theministry.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:3a:47:cb:67:ab:92:db:7e:b3:74:89:69:13:5d:b6:31 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=theministry.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:3a:47:cb:67:ab:92:db:7e:b3:74:89:69:13:5d:b6:31
Serial Number (int): 309734421900429232601703856426937371964977
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:e4:bb:15:aa:3c:f7:1d:07:93:6d:76:7a:0d:04:49:88:10:83:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:b5:8b:b9:c0:06:cb:dd:50:11:3e:c2:40:86:8b:6e:ff:be:e9:be
Fingerprint (sha256): 96:e3:df:ea:07:63:fd:6b:75:7f:1e:c5:ab:d7:69:45:91:c2:8f:01:ab:f5:44:66:ff:76:12:7d:09:26:65:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate theministry.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theministry.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.12xc.us
*.2712.com.au
*.28th-infantry-division.us
*.3250.com.au
*.3352.com.au
*.3670.com.au
*.4230.com.au
*.4717.com.au
*.6109.com.au
*.7020.com.au
*.a2online.us
*.aaahomeinspections.us
*.arperu.org
*.beaconhealthsystems.org
*.bitcoinex.ca
*.bookcine.com
*.btcdolls.com
*.cerosenberg.com
*.chameleo.org
*.citykonditoriet.com
*.compactdiscovery.net
*.covid19uttarakhand.org
*.dlinkapp-local.com
*.dogparks.com.au
*.fezaiplik.com
*.ffa.in
*.fmovis.to
*.gamehackers.org
*.instafollowes.co
*.krissanainter.com
*.kuobing.com
*.liveact.me
*.margaretatwood.com
*.marsaninmobiliaria.com
*.nba2kcapbreakers.com
*.offgridskoolie.com
*.plazaarthurbuies.com
*.practicepacksband.org
*.rbux.net
*.roksoliana.pl
*.strin.com
*.symanttec.com
*.themeatmen.org
*.theministry.com.au
*.vaearlyed.org
*.wwwbit.ly
*.xiumm.org
*.xn--standboxscke-ocb.de
*.xxxvideostubes.com
*.zoooom.net
12xc.us
2712.com.au
28th-infantry-division.us
3250.com.au
3352.com.au
3670.com.au
4230.com.au
4717.com.au
6109.com.au
7020.com.au
a2online.us
aaahomeinspections.us
arperu.org
beaconhealthsystems.org
bitcoinex.ca
bookcine.com
btcdolls.com
cerosenberg.com
chameleo.org
citykonditoriet.com
compactdiscovery.net
covid19uttarakhand.org
dlinkapp-local.com
dogparks.com.au
fezaiplik.com
ffa.in
fmovis.to
gamehackers.org
instafollowes.co
krissanainter.com
kuobing.com
liveact.me
margaretatwood.com
marsaninmobiliaria.com
nba2kcapbreakers.com
offgridskoolie.com
plazaarthurbuies.com
practicepacksband.org
rbux.net
roksoliana.pl
strin.com
symanttec.com
themeatmen.org
theministry.com.au
vaearlyed.org
wwwbit.ly
xiumm.org
xn--standboxscke-ocb.de
xxxvideostubes.com
zoooom.net

Other certificates including the domain name theministry.com.au

(limited to 100 certificates)
cateringtrucks.com.au
myemailsrvr.com
rlg.us
theministry.com.au
theministry.com.au
theministry.com.au
theministry.com.au
batepapogratis.net
theministry.com.au
theministry.com.au
wwwcitapreviadni.es

Certificate

The complete raw certificate details for theministry.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMpTCCC42gAwIBAgISA446R8tnq5LbfrN0iWkTXbYxMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTQxNDUzMDRaFw0yNDAzMTMxNDUzMDNaMB0xGzAZBgNVBAMT
EnRoZW1pbmlzdHJ5LmNvbS5hdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAMFDVk6wJROedUsh38ISzDb6WosxozxxY5xN1GTpvSg0TwgCEkldlypTxAfP
I87QV889IfSCjaL3W6gcRU89N82TUSYUtD3WBU+QWXUhA+LrxdzpZRYSVyWaEkb5
OX9A7Am0EPxoqWyJ5w92CEZJeZo9qDNHjzHlTECbCYU2TuC/J0XMUPOOLOF98m6Z
9T2Wa+K4nCpapteM61F9n4kgGsreBjdffX16tiSkGXFt7QTZW13F9kwtazYk8qVi
FLbNwbqqDbZR0Hx13n6TQb3oO6ADNdsfUuFEzWgimVK7Ljo7xp3rlb9oF7fr120R
fzWAjC+vPhPfMbBvvBBLaO18SWLEAykXd9TFm6HZ6eJ1gZlIZDUt5LddYvmAzykX
QfZegmxby1vgi2Guk9FdDgJ2SOJf3tkkLxgJUbGHtup/DUR5nl95HQm968M2PLNT
WeAH/bvYWbDq2ZhrQgGr/512Bxe1Bk8QatKx9h1/DuKSm7WzJhNrTmmDivR//1NP
PiZBH3cUsiJOs0ddOpWl7qHmcnJKgJR/HJLh1QP75uHdxYFqVrOjkU2CEiJ1arPb
D/5Sp8wmXUS7FHVWHGR0kC4QsnjAjRfAHH9LNd4dkjSvoTTpZZ3AcYo6SSanLsKt
ZotCTa87BGxUje02vP+EiiG+0gozhTcDXf345b6P1N5aTwwtAgMBAAGjggjIMIII
xDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBrkuxWqPPcdB5NtdnoNBEmIEIPZMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGzwYDVR0RBIIGxjCCBsKCCSouMTJ4Yy51
c4INKi4yNzEyLmNvbS5hdYIbKi4yOHRoLWluZmFudHJ5LWRpdmlzaW9uLnVzgg0q
LjMyNTAuY29tLmF1gg0qLjMzNTIuY29tLmF1gg0qLjM2NzAuY29tLmF1gg0qLjQy
MzAuY29tLmF1gg0qLjQ3MTcuY29tLmF1gg0qLjYxMDkuY29tLmF1gg0qLjcwMjAu
Y29tLmF1gg0qLmEyb25saW5lLnVzghcqLmFhYWhvbWVpbnNwZWN0aW9ucy51c4IM
Ki5hcnBlcnUub3JnghkqLmJlYWNvbmhlYWx0aHN5c3RlbXMub3Jngg4qLmJpdGNv
aW5leC5jYYIOKi5ib29rY2luZS5jb22CDiouYnRjZG9sbHMuY29tghEqLmNlcm9z
ZW5iZXJnLmNvbYIOKi5jaGFtZWxlby5vcmeCFSouY2l0eWtvbmRpdG9yaWV0LmNv
bYIWKi5jb21wYWN0ZGlzY292ZXJ5Lm5ldIIYKi5jb3ZpZDE5dXR0YXJha2hhbmQu
b3JnghQqLmRsaW5rYXBwLWxvY2FsLmNvbYIRKi5kb2dwYXJrcy5jb20uYXWCDyou
ZmV6YWlwbGlrLmNvbYIIKi5mZmEuaW6CCyouZm1vdmlzLnRvghEqLmdhbWVoYWNr
ZXJzLm9yZ4ISKi5pbnN0YWZvbGxvd2VzLmNvghMqLmtyaXNzYW5haW50ZXIuY29t
gg0qLmt1b2JpbmcuY29tggwqLmxpdmVhY3QubWWCFCoubWFyZ2FyZXRhdHdvb2Qu
Y29tghgqLm1hcnNhbmlubW9iaWxpYXJpYS5jb22CFioubmJhMmtjYXBicmVha2Vy
cy5jb22CFCoub2ZmZ3JpZHNrb29saWUuY29tghYqLnBsYXphYXJ0aHVyYnVpZXMu
Y29tghcqLnByYWN0aWNlcGFja3NiYW5kLm9yZ4IKKi5yYnV4Lm5ldIIPKi5yb2tz
b2xpYW5hLnBsggsqLnN0cmluLmNvbYIPKi5zeW1hbnR0ZWMuY29tghAqLnRoZW1l
YXRtZW4ub3JnghQqLnRoZW1pbmlzdHJ5LmNvbS5hdYIPKi52YWVhcmx5ZWQub3Jn
ggsqLnd3d2JpdC5seYILKi54aXVtbS5vcmeCGSoueG4tLXN0YW5kYm94c2NrZS1v
Y2IuZGWCFCoueHh4dmlkZW9zdHViZXMuY29tggwqLnpvb29vbS5uZXSCBzEyeGMu
dXOCCzI3MTIuY29tLmF1ghkyOHRoLWluZmFudHJ5LWRpdmlzaW9uLnVzggszMjUw
LmNvbS5hdYILMzM1Mi5jb20uYXWCCzM2NzAuY29tLmF1ggs0MjMwLmNvbS5hdYIL
NDcxNy5jb20uYXWCCzYxMDkuY29tLmF1ggs3MDIwLmNvbS5hdYILYTJvbmxpbmUu
dXOCFWFhYWhvbWVpbnNwZWN0aW9ucy51c4IKYXJwZXJ1Lm9yZ4IXYmVhY29uaGVh
bHRoc3lzdGVtcy5vcmeCDGJpdGNvaW5leC5jYYIMYm9va2NpbmUuY29tggxidGNk
b2xscy5jb22CD2Nlcm9zZW5iZXJnLmNvbYIMY2hhbWVsZW8ub3JnghNjaXR5a29u
ZGl0b3JpZXQuY29tghRjb21wYWN0ZGlzY292ZXJ5Lm5ldIIWY292aWQxOXV0dGFy
YWtoYW5kLm9yZ4ISZGxpbmthcHAtbG9jYWwuY29tgg9kb2dwYXJrcy5jb20uYXWC
DWZlemFpcGxpay5jb22CBmZmYS5pboIJZm1vdmlzLnRvgg9nYW1laGFja2Vycy5v
cmeCEGluc3RhZm9sbG93ZXMuY2+CEWtyaXNzYW5haW50ZXIuY29tggtrdW9iaW5n
LmNvbYIKbGl2ZWFjdC5tZYISbWFyZ2FyZXRhdHdvb2QuY29tghZtYXJzYW5pbm1v
YmlsaWFyaWEuY29tghRuYmEya2NhcGJyZWFrZXJzLmNvbYISb2ZmZ3JpZHNrb29s
aWUuY29tghRwbGF6YWFydGh1cmJ1aWVzLmNvbYIVcHJhY3RpY2VwYWNrc2JhbmQu
b3JngghyYnV4Lm5ldIINcm9rc29saWFuYS5wbIIJc3RyaW4uY29tgg1zeW1hbnR0
ZWMuY29tgg50aGVtZWF0bWVuLm9yZ4ISdGhlbWluaXN0cnkuY29tLmF1gg12YWVh
cmx5ZWQub3Jnggl3d3diaXQubHmCCXhpdW1tLm9yZ4IXeG4tLXN0YW5kYm94c2Nr
ZS1vY2IuZGWCEnh4eHZpZGVvc3R1YmVzLmNvbYIKem9vb29tLm5ldDATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ADtTd3U+LbmA
ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjGkIC6kAAAQDAEcwRQIhAKWZta2g
sz2xbYE6hwAQs64WEymvIMyic/+SzZla5LVJAiBKtQrjElZYX/pbTSbWfwlNXbBj
BTXzhdkpfzc9ZgBXtAB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0
AAABjGkIC/wAAAQDAEcwRQIhAMga9+VcodBidxjfgiMBrmwyEmaQuXPtIB9eNdWg
rJCcAiB1meblmhPFvQMXzmEFD1spnl/ApMGK9+xf0QCgReRLMjANBgkqhkiG9w0B
AQsFAAOCAQEAKwLedcX0CX2p2YpVStZEhoGvYJG4j85GmmfVLH3kApYzon8MCvcs
OL3QNm3zrQnhlw5v2PZ41y9b6Y3Hk0eND3IDUruzXQ1Bb8WzPBmtHNzQTNjR7FzL
IMNLjy1Rz9ERRHlLGDtdUVRl92XZXEuMAinawt9GjjANndsutIzvDXV2aMoebneT
UPLY/j8d6mtT9ZeTcU0xcDC18dL0lUmR7HwJ4ST2vVII2YG860PeQZZvFDFPaybL
wyDsAdYdhuOTCkeh15VdBFGjRsR6CLahmo7CfgFdOV9dtq3ewzDSiMAyV2w5Elhr
PYRBXeICChAoXo3WEKT4TdWxfuybv0wlww==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309734421900429232601703856426937371964977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 14:53:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 14:53:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theministry.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788444397144885454101200240322941840905387933613357933139447067409317976501416163680724849056468990917416063699260520033227519900408843657886060013310528925488673148559651167468107988928085938679728764600548510694679843412590596082199687572400361888064442436114053659719955036771183349885854752645969761375989961951795517500481988203717091711016720708126054254645579893506480660739329835370043651043230085023338452651008738167512822466233565009021665986076265423333633714237504296413458073976642490454113678840387585504674410852441316272934091164727775658018551862394406004239187179919878219190394684009634750813739063962982668446738715054612204003742653351734077364524203892652021421353343368415224464648810814725759999518562846794071169573480612376211294814497500600063446803596621740792993788156563857684734496915682334142556865045502486996203511736571117963581553940548256164541175187864089136290932204781606566953425742982452588650697966577961707473418315109686852143158545277105365551222621572714751661366123185023335497625930012543347125216084663164871880349252862733709823844896645471126183368137138558083514676592693869552736906533721604189034871316785658094443922083992825768536925543280156384985152712709427506700885101613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ae4bb15aa3cf71d07936d767a0d0449881083d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1734 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.12xc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2712.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.28th-infantry-division.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3250.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3352.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3670.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4230.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4717.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6109.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7020.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a2online.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaahomeinspections.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arperu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beaconhealthsystems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookcine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcdolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerosenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chameleo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citykonditoriet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compactdiscovery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.covid19uttarakhand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlinkapp-local.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fezaiplik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmovis.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamehackers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instafollowes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krissanainter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuobing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveact.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margaretatwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marsaninmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba2kcapbreakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offgridskoolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plazaarthurbuies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.practicepacksband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbux.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roksoliana.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symanttec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themeatmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theministry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaearlyed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbit.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiumm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--standboxscke-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxxvideostubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoooom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12xc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2712.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '28th-infantry-division.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3250.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3352.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3670.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4230.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4717.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6109.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7020.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2online.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaahomeinspections.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arperu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaconhealthsystems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookcine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcdolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerosenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chameleo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citykonditoriet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compactdiscovery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19uttarakhand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlinkapp-local.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fezaiplik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmovis.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamehackers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instafollowes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krissanainter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuobing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveact.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaretatwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsaninmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba2kcapbreakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offgridskoolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazaarthurbuies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practicepacksband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbux.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roksoliana.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symanttec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themeatmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theministry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaearlyed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbit.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiumm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--standboxscke-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxxvideostubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoooom.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c69080ba90000040300473045022100a599b5ada0b33db16d813a870010b3ae161329af20cca273ff92cd995ae4b54902204ab50ae31256585ffa5b4d26d67f094d5db0630535f385d9297f373d660057b400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c69080bfc0000040300473045022100c81af7e55ca1d0627718df822301ae6c32126690b973ed201f5e35d5a0ac909c02207599e6e59a13c5bd0317ce61050f5b299e5fc0a4c18af7ec5fd100a045e44b32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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