budgetchalleneg.com

Issued by R3

About this certificate

This digital certificate with serial number 03:97:5e:40:d8:f3:76:08:42:3b:7f:69:ac:11:e2:bf:66:67 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=budgetchalleneg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:5e:40:d8:f3:76:08:42:3b:7f:69:ac:11:e2:bf:66:67
Serial Number (int): 312844779339234623338928696116460426061415
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:e3:d6:3a:b8:2d:20:8f:7a:74:cb:12:4b:6a:79:26:56:2b:e9:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:82:1b:2e:ac:de:01:2c:4e:f6:e2:48:ed:c9:87:84:83:c6:ce:8e
Fingerprint (sha256): 9e:c0:7e:82:3f:20:17:50:25:bd:2a:cb:25:25:86:90:97:23:b2:8a:99:e0:e5:10:e6:61:c2:f6:5a:cb:aa:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate budgetchalleneg.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for budgetchalleneg.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abooutyou.de
*.adverhealth.com
*.apiary.com.au
*.brycepointlodge.com
*.budgetchalleneg.com
*.burnmyc.com
*.cutleryset.com.au
*.de-borreliose.de
*.doritios.com
*.edunoix.com
*.elmwoodresort.com
*.fightingirls.com
*.flossenfaeule.de
*.forbe.com
*.fourwheel.com.au
*.fullbodyhaptic.com
*.girls.net.au
*.goomaps.de
*.handyrakten.de
*.hatpins.com.au
*.keypad.com.au
*.luoli98.com
*.luxuretv.co
*.mapnaver.com
*.michaeis.com
*.mp3juicy.cc
*.mylogitec.com
*.npbh-hipdb.com
*.nullsooft.com
*.pelletemilia.com
*.pfeifferskhes-druesenfieber.de
*.phytolacca-americana.de
*.porn3dpictures.com
*.precisiomwasteservices.com
*.reikaballet.com
*.reloger.com
*.rogerswaters.com
*.seacrchoptionstoday.com
*.shareyourbusiness.com.au
*.sodasteam.de
*.speiseroehrentumor.de
*.stmath.co
*.sunntrust.com
*.twinlab.eu
*.valvehitherto.top
*.veltind.de
*.warrorcats.com
*.watchstreamseries.com
*.xn--hhmorriden-r5a.de
*.xn--hmoirrhoiden-gcb.de
abooutyou.de
adverhealth.com
apiary.com.au
brycepointlodge.com
budgetchalleneg.com
burnmyc.com
cutleryset.com.au
de-borreliose.de
doritios.com
edunoix.com
elmwoodresort.com
fightingirls.com
flossenfaeule.de
forbe.com
fourwheel.com.au
fullbodyhaptic.com
girls.net.au
goomaps.de
handyrakten.de
hatpins.com.au
keypad.com.au
luoli98.com
luxuretv.co
mapnaver.com
michaeis.com
mp3juicy.cc
mylogitec.com
npbh-hipdb.com
nullsooft.com
pelletemilia.com
pfeifferskhes-druesenfieber.de
phytolacca-americana.de
porn3dpictures.com
precisiomwasteservices.com
reikaballet.com
reloger.com
rogerswaters.com
seacrchoptionstoday.com
shareyourbusiness.com.au
sodasteam.de
speiseroehrentumor.de
stmath.co
sunntrust.com
twinlab.eu
valvehitherto.top
veltind.de
warrorcats.com
watchstreamseries.com
xn--hhmorriden-r5a.de
xn--hmoirrhoiden-gcb.de

Other certificates including the domain name budgetchalleneg.com

(limited to 100 certificates)
budgetchalleneg.com
budgetchalleneg.com

Certificate

The complete raw certificate details for budgetchalleneg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINEzCCC/ugAwIBAgISA5deQNjzdghCO39prBHiv2ZnMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTYwNzAzMDFaFw0yMzEyMTUwNzAzMDBaMB4xHDAaBgNVBAMT
E2J1ZGdldGNoYWxsZW5lZy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDQhM21jKPKuPg/pVHlTHcYl7tqmEWHlMH53Jx9yfpZjzUfdJUPRMDfFXW0
8mjRdzJsSu3StJLArrSMBBgVQsLU2zfK1Ax6t4WtEYBMyFC4bStMdIXeF1ejAySP
50oBI4ioU99ZsdODRQqWlflwr6nNP9yjeUlQJtJFWNdniiv7qW+5zYJkfoAFeVBg
ZOtNNTLNbp1eP23HtfwqVYaKYCktGP6tuvhkXE7UtV1QfWJzpB2Y/CAQ3dpNxLEc
To7Koy+kSGiPW3YNCq49Kk1UTv+DRuRB+rCovKT6wz6hN5SCSK2CU65AZwKXrfIB
iVjkaO92Fo81FhQrWT6dhywhf0SAYgH7J7x55dKI/he6Wg+e9igxi0amAk9vRQ81
r4bJYlAGgQc4g9Jeau+g+mQevGjFMYV0sJ7fQjE/Z2j4TY0lds0jg2yw1y1QtOLE
Zs1f/m1p2sghX/u5m66Asxobc8FuPDwnISdcrbNkbNzQ1I6dl2W9KqWv64lxlVj6
asWQierHsVwtQ/zkwJZqHDUS29ttfJXIGCq7o0TbSthRuotTcMl7FxM/WNDq+swP
aAm9e9rp4tNzP5nrt6idczGGaxh0Y+UZIaDfqwP03F1VsU9zajA234QNXfOs0R5c
/tN/ryI2hrQ8eC+pYymtTfBFhUEgX6S/OMveGwwd7fw9C8iGjQIDAQABo4IJNTCC
CTEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQU49Y6uC0gj3p0yxJLankmVivp0zAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCBz0GA1UdEQSCBzQwggcwgg4qLmFib291
dHlvdS5kZYIRKi5hZHZlcmhlYWx0aC5jb22CDyouYXBpYXJ5LmNvbS5hdYIVKi5i
cnljZXBvaW50bG9kZ2UuY29tghUqLmJ1ZGdldGNoYWxsZW5lZy5jb22CDSouYnVy
bm15Yy5jb22CEyouY3V0bGVyeXNldC5jb20uYXWCEiouZGUtYm9ycmVsaW9zZS5k
ZYIOKi5kb3JpdGlvcy5jb22CDSouZWR1bm9peC5jb22CEyouZWxtd29vZHJlc29y
dC5jb22CEiouZmlnaHRpbmdpcmxzLmNvbYISKi5mbG9zc2VuZmFldWxlLmRlggsq
LmZvcmJlLmNvbYISKi5mb3Vyd2hlZWwuY29tLmF1ghQqLmZ1bGxib2R5aGFwdGlj
LmNvbYIOKi5naXJscy5uZXQuYXWCDCouZ29vbWFwcy5kZYIQKi5oYW5keXJha3Rl
bi5kZYIQKi5oYXRwaW5zLmNvbS5hdYIPKi5rZXlwYWQuY29tLmF1gg0qLmx1b2xp
OTguY29tgg0qLmx1eHVyZXR2LmNvgg4qLm1hcG5hdmVyLmNvbYIOKi5taWNoYWVp
cy5jb22CDSoubXAzanVpY3kuY2OCDyoubXlsb2dpdGVjLmNvbYIQKi5ucGJoLWhp
cGRiLmNvbYIPKi5udWxsc29vZnQuY29tghIqLnBlbGxldGVtaWxpYS5jb22CICou
cGZlaWZmZXJza2hlcy1kcnVlc2VuZmllYmVyLmRlghkqLnBoeXRvbGFjY2EtYW1l
cmljYW5hLmRlghQqLnBvcm4zZHBpY3R1cmVzLmNvbYIcKi5wcmVjaXNpb213YXN0
ZXNlcnZpY2VzLmNvbYIRKi5yZWlrYWJhbGxldC5jb22CDSoucmVsb2dlci5jb22C
Eioucm9nZXJzd2F0ZXJzLmNvbYIZKi5zZWFjcmNob3B0aW9uc3RvZGF5LmNvbYIa
Ki5zaGFyZXlvdXJidXNpbmVzcy5jb20uYXWCDiouc29kYXN0ZWFtLmRlghcqLnNw
ZWlzZXJvZWhyZW50dW1vci5kZYILKi5zdG1hdGguY2+CDyouc3VubnRydXN0LmNv
bYIMKi50d2lubGFiLmV1ghMqLnZhbHZlaGl0aGVydG8udG9wggwqLnZlbHRpbmQu
ZGWCECoud2Fycm9yY2F0cy5jb22CFyoud2F0Y2hzdHJlYW1zZXJpZXMuY29tghcq
LnhuLS1oaG1vcnJpZGVuLXI1YS5kZYIZKi54bi0taG1vaXJyaG9pZGVuLWdjYi5k
ZYIMYWJvb3V0eW91LmRlgg9hZHZlcmhlYWx0aC5jb22CDWFwaWFyeS5jb20uYXWC
E2JyeWNlcG9pbnRsb2RnZS5jb22CE2J1ZGdldGNoYWxsZW5lZy5jb22CC2J1cm5t
eWMuY29tghFjdXRsZXJ5c2V0LmNvbS5hdYIQZGUtYm9ycmVsaW9zZS5kZYIMZG9y
aXRpb3MuY29tggtlZHVub2l4LmNvbYIRZWxtd29vZHJlc29ydC5jb22CEGZpZ2h0
aW5naXJscy5jb22CEGZsb3NzZW5mYWV1bGUuZGWCCWZvcmJlLmNvbYIQZm91cndo
ZWVsLmNvbS5hdYISZnVsbGJvZHloYXB0aWMuY29tggxnaXJscy5uZXQuYXWCCmdv
b21hcHMuZGWCDmhhbmR5cmFrdGVuLmRlgg5oYXRwaW5zLmNvbS5hdYINa2V5cGFk
LmNvbS5hdYILbHVvbGk5OC5jb22CC2x1eHVyZXR2LmNvggxtYXBuYXZlci5jb22C
DG1pY2hhZWlzLmNvbYILbXAzanVpY3kuY2OCDW15bG9naXRlYy5jb22CDm5wYmgt
aGlwZGIuY29tgg1udWxsc29vZnQuY29tghBwZWxsZXRlbWlsaWEuY29tgh5wZmVp
ZmZlcnNraGVzLWRydWVzZW5maWViZXIuZGWCF3BoeXRvbGFjY2EtYW1lcmljYW5h
LmRlghJwb3JuM2RwaWN0dXJlcy5jb22CGnByZWNpc2lvbXdhc3Rlc2VydmljZXMu
Y29tgg9yZWlrYWJhbGxldC5jb22CC3JlbG9nZXIuY29tghByb2dlcnN3YXRlcnMu
Y29tghdzZWFjcmNob3B0aW9uc3RvZGF5LmNvbYIYc2hhcmV5b3VyYnVzaW5lc3Mu
Y29tLmF1ggxzb2Rhc3RlYW0uZGWCFXNwZWlzZXJvZWhyZW50dW1vci5kZYIJc3Rt
YXRoLmNvgg1zdW5udHJ1c3QuY29tggp0d2lubGFiLmV1ghF2YWx2ZWhpdGhlcnRv
LnRvcIIKdmVsdGluZC5kZYIOd2Fycm9yY2F0cy5jb22CFXdhdGNoc3RyZWFtc2Vy
aWVzLmNvbYIVeG4tLWhobW9ycmlkZW4tcjVhLmRlghd4bi0taG1vaXJyaG9pZGVu
LWdjYi5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQE
gfEA7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABip0Dt8kA
AAQDAEYwRAIgSc3aYuez3kniTPbL1jmJkEIwNSMqRBXPnP/UWdW9JkwCIGUarypu
UIqRSRMvGJHIXDuldPoZn+bqzGJVyTtHJR96AHYArfe++nz/EMiLnT2cHj4YarRn
KV3PsQwkyoWGNOvcgooAAAGKnQO4NgAABAMARzBFAiEA2Z3FW/SnASLLtrxpW3LB
CB0HBPnBkUWLp76U3yookGUCIDGzu0XAeHPh7YUf5bnebAmy8QG99ixl/q8VxdO1
0nefMA0GCSqGSIb3DQEBCwUAA4IBAQBs5V8GzK7AoYU0MRJ6vyvtelHK3tH++SB7
dXToPGQtOP8KDZZJA1+2M1HO0bRFUKhRmh6Ebsq8Vm8sUhoTVLuvedVw4V6rCFrW
La5YuofP6TS+yaA7xlzWQicHAOmLWxu7ZfyZ63pfLFqbPBrd6N0HsU2R8su2XiGY
BYELKTwh6NewRiD1Gg1yBZWxIha6HeXyh2mxIJUIGwSi80xHkmoLNDTTcLUBYphA
gyvkMMKbtO59Bq8eYOOWGBdI0t0wqeuBzCosC+1hNirF4GF7heMQucmAZuwS+O9L
KO3tA10TArMZ9S7IXwV8QpMmN1hiAZVoKKO+eZUoKa0B3TW9Oi+O
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312844779339234623338928696116460426061415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 07:03:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 07:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'budgetchalleneg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850682338105144629432879314896969749294738930156229283490419123295239719858908574815447253029121145893863414290949549183622527023684225959844746731816068435154037765402139392441204369721006004155368400583826008566504222557008712256009848441476561938152094727526098808636464380238746808638758249534511791294979656391240216243123699788776590536272399136103041745611497462810998863898080340735918015393766477773982211046374608693114677873369781136261965413651974568294386074609760390874176111007104453638080558075935031651299040505516554057609804536886713350273315002919560117423972233254297145522413080794083359227475955145272897101246793113594071631105158327250909130615300436972579742038694800838359200471736642172776838868487698779164426088577852664578641534695114520249390689749662781249331135069441808522062209644941434266475822705859847627217665810904187647065161528412308736019845764755050710810005109692267857360899483577910278687487970164656460122819171923477838681081078894318626125018156069267808641002494939974984136768336899024381496555971520622953023569595074054640925538893730813650398028129211089304604934535434027815095800321142714779082815755463647081597604973877881356740982585956716577407949589507613379339401856653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14e3d63ab82d208f7a74cb124b6a7926562be9d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abooutyou.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adverhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apiary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brycepointlodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgetchalleneg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burnmyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cutleryset.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-borreliose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doritios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edunoix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmwoodresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fightingirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flossenfaeule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fourwheel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullbodyhaptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girls.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goomaps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handyrakten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hatpins.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keypad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luoli98.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxuretv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapnaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaeis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp3juicy.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylogitec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.npbh-hipdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nullsooft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelletemilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pfeifferskhes-druesenfieber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phytolacca-americana.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porn3dpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precisiomwasteservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reikaballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reloger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rogerswaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seacrchoptionstoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shareyourbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodasteam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speiseroehrentumor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stmath.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinlab.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valvehitherto.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veltind.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warrorcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchstreamseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hhmorriden-r5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hmoirrhoiden-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abooutyou.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adverhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brycepointlodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgetchalleneg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnmyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutleryset.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-borreliose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doritios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edunoix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmwoodresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightingirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flossenfaeule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourwheel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullbodyhaptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girls.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goomaps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyrakten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hatpins.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keypad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luoli98.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuretv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapnaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaeis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp3juicy.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylogitec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npbh-hipdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nullsooft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelletemilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfeifferskhes-druesenfieber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phytolacca-americana.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porn3dpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisiomwasteservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reikaballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reloger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerswaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seacrchoptionstoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareyourbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodasteam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speiseroehrentumor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmath.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinlab.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valvehitherto.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veltind.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrorcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchstreamseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hhmorriden-r5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hmoirrhoiden-gcb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9d03b7c90000040300463044022049cdda62e7b3de49e24cf6cbd6398990423035232a4415cf9cffd459d5bd264c0220651aaf2a6e508a9149132f1891c85c3ba574fa199fe6eacc6255c93b47251f7a007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9d03b8360000040300473045022100d99dc55bf4a70122cbb6bc695b72c1081d0704f9c191458ba7be94df2a289065022031b3bb45c07873e1ed851fe5b9de6c09b2f101bdf62c65feaf15c5d3b5d2779f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ce55f06ccaec0a1853431127abf2bed7a51caded1fef9207b7574e83c642d38ff0a0d9649035fb63351ced1b44550a8519a1e846ecabc566f2c521a1354bbaf79d570e15eab085ad62dae58ba87cfe934bec9a03bc65cd642270700e98b5b1bbb65fc99eb7a5f2c5a9b3c1adde8dd07b14d91f2cbb65e219805810b293c21e8d7b04620f51a0d720595b12216ba1de5f28769b12095081b04a2f34c47926a0b3434d370b501629840832be430c29bb4ee7d06af1e60e396181748d2dd30a9eb81cc2a2c0bed61362ac5e0617b85e310b9c98066ec12f8ef4b28eded035d1302b319f52ec85f057c42932637586201956828a3be79952829ad01dd35bd3a2f8e