align-technology.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:d2:79:fb:14:58:1b:55:40:09:27:99:96:6f:41:1c:7f:6e was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=align-technology.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:79:fb:14:58:1b:55:40:09:27:99:96:6f:41:1c:7f:6e
Serial Number (int): 332958295115308013860185330702218352689006
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:12:9d:21:19:48:45:3b:fc:b5:d9:01:22:dc:56:de:5c:11:30:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:0c:07:08:69:6e:75:1e:84:09:4b:58:39:d0:f3:0c:f0:3f:43:f5
Fingerprint (sha256): 99:36:56:bf:df:66:b9:60:07:6b:f1:43:dd:cd:e9:10:f7:a6:90:0d:85:50:df:e5:02:d5:f4:73:a0:14:10:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate align-technology.co.uk

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for align-technology.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.360fx.info
*.align-technology.co.uk
*.ami.com.au
*.askeor.com
*.brocklesby.com
*.canlidizihd6.com
*.charliewardshow.tv
*.cihanbarut.com
*.colbykeller.com
*.dnevnibuzz.com
*.doggdision.com
*.dorisells.com
*.dtw.com.pl
*.femtochemistry.com
*.foodrescue.com.au
*.freedomwarrenty.com
*.gaellegarrocq.com
*.isopoddesign.com
*.javol.net
*.jieyitattoo.com
*.jimenezms.com
*.lavieilleecole.com
*.livetc.sx
*.look2movie.com
*.lordandtaylor.co
*.mededita.com
*.mujeresboricuas.com
*.nervousconform.com
*.nowbmb.com
*.pbeenterprise.com
*.qbrokers-hellas.com
*.realestateinvestingiseasy.com
*.reeibnny.com
*.renoldi.com
*.s3schools.com
*.savevalet.com
*.sharette.com
*.sijinkai-koth.com
*.socialsheri.com
*.sonjapaunovic.com
*.thepokienet31.com
*.thepokiesnet11.com
*.thesexdrug.com
*.twettr.com
*.ukjobfront.co
*.volcanovermont.com
*.vtoz.net
*.zixian.com
*.ztzg.cc
360fx.info
align-technology.co.uk
ami.com.au
askeor.com
brocklesby.com
canlidizihd6.com
charliewardshow.tv
cihanbarut.com
colbykeller.com
dnevnibuzz.com
doggdision.com
dorisells.com
dtw.com.pl
femtochemistry.com
foodrescue.com.au
freedomwarrenty.com
gaellegarrocq.com
isopoddesign.com
javol.net
jieyitattoo.com
jimenezms.com
lavieilleecole.com
livetc.sx
look2movie.com
lordandtaylor.co
mededita.com
mujeresboricuas.com
nervousconform.com
nowbmb.com
pbeenterprise.com
qbrokers-hellas.com
realestateinvestingiseasy.com
reeibnny.com
renoldi.com
s3schools.com
savevalet.com
sharette.com
sijinkai-koth.com
socialsheri.com
sonjapaunovic.com
thepokienet31.com
thepokiesnet11.com
thesexdrug.com
twettr.com
ukjobfront.co
volcanovermont.com
vtoz.net
zixian.com
ztzg.cc

Other certificates including the domain name align-technology.co.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for align-technology.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMmjCCC4KgAwIBAgISA9J5+xRYG1VACSeZlm9BHH9uMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjcwNTQzMjRaFw0yNDAyMjUwNTQzMjNaMCExHzAdBgNVBAMT
FmFsaWduLXRlY2hub2xvZ3kuY28udWswggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQDCpubjUvgQt5oQ6AyogXi8pK1Iz4QlwtUgWerm7kFO0K0GfZ9z4rvl
HfQasVELumQNGvSx6thxFUMq3ZdaR/UzIjL9D5J2iJa28LGzyyLPCvagp0Br3+Ug
sOpPBJDsLUfYvInhIEbh/ANz21u2cJQUs1c9ZXglsB/l2mpghhrGpre9i7C0asWH
JQCYcnoQ8daAFG0n/5IxR8MtDxQwW7wsga+1QfHuGOngjbA1pXzfINn0CU2T5jqq
2NSh91VqIsmbRN4BV2VFoIVfKl061C/MILi2dJRCQw5DaJ885kbxOP5vdBjGgJae
DUlIaPdJUjTwFBxrZUr7NutHoyIsxMiOo+w15Td28Mdi438YSqynZSW0cjcnmcZc
cAeJgBbT4JwpnkJ3Lgj0KBPiJWlCae2S/KkDcJxgaQSpBEvvSG5WA7vTSnoDFF6y
sR2sn3D7N9nsXt+mVdUHqDKaNnTjIcZIrEymKTJX85ZXDejobTiNvpS1h8AsAOui
zDaztOHTxjstlYwru6Q5hXUFz5fkF8TSiKsmAbgerGxSNtDxu78HXAwBZwl0ICq/
f9IRl05/rjTVplkDdymQUGrxCYSXbHSm3VdHC7JT3WToIsEF2AsGSfobCASsVqa1
JPw53GB8WyGqY0fWXU0ukPbTzwmL2NitJg+o/czaA+WHw/xz6w66HQIDAQABo4II
uTCCCLUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSUEp0hGUhFO/y12QEi3FbeXBEw
YDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ
MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw
AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCBr8GA1UdEQSCBrYwggayggwqLjM2
MGZ4LmluZm+CGCouYWxpZ24tdGVjaG5vbG9neS5jby51a4IMKi5hbWkuY29tLmF1
ggwqLmFza2Vvci5jb22CECouYnJvY2tsZXNieS5jb22CEiouY2FubGlkaXppaGQ2
LmNvbYIUKi5jaGFybGlld2FyZHNob3cudHaCECouY2loYW5iYXJ1dC5jb22CESou
Y29sYnlrZWxsZXIuY29tghAqLmRuZXZuaWJ1enouY29tghAqLmRvZ2dkaXNpb24u
Y29tgg8qLmRvcmlzZWxscy5jb22CDCouZHR3LmNvbS5wbIIUKi5mZW10b2NoZW1p
c3RyeS5jb22CEyouZm9vZHJlc2N1ZS5jb20uYXWCFSouZnJlZWRvbXdhcnJlbnR5
LmNvbYITKi5nYWVsbGVnYXJyb2NxLmNvbYISKi5pc29wb2RkZXNpZ24uY29tggsq
Lmphdm9sLm5ldIIRKi5qaWV5aXRhdHRvby5jb22CDyouamltZW5lem1zLmNvbYIU
Ki5sYXZpZWlsbGVlY29sZS5jb22CCyoubGl2ZXRjLnN4ghAqLmxvb2sybW92aWUu
Y29tghIqLmxvcmRhbmR0YXlsb3IuY2+CDioubWVkZWRpdGEuY29tghUqLm11amVy
ZXNib3JpY3Vhcy5jb22CFCoubmVydm91c2NvbmZvcm0uY29tggwqLm5vd2JtYi5j
b22CEyoucGJlZW50ZXJwcmlzZS5jb22CFSoucWJyb2tlcnMtaGVsbGFzLmNvbYIf
Ki5yZWFsZXN0YXRlaW52ZXN0aW5naXNlYXN5LmNvbYIOKi5yZWVpYm5ueS5jb22C
DSoucmVub2xkaS5jb22CDyouczNzY2hvb2xzLmNvbYIPKi5zYXZldmFsZXQuY29t
gg4qLnNoYXJldHRlLmNvbYITKi5zaWppbmthaS1rb3RoLmNvbYIRKi5zb2NpYWxz
aGVyaS5jb22CEyouc29uamFwYXVub3ZpYy5jb22CEyoudGhlcG9raWVuZXQzMS5j
b22CFCoudGhlcG9raWVzbmV0MTEuY29tghAqLnRoZXNleGRydWcuY29tggwqLnR3
ZXR0ci5jb22CDyoudWtqb2Jmcm9udC5jb4IUKi52b2xjYW5vdmVybW9udC5jb22C
CioudnRvei5uZXSCDCoueml4aWFuLmNvbYIJKi56dHpnLmNjggozNjBmeC5pbmZv
ghZhbGlnbi10ZWNobm9sb2d5LmNvLnVrggphbWkuY29tLmF1ggphc2tlb3IuY29t
gg5icm9ja2xlc2J5LmNvbYIQY2FubGlkaXppaGQ2LmNvbYISY2hhcmxpZXdhcmRz
aG93LnR2gg5jaWhhbmJhcnV0LmNvbYIPY29sYnlrZWxsZXIuY29tgg5kbmV2bmli
dXp6LmNvbYIOZG9nZ2Rpc2lvbi5jb22CDWRvcmlzZWxscy5jb22CCmR0dy5jb20u
cGyCEmZlbXRvY2hlbWlzdHJ5LmNvbYIRZm9vZHJlc2N1ZS5jb20uYXWCE2ZyZWVk
b213YXJyZW50eS5jb22CEWdhZWxsZWdhcnJvY3EuY29tghBpc29wb2RkZXNpZ24u
Y29tgglqYXZvbC5uZXSCD2ppZXlpdGF0dG9vLmNvbYINamltZW5lem1zLmNvbYIS
bGF2aWVpbGxlZWNvbGUuY29tgglsaXZldGMuc3iCDmxvb2sybW92aWUuY29tghBs
b3JkYW5kdGF5bG9yLmNvggxtZWRlZGl0YS5jb22CE211amVyZXNib3JpY3Vhcy5j
b22CEm5lcnZvdXNjb25mb3JtLmNvbYIKbm93Ym1iLmNvbYIRcGJlZW50ZXJwcmlz
ZS5jb22CE3Ficm9rZXJzLWhlbGxhcy5jb22CHXJlYWxlc3RhdGVpbnZlc3Rpbmdp
c2Vhc3kuY29tggxyZWVpYm5ueS5jb22CC3Jlbm9sZGkuY29tgg1zM3NjaG9vbHMu
Y29tgg1zYXZldmFsZXQuY29tggxzaGFyZXR0ZS5jb22CEXNpamlua2FpLWtvdGgu
Y29tgg9zb2NpYWxzaGVyaS5jb22CEXNvbmphcGF1bm92aWMuY29tghF0aGVwb2tp
ZW5ldDMxLmNvbYISdGhlcG9raWVzbmV0MTEuY29tgg50aGVzZXhkcnVnLmNvbYIK
dHdldHRyLmNvbYINdWtqb2Jmcm9udC5jb4ISdm9sY2Fub3Zlcm1vbnQuY29tggh2
dG96Lm5ldIIKeml4aWFuLmNvbYIHenR6Zy5jYzATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHL
Vt0sgdm7v6s52IRzAAABjA+EtSoAAAQDAEgwRgIhAJlJHVYbpll6Sq9Hyq/rgQ1z
kEtBk0tEYP5HJFQTny2QAiEAsEArU3IxhNZv3dz/BXs4I+JV9Kyl92pOsJ9JYFRS
b38AdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYwPhLV0AAAE
AwBHMEUCIQCh/qSNedqE61Cxm26Fi17dD3zh/F4M96AS+PLiYa6u3wIgXDJKQXcD
AIyOa0Jku6Pca/FgOXvC6uNCgCazwSW7Mn8wDQYJKoZIhvcNAQELBQADggEBAGaz
3bB6jiQADR6f5jM2c8p25YcTksCLkOjVaepogt94OkqIBB7vOFi3utVvDEtSXAL4
9xngOxHhATjdXGA0x0J5BcDCNe1folEtR4ndahov0Dnpa0sGJ01PnTfZTeoOVT7L
R1c6UrEx54G8Su/KVvd2PMb7htMRmOMfTdLOO5YbCkxQQlHwsvvPjZYvNr2v1JYt
Y/xneBtLdkVj168ptS6y8gRpSulACyzm3LxJWjIh3Jy7hpQvdWJ90O7ACk9HT3o4
W3agW/aWE9LaK2cRuAvYKJEFBLVJG7CwcPg787GM38f7ARUJAsC/cREPRkV3/FVP
Zm5gDDKVHmKfWyCFM7U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332958295115308013860185330702218352689006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 05:43:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 05:43:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'align-technology.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794110716272198159456826713294010132732282142613610416211131633198210479793483493367285710313147277793461407025279700903841677707189358847494594427527727010660984815359780956340887276421159339534722967158810520473783931557026391740780621983301574265953307434709811069713461459450930117633138008402748154150943114790431460560089603486149944451956117503676946319311273646493624437984143733219324378428580889092779232195167518607358199413674805782848561659023535594940715624644502826882958459672224276075827889387598910575793700013580777037299059924593194625053371555232090519815375175940394498848299521251098475693891888771907608594751987650378160369128012971266919728223126242721996298398934826368714101510313268038170096576284903929075858095722533791263711288707442865687140899859387291746256459931819904892512351530257089014354052302171634199825368435016033804611680168352902992649591895814878848819158782106070989821855260020541256040704407957753768251369695693467792696701827464287785781732822463345170519967954840542285183492987654057138989226691909624968088042843489383507874007675574546577150487437506548060086860133674723891455346518168208854811673381763414845315862175200123778409488756182646855222331186453450121097524460061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:20|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1718 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.360fx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.align-technology.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ami.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askeor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brocklesby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canlidizihd6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charliewardshow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cihanbarut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colbykeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnevnibuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doggdision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dorisells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtw.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femtochemistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodrescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedomwarrenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaellegarrocq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isopoddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jieyitattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jimenezms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavieilleecole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livetc.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.look2movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lordandtaylor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mededita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mujeresboricuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nervousconform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nowbmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pbeenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qbrokers-hellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestateinvestingiseasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reeibnny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renoldi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3schools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savevalet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sijinkai-koth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialsheri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonjapaunovic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepokienet31.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepokiesnet11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesexdrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twettr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukjobfront.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volcanovermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtoz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zixian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ztzg.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360fx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'align-technology.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ami.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askeor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brocklesby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canlidizihd6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charliewardshow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cihanbarut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colbykeller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnevnibuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doggdision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorisells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtw.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femtochemistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodrescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomwarrenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaellegarrocq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isopoddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jieyitattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimenezms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavieilleecole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livetc.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'look2movie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lordandtaylor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mededita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mujeresboricuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nervousconform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowbmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbeenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbrokers-hellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateinvestingiseasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeibnny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renoldi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3schools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savevalet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sijinkai-koth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialsheri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonjapaunovic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepokienet31.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepokiesnet11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesexdrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twettr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukjobfront.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volcanovermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtoz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zixian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ztzg.cc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0f84b52a000004030048304602210099491d561ba6597a4aaf47caafeb810d73904b41934b4460fe472454139f2d90022100b0402b53723184d66fdddcff057b3823e255f4aca5f76a4eb09f496054526f7f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c0f84b5740000040300473045022100a1fea48d79da84eb50b19b6e858b5edd0f7ce1fc5e0cf7a012f8f2e261aeaedf02205c324a417703008c8e6b4264bba3dc6bf160397bc2eae3428026b3c125bb327f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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