geiringer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c9:92:36:d4:1c:48:61:58:f0:50:91:ab:ee:e5:1c:f5:f7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geiringer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:92:36:d4:1c:48:61:58:f0:50:91:ab:ee:e5:1c:f5:f7
Serial Number (int): 329927965519915954825212336553057001993719
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:80:b7:77:dd:e5:b7:b6:fe:11:63:be:7b:f9:ab:bb:94:43:0d:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:2e:48:e4:ee:47:74:01:fe:8e:32:2d:8f:12:24:15:61:40:64:68
Fingerprint (sha256): 87:75:ca:fd:70:57:68:22:a5:62:ec:a1:e2:d5:06:33:ba:8d:ed:74:07:7e:22:2d:09:16:89:2c:30:ac:f4:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geiringer.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geiringer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9xmovies.golf
*.aberton.com
*.acomerbien.com
*.adgp.com
*.advogado.com
*.albuquerquevacations.com
*.amdur.com
*.artistiko.com
*.audissey.com
*.badcrefitloans.com
*.barchella.com
*.bartrans.com
*.bglots.com
*.bigsreenvr.com
*.bordallo.com
*.broadband.sg
*.christianapartments.com
*.cloudquotes.com.au
*.comparsions.org
*.cosmoacril.com
*.cotart.com
*.dudeflesh.com
*.essencehalthcare.com
*.exupload.com
*.frankkonia.de
*.gainsburg.com
*.geiringer.com
*.gisnlfulppf.com
*.gra-assocation.com
*.jianjing.com
*.kabelos.com
*.lacasadesol.com
*.lashonhara.com
*.lazerson.com
*.lukach.com
*.musyuusei.com
*.ogcoffee.com
*.ossandon.com
*.pakcric.com
*.pakistani.cc
*.riodecontas.com
*.speedycas.com
*.tabnakled.com
*.tawbi.com
*.thoughtbomb.com
*.timbang.com
*.tintun.com
*.validi.com
*.worldwidetrainers.com
*.yildun.com
9xmovies.golf
aberton.com
acomerbien.com
adgp.com
advogado.com
albuquerquevacations.com
amdur.com
artistiko.com
audissey.com
badcrefitloans.com
barchella.com
bartrans.com
bglots.com
bigsreenvr.com
bordallo.com
broadband.sg
christianapartments.com
cloudquotes.com.au
comparsions.org
cosmoacril.com
cotart.com
dudeflesh.com
essencehalthcare.com
exupload.com
frankkonia.de
gainsburg.com
geiringer.com
gisnlfulppf.com
gra-assocation.com
jianjing.com
kabelos.com
lacasadesol.com
lashonhara.com
lazerson.com
lukach.com
musyuusei.com
ogcoffee.com
ossandon.com
pakcric.com
pakistani.cc
riodecontas.com
speedycas.com
tabnakled.com
tawbi.com
thoughtbomb.com
timbang.com
tintun.com
validi.com
worldwidetrainers.com
yildun.com

Other certificates including the domain name geiringer.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for geiringer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMOzCCCyOgAwIBAgISA8mSNtQcSGFY8FCRq+7lHPX3MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTMwOTQ2MjdaFw0yNDA2MTEwOTQ2MjZaMBgxFjAUBgNVBAMT
DWdlaXJpbmdlci5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDV
NdAA7wAPNQvRf+yNTOPrBjhpVqbIU4ec5KokQ9RIuZsY7LnoQBgicSDjSkbLizsv
D8/kerxWeGIxHB4/FVUbX3s8jVNCnYKDZ2ipxoUCopFtPTpN5NSEDNzkNIylYhVE
/s2qYFxrCaZwlQe7Zop3hPUfV+eIxDg7ATNkeVQbBEiC/nLmpqjnKu3MMiupKQRJ
d83uuzmr8xdKWt+vrJVrlSO71Ne1f9d6oJK8tz2Q9WyysZ/vTm+lFeC3rNuNqFTg
H6xRmZWTVxsNnaihFN8xRB453Q8j0hxtyXbtdmUb0FFlF0lM/9eLQoIEz3kwm0lh
s8YtLkMLyBYI4NEvEE1z9fk50A+AulHQraREMZERi6c/mg2cJouefBWSA5vnBeAQ
2VHVPwCjpDOaWxPeqOeX6bTNjsrR2zl9deaza5UF9bvivdZugJa4BS2KKLMJhSxh
r61jN1MKPcUw7C/x3v71DiksY+T3KhWwLZwh4fZ//y3xWjBhQcirxHPDWyjVXOp/
URSfL9Pmvqh+d7UUq5rumERGpt/jIx28wPpzpncFqA8kDtDy941EiwDDwi0LxKwu
Po0M+1p5zYZ1ium3p0f1632xbJSbcLNZnw/Hh/hRJ6SVRucc2U2XzkwrA2EdompO
RC0JMCi1WUtMiSCF7yrk+QnURfmuj6ugyv5L6wAqzQIDAQABo4IIYzCCCF8wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBTrgLd33eW3tv4RY757+au7lEMN+TAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBmsGA1UdEQSCBmIwggZegg8qLjl4bW92aWVzLmdv
bGaCDSouYWJlcnRvbi5jb22CECouYWNvbWVyYmllbi5jb22CCiouYWRncC5jb22C
DiouYWR2b2dhZG8uY29tghoqLmFsYnVxdWVycXVldmFjYXRpb25zLmNvbYILKi5h
bWR1ci5jb22CDyouYXJ0aXN0aWtvLmNvbYIOKi5hdWRpc3NleS5jb22CFCouYmFk
Y3JlZml0bG9hbnMuY29tgg8qLmJhcmNoZWxsYS5jb22CDiouYmFydHJhbnMuY29t
ggwqLmJnbG90cy5jb22CECouYmlnc3JlZW52ci5jb22CDiouYm9yZGFsbG8uY29t
gg4qLmJyb2FkYmFuZC5zZ4IZKi5jaHJpc3RpYW5hcGFydG1lbnRzLmNvbYIUKi5j
bG91ZHF1b3Rlcy5jb20uYXWCESouY29tcGFyc2lvbnMub3JnghAqLmNvc21vYWNy
aWwuY29tggwqLmNvdGFydC5jb22CDyouZHVkZWZsZXNoLmNvbYIWKi5lc3NlbmNl
aGFsdGhjYXJlLmNvbYIOKi5leHVwbG9hZC5jb22CDyouZnJhbmtrb25pYS5kZYIP
Ki5nYWluc2J1cmcuY29tgg8qLmdlaXJpbmdlci5jb22CESouZ2lzbmxmdWxwcGYu
Y29tghQqLmdyYS1hc3NvY2F0aW9uLmNvbYIOKi5qaWFuamluZy5jb22CDSoua2Fi
ZWxvcy5jb22CESoubGFjYXNhZGVzb2wuY29tghAqLmxhc2hvbmhhcmEuY29tgg4q
LmxhemVyc29uLmNvbYIMKi5sdWthY2guY29tgg8qLm11c3l1dXNlaS5jb22CDiou
b2djb2ZmZWUuY29tgg4qLm9zc2FuZG9uLmNvbYINKi5wYWtjcmljLmNvbYIOKi5w
YWtpc3RhbmkuY2OCESoucmlvZGVjb250YXMuY29tgg8qLnNwZWVkeWNhcy5jb22C
DyoudGFibmFrbGVkLmNvbYILKi50YXdiaS5jb22CESoudGhvdWdodGJvbWIuY29t
gg0qLnRpbWJhbmcuY29tggwqLnRpbnR1bi5jb22CDCoudmFsaWRpLmNvbYIXKi53
b3JsZHdpZGV0cmFpbmVycy5jb22CDCoueWlsZHVuLmNvbYINOXhtb3ZpZXMuZ29s
ZoILYWJlcnRvbi5jb22CDmFjb21lcmJpZW4uY29tgghhZGdwLmNvbYIMYWR2b2dh
ZG8uY29tghhhbGJ1cXVlcnF1ZXZhY2F0aW9ucy5jb22CCWFtZHVyLmNvbYINYXJ0
aXN0aWtvLmNvbYIMYXVkaXNzZXkuY29tghJiYWRjcmVmaXRsb2Fucy5jb22CDWJh
cmNoZWxsYS5jb22CDGJhcnRyYW5zLmNvbYIKYmdsb3RzLmNvbYIOYmlnc3JlZW52
ci5jb22CDGJvcmRhbGxvLmNvbYIMYnJvYWRiYW5kLnNnghdjaHJpc3RpYW5hcGFy
dG1lbnRzLmNvbYISY2xvdWRxdW90ZXMuY29tLmF1gg9jb21wYXJzaW9ucy5vcmeC
DmNvc21vYWNyaWwuY29tggpjb3RhcnQuY29tgg1kdWRlZmxlc2guY29tghRlc3Nl
bmNlaGFsdGhjYXJlLmNvbYIMZXh1cGxvYWQuY29tgg1mcmFua2tvbmlhLmRlgg1n
YWluc2J1cmcuY29tgg1nZWlyaW5nZXIuY29tgg9naXNubGZ1bHBwZi5jb22CEmdy
YS1hc3NvY2F0aW9uLmNvbYIMamlhbmppbmcuY29tggtrYWJlbG9zLmNvbYIPbGFj
YXNhZGVzb2wuY29tgg5sYXNob25oYXJhLmNvbYIMbGF6ZXJzb24uY29tggpsdWth
Y2guY29tgg1tdXN5dXVzZWkuY29tggxvZ2NvZmZlZS5jb22CDG9zc2FuZG9uLmNv
bYILcGFrY3JpYy5jb22CDHBha2lzdGFuaS5jY4IPcmlvZGVjb250YXMuY29tgg1z
cGVlZHljYXMuY29tgg10YWJuYWtsZWQuY29tggl0YXdiaS5jb22CD3Rob3VnaHRi
b21iLmNvbYILdGltYmFuZy5jb22CCnRpbnR1bi5jb22CCnZhbGlkaS5jb22CFXdv
cmxkd2lkZXRyYWluZXJzLmNvbYIKeWlsZHVuLmNvbTATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ADtTd3U+LbmAToswWwb+QDtn
2E/D9Me9AA0tcm/h+tQXAAABjjdrrSsAAAQDAEYwRAIgOO7D9AmWFWMeag9rIwmx
0OmHDyk4NFK2XESvr28okIACIBOEWvJWk6MWANgyusx5Lf29uyueJAw06UjtL1MY
TjziAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGON2uvaQAA
BAMARzBFAiBH9GdEdghpvUOJ/sEo3SJyxeR2sQMcseX/JE6E5orFGgIhALChrJO3
2AMTokwHSHVYIbDosiXpDOy2Amful2yJqd0NMA0GCSqGSIb3DQEBCwUAA4IBAQBT
3M742Q1fLWcWSMI10pk95YR6uhzQh9qsjqyf8KFcWO3nYzjsOlyImYvNgBaQpePY
iU832EwG+EcReduz1xuPhmWkMdNNYWTHa0T9eKu+riqpZWxJ6Rd5yAMh99oS2xkU
J2B5Un84mwlDdGVVXzk2ahPeEAJgBjrMDHNw6ZQqjpbMzbEQjbXgPIJEd6dmv1A8
m5rmzZ796HzZYjBuw0L2AJ+9B7F3AqvfQ3ftWbvr6rcArOeohlQ1qzobhwY0akp9
/ho32njqpkPFJ9HrTr3nKEmWBDSkGObORbtFT2BsXI/qHalUQqwUL/QY+VBZcHj7
+aTTyKa0uHg6LbK6PvEj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329927965519915954825212336553057001993719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 09:46:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 09:46:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geiringer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869821748615345641461875484014510280663234801201289829680537864538273364871592776429233602259413831453610087665970954094399488431682205534004743631495679447391566739464452906375371055758111789699760658515171476025484196399573539294448755503293362652293796233051720907475995337289133565513210366398344206962382777088170230035342207468776619571212650572991485615244676555409753804785447701552731998550091826684108193492865672136798332497115097387982567602572536720617707218824292786554245881150357754255321874252599979170689177172581040785621033300165942902112538574074270215345186169585095833167037073519675056092149715891626790778690811065146489943064873588882367066184405479932328976663851038312482895435548026920813222512760984604767862897625514798099648814939947491707553829318113784906351350053283710179322953525191010951347169984376689838152862933723050212595996092779659120891363859266320979976626169047403744888855739482805683180462430523102671597908414396587429722125291458525496600576323492975721962794322107267771723498318180698660079539588870232664173703036120415100797367830779020320592924274730837861341422419600574403791174963234712513838947786389850917441662209685874607761580490667538586490695985341571983582666173133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb80b777dde5b7b6fe1163be7bf9abbb94430df9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1634 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9xmovies.golf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aberton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acomerbien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adgp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advogado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albuquerquevacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amdur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artistiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audissey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badcrefitloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barchella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bartrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bglots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigsreenvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bordallo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadband.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christianapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comparsions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmoacril.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cotart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dudeflesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essencehalthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exupload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankkonia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gainsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geiringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gisnlfulppf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gra-assocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jianjing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kabelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacasadesol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lashonhara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lazerson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lukach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musyuusei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ossandon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakcric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistani.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riodecontas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedycas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tabnakled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tawbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thoughtbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tintun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.validi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldwidetrainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yildun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9xmovies.golf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomerbien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adgp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advogado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albuquerquevacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artistiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audissey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badcrefitloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barchella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bglots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigsreenvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bordallo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadband.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparsions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmoacril.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dudeflesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essencehalthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exupload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankkonia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geiringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisnlfulppf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gra-assocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jianjing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacasadesol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lashonhara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazerson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musyuusei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ossandon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakcric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistani.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riodecontas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedycas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabnakled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tawbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tintun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwidetrainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yildun.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e376bad2b0000040300463044022038eec3f4099615631e6a0f6b2309b1d0e9870f29383452b65c44afaf6f289080022013845af25693a31600d832bacc792dfdbdbb2b9e240c34e948ed2f53184e3ce200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e376baf690000040300473045022047f46744760869bd4389fec128dd2272c5e476b1031cb1e5ff244e84e68ac51a022100b0a1ac93b7d80313a24c0748755821b0e8b225e90cecb60267ee976c89a9dd0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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