spermbanks.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:b6:94:e5:c9:c3:a3:a8:26:5a:8d:26:bd:54:36:cf:bc:3b was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spermbanks.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b6:94:e5:c9:c3:a3:a8:26:5a:8d:26:bd:54:36:cf:bc:3b
Serial Number (int): 410578453378273030323072653379993649265723
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:d2:66:87:bc:a2:12:fd:31:4d:3d:e6:05:2b:4d:8f:a3:8d:89:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:11:d9:91:c2:c1:4f:66:41:90:e4:7a:7a:4c:c0:25:76:fc:2d:87
Fingerprint (sha256): 98:0e:4d:63:d8:27:df:23:d4:db:b6:f8:15:8b:87:de:3e:f1:78:f9:ec:42:5a:24:dd:b4:bd:66:97:35:0d:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spermbanks.com.au

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spermbanks.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.appround.us
*.aymantr.com
*.benwilder.me
*.brausebatterie.de
*.bridalsets.de
*.buienaradar.nl
*.cambridge.com.my
*.danasaldo.xyz
*.frf.de
*.frieseuren.de
*.frv.de
*.fsgv.de
*.ftu.de
*.fty.de
*.fxv.de
*.g-p.de
*.glutenfree.co.za
*.immobilier.de
*.kinpolis.de
*.kudosfurniture.co.uk
*.lauguagesonline.org.uk
*.linguee.net
*.lukebyran.com
*.malmbergmbo.nl
*.netlofy.app
*.quokla.de
*.salons-near.me
*.schwimmwindeln.de
*.skipbinhireadelaide.com.au
*.spermbanks.com.au
*.spezialbetten.de
*.spieleitpps.de
*.svaimports.co.uk
*.telekomunikasi.net
*.thorabh.com
*.tonaudiogramm.de
*.volksawagen.de
*.wachsspray.de
*.waterproofmascara.com.au
*.webcalendars.org
*.webnote.es
*.what.de
*.wwwkvn.de
*.xn--berdcher-3za9u.de
*.xn--flssiggummi-uhb.de
*.xn--frstisch-1za.de
*.yes47.net
*.yogurtbarn.net
appround.us
aymantr.com
benwilder.me
brausebatterie.de
bridalsets.de
buienaradar.nl
cambridge.com.my
danasaldo.xyz
frf.de
frieseuren.de
frv.de
fsgv.de
ftu.de
fty.de
fxv.de
g-p.de
glutenfree.co.za
immobilier.de
kinpolis.de
kudosfurniture.co.uk
lauguagesonline.org.uk
linguee.net
lukebyran.com
malmbergmbo.nl
netlofy.app
quokla.de
salons-near.me
schwimmwindeln.de
skipbinhireadelaide.com.au
spermbanks.com.au
spezialbetten.de
spieleitpps.de
svaimports.co.uk
telekomunikasi.net
thorabh.com
tonaudiogramm.de
volksawagen.de
wachsspray.de
waterproofmascara.com.au
webcalendars.org
webnote.es
what.de
wwwkvn.de
xn--berdcher-3za9u.de
xn--flssiggummi-uhb.de
xn--frstisch-1za.de
yes47.net
yogurtbarn.net

Other certificates including the domain name spermbanks.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for spermbanks.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMEDCCCvigAwIBAgISBLaU5cnDo6gmWo0mvVQ2z7w7MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDkxMjU1MDlaFw0yNDA3MDgxMjU1MDhaMBwxGjAYBgNVBAMT
EXNwZXJtYmFua3MuY29tLmF1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAxcxWbfqQR822y+rR8A9qrRedjOLcVyBVWgVOBjG38rkK5MkEcjHCvRu2L/Nw
lCmh4CLQN8rak2K8FMw00myjcqprQOoy4owiQTY9n0qoGUDSoAYTZ0zOf1TQHC5T
6KdyPCXI/8TIypIM4rfEkHERYawC7TjEjbBOFQt+nInAg+rjE0t8hO0praVZJbB7
EGtqZBeNPmpMsePCcdTP2dV/YbNvnvpUaggsVK4ylkaGnWg8fRqt/6gsfE2m77z4
+gZggrHxTUB18mBXgGkHpW/TPb0HMB3X0yvDn7n3kugZbwQ4spZLuh/4FBigZdgo
q50gEJuQAjMZoougcHoWq+bIr1CBq+KK1jTJ3/DHVoSn/+R/KhV+R2BhZQrh5O+i
zTTduMTcszoz4wqO2xfcz/miXZ4By0eWnUNA8NiRIgUiIDbq0m2u0aELAzWTrZC4
niQ6ZTZz8hlxlcn8K9ViPkNtEFByu2bEg9a7ThoGsbIis4B2HFBy/Ba3r6KnJDgT
vK/iIZ5wj8/HV59l+Gey+ZehwsKPLfsMu2FvfmKPFyIc66TP4duEP3RjoeGBr11Q
VqlEhqwceu/15MzoPuRi0Tctmrun4rKlGT4i4+v5YP4f3Omn2tXGqkDM8ZqKefCq
ia5fDnTITBiKIy9RbzbJssuuAerA3U/RCCAJDEmWOHm2A30CAwEAAaOCCDQwgggw
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUMtJmh7yiEv0xTT3mBStNj6ONiUIwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggY5BgNVHREEggYwMIIGLIINKi5hcHByb3Vu
ZC51c4INKi5heW1hbnRyLmNvbYIOKi5iZW53aWxkZXIubWWCEyouYnJhdXNlYmF0
dGVyaWUuZGWCDyouYnJpZGFsc2V0cy5kZYIQKi5idWllbmFyYWRhci5ubIISKi5j
YW1icmlkZ2UuY29tLm15gg8qLmRhbmFzYWxkby54eXqCCCouZnJmLmRlgg8qLmZy
aWVzZXVyZW4uZGWCCCouZnJ2LmRlggkqLmZzZ3YuZGWCCCouZnR1LmRlgggqLmZ0
eS5kZYIIKi5meHYuZGWCCCouZy1wLmRlghIqLmdsdXRlbmZyZWUuY28uemGCDyou
aW1tb2JpbGllci5kZYINKi5raW5wb2xpcy5kZYIWKi5rdWRvc2Z1cm5pdHVyZS5j
by51a4IYKi5sYXVndWFnZXNvbmxpbmUub3JnLnVrgg0qLmxpbmd1ZWUubmV0gg8q
Lmx1a2VieXJhbi5jb22CECoubWFsbWJlcmdtYm8ubmyCDSoubmV0bG9meS5hcHCC
CyoucXVva2xhLmRlghAqLnNhbG9ucy1uZWFyLm1lghMqLnNjaHdpbW13aW5kZWxu
LmRlghwqLnNraXBiaW5oaXJlYWRlbGFpZGUuY29tLmF1ghMqLnNwZXJtYmFua3Mu
Y29tLmF1ghIqLnNwZXppYWxiZXR0ZW4uZGWCECouc3BpZWxlaXRwcHMuZGWCEiou
c3ZhaW1wb3J0cy5jby51a4IUKi50ZWxla29tdW5pa2FzaS5uZXSCDSoudGhvcmFi
aC5jb22CEioudG9uYXVkaW9ncmFtbS5kZYIQKi52b2xrc2F3YWdlbi5kZYIPKi53
YWNoc3NwcmF5LmRlghoqLndhdGVycHJvb2ZtYXNjYXJhLmNvbS5hdYISKi53ZWJj
YWxlbmRhcnMub3JnggwqLndlYm5vdGUuZXOCCSoud2hhdC5kZYILKi53d3drdm4u
ZGWCFyoueG4tLWJlcmRjaGVyLTN6YTl1LmRlghgqLnhuLS1mbHNzaWdndW1taS11
aGIuZGWCFSoueG4tLWZyc3Rpc2NoLTF6YS5kZYILKi55ZXM0Ny5uZXSCECoueW9n
dXJ0YmFybi5uZXSCC2FwcHJvdW5kLnVzggtheW1hbnRyLmNvbYIMYmVud2lsZGVy
Lm1lghFicmF1c2ViYXR0ZXJpZS5kZYINYnJpZGFsc2V0cy5kZYIOYnVpZW5hcmFk
YXIubmyCEGNhbWJyaWRnZS5jb20ubXmCDWRhbmFzYWxkby54eXqCBmZyZi5kZYIN
ZnJpZXNldXJlbi5kZYIGZnJ2LmRlggdmc2d2LmRlggZmdHUuZGWCBmZ0eS5kZYIG
Znh2LmRlggZnLXAuZGWCEGdsdXRlbmZyZWUuY28uemGCDWltbW9iaWxpZXIuZGWC
C2tpbnBvbGlzLmRlghRrdWRvc2Z1cm5pdHVyZS5jby51a4IWbGF1Z3VhZ2Vzb25s
aW5lLm9yZy51a4ILbGluZ3VlZS5uZXSCDWx1a2VieXJhbi5jb22CDm1hbG1iZXJn
bWJvLm5sggtuZXRsb2Z5LmFwcIIJcXVva2xhLmRlgg5zYWxvbnMtbmVhci5tZYIR
c2Nod2ltbXdpbmRlbG4uZGWCGnNraXBiaW5oaXJlYWRlbGFpZGUuY29tLmF1ghFz
cGVybWJhbmtzLmNvbS5hdYIQc3BlemlhbGJldHRlbi5kZYIOc3BpZWxlaXRwcHMu
ZGWCEHN2YWltcG9ydHMuY28udWuCEnRlbGVrb211bmlrYXNpLm5ldIILdGhvcmFi
aC5jb22CEHRvbmF1ZGlvZ3JhbW0uZGWCDnZvbGtzYXdhZ2VuLmRlgg13YWNoc3Nw
cmF5LmRlghh3YXRlcnByb29mbWFzY2FyYS5jb20uYXWCEHdlYmNhbGVuZGFycy5v
cmeCCndlYm5vdGUuZXOCB3doYXQuZGWCCXd3d2t2bi5kZYIVeG4tLWJlcmRjaGVy
LTN6YTl1LmRlghZ4bi0tZmxzc2lnZ3VtbWktdWhiLmRlghN4bi0tZnJzdGlzY2gt
MXphLmRlggl5ZXM0Ny5uZXSCDnlvZ3VydGJhcm4ubmV0MBMGA1UdIAQMMAowCAYG
Z4EMAQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAPxdLT9ciR1iUHWUchL4N
Eu2QN38fhWrrwb8ohez4ZG4AAAGOwyQjkAAABAMASDBGAiEA+iCn2iV9ddL3QsiJ
gquLMeLma8QYr5PVWZdppytFeYwCIQDRPU4mPtzt0X+G2t3FYl9TFtOou3KoGS8J
TKiGMl+tIAB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjsMk
I5EAAAQDAEgwRgIhAM90J3JrJH9/flQOqcK3douHYgMbxIrnCI5mErm25qc6AiEA
4nUwsnlNIeHLjY1YVEQ2xmSHh0dBXTEA0nUZuMa77CowDQYJKoZIhvcNAQELBQAD
ggEBALdbWI/IofnKyc/woAbxvW6EDOjhInfpTRQrQ9UbPN5QSIvIJhnAUXaNUOlG
IG7Nwu0HYg5wCyvmeGnAT7mtgv58clnd/mu/xLc/n26wDsm7uwzvA1OI+8XMvilS
Fc0tIXX54a6r887j6km4Dt8vB424jUyXNopYAmaD9k5hbtNC9DpRqMABcncxA/Fz
AdNYo05KrojQkILvjLK3OfGuPzGHQivXCPKArSJnWTbeqnOLkFCsDFgyLLX3OT7R
UDks6lgorVSdIvI0utkL/viShOB3AHlazxbfV+Q5mT44uNYSz+jGWiSBvGkH5Xma
t8pwI/mGBjdtxn3bzbVr+YVpkbA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxcxWbfqQR822y+rR8A9q
rRedjOLcVyBVWgVOBjG38rkK5MkEcjHCvRu2L/NwlCmh4CLQN8rak2K8FMw00myj
cqprQOoy4owiQTY9n0qoGUDSoAYTZ0zOf1TQHC5T6KdyPCXI/8TIypIM4rfEkHER
YawC7TjEjbBOFQt+nInAg+rjE0t8hO0praVZJbB7EGtqZBeNPmpMsePCcdTP2dV/
YbNvnvpUaggsVK4ylkaGnWg8fRqt/6gsfE2m77z4+gZggrHxTUB18mBXgGkHpW/T
Pb0HMB3X0yvDn7n3kugZbwQ4spZLuh/4FBigZdgoq50gEJuQAjMZoougcHoWq+bI
r1CBq+KK1jTJ3/DHVoSn/+R/KhV+R2BhZQrh5O+izTTduMTcszoz4wqO2xfcz/mi
XZ4By0eWnUNA8NiRIgUiIDbq0m2u0aELAzWTrZC4niQ6ZTZz8hlxlcn8K9ViPkNt
EFByu2bEg9a7ThoGsbIis4B2HFBy/Ba3r6KnJDgTvK/iIZ5wj8/HV59l+Gey+Zeh
wsKPLfsMu2FvfmKPFyIc66TP4duEP3RjoeGBr11QVqlEhqwceu/15MzoPuRi0Tct
mrun4rKlGT4i4+v5YP4f3Omn2tXGqkDM8ZqKefCqia5fDnTITBiKIy9RbzbJssuu
AerA3U/RCCAJDEmWOHm2A30CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410578453378273030323072653379993649265723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 12:55:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 12:55:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spermbanks.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806946228046568024248493217959855495632093597028216844492924006796942956569383894740681949924870976150626088181956243624271506734857837542885480241796160561670218969592537447072304071343460839049430220344483168185156605442561158432202971158171181256830002482957381583887394006670679237230193125139060546030204775959284097850166700559143311767406777610983784284691743877628627986009911073110648942629039132825372717107725356923454699872231326126226141789133234627101946669519542334254366622065749674343756659331762827912111312209001573937374732496968803620141324619968360154205181882206205276783464732450570529477992004516876961515258816192445488091270324720666746863805811437116273242207004442855374127966126028631530548349434884366811920874432253095215910283974048681415511233566270866438963600346140785654641855302170077597352592215029485919271763196441489860992927848312226116325747323238723104892462797041628953199570802297472053211766489653403611955042087429453130833800405435495206402069819095630592464528612469152182848094680013796709277636804982147393795844750761543116941822965282469486234456369621476195093069938857910269294223205228034191860194306984233977549686426260614912095823122343110868493052877250425526800528835453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32d26687bca212fd314d3de6052b4d8fa38d8942
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appround.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aymantr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benwilder.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brausebatterie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridalsets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buienaradar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambridge.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danasaldo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frieseuren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsgv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fty.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g-p.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glutenfree.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immobilier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinpolis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kudosfurniture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lauguagesonline.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linguee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lukebyran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malmbergmbo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netlofy.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quokla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salons-near.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwimmwindeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skipbinhireadelaide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spermbanks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spezialbetten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spieleitpps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svaimports.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telekomunikasi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thorabh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonaudiogramm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volksawagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wachsspray.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterproofmascara.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webcalendars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webnote.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.what.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwkvn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--berdcher-3za9u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flssiggummi-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frstisch-1za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yes47.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yogurtbarn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appround.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aymantr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benwilder.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brausebatterie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridalsets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buienaradar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridge.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danasaldo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frieseuren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsgv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fty.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g-p.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glutenfree.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinpolis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kudosfurniture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauguagesonline.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linguee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukebyran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malmbergmbo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netlofy.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quokla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salons-near.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwimmwindeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skipbinhireadelaide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spermbanks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spezialbetten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spieleitpps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svaimports.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telekomunikasi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thorabh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonaudiogramm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volksawagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wachsspray.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterproofmascara.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcalendars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webnote.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'what.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwkvn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--berdcher-3za9u.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flssiggummi-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frstisch-1za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes47.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogurtbarn.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ec32423900000040300483046022100fa20a7da257d75d2f742c88982ab8b31e2e66bc418af93d5599769a72b45798c022100d13d4e263edcedd17f86daddc5625f5316d3a8bb72a8192f094ca886325fad2000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ec32423910000040300483046022100cf7427726b247f7f7e540ea9c2b7768b8762031bc48ae7088e6612b9b6e6a73a022100e27530b2794d21e1cb8d8d58544436c664878747415d3100d27519b8c6bbec2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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