yfx.co.za

Issued by R11

About this certificate

This digital certificate with serial number 04:5c:9f:b0:36:56:3b:8d:b7:c9:9b:87:8e:95:14:da:e2:1c was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yfx.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:5c:9f:b0:36:56:3b:8d:b7:c9:9b:87:8e:95:14:da:e2:1c
Serial Number (int): 379967383681426400494029418538685966246428
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 30:a3:ea:4c:b6:4b:f9:cb:96:89:f5:6f:cb:26:6d:98:e2:b6:ba:8e
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 92:c4:87:76:34:58:2a:6a:61:a1:42:0c:d3:a4:d0:ee:36:eb:9e:17
Fingerprint (sha256): 8a:4b:5c:1c:62:03:ff:c0:75:07:00:a6:ed:11:26:fe:f9:f8:c8:ca:f0:a3:d9:8b:b2:86:43:29:54:7d:72:31

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate yfx.co.za

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yfx.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agirapper.com
alaskaplumbingandheating.com
alexandraadlawan.com
amerihq.com
arbitrage.tel
arbitragealgorithm.com
arbitragecryptos.com
berrienrolloff.com
buraydah.org
caelincompass.com
charlottearborist.com
charlottesavings.com
chrisgotsoul.com
citizencentric.com
cohnpatentsmail.com
cvwalterauthor.com
dramasticseltzer.com
dufourcapital.com
duicourts.com
enterheterodox.com
enviroblogs.com
evangelicalteachertrainingassociation.com
ezkits.com
florabrokers.com
freedomjobsbusiness.org
frflanagan.ie
frflanaganinstitute.ie
fuckfarm.com
gardensofnewport.com
garrykingphoto.com
gayaudioporn.com
gayeroticaudio.com
getyournine.com
goglobalwithjesus.com
goltc.com
hemphygiene.com
hipaarules.com
istorecorp.com
ixelles.org
jesewing.org
kansasblog.com
landbaronbob.com
lgbtqcode.com
marlboroughct.com
meatmanwholesale.com
miercureaciuc.com
modmed.org
mya1c.com
newsabouthemp.com
niceshape.org
nickrae.com
nw.bible
paperarbitrage.com
patrioticrebel.com
pics.stark2023.com
pirplle.com
powerxml.com
prepaidcardsdirect.com
rarepreciouscoins.com
ratownicza.com
redfantasys.com
rencontresadultes.ch
retroday.com
rexranch.com
rhodeislandcourts.com
roryricordblogs.com
rxintelligent.com
rxsugar0sugarcereal.com
samuelharrison.com
sanantoniohomeinfo.com
sheredy.com
skinrash.org
social-service.com
southwhitley.com
spaced-out.com
standardlegaldivorce.com
statelineramblers.com
steckl.com
stjosephdumpster.com
supercrose.com
tawwab.com
texashandgunassociation.com
texasprivatesecurityassociation.com
texaswomensnews.com
thequest.bible
titleinsuranceattorneys.com
tookon.com
totalparking.com
ucsccr.com
ussjfk.com
venture-development.com
verobeachcondos.com
wordpressthemestore.com
wreckinjurieslawyer.com
www.gr8r.me
www.storycraft.bible
yfx.co.za
zingalert.com
zoomjobs.com

Other certificates including the domain name yfx.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for yfx.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMHTCCCwWgAwIBAgISBFyfsDZWO423yZuHjpUU2uIcMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjA3MDc0MTUxWhcNMjQwOTA1MDc0MTUwWjAUMRIwEAYDVQQD
Ewl5ZnguY28uemEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bKnT
6j5ur2akY7yooI0O0SVwdYRfpfc8kB/1dOlzBL1Hnsyx4CHj2mC2hOCK6N+GfvPk
6QqC2K97B5LM3yObRcN72UHKqha9W1+zBDuxqvKVUsbKqQ+8gDBuxyX3f1ax4Rbx
9toJDO2pGhNdxYwhIyRL87GVLljxDy3hW4ANG1HNxETEJbk/tEbcJepCPwz2/Tiu
Mtk+WezLRsdNUvUhz2H3Y2AMhzJtvgBZK95jgJCdQNR8tOfL/Fh1Z6riYvipjAXa
FGD+XEwPOVmj8JALIlquh9akR71uuhVlQMR3hbr8b1AnJ7JyW+WH1jvnXsq1Djs+
UfN/Yab2VnVyE1GXAgMBAAGjgglIMIIJRDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FDCj6ky2S/nLlon1b8smbZjitrqOMB8GA1UdIwQYMBaAFMXPRqTq9MPAemyVxC2w
XpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYWaHR0cDovL3IxMS5v
LmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMS5pLmxlbmNyLm9yZy8w
ggdNBgNVHREEggdEMIIHQIINYWdpcmFwcGVyLmNvbYIcYWxhc2thcGx1bWJpbmdh
bmRoZWF0aW5nLmNvbYIUYWxleGFuZHJhYWRsYXdhbi5jb22CC2FtZXJpaHEuY29t
gg1hcmJpdHJhZ2UudGVsghZhcmJpdHJhZ2VhbGdvcml0aG0uY29tghRhcmJpdHJh
Z2VjcnlwdG9zLmNvbYISYmVycmllbnJvbGxvZmYuY29tggxidXJheWRhaC5vcmeC
EWNhZWxpbmNvbXBhc3MuY29tghVjaGFybG90dGVhcmJvcmlzdC5jb22CFGNoYXJs
b3R0ZXNhdmluZ3MuY29tghBjaHJpc2dvdHNvdWwuY29tghJjaXRpemVuY2VudHJp
Yy5jb22CE2NvaG5wYXRlbnRzbWFpbC5jb22CEmN2d2FsdGVyYXV0aG9yLmNvbYIU
ZHJhbWFzdGljc2VsdHplci5jb22CEWR1Zm91cmNhcGl0YWwuY29tgg1kdWljb3Vy
dHMuY29tghJlbnRlcmhldGVyb2RveC5jb22CD2Vudmlyb2Jsb2dzLmNvbYIpZXZh
bmdlbGljYWx0ZWFjaGVydHJhaW5pbmdhc3NvY2lhdGlvbi5jb22CCmV6a2l0cy5j
b22CEGZsb3JhYnJva2Vycy5jb22CF2ZyZWVkb21qb2JzYnVzaW5lc3Mub3Jngg1m
cmZsYW5hZ2FuLmllghZmcmZsYW5hZ2FuaW5zdGl0dXRlLmllggxmdWNrZmFybS5j
b22CFGdhcmRlbnNvZm5ld3BvcnQuY29tghJnYXJyeWtpbmdwaG90by5jb22CEGdh
eWF1ZGlvcG9ybi5jb22CEmdheWVyb3RpY2F1ZGlvLmNvbYIPZ2V0eW91cm5pbmUu
Y29tghVnb2dsb2JhbHdpdGhqZXN1cy5jb22CCWdvbHRjLmNvbYIPaGVtcGh5Z2ll
bmUuY29tgg5oaXBhYXJ1bGVzLmNvbYIOaXN0b3JlY29ycC5jb22CC2l4ZWxsZXMu
b3JnggxqZXNld2luZy5vcmeCDmthbnNhc2Jsb2cuY29tghBsYW5kYmFyb25ib2Iu
Y29tgg1sZ2J0cWNvZGUuY29tghFtYXJsYm9yb3VnaGN0LmNvbYIUbWVhdG1hbndo
b2xlc2FsZS5jb22CEW1pZXJjdXJlYWNpdWMuY29tggptb2RtZWQub3JngglteWEx
Yy5jb22CEW5ld3NhYm91dGhlbXAuY29tgg1uaWNlc2hhcGUub3JnggtuaWNrcmFl
LmNvbYIIbncuYmlibGWCEnBhcGVyYXJiaXRyYWdlLmNvbYIScGF0cmlvdGljcmVi
ZWwuY29tghJwaWNzLnN0YXJrMjAyMy5jb22CC3BpcnBsbGUuY29tggxwb3dlcnht
bC5jb22CFnByZXBhaWRjYXJkc2RpcmVjdC5jb22CFXJhcmVwcmVjaW91c2NvaW5z
LmNvbYIOcmF0b3duaWN6YS5jb22CD3JlZGZhbnRhc3lzLmNvbYIUcmVuY29udHJl
c2FkdWx0ZXMuY2iCDHJldHJvZGF5LmNvbYIMcmV4cmFuY2guY29tghVyaG9kZWlz
bGFuZGNvdXJ0cy5jb22CE3JvcnlyaWNvcmRibG9ncy5jb22CEXJ4aW50ZWxsaWdl
bnQuY29tghdyeHN1Z2FyMHN1Z2FyY2VyZWFsLmNvbYISc2FtdWVsaGFycmlzb24u
Y29tghZzYW5hbnRvbmlvaG9tZWluZm8uY29tggtzaGVyZWR5LmNvbYIMc2tpbnJh
c2gub3JnghJzb2NpYWwtc2VydmljZS5jb22CEHNvdXRod2hpdGxleS5jb22CDnNw
YWNlZC1vdXQuY29tghhzdGFuZGFyZGxlZ2FsZGl2b3JjZS5jb22CFXN0YXRlbGlu
ZXJhbWJsZXJzLmNvbYIKc3RlY2tsLmNvbYIUc3Rqb3NlcGhkdW1wc3Rlci5jb22C
DnN1cGVyY3Jvc2UuY29tggp0YXd3YWIuY29tght0ZXhhc2hhbmRndW5hc3NvY2lh
dGlvbi5jb22CI3RleGFzcHJpdmF0ZXNlY3VyaXR5YXNzb2NpYXRpb24uY29tghN0
ZXhhc3dvbWVuc25ld3MuY29tgg50aGVxdWVzdC5iaWJsZYIbdGl0bGVpbnN1cmFu
Y2VhdHRvcm5leXMuY29tggp0b29rb24uY29tghB0b3RhbHBhcmtpbmcuY29tggp1
Y3NjY3IuY29tggp1c3NqZmsuY29tghd2ZW50dXJlLWRldmVsb3BtZW50LmNvbYIT
dmVyb2JlYWNoY29uZG9zLmNvbYIXd29yZHByZXNzdGhlbWVzdG9yZS5jb22CF3dy
ZWNraW5qdXJpZXNsYXd5ZXIuY29tggt3d3cuZ3I4ci5tZYIUd3d3LnN0b3J5Y3Jh
ZnQuYmlibGWCCXlmeC5jby56YYINemluZ2FsZXJ0LmNvbYIMem9vbWpvYnMuY29t
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcA
PxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGP8dyC6AAABAMASDBG
AiEAzTWrRXovQWnQlMpr3bYqfbgr08+43E66KifJGXxz0KACIQCEfGk73Sx7SPDH
WDH+4RCEMyA+pEVNrBCfs+zzyeuBdwB1AHb/iD8KtvuVUcJhzPWHujS0pM27Kdxo
Qgqf5mdMWjp0AAABj/HcgxQAAAQDAEYwRAIgB6pSDhVs8I+E8Gvb4l9GHM5Wg5Gp
3eze0W9S3RRMqiACIBi7ZGvPBs5jTAiEsDufyctvfkFELGYCmbUMeJ3BTSaGMA0G
CSqGSIb3DQEBCwUAA4IBAQBQLlgmaw24dbVMhkMOvdui4XkzezBu/KvmGbZ9AX8Q
9ERqHDIQhEOVLHygB5I2aMjBGK+3YIglii7APUsC8OsFbqLlEkcELFQ3QjOXeSm/
ReCJQDN3lQZSVN/hIz35uEixjNxyWff7exJhIkPvvnBGJKYwImPjmy8jzHy+5mZJ
fEOfTYDbpzzQArLJ3ZsOCN1kbQUtxfAER66Iycq7Mou+7PN7aKSOyHbXcqJS2LX+
Xzl325gaw/gwVZ2TewX+V/74Ebpn+B2gMmJpvctOYwZsBQGlH5auwOPiNVmFlY6n
j4BefYnBj+NFX+c1Hxf8feNyyeFYWRV+A0e8pJ6gPKAm
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmyp0+o+bq9mpGO8qKCN
DtElcHWEX6X3PJAf9XTpcwS9R57MseAh49pgtoTgiujfhn7z5OkKgtiveweSzN8j
m0XDe9lByqoWvVtfswQ7sarylVLGyqkPvIAwbscl939WseEW8fbaCQztqRoTXcWM
ISMkS/OxlS5Y8Q8t4VuADRtRzcRExCW5P7RG3CXqQj8M9v04rjLZPlnsy0bHTVL1
Ic9h92NgDIcybb4AWSveY4CQnUDUfLTny/xYdWeq4mL4qYwF2hRg/lxMDzlZo/CQ
CyJarofWpEe9broVZUDEd4W6/G9QJyeyclvlh9Y7517KtQ47PlHzf2Gm9lZ1chNR
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379967383681426400494029418538685966246428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 07:41:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 07:41:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yfx.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24038861858169509163762324838707072046289675941892601654547151665074346124115929166830951649959235517609982451544207619991074344434656206565374721181352911063474458712774003543013350426019245363354270838043239566649618412198295311150132786539851773398502566515225506348024630865305741065286428182781505225428391471499983078466144828313404765259388738311460456684779880448539278114248802463184094817462581620151982741409382233295145066607770555520324310542264925658741055925276026697389080776019779546536787397147055461723046682654736029303468738190898966980613408629802079880536094325082913911276809047736343606808983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30a3ea4cb64bf9cb9689f56fcb266d98e2b6ba8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agirapper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskaplumbingandheating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandraadlawan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerihq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragealgorithm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragecryptos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienrolloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buraydah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caelincompass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottearborist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottesavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisgotsoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizencentric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cohnpatentsmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvwalterauthor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dramasticseltzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dufourcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duicourts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterheterodox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enviroblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evangelicalteachertrainingassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezkits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florabrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomjobsbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frflanagan.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frflanaganinstitute.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuckfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardensofnewport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrykingphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayaudioporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayeroticaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getyournine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goglobalwithjesus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goltc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemphygiene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipaarules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istorecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ixelles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesewing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landbaronbob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatmanwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miercureaciuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mya1c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsabouthemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niceshape.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickrae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paperarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrioticrebel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pics.stark2023.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pirplle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerxml.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidcardsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarepreciouscoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratownicza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redfantasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontresadultes.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retroday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodeislandcourts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roryricordblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxintelligent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugar0sugarcereal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuelharrison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomeinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheredy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinrash.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwhitley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaced-out.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standardlegaldivorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statelineramblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steckl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephdumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tawwab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texashandgunassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasprivatesecurityassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswomensnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thequest.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titleinsuranceattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tookon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalparking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucsccr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussjfk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venture-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verobeachcondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpressthemestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreckinjurieslawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gr8r.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storycraft.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yfx.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zingalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoomjobs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff1dc82e80000040300483046022100cd35ab457a2f4169d094ca6bddb62a7db82bd3cfb8dc4eba2a27c9197c73d0a0022100847c693bdd2c7b48f0c75831fee1108433203ea4454dac109fb3ecf3c9eb817700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ff1dc83140000040300463044022007aa520e156cf08f84f06bdbe25f461cce568391a9ddecded16f52dd144caa20022018bb646bcf06ce634c0884b03b9fc9cb6f7e41442c660299b50c789dc14d2686
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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