marykayntouch.com

Issued by R3

About this certificate

This digital certificate with serial number 03:86:11:67:9c:54:22:a0:a3:eb:3c:24:46:df:43:f4:d9:d7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=marykayntouch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:11:67:9c:54:22:a0:a3:eb:3c:24:46:df:43:f4:d9:d7
Serial Number (int): 306957829815913047214457909062975173745111
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:64:ef:e3:31:e8:13:1f:0f:e6:e5:61:68:13:84:87:82:6b:a7:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:c0:f3:ad:2a:7e:6a:ba:ae:a5:76:07:77:89:c1:f4:18:b6:52:1e
Fingerprint (sha256): 89:c7:7f:11:cc:87:e0:64:9d:99:43:d3:7d:e9:ff:11:c3:9a:cf:f1:f7:cc:e1:27:da:1a:a3:b8:14:e4:12:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate marykayntouch.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marykayntouch.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.88i8.com
*.akagera.com
*.assuranse.com
*.azpilates.com
*.banginis.online
*.bartering.online
*.betafield.com
*.brehl.com
*.cougargroupsex.com
*.deal-big.ru
*.fixmycellphone.com
*.flyandbuy.club
*.foottubes.com
*.forwomenonlybillpay.com
*.gordis.com
*.hongzhi.com
*.ishimatsu.com
*.jerkovich.com
*.knoxpets.com
*.landmanschool.com
*.ledbyfaith.com
*.marykayntouch.com
*.mataba.com
*.mcgraws.com
*.mikres.com
*.momby.com
*.natural7wonders.com
*.oluma.co
*.ozeed.com
*.pawlitschek.com
*.placasgrabadas.com
*.playmlb.com
*.playnhl.com
*.prxz.com
*.punhetas.com
*.pyramidpropertysolutions.co
*.rasley.com
*.rihong.com
*.rikapoke.com
*.sflac.com
*.simonsgiftcard.com
*.sumers.com
*.tamada.com
*.theobstaclegym.com
*.tophi.com
*.transparant.com
*.tratamientoparaladiabetes.com
*.tratelo.com
*.tropiezos.com
*.xuist.co
88i8.com
akagera.com
assuranse.com
azpilates.com
banginis.online
bartering.online
betafield.com
brehl.com
cougargroupsex.com
deal-big.ru
fixmycellphone.com
flyandbuy.club
foottubes.com
forwomenonlybillpay.com
gordis.com
hongzhi.com
ishimatsu.com
jerkovich.com
knoxpets.com
landmanschool.com
ledbyfaith.com
marykayntouch.com
mataba.com
mcgraws.com
mikres.com
momby.com
natural7wonders.com
oluma.co
ozeed.com
pawlitschek.com
placasgrabadas.com
playmlb.com
playnhl.com
prxz.com
punhetas.com
pyramidpropertysolutions.co
rasley.com
rihong.com
rikapoke.com
sflac.com
simonsgiftcard.com
sumers.com
tamada.com
theobstaclegym.com
tophi.com
transparant.com
tratamientoparaladiabetes.com
tratelo.com
tropiezos.com
xuist.co

Other certificates including the domain name marykayntouch.com

(limited to 100 certificates)
dancergirls.com
wf52r4upg6t3onwppn56.com
marykayntouch.com
marykayntouch.com
activity.com.au
playnhl.com
marykayntouch.com
golfcommunityhomes.com
*.77clk.asia
twocow.com
activity.com.au
activity.com.au

Certificate

The complete raw certificate details for marykayntouch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMOjCCCyKgAwIBAgISA4YRZ5xUIqCj6zwkRt9D9NnXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjYwMzQ0MzVaFw0yNDA2MjQwMzQ0MzRaMBwxGjAYBgNVBAMT
EW1hcnlrYXludG91Y2guY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA3+WdhcdeSJZBTFAReA3fM6mRdrgmjeOF42xoa4nzjTfb9JRTi+Jkgzxn/ClQ
B1eMSJdxA/JyAEbRDE9bjZIym7OUT1nqJhySTyDqtnvCmPVdW/ew3IrVINwqPSF3
Q2zn7CEVfvpgqmJ3S3fIfxfgwEJKlU/y9vD2ZALFB3A/ibmPivJ0P+FJDNaqtgjx
nIQG5hd50Ldw6M6K0YSeno/hefjbA/+bp/+jDJAI8Rzg2nq1HE3rdCwXc2bb/5rW
ZLhva3P+p4zc6EaPRcIMOUbkOz5R9Kpw4EtsHipNxo+v7Rjms5d8tk3ui1c9RmMt
v6MVFs6EYXErDFQx/cKH7vh5UNKGY9WIH+lz5bSNSQMiTF864uuvsGQln7ZUf85j
s0tMvVQuJYx9bC+KuD+zqUpXdJs1VMOzqbLdnJ9I8WlptTy12jfAFc/Cw+UbjoZi
HOZ+P3Kh7AATlfqFcrixvPXQCz3NTT3H5rMt57faDrbP3hT8NvUvF9RUCr1G3yDv
3du1xPnTXHRQGilSVYHKzeGmwL9XKwhmuk7AayF0TQuM30EV+aDBcTYy8rOxkrge
UwHhIR907LIMmjlRIRsbD6FmwRm2190bqI+CAvhZ+GRodhR3mnGSaUIl4TTyBZzg
5E7EZyNFltkh/bIFNiN+OVO91ynT9lDBhZJLQsPVNAFoabsCAwEAAaOCCF4wggha
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUXWTv4zHoEx8P5uVhaBOEh4JrpzAwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggZlBgNVHREEggZcMIIGWIIKKi44OGk4LmNv
bYINKi5ha2FnZXJhLmNvbYIPKi5hc3N1cmFuc2UuY29tgg8qLmF6cGlsYXRlcy5j
b22CESouYmFuZ2luaXMub25saW5lghIqLmJhcnRlcmluZy5vbmxpbmWCDyouYmV0
YWZpZWxkLmNvbYILKi5icmVobC5jb22CFCouY291Z2FyZ3JvdXBzZXguY29tgg0q
LmRlYWwtYmlnLnJ1ghQqLmZpeG15Y2VsbHBob25lLmNvbYIQKi5mbHlhbmRidXku
Y2x1YoIPKi5mb290dHViZXMuY29tghkqLmZvcndvbWVub25seWJpbGxwYXkuY29t
ggwqLmdvcmRpcy5jb22CDSouaG9uZ3poaS5jb22CDyouaXNoaW1hdHN1LmNvbYIP
Ki5qZXJrb3ZpY2guY29tgg4qLmtub3hwZXRzLmNvbYITKi5sYW5kbWFuc2Nob29s
LmNvbYIQKi5sZWRieWZhaXRoLmNvbYITKi5tYXJ5a2F5bnRvdWNoLmNvbYIMKi5t
YXRhYmEuY29tgg0qLm1jZ3Jhd3MuY29tggwqLm1pa3Jlcy5jb22CCyoubW9tYnku
Y29tghUqLm5hdHVyYWw3d29uZGVycy5jb22CCioub2x1bWEuY2+CCyoub3plZWQu
Y29tghEqLnBhd2xpdHNjaGVrLmNvbYIUKi5wbGFjYXNncmFiYWRhcy5jb22CDSou
cGxheW1sYi5jb22CDSoucGxheW5obC5jb22CCioucHJ4ei5jb22CDioucHVuaGV0
YXMuY29tgh0qLnB5cmFtaWRwcm9wZXJ0eXNvbHV0aW9ucy5jb4IMKi5yYXNsZXku
Y29tggwqLnJpaG9uZy5jb22CDioucmlrYXBva2UuY29tggsqLnNmbGFjLmNvbYIU
Ki5zaW1vbnNnaWZ0Y2FyZC5jb22CDCouc3VtZXJzLmNvbYIMKi50YW1hZGEuY29t
ghQqLnRoZW9ic3RhY2xlZ3ltLmNvbYILKi50b3BoaS5jb22CESoudHJhbnNwYXJh
bnQuY29tgh8qLnRyYXRhbWllbnRvcGFyYWxhZGlhYmV0ZXMuY29tgg0qLnRyYXRl
bG8uY29tgg8qLnRyb3BpZXpvcy5jb22CCioueHVpc3QuY2+CCDg4aTguY29tggth
a2FnZXJhLmNvbYINYXNzdXJhbnNlLmNvbYINYXpwaWxhdGVzLmNvbYIPYmFuZ2lu
aXMub25saW5lghBiYXJ0ZXJpbmcub25saW5lgg1iZXRhZmllbGQuY29tgglicmVo
bC5jb22CEmNvdWdhcmdyb3Vwc2V4LmNvbYILZGVhbC1iaWcucnWCEmZpeG15Y2Vs
bHBob25lLmNvbYIOZmx5YW5kYnV5LmNsdWKCDWZvb3R0dWJlcy5jb22CF2Zvcndv
bWVub25seWJpbGxwYXkuY29tggpnb3JkaXMuY29tggtob25nemhpLmNvbYINaXNo
aW1hdHN1LmNvbYINamVya292aWNoLmNvbYIMa25veHBldHMuY29tghFsYW5kbWFu
c2Nob29sLmNvbYIObGVkYnlmYWl0aC5jb22CEW1hcnlrYXludG91Y2guY29tggpt
YXRhYmEuY29tggttY2dyYXdzLmNvbYIKbWlrcmVzLmNvbYIJbW9tYnkuY29tghNu
YXR1cmFsN3dvbmRlcnMuY29tgghvbHVtYS5jb4IJb3plZWQuY29tgg9wYXdsaXRz
Y2hlay5jb22CEnBsYWNhc2dyYWJhZGFzLmNvbYILcGxheW1sYi5jb22CC3BsYXlu
aGwuY29tgghwcnh6LmNvbYIMcHVuaGV0YXMuY29tghtweXJhbWlkcHJvcGVydHlz
b2x1dGlvbnMuY2+CCnJhc2xleS5jb22CCnJpaG9uZy5jb22CDHJpa2Fwb2tlLmNv
bYIJc2ZsYWMuY29tghJzaW1vbnNnaWZ0Y2FyZC5jb22CCnN1bWVycy5jb22CCnRh
bWFkYS5jb22CEnRoZW9ic3RhY2xlZ3ltLmNvbYIJdG9waGkuY29tgg90cmFuc3Bh
cmFudC5jb22CHXRyYXRhbWllbnRvcGFyYWxhZGlhYmV0ZXMuY29tggt0cmF0ZWxv
LmNvbYINdHJvcGllem9zLmNvbYIIeHVpc3QuY28wEwYDVR0gBAwwCjAIBgZngQwB
AgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3
fx+FauvBvyiF7PhkbgAAAY55EwwHAAAEAwBHMEUCIGImmTkM9mL2TO3dBxmZVNSk
jj9Iaq67mznTRf8eWJT1AiEArENQymTcGgVJw0pQrVBj7Y4JTpEcASL68ArCirg7
fesAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY55EwySAAAE
AwBHMEUCIG5kBmCGgVA3xswL4mTPW8PT/cYr4KCYB8KCwke/yg0MAiEA5DMxYhm9
+0yCTf2v0LawIYGgvKntK535MgX7aQzc2sowDQYJKoZIhvcNAQELBQADggEBAI/I
IZmIZtq3ktjHa/SUyFiz1fj2ZJTVg/HmRkoIykYwowhGwtJiUmssU8nU9dti5Eem
y1Tq6JhhOXnJRLHp+Pw/86XVSntL1DfnR8OL5gXXM9+bDVa6SNZQoFGYlXRFCskp
VMy92Cfmb3E41i6dziLOhyCYPcbWG52fvCKU/TfmvwKgSvv7siECbVEpbCpdtbAn
MXk87/JtqbGIxq7RM79g4M8mbgcax8slAc877GONDTEhXdrnb7hR/P0zfWuqo6z8
RmTcn5Uz3Q5WPH2bNzxLCxESYcz4SrZvCkNnIEdKMJTmGlp0xpAW9vf9V7Fa2+4P
PuTEguXOAC3LBSSeT24=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306957829815913047214457909062975173745111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 03:44:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 03:44:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marykayntouch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913419802123866048509086429251591891218235342257254982289823248942584916779503470148609812705610859058160152976438287420097970733181937073475156237599266282485990643768825355750427649787825770068065202509140292202663878165782363550661454310292527451751622287682721805818807761228466610369324871338773921867819816862574109168927806441117553220576538979359684512854918904116935531111112367333387333959749116044213520827967065609611507737195130554014046879175394993126018095510480280625787605499848183425913184868805910481396917121994144695747008424283333693889944520035070816958874327806672843701597406541058108248121982000525659026254965166591050522260204912953809167689023344838419466791165659774338406192680266101685696992951536442542024846532860447440796181390947164038410024066786365313478012733672816916611956675429858047969147324082958187106664043560808706747735110324641293519456084772207380183837398606799420006987828991845671127872475580583130766991622240869050269190871681861715272715741430021360417391470828735653620527254660897560359177704467188645583003207058833402715188384317205891500536577404466898194854911677974928370371365914339339927124112951162089259602412857741752123656209168384133904876027637474713477805795771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d64efe331e8131f0fe6e56168138487826ba730
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1628 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.88i8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akagera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assuranse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azpilates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banginis.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bartering.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betafield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brehl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cougargroupsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deal-big.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixmycellphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyandbuy.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foottubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forwomenonlybillpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gordis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongzhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ishimatsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerkovich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knoxpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landmanschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ledbyfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marykayntouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mataba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcgraws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mikres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natural7wonders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oluma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ozeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawlitschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.placasgrabadas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playmlb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playnhl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prxz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.punhetas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyramidpropertysolutions.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rasley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rihong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rikapoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sflac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simonsgiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sumers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theobstaclegym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tophi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transparant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tratamientoparaladiabetes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tratelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tropiezos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xuist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '88i8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akagera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assuranse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azpilates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banginis.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartering.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betafield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brehl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cougargroupsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deal-big.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixmycellphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyandbuy.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foottubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forwomenonlybillpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gordis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongzhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishimatsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerkovich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knoxpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landmanschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledbyfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marykayntouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mataba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcgraws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natural7wonders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oluma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawlitschek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placasgrabadas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playmlb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playnhl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prxz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punhetas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyramidpropertysolutions.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rihong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rikapoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sflac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simonsgiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theobstaclegym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tophi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transparant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tratamientoparaladiabetes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tratelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropiezos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuist.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e79130c0700000403004730450220622699390cf662f64ceddd07199954d4a48e3f486aaebb9b39d345ff1e5894f5022100ac4350ca64dc1a0549c34a50ad5063ed8e094e911c0122faf00ac28ab83b7deb007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e79130c92000004030047304502206e64066086815037c6cc0be264cf5bc3d3fdc62be0a09807c282c247bfca0d0c022100e433316219bdfb4c824dfdafd0b6b02181a0bca9ed2b9df93205fb690cdcdaca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008fc821998866dab792d8c76bf494c858b3d5f8f66494d583f1e6464a08ca4630a30846c2d262526b2c53c9d4f5db62e447a6cb54eae898613979c944b1e9f8fc3ff3a5d54a7b4bd437e747c38be605d733df9b0d56ba48d650a051989574450ac92954ccbdd827e66f7138d62e9dce22ce8720983dc6d61b9d9fbc2294fd37e6bf02a04afbfbb221026d51296c2a5db5b02731793ceff26da9b188c6aed133bf60e0cf266e071ac7cb2501cf3bec638d0d31215ddae76fb851fcfd337d6baaa3acfc4664dc9f9533dd0e563c7d9b373c4b0b111261ccf84ab66f0a436720474a3094e61a5a74c69016f6f7fd57b15adbee0f3ee4c482e5ce002dcb05249e4f6e