repleycard.it

Issued by R3

About this certificate

This digital certificate with serial number 03:35:2f:79:df:e6:78:7f:2c:d8:49:35:ce:a1:c0:1a:69:5a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=repleycard.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:2f:79:df:e6:78:7f:2c:d8:49:35:ce:a1:c0:1a:69:5a
Serial Number (int): 279434929767049363202734935792193315170650
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:b9:4a:e8:45:ad:da:f2:3d:40:12:29:5e:c8:13:90:79:78:2e:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:85:1f:5c:22:33:58:66:9a:07:4a:00:90:03:e6:ff:e6:05:ab:c0
Fingerprint (sha256): 9a:50:fa:c0:2b:93:4d:38:27:18:fb:ec:2f:8e:4d:0d:02:fd:39:cc:f5:f8:d6:33:a1:0e:85:d2:e7:93:7d:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate repleycard.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for repleycard.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.6gga.ga
*.advancedhairtechnologies.net
*.ajfl.com
*.bewtoki292.com
*.bjvw.com
*.bocaratoncondos.com
*.bookdaquan.com
*.bracubi.com
*.cabaldallas.com
*.camejiafunezroofing.com
*.courierhub.in
*.dealerator.com
*.dfwqualitytees.com
*.digitalcerrajera.com
*.don.co.za
*.edisoninsurance.cm
*.embersandendpapers.com
*.gearboxcomunicacao.com
*.glg.eu
*.gruposore.com
*.hledal.cz
*.hrf.eu
*.jyisk.nl
*.lateinlexikon.de
*.lha.de
*.lho.de
*.lidld.de
*.lidlo.de
*.llivehdcams.com
*.lonestarfamilypractice.com
*.manhattancondos.net
*.meracake.com
*.myut.com
*.ntyv.com
*.oawb.com
*.preishamer.de
*.primesellerscm.com
*.proeftuin.com
*.qutti.net
*.repleycard.it
*.restaurantevillamaggioni.com.br
*.satanderfinanciamentos.com.br
*.shutter-derfilm.de
*.sonico.es
*.tampabaycondos.com
*.tenedor.es
*.topyad.com
*.wastemanagementtn.com
*.wgv.eu
*.wisssports.net
6gga.ga
advancedhairtechnologies.net
ajfl.com
bewtoki292.com
bjvw.com
bocaratoncondos.com
bookdaquan.com
bracubi.com
cabaldallas.com
camejiafunezroofing.com
courierhub.in
dealerator.com
dfwqualitytees.com
digitalcerrajera.com
don.co.za
edisoninsurance.cm
embersandendpapers.com
gearboxcomunicacao.com
glg.eu
gruposore.com
hledal.cz
hrf.eu
jyisk.nl
lateinlexikon.de
lha.de
lho.de
lidld.de
lidlo.de
llivehdcams.com
lonestarfamilypractice.com
manhattancondos.net
meracake.com
myut.com
ntyv.com
oawb.com
preishamer.de
primesellerscm.com
proeftuin.com
qutti.net
repleycard.it
restaurantevillamaggioni.com.br
satanderfinanciamentos.com.br
shutter-derfilm.de
sonico.es
tampabaycondos.com
tenedor.es
topyad.com
wastemanagementtn.com
wgv.eu
wisssports.net

Other certificates including the domain name repleycard.it

(limited to 100 certificates)
paladins.store
shabuworld.net
ewastenaw.org
repleycard.it
ewastenaw.org
pornomania.net
repleycard.it
repleycard.it
repleycard.it
repleycard.it
lfu.de
ewastenaw.org
rivate-krankenversicherung.de
don.co.za

Certificate

The complete raw certificate details for repleycard.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMfTCCC2WgAwIBAgISAzUved/meH8s2Ek1zqHAGmlaMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTIyMDIyNDlaFw0yNDAxMTAyMDIyNDhaMBgxFjAUBgNVBAMT
DXJlcGxleWNhcmQuaXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDG
HywfIkprBClkVFQnlJI3xEs5ezy5kwcM/my2Ge9kKeIR+Gnz2ytBWXqOeZxWFamv
4FD5ERwFA7MQeWQtcyV0eF5WvJ4SJqR31Wqx5mD1uuBS6MrqV/l5kPaq2EvbV+Pg
ORVQJJBS4lyLjy2OHYD8TJuktNH7ZP5IqqYdCnbF91O4HvjBSgz1Hl0ml/xwJu4s
cCqw6UqWU9uenNHLta7DoQSBzN+HiEqMcH6ywgQZTw8EoK68SnUNvdYmnZwFOIyw
ftXCXDB+pQnHBE+miBCTPckPijsWqhgZ+sMFjAM+1lUfs8UHkh67E5kY8BW1aUuX
URd7U9Mm6IFPW+yZoWNJwJeejkDF4s6IhaZdlRrKMB/IbkRkNcwR7dV6lO4Tdw0U
PsQLlQg/JBPFyojpslToC43jc1nPhlUEh47wwb5nyOhE09qXm7nHbcWckgOXRTqV
WKYkm0iS5JJs6tAqUXMHQnp+1ohOT7dF0RxmwQiuhKudrdvWhwB+dnBy2bM9a2rf
WIy08D13LJT5teIEFwWj1Vh+xJgbHqtbX0LDB26+fGyVaap0K3u/gM4aIl/BVzAG
HM29gHATt9E1yTfTmGQYgwvWeu/r7PPA/FyU4TAEsvVthj7KYj3ZCdCHSJO/R3Lu
mcqBVUXXq9t6IStLHGoQSIyHJKqHWFDHganjtqxSPwIDAQABo4IIpTCCCKEwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBRruUroRa3a8j1AEileyBOQeXgurTAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBqsGA1UdEQSCBqIwggaeggkqLjZnZ2EuZ2GCHiou
YWR2YW5jZWRoYWlydGVjaG5vbG9naWVzLm5ldIIKKi5hamZsLmNvbYIQKi5iZXd0
b2tpMjkyLmNvbYIKKi5ianZ3LmNvbYIVKi5ib2NhcmF0b25jb25kb3MuY29tghAq
LmJvb2tkYXF1YW4uY29tgg0qLmJyYWN1YmkuY29tghEqLmNhYmFsZGFsbGFzLmNv
bYIZKi5jYW1lamlhZnVuZXpyb29maW5nLmNvbYIPKi5jb3VyaWVyaHViLmlughAq
LmRlYWxlcmF0b3IuY29tghQqLmRmd3F1YWxpdHl0ZWVzLmNvbYIWKi5kaWdpdGFs
Y2VycmFqZXJhLmNvbYILKi5kb24uY28uemGCFCouZWRpc29uaW5zdXJhbmNlLmNt
ghgqLmVtYmVyc2FuZGVuZHBhcGVycy5jb22CGCouZ2VhcmJveGNvbXVuaWNhY2Fv
LmNvbYIIKi5nbGcuZXWCDyouZ3J1cG9zb3JlLmNvbYILKi5obGVkYWwuY3qCCCou
aHJmLmV1ggoqLmp5aXNrLm5sghIqLmxhdGVpbmxleGlrb24uZGWCCCoubGhhLmRl
gggqLmxoby5kZYIKKi5saWRsZC5kZYIKKi5saWRsby5kZYIRKi5sbGl2ZWhkY2Ft
cy5jb22CHCoubG9uZXN0YXJmYW1pbHlwcmFjdGljZS5jb22CFSoubWFuaGF0dGFu
Y29uZG9zLm5ldIIOKi5tZXJhY2FrZS5jb22CCioubXl1dC5jb22CCioubnR5di5j
b22CCioub2F3Yi5jb22CDyoucHJlaXNoYW1lci5kZYIUKi5wcmltZXNlbGxlcnNj
bS5jb22CDyoucHJvZWZ0dWluLmNvbYILKi5xdXR0aS5uZXSCDyoucmVwbGV5Y2Fy
ZC5pdIIhKi5yZXN0YXVyYW50ZXZpbGxhbWFnZ2lvbmkuY29tLmJygh8qLnNhdGFu
ZGVyZmluYW5jaWFtZW50b3MuY29tLmJyghQqLnNodXR0ZXItZGVyZmlsbS5kZYIL
Ki5zb25pY28uZXOCFCoudGFtcGFiYXljb25kb3MuY29tggwqLnRlbmVkb3IuZXOC
DCoudG9weWFkLmNvbYIXKi53YXN0ZW1hbmFnZW1lbnR0bi5jb22CCCoud2d2LmV1
ghAqLndpc3NzcG9ydHMubmV0ggc2Z2dhLmdhghxhZHZhbmNlZGhhaXJ0ZWNobm9s
b2dpZXMubmV0gghhamZsLmNvbYIOYmV3dG9raTI5Mi5jb22CCGJqdncuY29tghNi
b2NhcmF0b25jb25kb3MuY29tgg5ib29rZGFxdWFuLmNvbYILYnJhY3ViaS5jb22C
D2NhYmFsZGFsbGFzLmNvbYIXY2FtZWppYWZ1bmV6cm9vZmluZy5jb22CDWNvdXJp
ZXJodWIuaW6CDmRlYWxlcmF0b3IuY29tghJkZndxdWFsaXR5dGVlcy5jb22CFGRp
Z2l0YWxjZXJyYWplcmEuY29tgglkb24uY28uemGCEmVkaXNvbmluc3VyYW5jZS5j
bYIWZW1iZXJzYW5kZW5kcGFwZXJzLmNvbYIWZ2VhcmJveGNvbXVuaWNhY2FvLmNv
bYIGZ2xnLmV1gg1ncnVwb3NvcmUuY29tgglobGVkYWwuY3qCBmhyZi5ldYIIanlp
c2submyCEGxhdGVpbmxleGlrb24uZGWCBmxoYS5kZYIGbGhvLmRlgghsaWRsZC5k
ZYIIbGlkbG8uZGWCD2xsaXZlaGRjYW1zLmNvbYIabG9uZXN0YXJmYW1pbHlwcmFj
dGljZS5jb22CE21hbmhhdHRhbmNvbmRvcy5uZXSCDG1lcmFjYWtlLmNvbYIIbXl1
dC5jb22CCG50eXYuY29tgghvYXdiLmNvbYINcHJlaXNoYW1lci5kZYIScHJpbWVz
ZWxsZXJzY20uY29tgg1wcm9lZnR1aW4uY29tgglxdXR0aS5uZXSCDXJlcGxleWNh
cmQuaXSCH3Jlc3RhdXJhbnRldmlsbGFtYWdnaW9uaS5jb20uYnKCHXNhdGFuZGVy
ZmluYW5jaWFtZW50b3MuY29tLmJyghJzaHV0dGVyLWRlcmZpbG0uZGWCCXNvbmlj
by5lc4ISdGFtcGFiYXljb25kb3MuY29tggp0ZW5lZG9yLmVzggp0b3B5YWQuY29t
ghV3YXN0ZW1hbmFnZW1lbnR0bi5jb22CBndndi5ldYIOd2lzc3Nwb3J0cy5uZXQw
EwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDa
tr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYslxU+fAAAEAwBHMEUC
IQCeH3NWop2k0jBhxXiSLdN790+jMcMhR5w59pNSCCr0JAIgb5cKj0hV6Qq/qBDS
/b+yun1ApxPro6CnlZFd70npN2UAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQAN
LXJv4frUFwAAAYslxVE8AAAEAwBIMEYCIQDqUXD3qq/4e3SqlzgMz2Ehb6CEbB/Y
IwPqkeENW8wgaAIhAPQtkzr5mi+ziTM3Lzfa+0kWEr3BlIO2gi0xPPsr6e97MA0G
CSqGSIb3DQEBCwUAA4IBAQAwjpceK1DTKQPpUUX2xlIRkWPZwqfYk/dvsCz8gaqC
hcaxfTHhdio+OYxQ8FjcnQrJO5TWhpfS489nNFNgknFnn2Vta0vbg7+ZbYKe9lPO
G5t/Q0WbPLYGzUqg3LG0fl5TxQbQ2o5t4e6uaxl3D8mXsyqBZ49YS9hgmE/Dwhqi
KLQm32Sj32aLB0rHP2gDtj4qp5ZeL3Z1r1C9AxrGBpEfLDD49n79u2blDJw4vaci
aLa9BuaJwWPoBTHcrkW/5IyfJCqVM5s3DWU2j+FPUay/8/F3teihBfApCUceP15s
ezc7jXaZh+3FkkmxYTOylRe05Jm6AAhCPx+1zqmOqVIz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279434929767049363202734935792193315170650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 20:22:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 20:22:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'repleycard.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808266291456400821098331085929795532497512538305579103377395284562422817086196997746321230063758692199244528593132893140498636339294596880162118559440893773559652603956128128793061160854781597428882819187019079064901321912991412079023149733990059337091457264869856790066391340891681093517172237573839369038076094152783679993358451775688177320239339299430135489707096555684337271290287201982304632999205433683407790123980806752762160220623233702019519525026734353336779422039482394882491657108404082000709030398345248399732996930212820285285367850346509414424661673670117175351038900138117276269397055575177902571903884018823774157707767658410206996899201151000808749769956285485087646650789410896508297080384502488485188847447497587264502745110041801868342938528349139192320293228936436947818911235954679589516700377399590635163043355438626940981375402484039693372216607845030049620303260707595363631062221406610466422563844318109838789674503554909550013747702921866175928596537947973080564121883990399492232230584243025744861687295337530305436818968914581680048814036648080471038701595422452484180374248859630945499046956474505430604239395599897358755072282541124257618123644898452132442556758406420700234625054786501812080444461631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bb94ae845addaf23d4012295ec8139079782ead
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1698 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6gga.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advancedhairtechnologies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bewtoki292.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bjvw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bocaratoncondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookdaquan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bracubi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabaldallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camejiafunezroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courierhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfwqualitytees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalcerrajera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.don.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edisoninsurance.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embersandendpapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gearboxcomunicacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hledal.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jyisk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lateinlexikon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lha.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lidld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lidlo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llivehdcams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonestarfamilypractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manhattancondos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meracake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntyv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oawb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preishamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primesellerscm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proeftuin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qutti.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repleycard.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurantevillamaggioni.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satanderfinanciamentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shutter-derfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tampabaycondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenedor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topyad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wastemanagementtn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wgv.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wisssports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6gga.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedhairtechnologies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewtoki292.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjvw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bocaratoncondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookdaquan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracubi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabaldallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camejiafunezroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courierhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwqualitytees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcerrajera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'don.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edisoninsurance.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embersandendpapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearboxcomunicacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruposore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hledal.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jyisk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lateinlexikon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lha.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidlo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llivehdcams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonestarfamilypractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattancondos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meracake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntyv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oawb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preishamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primesellerscm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proeftuin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qutti.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repleycard.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantevillamaggioni.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satanderfinanciamentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shutter-derfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampabaycondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenedor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topyad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wastemanagementtn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgv.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisssports.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b25c54f9f00000403004730450221009e1f7356a29da4d23061c578922dd37bf74fa331c321479c39f69352082af42402206f970a8f4855e90abfa810d2fdbfb2ba7d40a713eba3a0a795915def49e937650077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b25c5513c0000040300483046022100ea5170f7aaaff87b74aa97380ccf61216fa0846c1fd82303ea91e10d5bcc2068022100f42d933af99a2fb38933372f37dafb491612bdc19483b6822d313cfb2be9ef7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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