dumfriesgallowaynews.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:f6:52:3d:52:e7:46:14:16:c7:7a:b0:97:97:ee:44:d6:b2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dumfriesgallowaynews.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:52:3d:52:e7:46:14:16:c7:7a:b0:97:97:ee:44:d6:b2
Serial Number (int): 432267921096835563601556932599289903109810
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:75:c1:23:76:b0:56:2e:2e:78:89:b7:db:ac:19:22:c0:9f:47:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bd:0b:66:02:f9:2e:68:cf:1c:ba:35:9a:17:c2:91:14:dd:90:f5:98
Fingerprint (sha256): 8b:0d:49:f2:85:58:bf:22:a1:f9:7f:d7:61:13:e7:21:a6:03:bf:7f:95:b1:a6:be:2e:f4:2c:40:1d:1d:ad:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dumfriesgallowaynews.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dumfriesgallowaynews.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.8k1az.xyz
*.ajera.co
*.americansteelcarportsinc.com
*.amjdresses.com
*.anarky.online
*.bengkel.online
*.brif.by
*.cdbox.me
*.cinecaluire.org
*.cracksyreams.fans
*.d-p-s.online
*.dumfriesgallowaynews.co.uk
*.ecuriesduvieuxpuits.com
*.ezzeship.com
*.fkdupfab.com
*.gelateriaorocolato.com
*.girlsteachsex.info
*.girlswebcam.info
*.gscollege.co.za
*.guitarshop1.com
*.heritagerealtyinc.net
*.hiresbootcd.org
*.houstonaa.org
*.ireilevar.com
*.josunebereziartu.com
*.kechmara.com
*.latestdeals.com.au
*.lesserresdeluzege.com
*.littleteenclub.at
*.lsdeporte.net
*.masonlineprod.com.ar
*.mayriverpreserve.com
*.mcdatfred.com
*.modelovip.com
*.morstuf.com
*.myp2.biz
*.ncsappb.com
*.okisrestaurant.com
*.outsideonline.co
*.palermoschool.org
*.seasatinbygryparis.com
*.sepport.me
*.stevewear.com
*.sugarstreetreview.com
*.tabaqi.com
*.takingdiabetestoheart.com
*.taraverve.com
*.thegablesfoundation.org
*.wryter.me
*.yy312.com
8k1az.xyz
ajera.co
americansteelcarportsinc.com
amjdresses.com
anarky.online
bengkel.online
brif.by
cdbox.me
cinecaluire.org
cracksyreams.fans
d-p-s.online
dumfriesgallowaynews.co.uk
ecuriesduvieuxpuits.com
ezzeship.com
fkdupfab.com
gelateriaorocolato.com
girlsteachsex.info
girlswebcam.info
gscollege.co.za
guitarshop1.com
heritagerealtyinc.net
hiresbootcd.org
houstonaa.org
ireilevar.com
josunebereziartu.com
kechmara.com
latestdeals.com.au
lesserresdeluzege.com
littleteenclub.at
lsdeporte.net
masonlineprod.com.ar
mayriverpreserve.com
mcdatfred.com
modelovip.com
morstuf.com
myp2.biz
ncsappb.com
okisrestaurant.com
outsideonline.co
palermoschool.org
seasatinbygryparis.com
sepport.me
stevewear.com
sugarstreetreview.com
tabaqi.com
takingdiabetestoheart.com
taraverve.com
thegablesfoundation.org
wryter.me
yy312.com

Other certificates including the domain name dumfriesgallowaynews.co.uk

(limited to 100 certificates)
dumfriesgallowaynews.co.uk
dumfriesgallowaynews.co.uk
dumfriesgallowaynews.co.uk
dumfriesgallowaynews.co.uk
dumfriesgallowaynews.co.uk

Certificate

The complete raw certificate details for dumfriesgallowaynews.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINGjCCDAKgAwIBAgISBPZSPVLnRhQWx3qwl5fuRNayMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MDIxNDAwMjBaFw0yMzEyMDExNDAwMTlaMCUxIzAhBgNVBAMT
GmR1bWZyaWVzZ2FsbG93YXluZXdzLmNvLnVrMIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAxLfznCnWNbeqsfIzqb9KiqCQa1jlMwQgCEB3CetIatJsyJab
1xUzRaUe7kS1ASwHQ3I1YKYMcNx5xVAJpjzAYoA3aZySt6sFny72GxSuU+s9rmqq
PWs9IAchLNf+1En5hpcaV8BUnDbK3u3WodJUZRRYH4QXjqJBErwYbxcrVqvy05JJ
7QJ2MkCVFSJY4wmbgfxa1KvVYLw5gRjU/aCPZFGd9aFPYerWshzSAQxt0J4qnvgx
V+G88mvrlm2gEr+/YZkCKsnLKPsVjSWc2N4i7di9QBl5xGt7l7+uPSoNiU8IvZ3Z
WASlHm5IwFsO0e3kbVLQhjg191ftb3eEwxTFoH12Itl7NL6OxCQB77vjChSyg2GE
8VisI6g9R7CtV0BVuBaCZ0JXaIMNixYicGw44PHtdhe8IgEXuRelQT1tJIoUhR5l
FLtsIuFfm7lk4lCAI9S7g4vNPWCt+R6sRyEvN2NsmW2mGZO5DE94gX2C5KLA0p1J
swwKPh9cJFKMQWjalU6srMRTnSp70c6NDK1xtB5h9V5LiB6Uj0HmRZm0uAAYQj9v
nA42JU0cKUXc77hJbNFkXlguwqRN/dUs5yDTXUNUo8f5K1sJSlo9osuxiIO8viIe
IxGu0/tl0ygeO8VidCsYE7c5GZD5V8KF0Z13osRPweme1D2ETCbYbMQFS5kCAwEA
AaOCCTUwggkxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU/XXBI3awVi4ueIm326wZ
IsCfR9UwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH
AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB
BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggc7BgNVHREEggcyMIIHLoIL
Ki44azFhei54eXqCCiouYWplcmEuY2+CHiouYW1lcmljYW5zdGVlbGNhcnBvcnRz
aW5jLmNvbYIQKi5hbWpkcmVzc2VzLmNvbYIPKi5hbmFya3kub25saW5lghAqLmJl
bmdrZWwub25saW5lggkqLmJyaWYuYnmCCiouY2Rib3gubWWCESouY2luZWNhbHVp
cmUub3JnghMqLmNyYWNrc3lyZWFtcy5mYW5zgg4qLmQtcC1zLm9ubGluZYIcKi5k
dW1mcmllc2dhbGxvd2F5bmV3cy5jby51a4IZKi5lY3VyaWVzZHV2aWV1eHB1aXRz
LmNvbYIOKi5lenplc2hpcC5jb22CDiouZmtkdXBmYWIuY29tghgqLmdlbGF0ZXJp
YW9yb2NvbGF0by5jb22CFCouZ2lybHN0ZWFjaHNleC5pbmZvghIqLmdpcmxzd2Vi
Y2FtLmluZm+CESouZ3Njb2xsZWdlLmNvLnphghEqLmd1aXRhcnNob3AxLmNvbYIX
Ki5oZXJpdGFnZXJlYWx0eWluYy5uZXSCESouaGlyZXNib290Y2Qub3Jngg8qLmhv
dXN0b25hYS5vcmeCDyouaXJlaWxldmFyLmNvbYIWKi5qb3N1bmViZXJlemlhcnR1
LmNvbYIOKi5rZWNobWFyYS5jb22CFCoubGF0ZXN0ZGVhbHMuY29tLmF1ghcqLmxl
c3NlcnJlc2RlbHV6ZWdlLmNvbYITKi5saXR0bGV0ZWVuY2x1Yi5hdIIPKi5sc2Rl
cG9ydGUubmV0ghYqLm1hc29ubGluZXByb2QuY29tLmFyghYqLm1heXJpdmVycHJl
c2VydmUuY29tgg8qLm1jZGF0ZnJlZC5jb22CDyoubW9kZWxvdmlwLmNvbYINKi5t
b3JzdHVmLmNvbYIKKi5teXAyLmJpeoINKi5uY3NhcHBiLmNvbYIUKi5va2lzcmVz
dGF1cmFudC5jb22CEioub3V0c2lkZW9ubGluZS5jb4ITKi5wYWxlcm1vc2Nob29s
Lm9yZ4IYKi5zZWFzYXRpbmJ5Z3J5cGFyaXMuY29tggwqLnNlcHBvcnQubWWCDyou
c3RldmV3ZWFyLmNvbYIXKi5zdWdhcnN0cmVldHJldmlldy5jb22CDCoudGFiYXFp
LmNvbYIbKi50YWtpbmdkaWFiZXRlc3RvaGVhcnQuY29tgg8qLnRhcmF2ZXJ2ZS5j
b22CGSoudGhlZ2FibGVzZm91bmRhdGlvbi5vcmeCCyoud3J5dGVyLm1lggsqLnl5
MzEyLmNvbYIJOGsxYXoueHl6gghhamVyYS5jb4IcYW1lcmljYW5zdGVlbGNhcnBv
cnRzaW5jLmNvbYIOYW1qZHJlc3Nlcy5jb22CDWFuYXJreS5vbmxpbmWCDmJlbmdr
ZWwub25saW5lggdicmlmLmJ5gghjZGJveC5tZYIPY2luZWNhbHVpcmUub3JnghFj
cmFja3N5cmVhbXMuZmFuc4IMZC1wLXMub25saW5lghpkdW1mcmllc2dhbGxvd2F5
bmV3cy5jby51a4IXZWN1cmllc2R1dmlldXhwdWl0cy5jb22CDGV6emVzaGlwLmNv
bYIMZmtkdXBmYWIuY29tghZnZWxhdGVyaWFvcm9jb2xhdG8uY29tghJnaXJsc3Rl
YWNoc2V4LmluZm+CEGdpcmxzd2ViY2FtLmluZm+CD2dzY29sbGVnZS5jby56YYIP
Z3VpdGFyc2hvcDEuY29tghVoZXJpdGFnZXJlYWx0eWluYy5uZXSCD2hpcmVzYm9v
dGNkLm9yZ4INaG91c3RvbmFhLm9yZ4INaXJlaWxldmFyLmNvbYIUam9zdW5lYmVy
ZXppYXJ0dS5jb22CDGtlY2htYXJhLmNvbYISbGF0ZXN0ZGVhbHMuY29tLmF1ghVs
ZXNzZXJyZXNkZWx1emVnZS5jb22CEWxpdHRsZXRlZW5jbHViLmF0gg1sc2RlcG9y
dGUubmV0ghRtYXNvbmxpbmVwcm9kLmNvbS5hcoIUbWF5cml2ZXJwcmVzZXJ2ZS5j
b22CDW1jZGF0ZnJlZC5jb22CDW1vZGVsb3ZpcC5jb22CC21vcnN0dWYuY29tgght
eXAyLmJpeoILbmNzYXBwYi5jb22CEm9raXNyZXN0YXVyYW50LmNvbYIQb3V0c2lk
ZW9ubGluZS5jb4IRcGFsZXJtb3NjaG9vbC5vcmeCFnNlYXNhdGluYnlncnlwYXJp
cy5jb22CCnNlcHBvcnQubWWCDXN0ZXZld2Vhci5jb22CFXN1Z2Fyc3RyZWV0cmV2
aWV3LmNvbYIKdGFiYXFpLmNvbYIZdGFraW5nZGlhYmV0ZXN0b2hlYXJ0LmNvbYIN
dGFyYXZlcnZlLmNvbYIXdGhlZ2FibGVzZm91bmRhdGlvbi5vcmeCCXdyeXRlci5t
ZYIJeXkzMTIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIE
AgSB9gSB8wDxAHcAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGK
VmjBnAAABAMASDBGAiEA6bR/pxshjLRtRXC8Td9NTFZzAnQIJXY9yQ1NhF/Aw4UC
IQCBkJdO5JCNXMVuBc2NR5/4dULv74nTTuGsKA6RvOEKlgB2AK33vvp8/xDIi509
nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABilZowdwAAAQDAEcwRQIhAP6dcih1H9hQ
Ai6GgwArEAXjCNQHl7HNbaccJrefec4+AiBWVZdglXM7gd3ThFUh5J+8e1LgGqW7
wkYuBGDn/djghzANBgkqhkiG9w0BAQsFAAOCAQEAXaKx0tliDmVEgTpExcaGjuhp
Aj/yMYZw+J0bL/FqxgI97YzyAWVN6MJMnQ6eNz4PVm/ZKFQt2PY6WSqaxIVSH+F4
tbHO64uv6qDvDXxVwHdhgBhnWiTob21yYi/td6ZXcOHjTVrCmmYY+/E1kj8pizny
yaO3SzHCIMggAg66Nxhffc/gRkLgA/vtaAwDnbtkH0zk+cdSPKByuJwUjJqQ2e7r
FSV+Z7D3BGRrtqsDKnEH5dO1mfK6zzeGnfa5aC+kdkp71ochArYzrFbxNvUtF86S
sBjOQDPNLz649duhAW6CswhoDFUjmTF7KXx21zSGnjf/yOo4/+Gy8VrpeO3mJg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432267921096835563601556932599289903109810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 14:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 14:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dumfriesgallowaynews.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802541710223860717415382209448209737038724585984342129016981715930055922809708685609956650743761318320216069145296984313579098949749257144085334888584035583537564603914138353886500325653907275052051839441757251171933009614721253118664985082268376725608252960097033883142196654456557143839431117608423745693575301095776422144093395000097846645055700501555112177805551371291305828136489437770923014400108569173835873230456550674407323119508206515793053357595925637117945725687273671841105102904441095257542605611888475764300580750798078405657620457733353350053858273368330936024915677202637499422501521185192682741373442932368328277194855523942974979301250070626223565126950643498001911565205560631564058639483686718695943178499750421267407880543749848415040484592921123628977158408690471543009807627872531143095737456489209412648330823260659765370015489282987217614755791606782438249405252549385861578114898136171166309548786394266443675268172693431787265415425707787510686466125302231236904342309165559149233193451289008655791584291949351576452213469433160324705580600219660446100866288719748967403941279490872102707192407881532988007428134849851051265900047881863385282381694352100828492400235480569303236459193796760477707639540633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd75c12376b0562e2e7889b7dbac1922c09f47d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8k1az.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americansteelcarportsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amjdresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anarky.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bengkel.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brif.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdbox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinecaluire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cracksyreams.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-p-s.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dumfriesgallowaynews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecuriesduvieuxpuits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezzeship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fkdupfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gelateriaorocolato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlsteachsex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlswebcam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gscollege.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guitarshop1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritagerealtyinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiresbootcd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ireilevar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.josunebereziartu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kechmara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latestdeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesserresdeluzege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littleteenclub.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lsdeporte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masonlineprod.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayriverpreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdatfred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modelovip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morstuf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myp2.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncsappb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okisrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outsideonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palermoschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seasatinbygryparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sepport.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugarstreetreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tabaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takingdiabetestoheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taraverve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegablesfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wryter.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yy312.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8k1az.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americansteelcarportsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amjdresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anarky.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengkel.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brif.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdbox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinecaluire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cracksyreams.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-p-s.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumfriesgallowaynews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecuriesduvieuxpuits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezzeship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkdupfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelateriaorocolato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlsteachsex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlswebcam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gscollege.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitarshop1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagerealtyinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiresbootcd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ireilevar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josunebereziartu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kechmara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latestdeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesserresdeluzege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littleteenclub.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsdeporte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masonlineprod.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayriverpreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdatfred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modelovip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morstuf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myp2.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsappb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okisrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsideonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palermoschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasatinbygryparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sepport.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarstreetreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takingdiabetestoheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taraverve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegablesfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wryter.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yy312.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a5668c19c0000040300483046022100e9b47fa71b218cb46d4570bc4ddf4d4c567302740825763dc90d4d845fc0c3850221008190974ee4908d5cc56e05cd8d479ff87542efef89d34ee1ac280e91bce10a96007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a5668c1dc0000040300473045022100fe9d7228751fd850022e8683002b1005e308d40797b1cd6da71c26b79f79ce3e02205655976095733b81ddd3845521e49fbc7b52e01aa5bbc2462e0460e7fdd8e087
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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