granjasanlucas.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b9:e1:2f:9c:63:33:6a:cb:12:f6:97:f1:e7:ea:2e:97:29 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=granjasanlucas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:e1:2f:9c:63:33:6a:cb:12:f6:97:f1:e7:ea:2e:97:29
Serial Number (int): 411700705116333958634722527566325785466665
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8b:6e:22:f5:dd:11:28:6c:a7:57:31:5f:0c:30:e6:0e:86:60:12:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5e:aa:b6:15:45:3e:dd:d4:8e:cb:45:d4:25:0e:b1:a9:88:66:6c:7b
Fingerprint (sha256): 9a:63:e3:18:ed:53:4b:26:cc:92:b8:20:ab:23:14:93:dd:1b:1c:bd:b8:cb:be:6c:74:d8:bf:2d:12:4d:d8:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate granjasanlucas.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for granjasanlucas.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.211tsg.com
*.44s9.com
*.ads-music.com
*.bookspunjabi.com
*.brahmapur.org
*.buldhana.in
*.carestore-shop.com
*.conservateurpunk.com
*.cop.show
*.dadopoliticshelp.com
*.derekcusackrentals.com
*.eier.nl
*.estebanafrican.com
*.fortwitch.com
*.granjasanlucas.com
*.h-boxshop.com
*.h3ntai.net
*.hostalrincondesol.com
*.izlemac46.net
*.joonku.com
*.klimportaciones.com
*.lincolnfinancil.com
*.lsjnyky.com
*.madcraboakparkmi.com
*.materiacrepe.com
*.microdot.com.au
*.motives.tv
*.nashboutiquecanada.com
*.nextwaveok.com
*.nisekoi-manga.com
*.nybsf.org
*.ocean1tower.com
*.p4andit.com
*.paradaobrigatoriamorrinhos.com.br
*.peace-kh.com
*.pelucia.shop
*.pjsbellingham.com
*.schuelerfragen.de
*.silviaadur.com
*.suffixalways.com
*.taofulile.com
*.technovoyance.com
*.thelegacylearningcenter.com
*.thesayara.com
*.thewarezstore.com
*.warungplus.com
*.wingsnails.com
*.xn--chi-joa.de
*.xn--nietenarmbnder-fib.de
211tsg.com
44s9.com
ads-music.com
bookspunjabi.com
brahmapur.org
buldhana.in
carestore-shop.com
conservateurpunk.com
cop.show
dadopoliticshelp.com
derekcusackrentals.com
eier.nl
estebanafrican.com
fortwitch.com
granjasanlucas.com
h-boxshop.com
h3ntai.net
hostalrincondesol.com
izlemac46.net
joonku.com
klimportaciones.com
lincolnfinancil.com
lsjnyky.com
madcraboakparkmi.com
materiacrepe.com
microdot.com.au
motives.tv
nashboutiquecanada.com
nextwaveok.com
nisekoi-manga.com
nybsf.org
ocean1tower.com
p4andit.com
paradaobrigatoriamorrinhos.com.br
peace-kh.com
pelucia.shop
pjsbellingham.com
schuelerfragen.de
silviaadur.com
suffixalways.com
taofulile.com
technovoyance.com
thelegacylearningcenter.com
thesayara.com
thewarezstore.com
warungplus.com
wingsnails.com
xn--chi-joa.de
xn--nietenarmbnder-fib.de

Other certificates including the domain name granjasanlucas.com

(limited to 100 certificates)
estebanafrican.com
granjasanlucas.com
granjasanlucas.com
granjasanlucas.com
granjasanlucas.com
granjasanlucas.com
khalij.cc
granjasanlucas.com
granjasanlucas.com
invitaciondigital.com

Certificate

The complete raw certificate details for granjasanlucas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM7jCCC9agAwIBAgISBLnhL5xjM2rLEvaX8efqLpcpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDMyMzA5MTBaFw0yNDAzMDIyMzA5MDlaMB0xGzAZBgNVBAMT
EmdyYW5qYXNhbmx1Y2FzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAPcR3phIKFaB4SNpg8VVTfoB2cWhhkJXCbjqLC+i1S2z2PARs7V4VoSTNMzP
4JQHsdvCi0vV3p0SX5HKSquHQJwhYn/ROzJIcZ9Ujkg263fdwqH8ARoJd6BxarV/
xblVedWCdgn2NDXVX7trxNA+FP/MBiXrtwTP0BheD5ac73CvIzT5sEqUqVM/gVJn
zmXvLPmguot196+4WHL+ym7exXOhlNoriVI+T9tqIhhzmVAJ0u8E5YWo6BksRD2V
wrHZZSbnK5k22fWA6m11Z2pAPnxkuAMRpCGRqmOqPhnR+ixYoiTmYhnfbO6ryfga
TgBNB7OITvPh55p9SiFjiC5Lxw7mdSPXUJOZnRbaR4aTmRIWjZZUBcOzP2m/vHuH
sx+Z705pL/0uTRjW1Pgk/yxI2B+YRtTOae9MipfYURxxVfwKnVyosHHx2bPEeOH8
H0nvb/h0iuCn1msgKfrs85bSlg/XXQ05GCcuqYe8cgx1eyqq0iVisbATOVOcaczm
iemOOlDBBqyV/vLdWF0Q5bksb8cKONCg3+vJeYUzxSwh6K0eqZSa9egd+LvkIEyu
ttDzcBcDCSKnOOvTH1darh5IehSlcsptluKtqAKhHMSfZHXbNDmpTdNbSwpDT2L/
M+NSk+UY4TL55acwHqpqza4k3Lr4vV6KbuEaLZa1uAfRh+5BAgMBAAGjggkRMIIJ
DTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFItuIvXdEShsp1cxXwww5g6GYBKoMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIHGQYDVR0RBIIHEDCCBwyCDCouMjExdHNn
LmNvbYIKKi40NHM5LmNvbYIPKi5hZHMtbXVzaWMuY29tghIqLmJvb2tzcHVuamFi
aS5jb22CDyouYnJhaG1hcHVyLm9yZ4INKi5idWxkaGFuYS5pboIUKi5jYXJlc3Rv
cmUtc2hvcC5jb22CFiouY29uc2VydmF0ZXVycHVuay5jb22CCiouY29wLnNob3eC
FiouZGFkb3BvbGl0aWNzaGVscC5jb22CGCouZGVyZWtjdXNhY2tyZW50YWxzLmNv
bYIJKi5laWVyLm5sghQqLmVzdGViYW5hZnJpY2FuLmNvbYIPKi5mb3J0d2l0Y2gu
Y29tghQqLmdyYW5qYXNhbmx1Y2FzLmNvbYIPKi5oLWJveHNob3AuY29tggwqLmgz
bnRhaS5uZXSCFyouaG9zdGFscmluY29uZGVzb2wuY29tgg8qLml6bGVtYWM0Ni5u
ZXSCDCouam9vbmt1LmNvbYIVKi5rbGltcG9ydGFjaW9uZXMuY29tghUqLmxpbmNv
bG5maW5hbmNpbC5jb22CDSoubHNqbnlreS5jb22CFioubWFkY3JhYm9ha3Bhcmtt
aS5jb22CEioubWF0ZXJpYWNyZXBlLmNvbYIRKi5taWNyb2RvdC5jb20uYXWCDCou
bW90aXZlcy50doIYKi5uYXNoYm91dGlxdWVjYW5hZGEuY29tghAqLm5leHR3YXZl
b2suY29tghMqLm5pc2Vrb2ktbWFuZ2EuY29tggsqLm55YnNmLm9yZ4IRKi5vY2Vh
bjF0b3dlci5jb22CDSoucDRhbmRpdC5jb22CIyoucGFyYWRhb2JyaWdhdG9yaWFt
b3JyaW5ob3MuY29tLmJygg4qLnBlYWNlLWtoLmNvbYIOKi5wZWx1Y2lhLnNob3CC
EyoucGpzYmVsbGluZ2hhbS5jb22CEyouc2NodWVsZXJmcmFnZW4uZGWCECouc2ls
dmlhYWR1ci5jb22CEiouc3VmZml4YWx3YXlzLmNvbYIPKi50YW9mdWxpbGUuY29t
ghMqLnRlY2hub3ZveWFuY2UuY29tgh0qLnRoZWxlZ2FjeWxlYXJuaW5nY2VudGVy
LmNvbYIPKi50aGVzYXlhcmEuY29tghMqLnRoZXdhcmV6c3RvcmUuY29tghAqLndh
cnVuZ3BsdXMuY29tghAqLndpbmdzbmFpbHMuY29tghAqLnhuLS1jaGktam9hLmRl
ghsqLnhuLS1uaWV0ZW5hcm1ibmRlci1maWIuZGWCCjIxMXRzZy5jb22CCDQ0czku
Y29tgg1hZHMtbXVzaWMuY29tghBib29rc3B1bmphYmkuY29tgg1icmFobWFwdXIu
b3JnggtidWxkaGFuYS5pboISY2FyZXN0b3JlLXNob3AuY29tghRjb25zZXJ2YXRl
dXJwdW5rLmNvbYIIY29wLnNob3eCFGRhZG9wb2xpdGljc2hlbHAuY29tghZkZXJl
a2N1c2Fja3JlbnRhbHMuY29tggdlaWVyLm5sghJlc3RlYmFuYWZyaWNhbi5jb22C
DWZvcnR3aXRjaC5jb22CEmdyYW5qYXNhbmx1Y2FzLmNvbYINaC1ib3hzaG9wLmNv
bYIKaDNudGFpLm5ldIIVaG9zdGFscmluY29uZGVzb2wuY29tgg1pemxlbWFjNDYu
bmV0ggpqb29ua3UuY29tghNrbGltcG9ydGFjaW9uZXMuY29tghNsaW5jb2xuZmlu
YW5jaWwuY29tggtsc2pueWt5LmNvbYIUbWFkY3JhYm9ha3BhcmttaS5jb22CEG1h
dGVyaWFjcmVwZS5jb22CD21pY3JvZG90LmNvbS5hdYIKbW90aXZlcy50doIWbmFz
aGJvdXRpcXVlY2FuYWRhLmNvbYIObmV4dHdhdmVvay5jb22CEW5pc2Vrb2ktbWFu
Z2EuY29tgglueWJzZi5vcmeCD29jZWFuMXRvd2VyLmNvbYILcDRhbmRpdC5jb22C
IXBhcmFkYW9icmlnYXRvcmlhbW9ycmluaG9zLmNvbS5icoIMcGVhY2Uta2guY29t
ggxwZWx1Y2lhLnNob3CCEXBqc2JlbGxpbmdoYW0uY29tghFzY2h1ZWxlcmZyYWdl
bi5kZYIOc2lsdmlhYWR1ci5jb22CEHN1ZmZpeGFsd2F5cy5jb22CDXRhb2Z1bGls
ZS5jb22CEXRlY2hub3ZveWFuY2UuY29tght0aGVsZWdhY3lsZWFybmluZ2NlbnRl
ci5jb22CDXRoZXNheWFyYS5jb22CEXRoZXdhcmV6c3RvcmUuY29tgg53YXJ1bmdw
bHVzLmNvbYIOd2luZ3NuYWlscy5jb22CDnhuLS1jaGktam9hLmRlghl4bi0tbmll
dGVuYXJtYm5kZXItZmliLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYB
BAHWeQIEAgSB9ASB8QDvAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H6
1BcAAAGMMihNrAAABAMARjBEAiBuU6fFDgtxI0PqvIJ/53NoQHHC7TSkbw+V4aMU
QNAfeQIgTKcUT1ar9nDIgo9zJcw3XsUcAo5wB4VPMiEQEf/b4oUAdgCi4r/WHt4v
Lweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYwyKE6gAAAEAwBHMEUCIQCwOHzu
ArE7PGgDK2FDavt52tixd/RekjFAITOdLLCYRQIgUWtewKjps9fAFhDXj3NtAdMV
bi6KxvII2lRgWqPw5wYwDQYJKoZIhvcNAQELBQADggEBAAb1wzOabBT7jiWCgBSq
e976vgxUDyJyfJlyBHbrxQhF1+ewgKBWgBlhbJfqY2KSjJBY28hymx/feR8b8DSD
lwEo/K3uwSXhzOihgY5xFEeOhAH7rh0I1x64w5Bt7G3mEFJ6M+BMDTrN4+o8nu1d
rP7Qc8lubfBIrb4lHXpbY8/3Q98xQ2W+f7c+DEXJw0qbdk+EYOJbzooCNwjZ3vNf
5zMhM8WVL4fgXkfcBhjv3Nn9TWnxCtVz5j1wlP3a1KenAXzFteQeIcRf2WVRPUrH
q5n8DBcdKZMxQUJXwW3kKaCGt5Eoz4Bjfmg3ZNrmZAQqEndzfq2G0hE4DL/zgXU9
zA8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411700705116333958634722527566325785466665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 23:09:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 23:09:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'granjasanlucas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1007956855289674200243371485661162640481974552513271772626666347497378333103288752195860322238862855206551864526863922475153690595667770733969380904215140867593119674117996439362675648146173772900554237376100548622273457205079507455403340777055284149723263818328130410251371235561801862871681893748022012780799565999194823561416077573375830074784738196072098229346891139796731335289840755443074210307976097264411721228752936669207130773037401281366852223523847938173557745208874056892907767238432256374666945304172585924806600657530719631672831096343130711825774860876531375880251052795677986233179292317360484126033463434549218970852188157597237445437127643112224078076123161508028570809109316248279799796620844849437263475503910859082151235221163937569361130040540975029404788221140034862707852107939442696376297599074560823643535740330515299130931379076313718524651664411624768260789615782161158849916387497602643241010363349233996483563788381753333299260464341303020925199387813023715209384833303467998630249917060673028076080693584822469303218125971175454933826868304237835005464455360337813737069195674204690701955122842822678354350960730369848346447544680639495026126800410745292422828177784807961191105544417503529745303203393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b6e22f5dd11286ca757315f0c30e60e866012a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1808 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.211tsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.44s9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ads-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookspunjabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brahmapur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buldhana.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carestore-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conservateurpunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cop.show'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dadopoliticshelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derekcusackrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eier.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estebanafrican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortwitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granjasanlucas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h-boxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h3ntai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostalrincondesol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.izlemac46.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joonku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klimportaciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lincolnfinancil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lsjnyky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madcraboakparkmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.materiacrepe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microdot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motives.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nashboutiquecanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextwaveok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nisekoi-manga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nybsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocean1tower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p4andit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paradaobrigatoriamorrinhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peace-kh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelucia.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pjsbellingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuelerfragen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silviaadur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suffixalways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taofulile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technovoyance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelegacylearningcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesayara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewarezstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warungplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wingsnails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--chi-joa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nietenarmbnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '211tsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '44s9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookspunjabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brahmapur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buldhana.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carestore-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservateurpunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cop.show'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadopoliticshelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derekcusackrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eier.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estebanafrican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortwitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granjasanlucas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h-boxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h3ntai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostalrincondesol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izlemac46.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joonku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klimportaciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnfinancil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsjnyky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madcraboakparkmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materiacrepe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microdot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motives.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashboutiquecanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextwaveok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nisekoi-manga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nybsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocean1tower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4andit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradaobrigatoriamorrinhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peace-kh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelucia.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjsbellingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuelerfragen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silviaadur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suffixalways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taofulile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technovoyance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelegacylearningcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesayara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewarezstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warungplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingsnails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--chi-joa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nietenarmbnder-fib.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c32284dac000004030046304402206e53a7c50e0b712343eabc827fe773684071c2ed34a46f0f95e1a31440d01f7902204ca7144f56abf670c8828f7325cc375ec51c028e7007854f32211011ffdbe285007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c32284ea00000040300473045022100b0387cee02b13b3c68032b61436afb79dad8b177f45e92314021339d2cb098450220516b5ec0a8e9b3d7c01610d78f736d01d3156e2e8ac6f208da54605aa3f0e706
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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