e-daf.org

Issued by R3

About this certificate

This digital certificate with serial number 04:6b:3b:11:3f:71:45:37:62:a9:47:05:68:ef:4a:ab:54:87 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=e-daf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6b:3b:11:3f:71:45:37:62:a9:47:05:68:ef:4a:ab:54:87
Serial Number (int): 384937870995145316122327081793028581184647
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:97:0d:df:ac:4f:ce:d8:2c:78:48:c6:28:0c:b5:dd:a3:1e:cd:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:1a:5e:db:0c:85:6c:a6:04:7a:e0:71:c1:6a:81:cf:7f:e4:bc:f1
Fingerprint (sha256): 88:ff:da:59:12:be:3f:ba:70:9e:4c:4c:cf:9b:98:b1:14:8e:f1:3e:bb:29:74:6c:c8:6c:3f:68:bb:e1:5f:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate e-daf.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for e-daf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abolitionmorale.top
*.autopsyfootage.com
*.broadcosta.com
*.broskey.com
*.cardova.com
*.cashfinance.net.au
*.collarspace.co
*.costreporting.com
*.devantier.com
*.diarioalicante.com
*.discoverstudentplatinum.com
*.drsocks.com
*.e-daf.org
*.e-edis.de
*.ebooks-books.com
*.evergreencreditunion.com
*.forkliftlicences.com
*.formagroup.com
*.hardwoodframes.com.au
*.haroldnet.com
*.himovied.top
*.houju.com
*.imaginativetrench.top
*.lasdivasvip.com
*.lestrouvailles.com
*.lightningconsulting.com
*.markmodels.com
*.medics.in
*.mounted.com.au
*.muychevere.com
*.narmol.com
*.osmania.org
*.oxoo.com
*.peoplecloning.com
*.quilten.com
*.sangh.com
*.schaeferfamily.com
*.shoumen.com
*.somplemobile.com
*.sustainableblog.com
*.tithonia.com
*.toccoaclinic.com
*.ujpest.com
*.uoi.com.au
*.vanessadel.com
*.wamj.com
*.watchgurad.com
*.wildernessflying.com
*.wildernesshut.com
*.xn--sddeustche-9db.de
abolitionmorale.top
autopsyfootage.com
broadcosta.com
broskey.com
cardova.com
cashfinance.net.au
collarspace.co
costreporting.com
devantier.com
diarioalicante.com
discoverstudentplatinum.com
drsocks.com
e-daf.org
e-edis.de
ebooks-books.com
evergreencreditunion.com
forkliftlicences.com
formagroup.com
hardwoodframes.com.au
haroldnet.com
himovied.top
houju.com
imaginativetrench.top
lasdivasvip.com
lestrouvailles.com
lightningconsulting.com
markmodels.com
medics.in
mounted.com.au
muychevere.com
narmol.com
osmania.org
oxoo.com
peoplecloning.com
quilten.com
sangh.com
schaeferfamily.com
shoumen.com
somplemobile.com
sustainableblog.com
tithonia.com
toccoaclinic.com
ujpest.com
uoi.com.au
vanessadel.com
wamj.com
watchgurad.com
wildernessflying.com
wildernesshut.com
xn--sddeustche-9db.de

Other certificates including the domain name e-daf.org

(limited to 100 certificates)
aptoidd.com
stjosephsite.mobi
getjasonagardtomaridfund.com
e-daf.org
e-daf.org
e-daf.org
e-daf.org
centerstageacademyva.com
e-daf.org
e-daf.org
webhooks.site

Certificate

The complete raw certificate details for e-daf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMyjCCC7KgAwIBAgISBGs7ET9xRTdiqUcFaO9Kq1SHMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTQyMzQ4MzhaFw0yNDAyMTIyMzQ4MzdaMBQxEjAQBgNVBAMT
CWUtZGFmLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ8ep6Hc
ViRPRfEHI7verrMixaq7/hgB4Uyoz80IcJnqXyKVqqFyoY3G85VfAMTr+X8GQRua
6id/s2OzDW/XzM/sZP2L5xaQWDvg4qlU/QpNhPTW3VEEWFVQ+fh45mpAXn7wj3WI
BY96YNELo118qNCc3ryTRWJYEPqS/Gkqj6ua+6UPDWmagf1aQKUt6ch6vEu5cB3J
kp4Ad3OS16v2fNfFzx2oWaIgvyOmFzamtBtxX7g0d9pexL4dY+tjE+BUAWn9KFNQ
DsjdDJMWH2kHJ4ZNxOQO3WpbAvabHqLHQqOrzewqWpOGtzgFTBfbAv+DbigRXNR1
XGYLNIpavVCxTKGTxiQxLwp9IUu1JnHXdg3Xvy88ctSXpRYZqQndXJDTmM/m7V8K
jRGfyy3pdIejHCX+M1QCGdEpnd48Tm91laIMmy3GBwb2xYOlbe+ekdex/Vo77Fff
bQLUPmuf7zFoLo9AKrM2haLgUDk6K4bajFrkaJDXUZ8KeDtnCAZf1wx+KoCJdbqd
3QgT1BrkoWkJkSbyqQmTXqgpo1j+BhRGcFAZbhw0tlkmRznCneLbcRbZQ/MKcChw
eFlQvkglWdPR6Bg2oh8KmSlzEpc+C2Pc8Flh3SuiYY+GeCC6AzBk9AbkZDd4n5ay
MHUL6RFjnjn7oK8/0Xg8qnfSVplQB11jp/x9AgMBAAGjggj2MIII8jAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFGyXDd+sT87YLHhIxigMtd2jHs2fMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIG/QYDVR0RBIIG9DCCBvCCFSouYWJvbGl0aW9ubW9yYWxl
LnRvcIIUKi5hdXRvcHN5Zm9vdGFnZS5jb22CECouYnJvYWRjb3N0YS5jb22CDSou
YnJvc2tleS5jb22CDSouY2FyZG92YS5jb22CFCouY2FzaGZpbmFuY2UubmV0LmF1
ghAqLmNvbGxhcnNwYWNlLmNvghMqLmNvc3RyZXBvcnRpbmcuY29tgg8qLmRldmFu
dGllci5jb22CFCouZGlhcmlvYWxpY2FudGUuY29tgh0qLmRpc2NvdmVyc3R1ZGVu
dHBsYXRpbnVtLmNvbYINKi5kcnNvY2tzLmNvbYILKi5lLWRhZi5vcmeCCyouZS1l
ZGlzLmRlghIqLmVib29rcy1ib29rcy5jb22CGiouZXZlcmdyZWVuY3JlZGl0dW5p
b24uY29tghYqLmZvcmtsaWZ0bGljZW5jZXMuY29tghAqLmZvcm1hZ3JvdXAuY29t
ghcqLmhhcmR3b29kZnJhbWVzLmNvbS5hdYIPKi5oYXJvbGRuZXQuY29tgg4qLmhp
bW92aWVkLnRvcIILKi5ob3VqdS5jb22CFyouaW1hZ2luYXRpdmV0cmVuY2gudG9w
ghEqLmxhc2RpdmFzdmlwLmNvbYIUKi5sZXN0cm91dmFpbGxlcy5jb22CGSoubGln
aHRuaW5nY29uc3VsdGluZy5jb22CECoubWFya21vZGVscy5jb22CCyoubWVkaWNz
LmlughAqLm1vdW50ZWQuY29tLmF1ghAqLm11eWNoZXZlcmUuY29tggwqLm5hcm1v
bC5jb22CDSoub3NtYW5pYS5vcmeCCioub3hvby5jb22CEyoucGVvcGxlY2xvbmlu
Zy5jb22CDSoucXVpbHRlbi5jb22CCyouc2FuZ2guY29tghQqLnNjaGFlZmVyZmFt
aWx5LmNvbYINKi5zaG91bWVuLmNvbYISKi5zb21wbGVtb2JpbGUuY29tghUqLnN1
c3RhaW5hYmxlYmxvZy5jb22CDioudGl0aG9uaWEuY29tghIqLnRvY2NvYWNsaW5p
Yy5jb22CDCoudWpwZXN0LmNvbYIMKi51b2kuY29tLmF1ghAqLnZhbmVzc2FkZWwu
Y29tggoqLndhbWouY29tghAqLndhdGNoZ3VyYWQuY29tghYqLndpbGRlcm5lc3Nm
bHlpbmcuY29tghMqLndpbGRlcm5lc3NodXQuY29tghcqLnhuLS1zZGRldXN0Y2hl
LTlkYi5kZYITYWJvbGl0aW9ubW9yYWxlLnRvcIISYXV0b3BzeWZvb3RhZ2UuY29t
gg5icm9hZGNvc3RhLmNvbYILYnJvc2tleS5jb22CC2NhcmRvdmEuY29tghJjYXNo
ZmluYW5jZS5uZXQuYXWCDmNvbGxhcnNwYWNlLmNvghFjb3N0cmVwb3J0aW5nLmNv
bYINZGV2YW50aWVyLmNvbYISZGlhcmlvYWxpY2FudGUuY29tghtkaXNjb3ZlcnN0
dWRlbnRwbGF0aW51bS5jb22CC2Ryc29ja3MuY29tggllLWRhZi5vcmeCCWUtZWRp
cy5kZYIQZWJvb2tzLWJvb2tzLmNvbYIYZXZlcmdyZWVuY3JlZGl0dW5pb24uY29t
ghRmb3JrbGlmdGxpY2VuY2VzLmNvbYIOZm9ybWFncm91cC5jb22CFWhhcmR3b29k
ZnJhbWVzLmNvbS5hdYINaGFyb2xkbmV0LmNvbYIMaGltb3ZpZWQudG9wgglob3Vq
dS5jb22CFWltYWdpbmF0aXZldHJlbmNoLnRvcIIPbGFzZGl2YXN2aXAuY29tghJs
ZXN0cm91dmFpbGxlcy5jb22CF2xpZ2h0bmluZ2NvbnN1bHRpbmcuY29tgg5tYXJr
bW9kZWxzLmNvbYIJbWVkaWNzLmlugg5tb3VudGVkLmNvbS5hdYIObXV5Y2hldmVy
ZS5jb22CCm5hcm1vbC5jb22CC29zbWFuaWEub3JngghveG9vLmNvbYIRcGVvcGxl
Y2xvbmluZy5jb22CC3F1aWx0ZW4uY29tgglzYW5naC5jb22CEnNjaGFlZmVyZmFt
aWx5LmNvbYILc2hvdW1lbi5jb22CEHNvbXBsZW1vYmlsZS5jb22CE3N1c3RhaW5h
YmxlYmxvZy5jb22CDHRpdGhvbmlhLmNvbYIQdG9jY29hY2xpbmljLmNvbYIKdWpw
ZXN0LmNvbYIKdW9pLmNvbS5hdYIOdmFuZXNzYWRlbC5jb22CCHdhbWouY29tgg53
YXRjaGd1cmFkLmNvbYIUd2lsZGVybmVzc2ZseWluZy5jb22CEXdpbGRlcm5lc3No
dXQuY29tghV4bi0tc2RkZXVzdGNoZS05ZGIuZGUwEwYDVR0gBAwwCjAIBgZngQwB
AgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hP
w/THvQANLXJv4frUFwAAAYvQc5fBAAAEAwBHMEUCIQCNxKiBgO+kXJX6EYsXKYiR
uOqEh5MY8yh69GwEsDvIFAIgXU7YFba1DUODwxqQWbrbGvcN9WUkOeM4qNt+H3Uk
jvEAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYvQc5fNAAAE
AwBHMEUCICZLHNxwMpKQ9pVnsW+U5hs+qlosXtNjb/p7Og4vZ+4mAiEAveoGqPa5
hOSasCbK9laI5n5R4QjbB6sIGvV6Ry9MeUcwDQYJKoZIhvcNAQELBQADggEBAHhA
o8nBzMo2aXGsn/yS6Xo400gdymbm+bmuwuYXvuvqN/0IutKsl8dv67sBgmKzgdda
G+h3eHIm2lcGyQpRb+UWHORv4u02IIc1w3etVJHDa9JnxaUbvJrc22JIt4hHGQFS
AeSGSmFxRCVK8xCLKVDuWfCvQzCAE8Nrv4TxqDnIkYKYmSC2lV7U+l84ub5ukKsB
kmAYq2lynDUu1VePHUZAWlfYLeyXIj9C3pdF+8AeJjW5NUvZ5uMTpdf4nMJo+97L
WlsqHmdpxB8RNOyvZznfKUufZLcxPzu69Nz3RPsYVRWaJSQbWROTHNg0kNh7LSEH
Kj6mdq9SkUSWmvz6hd0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384937870995145316122327081793028581184647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 23:48:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 23:48:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e-daf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649151925284918314927974473504656060248063935968215973217197909125155172821053322768252535453083962625860186309532918210999650464883854667254766712933651815637061184820294982367869394844300312696705181715092864614982770519862836544613667933168750311025116969401798336087827607493350624851934064655271892320978174105314271415850053668672748388111030650952958540023626569776130301611099243035262272031939598287115470947524262476069464610085817359117244367662651860648583374839026640201712566035623982996015531720159268747232907772480754661300191209279947750305852470553944650596277200714620446762801327355959170414426944227141310877772281677448264239366740664070583096337859126452375322579900669174786240071047091923470069924205442234849822376307457314940422030338245418400730544585661464632503143257183381682320577866420134469207152407989234265032846888433987131094407953464995841625905852166337335492191602243073268789551601820925362350587758604428226477165592582448694420528413162654593315264125038587476349999254101511480656189134859516378436474224147899279007925298192791033548257483283727637731301194073344811445861373822220331372846365269069245180849162217398737486727296581196738080626962531432629284160268547168231482752236669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c970ddfac4fced82c7848c6280cb5dda31ecd9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1780 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abolitionmorale.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autopsyfootage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadcosta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broskey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashfinance.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collarspace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.costreporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devantier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diarioalicante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discoverstudentplatinum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drsocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-daf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-edis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebooks-books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evergreencreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forkliftlicences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardwoodframes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haroldnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.himovied.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imaginativetrench.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasdivasvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lestrouvailles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightningconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mounted.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muychevere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narmol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osmania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peoplecloning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quilten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sangh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schaeferfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somplemobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustainableblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tithonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toccoaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ujpest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uoi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanessadel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wamj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchgurad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wildernessflying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wildernesshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sddeustche-9db.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abolitionmorale.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopsyfootage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcosta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broskey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashfinance.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collarspace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costreporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devantier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diarioalicante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverstudentplatinum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drsocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-daf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-edis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebooks-books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreencreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forkliftlicences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardwoodframes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haroldnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'himovied.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginativetrench.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasdivasvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lestrouvailles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightningconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mounted.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muychevere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narmol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osmania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplecloning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quilten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schaeferfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somplemobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainableblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tithonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toccoaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujpest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uoi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanessadel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wamj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchgurad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildernessflying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildernesshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sddeustche-9db.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd07397c100000403004730450221008dc4a88180efa45c95fa118b17298891b8ea84879318f3287af46c04b03bc81402205d4ed815b6b50d4383c31a9059badb1af70df5652439e338a8db7e1f75248ef1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd07397cd00000403004730450220264b1cdc70329290f69567b16f94e61b3eaa5a2c5ed3636ffa7b3a0e2f67ee26022100bdea06a8f6b984e49ab026caf65688e67e51e108db07ab081af57a472f4c7947
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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