bakerymana.com

Issued by R3

About this certificate

This digital certificate with serial number 03:38:39:36:ed:12:91:f7:40:3a:20:f1:59:64:f1:3f:11:3f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bakerymana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:39:36:ed:12:91:f7:40:3a:20:f1:59:64:f1:3f:11:3f
Serial Number (int): 280468721531045752204376062410269483012415
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:50:98:56:e8:41:c0:1a:ca:68:01:d6:bd:76:30:09:93:73:de:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:e1:fe:fa:6b:c8:1d:43:b6:36:14:b0:bc:69:18:a0:b3:af:a3:0c
Fingerprint (sha256): a7:f6:28:f5:46:63:5d:f7:dc:c8:9d:df:b2:1b:9a:ac:32:e7:7a:a2:8a:1d:de:6f:88:01:0c:89:fa:10:fa:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bakerymana.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bakerymana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1960prototype.com
*.anomalyobservatory.net
*.bakerymana.com
*.bigbluelounge.com
*.billieellish.com
*.blackcrackaddicts.com
*.blasenentzuedung.de
*.bortor.com
*.breitbandmessng.de
*.cirruscrowd.com
*.cleanyoutube.com
*.credipal.com
*.cringley.com
*.daenemark-dancenter-ferienhaus.de
*.datachurch.com
*.de-schwangerschaft.de
*.draughtcard.com
*.eedbox.com
*.electroformance.com
*.ellenutube.com
*.faeulnisdyspepsie.de
*.faookcebook.com
*.finstorm.com
*.friendsoffred.us
*.iphonerm.com
*.jimwaters.com
*.kluever-bucy-syndrom.de
*.lemonaid.ca
*.leukaemie-de.de
*.makemegenuis.com
*.maricanas.com
*.mrtools.com.au
*.muziekparadijs.biz
*.myjerbalife.com
*.nhetflix.com
*.norddtroms.com
*.parentbadge.com
*.pekininsuance.com
*.printcalendars.in
*.privategetaways.com
*.proplabs.com
*.quickturncashfunding.com
*.rknetdroid.xyz
*.showgirl.com.au
*.strepokokken.de
*.testsiseger.de
*.wenhuapin.com
*.www-endokrinologie.de
*.wwwfixmyblinds.com
*.yunserv.com
1960prototype.com
anomalyobservatory.net
bakerymana.com
bigbluelounge.com
billieellish.com
blackcrackaddicts.com
blasenentzuedung.de
bortor.com
breitbandmessng.de
cirruscrowd.com
cleanyoutube.com
credipal.com
cringley.com
daenemark-dancenter-ferienhaus.de
datachurch.com
de-schwangerschaft.de
draughtcard.com
eedbox.com
electroformance.com
ellenutube.com
faeulnisdyspepsie.de
faookcebook.com
finstorm.com
friendsoffred.us
iphonerm.com
jimwaters.com
kluever-bucy-syndrom.de
lemonaid.ca
leukaemie-de.de
makemegenuis.com
maricanas.com
mrtools.com.au
muziekparadijs.biz
myjerbalife.com
nhetflix.com
norddtroms.com
parentbadge.com
pekininsuance.com
printcalendars.in
privategetaways.com
proplabs.com
quickturncashfunding.com
rknetdroid.xyz
showgirl.com.au
strepokokken.de
testsiseger.de
wenhuapin.com
www-endokrinologie.de
wwwfixmyblinds.com
yunserv.com

Other certificates including the domain name bakerymana.com

(limited to 100 certificates)
ssl377371.cloudflaressl.com
sni205591.cloudflaressl.com
bakerymana.com
sni205591.cloudflaressl.com
ssl377371.cloudflaressl.com
sni205591.cloudflaressl.com
bakerymana.com
ssl377371.cloudflaressl.com
barstudiosex.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
bakerymana.com
bakerymana.com
ssl377371.cloudflaressl.com
ssl377371.cloudflaressl.com
ssl377370.cloudflaressl.com
ssl377369.cloudflaressl.com
bakerymana.com
ssl377369.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377371.cloudflaressl.com
www.bakerymana.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
bakerymana.com
www.bakerymana.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377371.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377369.cloudflaressl.com
ssl377370.cloudflaressl.com
ssl377369.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
bakerymana.com
ssl377371.cloudflaressl.com
ssl377370.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
flamingchili.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377371.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377370.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
bakerymana.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377371.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377369.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377370.cloudflaressl.com
sni205591.cloudflaressl.com
www.bakerymana.com
sni205591.cloudflaressl.com
mail.bakerymana.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
bakerymana.com
sni205591.cloudflaressl.com
ssl377369.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
ssl377370.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
sni205591.cloudflaressl.com
www.bakerymana.com
bakerymana.com

Certificate

The complete raw certificate details for bakerymana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINgTCCDGmgAwIBAgISAzg5Nu0SkfdAOiDxWWTxPxE/MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMTkwNDMyMjZaFw0yMzA2MTcwNDMyMjVaMBkxFzAVBgNVBAMT
DmJha2VyeW1hbmEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
zWanUqXRNDYPr7YZY+wb8AB3dCdA2r1bGA/6bYx2sB+JqqvXGLmyYE9UAOQOn3Zb
Z7Z9WY1WzKKwN7DDnLcaZ0HJ57yAyqivUg5oJZPSMjKxJ1Lsg+JCVzHqocyQigvg
k+R9wHCmtC1mI9Hqzo9kNsPoLErK4PRRPs02bgJ6wT82VTJngczyWf0G2IYWI0Qq
raHkn4dFiYSLL30P+dpcbmT0i8VIt1W3nV/GUBdTLzLTgBqoeJHSCVsXQfZ6HuhI
2Qht0cz1wQoi1BhwNiz44wtoPWPAYbfvVaKtqrpnI6zIrLZtoggH/7g7Qgqk4xmk
1n6YDMSr5eTkEk9u+5M4JIpXR0dsYe2zrjIhFvIo/0qjGc3oCDmTP3FW1qnwz/Ek
qt3z4kOzLSRfrzWSjAjTz/7+Ld1oWs6xS7GAqwN9L0yCmY7lwMDdEE6LcXB9nV0j
zPAkzX1Mkj97B1TzzArBN9bpclgnmzunSjqovz5ruahNtt2dVgAUYTe87y8OkA9F
S3/SJz0TuYk+BvABf2XChmitQe+JriFhtX2mAEVc1K02E6/S0QU9yLViMQSs7xGi
ApN57gORc7lXKpHCEdko/cNkFPIpzCzk0btZ4Xf7AyD5LF84OSjOJDZV5UU3yN7a
9JgaeUC67jPOJ23bNdapKsyCWngE0Ku+KiVzs/sXbqMCAwEAAaOCCagwggmkMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUcVCYVuhBwBrKaAHWvXYwCZNz3gYwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggd3BgNVHREEggduMIIHaoITKi4xOTYwcHJvdG90
eXBlLmNvbYIYKi5hbm9tYWx5b2JzZXJ2YXRvcnkubmV0ghAqLmJha2VyeW1hbmEu
Y29tghMqLmJpZ2JsdWVsb3VuZ2UuY29tghIqLmJpbGxpZWVsbGlzaC5jb22CFyou
YmxhY2tjcmFja2FkZGljdHMuY29tghUqLmJsYXNlbmVudHp1ZWR1bmcuZGWCDCou
Ym9ydG9yLmNvbYIUKi5icmVpdGJhbmRtZXNzbmcuZGWCESouY2lycnVzY3Jvd2Qu
Y29tghIqLmNsZWFueW91dHViZS5jb22CDiouY3JlZGlwYWwuY29tgg4qLmNyaW5n
bGV5LmNvbYIjKi5kYWVuZW1hcmstZGFuY2VudGVyLWZlcmllbmhhdXMuZGWCECou
ZGF0YWNodXJjaC5jb22CFyouZGUtc2Nod2FuZ2Vyc2NoYWZ0LmRlghEqLmRyYXVn
aHRjYXJkLmNvbYIMKi5lZWRib3guY29tghUqLmVsZWN0cm9mb3JtYW5jZS5jb22C
ECouZWxsZW51dHViZS5jb22CFiouZmFldWxuaXNkeXNwZXBzaWUuZGWCESouZmFv
b2tjZWJvb2suY29tgg4qLmZpbnN0b3JtLmNvbYISKi5mcmllbmRzb2ZmcmVkLnVz
gg4qLmlwaG9uZXJtLmNvbYIPKi5qaW13YXRlcnMuY29tghkqLmtsdWV2ZXItYnVj
eS1zeW5kcm9tLmRlgg0qLmxlbW9uYWlkLmNhghEqLmxldWthZW1pZS1kZS5kZYIS
Ki5tYWtlbWVnZW51aXMuY29tgg8qLm1hcmljYW5hcy5jb22CECoubXJ0b29scy5j
b20uYXWCFCoubXV6aWVrcGFyYWRpanMuYml6ghEqLm15amVyYmFsaWZlLmNvbYIO
Ki5uaGV0ZmxpeC5jb22CECoubm9yZGR0cm9tcy5jb22CESoucGFyZW50YmFkZ2Uu
Y29tghMqLnBla2luaW5zdWFuY2UuY29tghMqLnByaW50Y2FsZW5kYXJzLmlughUq
LnByaXZhdGVnZXRhd2F5cy5jb22CDioucHJvcGxhYnMuY29tghoqLnF1aWNrdHVy
bmNhc2hmdW5kaW5nLmNvbYIQKi5ya25ldGRyb2lkLnh5eoIRKi5zaG93Z2lybC5j
b20uYXWCESouc3RyZXBva29ra2VuLmRlghAqLnRlc3RzaXNlZ2VyLmRlgg8qLndl
bmh1YXBpbi5jb22CFyoud3d3LWVuZG9rcmlub2xvZ2llLmRlghQqLnd3d2ZpeG15
YmxpbmRzLmNvbYINKi55dW5zZXJ2LmNvbYIRMTk2MHByb3RvdHlwZS5jb22CFmFu
b21hbHlvYnNlcnZhdG9yeS5uZXSCDmJha2VyeW1hbmEuY29tghFiaWdibHVlbG91
bmdlLmNvbYIQYmlsbGllZWxsaXNoLmNvbYIVYmxhY2tjcmFja2FkZGljdHMuY29t
ghNibGFzZW5lbnR6dWVkdW5nLmRlggpib3J0b3IuY29tghJicmVpdGJhbmRtZXNz
bmcuZGWCD2NpcnJ1c2Nyb3dkLmNvbYIQY2xlYW55b3V0dWJlLmNvbYIMY3JlZGlw
YWwuY29tggxjcmluZ2xleS5jb22CIWRhZW5lbWFyay1kYW5jZW50ZXItZmVyaWVu
aGF1cy5kZYIOZGF0YWNodXJjaC5jb22CFWRlLXNjaHdhbmdlcnNjaGFmdC5kZYIP
ZHJhdWdodGNhcmQuY29tggplZWRib3guY29tghNlbGVjdHJvZm9ybWFuY2UuY29t
gg5lbGxlbnV0dWJlLmNvbYIUZmFldWxuaXNkeXNwZXBzaWUuZGWCD2Zhb29rY2Vi
b29rLmNvbYIMZmluc3Rvcm0uY29tghBmcmllbmRzb2ZmcmVkLnVzggxpcGhvbmVy
bS5jb22CDWppbXdhdGVycy5jb22CF2tsdWV2ZXItYnVjeS1zeW5kcm9tLmRlggts
ZW1vbmFpZC5jYYIPbGV1a2FlbWllLWRlLmRlghBtYWtlbWVnZW51aXMuY29tgg1t
YXJpY2FuYXMuY29tgg5tcnRvb2xzLmNvbS5hdYISbXV6aWVrcGFyYWRpanMuYml6
gg9teWplcmJhbGlmZS5jb22CDG5oZXRmbGl4LmNvbYIObm9yZGR0cm9tcy5jb22C
D3BhcmVudGJhZGdlLmNvbYIRcGVraW5pbnN1YW5jZS5jb22CEXByaW50Y2FsZW5k
YXJzLmlughNwcml2YXRlZ2V0YXdheXMuY29tggxwcm9wbGFicy5jb22CGHF1aWNr
dHVybmNhc2hmdW5kaW5nLmNvbYIOcmtuZXRkcm9pZC54eXqCD3Nob3dnaXJsLmNv
bS5hdYIPc3RyZXBva29ra2VuLmRlgg50ZXN0c2lzZWdlci5kZYINd2VuaHVhcGlu
LmNvbYIVd3d3LWVuZG9rcmlub2xvZ2llLmRlghJ3d3dmaXhteWJsaW5kcy5jb22C
C3l1bnNlcnYuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK
KwYBBAHWeQIEAgSB9ASB8QDvAHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0J
gSXttJkAAAGG+FrPewAABAMARjBEAiARsB0jegRov975e3mA+Qj41Z/FRMA+U5CY
1jcIP5Qi3gIgdZETxc+EL/s6V0qsFftgmf8IHA/02t9lt2XdQSYMQToAdgDoPtDa
PvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYb4WtAJAAAEAwBHMEUCIQDw
CM/UCxeE/P4etZqUcjURXW3ekub2HDg9LTwV5X/xjgIgJiraCHTdhTA1qMJALRMY
U1pnRy3aI1cADOgkEpVTUjcwDQYJKoZIhvcNAQELBQADggEBAGtdqgQpIcRs7wrp
q6P0WIAUtOAo8T9WN13K/rXxmd4ouhARys0aVM/U28F/Tpk47UKfMEg+JzyABfON
UsMFqoNoeXA3YT/8XFI96pwEYElRYJVVK/xsJ8DXIkz9PIfVmtm52T/FIvCN8z7a
+yExSPPk/YW0zLHm3XyCEyaXES3g4XKfq8EJgkQFVyEII/5o7ZNcCdve1Il180jj
hHYEhTPWig61XRLN0tjlsmr8xo/SPaxNoMmkxINMA6UINPjxDatCxTE7fPLIZrXd
S4X7z9VuarHTzB2TDM6ItXU4+SW4btkgR07ldfYt6O6l6JBiF/tcEDfFy85JeQGF
LGrdDHM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280468721531045752204376062410269483012415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 04:32:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 04:32:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bakerymana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837962933046095686416228601159191017180260384759356718748922213064748743090210204704823631096817876969231301110856127557797130420172658352157433124010404876166075141782797001386173333765191164800534666410022214275665219470622172364735797754592666290670462177165213965850822403585095841757448842086916732697739043402158931772526856309360305137533813085219357686257425566578959658108166106162395945276547742826319321902617881071267385002042157201406055879158722864575643847624775277106122714554370253705299284794213328597411257654892252871530906213172063574344736500201452686119187807662164489744697581041402443960937212948061283332777611479552396119485354252362260542065740456397186455811865411255048511878832591517074404448415524278488468400120407240083075027144794828691896374805747425347195094209653893701507992994906607718678743242873974216224605230469190326751276384754297766520148063210596351768812706327600813042893009764819798883264681323439212412239756307178975337065609094474571488278773371040499983873099934917748691130710316792939526448531115507138822212920377338666409501539961895631561535647984257472656561879999772135350615892022175694450002343853375102374397453689222692731499292436583512138549969109064254672288050851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71509856e841c01aca6801d6bd7630099373de06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1902 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1960prototype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anomalyobservatory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakerymana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigbluelounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billieellish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackcrackaddicts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blasenentzuedung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bortor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breitbandmessng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cirruscrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleanyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credipal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cringley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daenemark-dancenter-ferienhaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datachurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-schwangerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draughtcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eedbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electroformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellenutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faeulnisdyspepsie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faookcebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finstorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendsoffred.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iphonerm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jimwaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kluever-bucy-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemonaid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leukaemie-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makemegenuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maricanas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrtools.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muziekparadijs.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myjerbalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhetflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norddtroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parentbadge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pekininsuance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printcalendars.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privategetaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickturncashfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rknetdroid.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strepokokken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testsiseger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wenhuapin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-endokrinologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfixmyblinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yunserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1960prototype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anomalyobservatory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerymana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbluelounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billieellish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackcrackaddicts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blasenentzuedung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bortor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breitbandmessng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirruscrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanyoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credipal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cringley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daenemark-dancenter-ferienhaus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datachurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-schwangerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draughtcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electroformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellenutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faeulnisdyspepsie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faookcebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finstorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsoffred.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonerm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimwaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kluever-bucy-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonaid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leukaemie-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemegenuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maricanas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrtools.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muziekparadijs.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjerbalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhetflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norddtroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentbadge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pekininsuance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printcalendars.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privategetaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickturncashfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rknetdroid.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strepokokken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsiseger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenhuapin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-endokrinologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfixmyblinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yunserv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186f85acf7b0000040300463044022011b01d237a0468bfdef97b7980f908f8d59fc544c03e539098d637083f9422de0220759113c5cf842ffb3a574aac15fb6099ff081c0ff4dadf65b765dd41260c413a007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186f85ad0090000040300473045022100f008cfd40b1784fcfe1eb59a947235115d6dde92e6f61c383d2d3c15e57ff18e0220262ada0874dd853035a8c2402d1318535a67472dda2357000ce8241295535237
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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