leaftv.com

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:cc:b8:9a:4b:0a:5c:23:be:36:c0:c3:3b:32:b4:a1:f1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leaftv.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:cc:b8:9a:4b:0a:5c:23:be:36:c0:c3:3b:32:b4:a1:f1
Serial Number (int): 309929074921252492389019261260869649342961
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:80:4e:8c:ca:f8:59:7f:f3:9f:f5:a5:85:dd:46:29:a7:6a:2c:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:b6:0c:b1:dd:66:3f:95:65:03:87:8b:d2:4c:86:c4:ee:93:e4:a3
Fingerprint (sha256): 9f:ac:45:6b:7d:90:a8:bf:aa:a7:db:5d:69:98:14:1f:19:c2:fa:2e:6c:56:84:c1:1d:4a:6d:54:9f:8e:0d:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leaftv.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leaftv.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1800flowerrs.com
*.4freecle.com
*.acecarspdx.com
*.bbtview.com
*.bullchat.co
*.caldwellbankertoday.com
*.canons.org
*.citascto.com
*.clubpee.com
*.diypaintbynumbers.com.au
*.domainnewbie.com
*.falabr.com
*.fixyourfeet.com.au
*.fxfro.com
*.gststic.com
*.hairdoctor.com.au
*.houszz.com
*.huisartsendichtbij.nl
*.ideallockers.com
*.idmssplus.com
*.ifoldingchair.com
*.kulfee.com.au
*.lalimousineofny.com
*.leaftv.com
*.learningenglishvoanews.com
*.learnoracle.com
*.lennerhomes.com
*.lifestyleinspired.com
*.lightuptable.com
*.macystore.com
*.migrations.au
*.owschols.com
*.pellainstall.com
*.perkinsresturants.com
*.pilipinocupid.com
*.prechoolsmiles.com
*.republicservicevegas.com
*.roofersandwaterprooferslocal136.com
*.satisfactionkiosk.com
*.smithfurniture.com
*.sweetsalvagegiftshop.com
*.thdloans.com
*.ticun.com
*.tndmv.com
*.toddstudio.net
*.trianglecarwash.com
*.unravelling.com.au
*.wayfqair.com
*.wwwembarq.com
*.xmoives8.com
1800flowerrs.com
4freecle.com
acecarspdx.com
bbtview.com
bullchat.co
caldwellbankertoday.com
canons.org
citascto.com
clubpee.com
diypaintbynumbers.com.au
domainnewbie.com
falabr.com
fixyourfeet.com.au
fxfro.com
gststic.com
hairdoctor.com.au
houszz.com
huisartsendichtbij.nl
ideallockers.com
idmssplus.com
ifoldingchair.com
kulfee.com.au
lalimousineofny.com
leaftv.com
learningenglishvoanews.com
learnoracle.com
lennerhomes.com
lifestyleinspired.com
lightuptable.com
macystore.com
migrations.au
owschols.com
pellainstall.com
perkinsresturants.com
pilipinocupid.com
prechoolsmiles.com
republicservicevegas.com
roofersandwaterprooferslocal136.com
satisfactionkiosk.com
smithfurniture.com
sweetsalvagegiftshop.com
thdloans.com
ticun.com
tndmv.com
toddstudio.net
trianglecarwash.com
unravelling.com.au
wayfqair.com
wwwembarq.com
xmoives8.com

Other certificates including the domain name leaftv.com

(limited to 100 certificates)
ww1.leaftv.com
xmoives8.com
lightuptable.com
cjpont.com
learnoracle.com
lightuptable.com
leaftv.com
leaftv.com
wwwembarq.com
wwwembarq.com
leaftv.com
wingategts.com
leaftv.com
saloncristal.eu
saloncristal.eu
ww1.leaftv.com

Certificate

The complete raw certificate details for leaftv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINLTCCDBWgAwIBAgISA47MuJpLClwjvjbAwzsytKHxMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMDcxMTUyMzdaFw0yNDA2MDUxMTUyMzZaMBUxEzARBgNVBAMT
CmxlYWZ0di5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/jOrK
NnwTVWFuFLnoAIeU5pvJEKfifV1gowUOvQLwzMYED8+9+1LUYbMGvUrXbtdKw65s
6G7vkDttkqVA2zMkcwSzqc/KuxYTR0Nl4DI9fQ7XFFrrz6aowVACUYCjUhbksVk6
3bePp998DawFdJe2TMOn7Cp2MmYflgAfXskU+5scdDJ6cPXVdymGlTaWob1n+3e9
bLrNkVSggrxnOP+68KnYvbKyhFaSJZxpsSNDD6ls7JrbTrSncRMnehGpvi1W7etZ
uiKrN74xnn8shO2kdaD4OYC8tlM2FquItIh0OQrUD89QEiTrjiJCXxS58IuJJDJs
Uc32dUpao8t03oxHoUuuvzeU3nELvUhx4p8hZhfuGFr+pYufPdb+fZlHm5zGkgz1
I55ITJtJNGvtp6vquAyaBm2o1jnHY9qsb4UBJPFUxLtkVdP/hlKuMhyUpF1tbIBm
uZXvGlwCQAj/UQz5xNlNxG7X++BuuvhmLixDlGt4TldYXqnvr3fERI+cygwZbk+U
BBiC9TVKYhHy5+tLQrRcHFDzjyPBp+HJgqncxS12ndIVOFmc8zQTYRRVDdvkED5A
ex3BTTbApPJSSeh3FcNMzqlhx4XyRQWIA9Oq5ECZ/XRUz2QfDZvmKmbXYlcpK7V7
taeGSxbcYa7Q2lVd60WgDB0kIl5JzAPDelZWyQIDAQABo4IJWDCCCVQwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTSgE6MyvhZf/Of9aWF3UYpp2osTDAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCB18GA1UdEQSCB1YwggdSghIqLjE4MDBmbG93ZXJycy5j
b22CDiouNGZyZWVjbGUuY29tghAqLmFjZWNhcnNwZHguY29tgg0qLmJidHZpZXcu
Y29tgg0qLmJ1bGxjaGF0LmNvghkqLmNhbGR3ZWxsYmFua2VydG9kYXkuY29tggwq
LmNhbm9ucy5vcmeCDiouY2l0YXNjdG8uY29tgg0qLmNsdWJwZWUuY29tghoqLmRp
eXBhaW50YnludW1iZXJzLmNvbS5hdYISKi5kb21haW5uZXdiaWUuY29tggwqLmZh
bGFici5jb22CFCouZml4eW91cmZlZXQuY29tLmF1ggsqLmZ4ZnJvLmNvbYINKi5n
c3RzdGljLmNvbYITKi5oYWlyZG9jdG9yLmNvbS5hdYIMKi5ob3VzenouY29tghcq
Lmh1aXNhcnRzZW5kaWNodGJpai5ubIISKi5pZGVhbGxvY2tlcnMuY29tgg8qLmlk
bXNzcGx1cy5jb22CEyouaWZvbGRpbmdjaGFpci5jb22CDyoua3VsZmVlLmNvbS5h
dYIVKi5sYWxpbW91c2luZW9mbnkuY29tggwqLmxlYWZ0di5jb22CHCoubGVhcm5p
bmdlbmdsaXNodm9hbmV3cy5jb22CESoubGVhcm5vcmFjbGUuY29tghEqLmxlbm5l
cmhvbWVzLmNvbYIXKi5saWZlc3R5bGVpbnNwaXJlZC5jb22CEioubGlnaHR1cHRh
YmxlLmNvbYIPKi5tYWN5c3RvcmUuY29tgg8qLm1pZ3JhdGlvbnMuYXWCDioub3dz
Y2hvbHMuY29tghIqLnBlbGxhaW5zdGFsbC5jb22CFyoucGVya2luc3Jlc3R1cmFu
dHMuY29tghMqLnBpbGlwaW5vY3VwaWQuY29tghQqLnByZWNob29sc21pbGVzLmNv
bYIaKi5yZXB1YmxpY3NlcnZpY2V2ZWdhcy5jb22CJSoucm9vZmVyc2FuZHdhdGVy
cHJvb2ZlcnNsb2NhbDEzNi5jb22CFyouc2F0aXNmYWN0aW9ua2lvc2suY29tghQq
LnNtaXRoZnVybml0dXJlLmNvbYIaKi5zd2VldHNhbHZhZ2VnaWZ0c2hvcC5jb22C
DioudGhkbG9hbnMuY29tggsqLnRpY3VuLmNvbYILKi50bmRtdi5jb22CECoudG9k
ZHN0dWRpby5uZXSCFSoudHJpYW5nbGVjYXJ3YXNoLmNvbYIUKi51bnJhdmVsbGlu
Zy5jb20uYXWCDioud2F5ZnFhaXIuY29tgg8qLnd3d2VtYmFycS5jb22CDioueG1v
aXZlczguY29tghAxODAwZmxvd2VycnMuY29tggw0ZnJlZWNsZS5jb22CDmFjZWNh
cnNwZHguY29tggtiYnR2aWV3LmNvbYILYnVsbGNoYXQuY2+CF2NhbGR3ZWxsYmFu
a2VydG9kYXkuY29tggpjYW5vbnMub3JnggxjaXRhc2N0by5jb22CC2NsdWJwZWUu
Y29tghhkaXlwYWludGJ5bnVtYmVycy5jb20uYXWCEGRvbWFpbm5ld2JpZS5jb22C
CmZhbGFici5jb22CEmZpeHlvdXJmZWV0LmNvbS5hdYIJZnhmcm8uY29tggtnc3Rz
dGljLmNvbYIRaGFpcmRvY3Rvci5jb20uYXWCCmhvdXN6ei5jb22CFWh1aXNhcnRz
ZW5kaWNodGJpai5ubIIQaWRlYWxsb2NrZXJzLmNvbYINaWRtc3NwbHVzLmNvbYIR
aWZvbGRpbmdjaGFpci5jb22CDWt1bGZlZS5jb20uYXWCE2xhbGltb3VzaW5lb2Zu
eS5jb22CCmxlYWZ0di5jb22CGmxlYXJuaW5nZW5nbGlzaHZvYW5ld3MuY29tgg9s
ZWFybm9yYWNsZS5jb22CD2xlbm5lcmhvbWVzLmNvbYIVbGlmZXN0eWxlaW5zcGly
ZWQuY29tghBsaWdodHVwdGFibGUuY29tgg1tYWN5c3RvcmUuY29tgg1taWdyYXRp
b25zLmF1ggxvd3NjaG9scy5jb22CEHBlbGxhaW5zdGFsbC5jb22CFXBlcmtpbnNy
ZXN0dXJhbnRzLmNvbYIRcGlsaXBpbm9jdXBpZC5jb22CEnByZWNob29sc21pbGVz
LmNvbYIYcmVwdWJsaWNzZXJ2aWNldmVnYXMuY29tgiNyb29mZXJzYW5kd2F0ZXJw
cm9vZmVyc2xvY2FsMTM2LmNvbYIVc2F0aXNmYWN0aW9ua2lvc2suY29tghJzbWl0
aGZ1cm5pdHVyZS5jb22CGHN3ZWV0c2FsdmFnZWdpZnRzaG9wLmNvbYIMdGhkbG9h
bnMuY29tggl0aWN1bi5jb22CCXRuZG12LmNvbYIOdG9kZHN0dWRpby5uZXSCE3Ry
aWFuZ2xlY2Fyd2FzaC5jb22CEnVucmF2ZWxsaW5nLmNvbS5hdYIMd2F5ZnFhaXIu
Y29tgg13d3dlbWJhcnEuY29tggx4bW9pdmVzOC5jb20wEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7
Z9hPw/THvQANLXJv4frUFwAAAY4Y+QefAAAEAwBHMEUCIQC2zJm+qKwVf9ojl9E7
OR2pskY5pUj2nSjCbVpzmQJc3QIgIxhKNoE/zYSe26cx5zRJgYdM6n2m7eIubKw2
L8I6jhgAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY4Y+QfZ
AAAEAwBHMEUCIQDm9jbOOuMPt5zDJ1rFxpBoJNno7Nlh33BV29EqNfuKEgIgY8BJ
O+8cFAb83VQVeU1yXkbMfe3RtBvkFfWxCpXu/mcwDQYJKoZIhvcNAQELBQADggEB
AIojQRh07gnezy/iLCUzWhmradXdiTmSqwrNaXDRdiIldz0KSJqotH1rcveONWg5
dDU9e467BQUFij4E23ZX7pWXdMLLCn6xYLy9LXuRtwPVdqVq87c5oQQaPtg6LqaV
H1Twm23hiEljTg0dEnk5cOLV3Q2zXAJuKAbsNhq/If0whtrmRBMI2QuMR/62ovfe
NlBXHpdvD33lU7hKbvA7LU+PxuSjZN68FQ2upjA815zFdX0L1snO7gqQyGmxXDky
zu2l6tdCAxVVk4LjL0HttXgXWhBD6Saplhq2Zu0ic0gifVOJ5qtfaSquhA7UgpWe
Akm6OdRm/lspmpLD4aGr6xA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309929074921252492389019261260869649342961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 11:52:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 11:52:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leaftv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781457688112992927440973952813811927540485996155896917889279851777605185240266954523052722603961901298837470613712275969392108351688905633936303003699125826774800665954124891791277950235766367438176220026187705946652585899809743274890933814348126633807391463103873517568542298070926018224724191567404744454946123577992376750444380313488424678727265486078788187523267045423206805476175663214172668639980321804576626583252626200001187221149671875463202386947588297605216550111759947196000216008430209991436141777428646328786962140209311076692689811347267765836287390878498020663333576942091573358852024729828491647313707544564707649655214430647935568325436026927859857728478189893189736268507979501037016385310737139251956967712849235062368282616446181401527125497243405803114948354469051296023647245641855525215548945691673535964200415263910976589273450209098823050964552746193560675748199998052437094715507035689976817905836792498876323866698540765766021260510128430170819811377089913000293789949614061877537601028750299731860073995984545548754503495632851928760260592690233863015234252245694641148231396790417208013321054146018412437506660489154290682116235043580013789578316912252455978748064387422186860931112979398224963429619401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2804e8ccaf8597ff39ff5a585dd4629a76a2c4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1800flowerrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4freecle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acecarspdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbtview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bullchat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caldwellbankertoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citascto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubpee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diypaintbynumbers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainnewbie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.falabr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixyourfeet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxfro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gststic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairdoctor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houszz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huisartsendichtbij.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ideallockers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idmssplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifoldingchair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kulfee.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalimousineofny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leaftv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learningenglishvoanews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learnoracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lennerhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifestyleinspired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightuptable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migrations.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.owschols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pellainstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perkinsresturants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilipinocupid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prechoolsmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.republicservicevegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roofersandwaterprooferslocal136.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satisfactionkiosk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smithfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetsalvagegiftshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thdloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tndmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toddstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trianglecarwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unravelling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayfqair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwembarq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xmoives8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800flowerrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4freecle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acecarspdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbtview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullchat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldwellbankertoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citascto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubpee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diypaintbynumbers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainnewbie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falabr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixyourfeet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxfro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gststic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairdoctor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houszz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huisartsendichtbij.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideallockers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idmssplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifoldingchair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulfee.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalimousineofny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaftv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningenglishvoanews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnoracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennerhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestyleinspired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightuptable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migrations.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owschols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pellainstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perkinsresturants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilipinocupid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prechoolsmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicservicevegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofersandwaterprooferslocal136.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satisfactionkiosk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetsalvagegiftshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thdloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tndmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trianglecarwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unravelling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayfqair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwembarq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmoives8.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e18f9079f0000040300473045022100b6cc99bea8ac157fda2397d13b391da9b24639a548f69d28c26d5a7399025cdd022023184a36813fcd849edba731e7344981874cea7da6ede22e6cac362fc23a8e18007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e18f907d90000040300473045022100e6f636ce3ae30fb79cc3275ac5c6906824d9e8ecd961df7055dbd12a35fb8a12022063c0493bef1c1406fcdd5415794d725e46cc7dedd1b41be415f5b10a95eefe67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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