b8b2857885
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003b6e2da481969af4c091b6898a1b4106b061b37fe270f3a78b0d098df1110c7ddbd607c0f7d21b1014aac6f40b92c55c76b51a55cd14e29867099dd2581987945525c27f65e792117a81b4aeb96d934f2a2132860484d5ac960c4d199ca602ee5f301e30dd4dc92ad279ee1f4a25e993e53d4f73f1e9c1ae4570906d3c93494310a2f849c445a2ca3f0ce4a1eb3bdb0a1755aaca2de504be68ccd20fb1cd42109adc649ddc788a3ebcf06452bc4e75fbc231d49f56f18e6c7ace56ee77cd7760aee9a1be588d266e871c30a5c317c6e0d042afefa7f42740a4467fe6e6c194ee13d6243379288d96dc6b409d085d1f04249cbfeef0715f8dc722305c1c350792