dumfriesgallowaynews.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:5e:b5:76:81:03:45:36:57:f3:52:8e:58:b1:ae:c0:b3:ca was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dumfriesgallowaynews.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:b5:76:81:03:45:36:57:f3:52:8e:58:b1:ae:c0:b3:ca
Serial Number (int): 293564605860805275909699268593603802346442
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:72:8d:c9:9a:fe:5c:35:1f:d5:b8:52:75:c0:76:65:9c:03:48:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 86:c7:44:a7:d2:68:8c:43:ee:b8:4c:84:bb:b7:94:9d:3f:6f:52:d3
Fingerprint (sha256): 97:81:81:34:ab:fd:fc:bd:fc:f0:0d:98:04:9d:df:55:8a:6f:32:ad:03:b0:7e:a8:4d:65:6a:69:1e:03:5e:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dumfriesgallowaynews.co.uk

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dumfriesgallowaynews.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.20kn3g.cyou
*.27mhz.site
*.34727.shop
*.53654.shop
*.64271.shop
*.66095.shop
*.8k1az.xyz
*.ajera.co
*.anarky.online
*.bengkel.online
*.caselist.ru
*.cdbox.me
*.coco88.live
*.cracksyreams.fans
*.d-p-s.online
*.dumfriesgallowaynews.co.uk
*.ezzeship.com
*.fkdupfab.com
*.gemhuslter.com
*.geteyeoptic.com
*.girlsteachsex.info
*.girlswebcam.info
*.gscollege.co.za
*.guitarshop1.com
*.heritagerealtyinc.net
*.hiresbootcd.org
*.houstonaa.org
*.josunebereziartu.com
*.kpezp.cn
*.latestdeals.com.au
*.littleteenclub.at
*.lsdeporte.net
*.manhwa.land
*.masonlineprod.com.ar
*.mayriverpreserve.com
*.mcdatfred.com
*.myp2.biz
*.ncsappb.com
*.neoliberalismoen.me
*.okisrestaurant.com
*.outsideonline.co
*.palermoschool.org
*.sepport.me
*.sugarstreetreview.com
*.tabaqi.com
*.takingdiabetestoheart.com
*.thegablesfoundation.org
*.wryter.me
*.yy312.com
20kn3g.cyou
27mhz.site
34727.shop
53654.shop
64271.shop
66095.shop
8k1az.xyz
ajera.co
anarky.online
bengkel.online
caselist.ru
cdbox.me
coco88.live
cracksyreams.fans
d-p-s.online
dumfriesgallowaynews.co.uk
ezzeship.com
fkdupfab.com
gemhuslter.com
geteyeoptic.com
girlsteachsex.info
girlswebcam.info
gscollege.co.za
guitarshop1.com
heritagerealtyinc.net
hiresbootcd.org
houstonaa.org
josunebereziartu.com
kpezp.cn
latestdeals.com.au
littleteenclub.at
lsdeporte.net
manhwa.land
masonlineprod.com.ar
mayriverpreserve.com
mcdatfred.com
myp2.biz
ncsappb.com
neoliberalismoen.me
okisrestaurant.com
outsideonline.co
palermoschool.org
sepport.me
sugarstreetreview.com
tabaqi.com
takingdiabetestoheart.com
thegablesfoundation.org
wryter.me
yy312.com

Other certificates including the domain name dumfriesgallowaynews.co.uk

(limited to 100 certificates)
dumfriesgallowaynews.co.uk
dumfriesgallowaynews.co.uk
dumfriesgallowaynews.co.uk
dumfriesgallowaynews.co.uk
dumfriesgallowaynews.co.uk

Certificate

The complete raw certificate details for dumfriesgallowaynews.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMeTCCC2GgAwIBAgISA161doEDRTZX81KOWLGuwLPKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDExMzAyNDhaFw0yNDAxMzAxMzAyNDdaMCUxIzAhBgNVBAMT
GmR1bWZyaWVzZ2FsbG93YXluZXdzLmNvLnVrMIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEAmoNDxZicdglKH7/nGSBKNgbk/r7Z01itaIhNAVHJUd2/d0Dh
veMM2Wcx/3slVZleINf0lWvraiGDF0g+SiElUDyvGfog8Oj96mR5Jymapixa8wAJ
IOG46GRS2E+pv62ncemQq3YxY+m2dQubINhzd8A3kaRKmeBqP5hYkr4DSXESGB8/
3VuYjAqfFbdAsikUwDT2WXLtYVlP1OqxhnOP5vbRWxmMy6KrNzG2pslwofTrf4ou
ENKJb0bHrQ51a/4b7TZ44mB+CM24jZ/s6QIz+evu0BsTdmohVPd4BPgjDYBo+MJj
mtdgLDva5DLHn2nXCot8wLtWS/Y+nc3Ar8Ns9iqrQsFR5apJMc3K4r64t8/9wdTT
umxDtu+llG1UdMnfvf8j/Lll03k5yw1B9iZXxj/Y/TmHdgmNgslAFmcFaxGDeorl
PMacYUVY/8l4VgnBb4GpBzm4GXjPYzvPNYz6dD9K6s3w13gzDa4SEGRdeKNSwItM
gX50GEjMsJSoI1vCfWgqwb+focdscj0RibIQf85miSS7sPb/F93zjzfeF2tCv6q8
ld0v7fnUQnylH6A++mkjSv2J79pCqQFHu5HhzSzd6s0ielNsDn6IhKZcbjYasxcM
aFhsr6jn7V37BhLOXxseQquBSOT0Iv4r2u/+lT/Zkuxns3zxgugQ4grdX6MCAwEA
AaOCCJQwggiQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU0XKNyZr+XDUf1bhSdcB2
ZZwDSLwwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH
AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB
BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggabBgNVHREEggaSMIIGjoIN
Ki4yMGtuM2cuY3lvdYIMKi4yN21oei5zaXRlggwqLjM0NzI3LnNob3CCDCouNTM2
NTQuc2hvcIIMKi42NDI3MS5zaG9wggwqLjY2MDk1LnNob3CCCyouOGsxYXoueHl6
ggoqLmFqZXJhLmNvgg8qLmFuYXJreS5vbmxpbmWCECouYmVuZ2tlbC5vbmxpbmWC
DSouY2FzZWxpc3QucnWCCiouY2Rib3gubWWCDSouY29jbzg4LmxpdmWCEyouY3Jh
Y2tzeXJlYW1zLmZhbnOCDiouZC1wLXMub25saW5lghwqLmR1bWZyaWVzZ2FsbG93
YXluZXdzLmNvLnVrgg4qLmV6emVzaGlwLmNvbYIOKi5ma2R1cGZhYi5jb22CECou
Z2VtaHVzbHRlci5jb22CESouZ2V0ZXllb3B0aWMuY29tghQqLmdpcmxzdGVhY2hz
ZXguaW5mb4ISKi5naXJsc3dlYmNhbS5pbmZvghEqLmdzY29sbGVnZS5jby56YYIR
Ki5ndWl0YXJzaG9wMS5jb22CFyouaGVyaXRhZ2VyZWFsdHlpbmMubmV0ghEqLmhp
cmVzYm9vdGNkLm9yZ4IPKi5ob3VzdG9uYWEub3JnghYqLmpvc3VuZWJlcmV6aWFy
dHUuY29tggoqLmtwZXpwLmNughQqLmxhdGVzdGRlYWxzLmNvbS5hdYITKi5saXR0
bGV0ZWVuY2x1Yi5hdIIPKi5sc2RlcG9ydGUubmV0gg0qLm1hbmh3YS5sYW5kghYq
Lm1hc29ubGluZXByb2QuY29tLmFyghYqLm1heXJpdmVycHJlc2VydmUuY29tgg8q
Lm1jZGF0ZnJlZC5jb22CCioubXlwMi5iaXqCDSoubmNzYXBwYi5jb22CFSoubmVv
bGliZXJhbGlzbW9lbi5tZYIUKi5va2lzcmVzdGF1cmFudC5jb22CEioub3V0c2lk
ZW9ubGluZS5jb4ITKi5wYWxlcm1vc2Nob29sLm9yZ4IMKi5zZXBwb3J0Lm1lghcq
LnN1Z2Fyc3RyZWV0cmV2aWV3LmNvbYIMKi50YWJhcWkuY29tghsqLnRha2luZ2Rp
YWJldGVzdG9oZWFydC5jb22CGSoudGhlZ2FibGVzZm91bmRhdGlvbi5vcmeCCyou
d3J5dGVyLm1lggsqLnl5MzEyLmNvbYILMjBrbjNnLmN5b3WCCjI3bWh6LnNpdGWC
CjM0NzI3LnNob3CCCjUzNjU0LnNob3CCCjY0MjcxLnNob3CCCjY2MDk1LnNob3CC
CThrMWF6Lnh5eoIIYWplcmEuY2+CDWFuYXJreS5vbmxpbmWCDmJlbmdrZWwub25s
aW5lggtjYXNlbGlzdC5ydYIIY2Rib3gubWWCC2NvY284OC5saXZlghFjcmFja3N5
cmVhbXMuZmFuc4IMZC1wLXMub25saW5lghpkdW1mcmllc2dhbGxvd2F5bmV3cy5j
by51a4IMZXp6ZXNoaXAuY29tggxma2R1cGZhYi5jb22CDmdlbWh1c2x0ZXIuY29t
gg9nZXRleWVvcHRpYy5jb22CEmdpcmxzdGVhY2hzZXguaW5mb4IQZ2lybHN3ZWJj
YW0uaW5mb4IPZ3Njb2xsZWdlLmNvLnphgg9ndWl0YXJzaG9wMS5jb22CFWhlcml0
YWdlcmVhbHR5aW5jLm5ldIIPaGlyZXNib290Y2Qub3Jngg1ob3VzdG9uYWEub3Jn
ghRqb3N1bmViZXJlemlhcnR1LmNvbYIIa3BlenAuY26CEmxhdGVzdGRlYWxzLmNv
bS5hdYIRbGl0dGxldGVlbmNsdWIuYXSCDWxzZGVwb3J0ZS5uZXSCC21hbmh3YS5s
YW5kghRtYXNvbmxpbmVwcm9kLmNvbS5hcoIUbWF5cml2ZXJwcmVzZXJ2ZS5jb22C
DW1jZGF0ZnJlZC5jb22CCG15cDIuYml6ggtuY3NhcHBiLmNvbYITbmVvbGliZXJh
bGlzbW9lbi5tZYISb2tpc3Jlc3RhdXJhbnQuY29tghBvdXRzaWRlb25saW5lLmNv
ghFwYWxlcm1vc2Nob29sLm9yZ4IKc2VwcG9ydC5tZYIVc3VnYXJzdHJlZXRyZXZp
ZXcuY29tggp0YWJhcWkuY29tghl0YWtpbmdkaWFiZXRlc3RvaGVhcnQuY29tghd0
aGVnYWJsZXNmb3VuZGF0aW9uLm9yZ4IJd3J5dGVyLm1lggl5eTMxMi5jb20wEwYD
VR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDatr9r
P7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYuLMacKAAAEAwBHMEUCIBX2
AqWMabMJeLBotEJVCVQoGohMfoKtlVGl2iTMputXAiEAkWRHaJ/Yl7WcdRWqghLH
1mBCuqjyQ0fQL9IXF86XFssAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv
4frUFwAAAYuLMacEAAAEAwBHMEUCIQCgsd6Iyktpa9KpxOGhEF7QBm5+uPm1Z4zn
07pRXhK52wIgOFB6sV2aeMdSvayIPeCwCbuAJYTVea2690rS8zsojDEwDQYJKoZI
hvcNAQELBQADggEBAFYcb79QkF9jTiupfNifLMItQVR6WQo2pnTkDk1p+HxBAEwy
VrLom22yYECTk5vBdtBlzPzl63mvVH9e7g+394XD8m9uWXJlY5rLo5yNCFPb9bUg
FMomcfw71KzQ2LUzi88ID7BZr8HR5Vu2c/CB6SxSWukcAKhclEP0C/zfNUAUt0h5
SozFIKMuPmyXT5ki5PCSvA19+5jX0JjZ4G90rKbmpRx0dXbtREquD5tKISMc0PNG
kkVSZZbaid3dCGAacA9bt39cTbh01Qns6F2cu6y2mGj8UmU/HGKg7yiNsWoW2nqL
7IWTbzb+V6VJaUscl5hNm2LC7qUwuoemf7KJ9Ts=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293564605860805275909699268593603802346442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 13:02:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 13:02:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dumfriesgallowaynews.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630357035665336838407758123652261759194864587040593911889365615244162291708668698192233811957453972412854606368570327070859552260056284918684026428043543743391873315239641805164025239744923144471277335023464846512753025531927605393736882362033863261025628693747784143788213256219716476763869073535626191011556729972113146633310819547197581329076411898123169290232676302689529436710338924351844556329418738605913426122999330349284813406533233457403222341853382583603413813548897684089075294783881131734188890961495037219004824842082240756516164188770682148535102925228807714347609086629573558819403579729962355358936980203331910154508657508058295572490760949492489236094404431376588253197395205195647936734489746881668236633866781029979822729031108089107741675913769739654202122215080698366975884126977954755919131796023024620937276784249939303764677848915019466418627241368665436184411447421927069213521484708251235897082517359797355849456570789365707390647784572066540058378443030135264838300645446101839232294174790476615181390485118251566136606061256050826946508141805164087531192702531855333605085432287099560394823271588557563382838690733230730982100920223710850806870949623096682189483556614699866634753807196353521221145288611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1728dc99afe5c351fd5b85275c076659c0348bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.20kn3g.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.27mhz.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.34727.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.53654.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.64271.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.66095.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8k1az.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anarky.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bengkel.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caselist.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdbox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coco88.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cracksyreams.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-p-s.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dumfriesgallowaynews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezzeship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fkdupfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemhuslter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geteyeoptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlsteachsex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlswebcam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gscollege.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guitarshop1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritagerealtyinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiresbootcd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.josunebereziartu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpezp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latestdeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littleteenclub.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lsdeporte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manhwa.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masonlineprod.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayriverpreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdatfred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myp2.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncsappb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neoliberalismoen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okisrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outsideonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palermoschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sepport.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugarstreetreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tabaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takingdiabetestoheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegablesfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wryter.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yy312.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20kn3g.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '27mhz.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '34727.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '53654.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '64271.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '66095.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8k1az.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anarky.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengkel.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caselist.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdbox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coco88.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cracksyreams.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-p-s.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumfriesgallowaynews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezzeship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkdupfab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemhuslter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geteyeoptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlsteachsex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlswebcam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gscollege.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitarshop1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagerealtyinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiresbootcd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josunebereziartu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpezp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latestdeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littleteenclub.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsdeporte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhwa.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masonlineprod.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayriverpreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdatfred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myp2.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsappb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoliberalismoen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okisrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsideonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palermoschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sepport.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarstreetreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takingdiabetestoheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegablesfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wryter.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yy312.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8b31a70a0000040300473045022015f602a58c69b30978b068b442550954281a884c7e82ad9551a5da24cca6eb57022100916447689fd897b59c7515aa8212c7d66042baa8f24347d02fd21717ce9716cb0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8b31a7040000040300473045022100a0b1de88ca4b696bd2a9c4e1a1105ed0066e7eb8f9b5678ce7d3ba515e12b9db022038507ab15d9a78c752bdac883de0b009bb802584d579adbaf74ad2f33b288c31
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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