aircurtains.au

Issued by R3

About this certificate

This digital certificate with serial number 04:70:e4:99:b3:07:c6:e4:80:10:ad:e5:97:c5:e2:63:0c:73 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aircurtains.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:70:e4:99:b3:07:c6:e4:80:10:ad:e5:97:c5:e2:63:0c:73
Serial Number (int): 386864630857811881605093730227851435904115
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 66:67:85:ef:e6:26:1f:bc:ea:da:96:a2:5d:68:46:bb:4b:5e:76:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:a7:47:26:44:18:55:3e:18:30:81:34:62:fd:67:b6:3f:a8:78:6f
Fingerprint (sha256): ac:61:f1:55:57:56:ed:07:bd:c7:90:35:43:57:45:d9:57:c8:e0:0b:b5:9f:54:a2:37:a3:c9:1d:bc:12:76:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aircurtains.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aircurtains.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aircurtains.au
*.athenahealth.co
*.bet9ja.co
*.caninecop.com
*.capgemini.co
*.ceylav.com
*.d2pad.com
*.daluthtrading.com
*.ecoshelters.com
*.fontelo.com
*.fronteras.com
*.garminhealth.com
*.gashi-international.com
*.importerinusa.com
*.jordistudio.com
*.keenfootweat.com
*.kkschool.com
*.laroja.es
*.leonie-pur.co
*.life.social
*.modernfirm.com.au
*.motion.es
*.movie-for-life.com
*.msroundcake.com
*.mudomain.com
*.netfli.com.br
*.nvadahealthlink.com
*.renovation.sg
*.rentsourceinc.com
*.rflctv.co
*.rivadavia.com
*.ryokurian.jp
*.sqeetwater.com
*.suedbayern.com
*.theolivebranch.com.au
*.thermofisher.co
*.tickleabuse.co
*.to7fa.com
*.trev.com.au
*.urdustan.com
*.uza.in
*.venturesurgery.com
*.villagetech.com
*.visiondc.org
*.webbfurniture.com
*.wildlifegifts.com
*.wwwepicgames.com
*.wywisely.com
*.youtjbe.com
*.zrimed.com
aircurtains.au
athenahealth.co
bet9ja.co
caninecop.com
capgemini.co
ceylav.com
d2pad.com
daluthtrading.com
ecoshelters.com
fontelo.com
fronteras.com
garminhealth.com
gashi-international.com
importerinusa.com
jordistudio.com
keenfootweat.com
kkschool.com
laroja.es
leonie-pur.co
life.social
modernfirm.com.au
motion.es
movie-for-life.com
msroundcake.com
mudomain.com
netfli.com.br
nvadahealthlink.com
renovation.sg
rentsourceinc.com
rflctv.co
rivadavia.com
ryokurian.jp
sqeetwater.com
suedbayern.com
theolivebranch.com.au
thermofisher.co
tickleabuse.co
to7fa.com
trev.com.au
urdustan.com
uza.in
venturesurgery.com
villagetech.com
visiondc.org
webbfurniture.com
wildlifegifts.com
wwwepicgames.com
wywisely.com
youtjbe.com
zrimed.com

Other certificates including the domain name aircurtains.au

(limited to 100 certificates)
earpiercing.au
aircurtains.au
*.accommodationyamba.au
aircurtains.au
aircurtains.au
aircurtains.au

Certificate

The complete raw certificate details for aircurtains.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMXjCCC0agAwIBAgISBHDkmbMHxuSAEK3ll8XiYwxzMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MTIxMTExMTFaFw0yNDA4MTAxMTExMTBaMBkxFzAVBgNVBAMT
DmFpcmN1cnRhaW5zLmF1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
xh5mRluqifLd1xRcZPQHhsdBkXn2IrgpzrQG9CxPK0CaZJus3m63d7VqtEIqnc6K
P3wmd4kBdd+El/5rMaipV9QhPQOOzBQm4pITq1HeAFLbGho3tpyBO+UCns0Doo3k
mOLeLOteATS8dyxUUnE4EOIuZl11lL3qNXPadZWhhkpHY0Z/3juotEOtbKGc/rRC
o05i5c68vRarZouE8dSlOHEcPNP7fNcXpcojRaWt1F/wzjiQXQGG4SVGLZQYhVYl
tmJ49HtQX7pSl755b1cQgJaPdQUXsMHoanet5wEgJSWLkZ5qb9zy1hP8tjZwg+gP
Daiic7dXrJy009V4pF0l/pZR7cfVN/jk2v7wersLgv/tjNZzwLh9+VpLX06Vy/yR
8QHmM8xgdy5VZ6QzkiTo+cLwWROhTTCYvSBEJhse+7042DYokmvL4sVO/bIgwraU
8oc4bnoMFL4mBMrRNEIhVQP9n6Juhi91opePdhG156sNySY+NhnKgp4tz8at6fbC
Cp+FAB+IpUJbvxLiyg+UYpwPP/Fj5XJpO7ZguBjve+lVDy+AlKoQ7cMnHxRzYMqf
+Z52OP2MRfxsTENmSTT5+jw4RrIWMXajhbq3ExT2RgBg6AnqfV5hAdmMpSYZyM6z
G6VO8itEp+wVZWnr+pCbvL6BqSaj3gW8AcaKb1GynUcCAwEAAaOCCIUwggiBMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUZmeF7+YmH7zq2paiXWhGu0tedhMwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggaLBgNVHREEggaCMIIGfoIQKi5haXJjdXJ0YWlu
cy5hdYIRKi5hdGhlbmFoZWFsdGguY2+CCyouYmV0OWphLmNvgg8qLmNhbmluZWNv
cC5jb22CDiouY2FwZ2VtaW5pLmNvggwqLmNleWxhdi5jb22CCyouZDJwYWQuY29t
ghMqLmRhbHV0aHRyYWRpbmcuY29tghEqLmVjb3NoZWx0ZXJzLmNvbYINKi5mb250
ZWxvLmNvbYIPKi5mcm9udGVyYXMuY29tghIqLmdhcm1pbmhlYWx0aC5jb22CGSou
Z2FzaGktaW50ZXJuYXRpb25hbC5jb22CEyouaW1wb3J0ZXJpbnVzYS5jb22CESou
am9yZGlzdHVkaW8uY29tghIqLmtlZW5mb290d2VhdC5jb22CDioua2tzY2hvb2wu
Y29tggsqLmxhcm9qYS5lc4IPKi5sZW9uaWUtcHVyLmNvgg0qLmxpZmUuc29jaWFs
ghMqLm1vZGVybmZpcm0uY29tLmF1ggsqLm1vdGlvbi5lc4IUKi5tb3ZpZS1mb3It
bGlmZS5jb22CESoubXNyb3VuZGNha2UuY29tgg4qLm11ZG9tYWluLmNvbYIPKi5u
ZXRmbGkuY29tLmJyghUqLm52YWRhaGVhbHRobGluay5jb22CDyoucmVub3ZhdGlv
bi5zZ4ITKi5yZW50c291cmNlaW5jLmNvbYILKi5yZmxjdHYuY2+CDyoucml2YWRh
dmlhLmNvbYIOKi5yeW9rdXJpYW4uanCCECouc3FlZXR3YXRlci5jb22CECouc3Vl
ZGJheWVybi5jb22CFyoudGhlb2xpdmVicmFuY2guY29tLmF1ghEqLnRoZXJtb2Zp
c2hlci5jb4IQKi50aWNrbGVhYnVzZS5jb4ILKi50bzdmYS5jb22CDSoudHJldi5j
b20uYXWCDioudXJkdXN0YW4uY29tgggqLnV6YS5pboIUKi52ZW50dXJlc3VyZ2Vy
eS5jb22CESoudmlsbGFnZXRlY2guY29tgg4qLnZpc2lvbmRjLm9yZ4ITKi53ZWJi
ZnVybml0dXJlLmNvbYITKi53aWxkbGlmZWdpZnRzLmNvbYISKi53d3dlcGljZ2Ft
ZXMuY29tgg4qLnd5d2lzZWx5LmNvbYINKi55b3V0amJlLmNvbYIMKi56cmltZWQu
Y29tgg5haXJjdXJ0YWlucy5hdYIPYXRoZW5haGVhbHRoLmNvggliZXQ5amEuY2+C
DWNhbmluZWNvcC5jb22CDGNhcGdlbWluaS5jb4IKY2V5bGF2LmNvbYIJZDJwYWQu
Y29tghFkYWx1dGh0cmFkaW5nLmNvbYIPZWNvc2hlbHRlcnMuY29tggtmb250ZWxv
LmNvbYINZnJvbnRlcmFzLmNvbYIQZ2FybWluaGVhbHRoLmNvbYIXZ2FzaGktaW50
ZXJuYXRpb25hbC5jb22CEWltcG9ydGVyaW51c2EuY29tgg9qb3JkaXN0dWRpby5j
b22CEGtlZW5mb290d2VhdC5jb22CDGtrc2Nob29sLmNvbYIJbGFyb2phLmVzgg1s
ZW9uaWUtcHVyLmNvggtsaWZlLnNvY2lhbIIRbW9kZXJuZmlybS5jb20uYXWCCW1v
dGlvbi5lc4ISbW92aWUtZm9yLWxpZmUuY29tgg9tc3JvdW5kY2FrZS5jb22CDG11
ZG9tYWluLmNvbYINbmV0ZmxpLmNvbS5icoITbnZhZGFoZWFsdGhsaW5rLmNvbYIN
cmVub3ZhdGlvbi5zZ4IRcmVudHNvdXJjZWluYy5jb22CCXJmbGN0di5jb4INcml2
YWRhdmlhLmNvbYIMcnlva3VyaWFuLmpwgg5zcWVldHdhdGVyLmNvbYIOc3VlZGJh
eWVybi5jb22CFXRoZW9saXZlYnJhbmNoLmNvbS5hdYIPdGhlcm1vZmlzaGVyLmNv
gg50aWNrbGVhYnVzZS5jb4IJdG83ZmEuY29tggt0cmV2LmNvbS5hdYIMdXJkdXN0
YW4uY29tggZ1emEuaW6CEnZlbnR1cmVzdXJnZXJ5LmNvbYIPdmlsbGFnZXRlY2gu
Y29tggx2aXNpb25kYy5vcmeCEXdlYmJmdXJuaXR1cmUuY29tghF3aWxkbGlmZWdp
ZnRzLmNvbYIQd3d3ZXBpY2dhbWVzLmNvbYIMd3l3aXNlbHkuY29tggt5b3V0amJl
LmNvbYIKenJpbWVkLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRu
AAABj2y20zoAAAQDAEgwRgIhAOXtoQrxLIGytP7EBZ0pr+pr/2AVxaiHuUBjC7fB
fIP8AiEA7/DZKrTURfdX4dgkoywuDSiVE71zqtQj5oUJ4D6IhKcAdgBIsONr2qZH
NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY9sttMzAAAEAwBHMEUCIQD2+glN
Fjxinn8hAvpZ57ZNLX7/X/9Bo7a9zx7adkzTUQIgKzLM9uSvwsk3/aWiB+GnRkKm
pc+Xhi5SfGP2YoC/h24wDQYJKoZIhvcNAQELBQADggEBAJ0lkxtHODcfTTyXsrzp
RdJDQPEt+ZIi11RkEIXEFfgfMo27WXtWpev5tB2eXyz5bTJmPQ4qfjDxPwl75sUF
myUNnN30oVUPlG6yEKnsLBvh1exaSwkbh2+AH8tOE2HCQp3HKzlRBFXujksQAqEA
Bw0XD2oJyiUjz6ltSSkV7jHVmydvkcsehkPmWEVDqterlEfx4SKl5up9AYAfxzL8
11Dfx9AkZVkOfy4HA/SOsMTUfqCNcq82G9gZ4pGuZqXCVpL4OTU4IOGjjtXDKlX9
qdka1/QxfT6siVN8p0UbaZu6+0rhZ2QRqy3fXQjYtvbtDpYZcFkqWSqkDJiJKdcn
0F4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386864630857811881605093730227851435904115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 11:11:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 11:11:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aircurtains.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808253975409563292209971093723578833491333711285971308808550838799611807107735487091202985707769036680923333931846368420458415652205508462516843971639274317632719302120956923233456733004656705610791033059458366610207932743683969242929659420623983181216609719765407850588698077461010061470641642196659281360407917848740143175447478652176461362279203624354772972602091316075595563483950713600933326797465771533156542960498181427639245322322158580019333458109071462596144100303894328059725773208175091858478968178769457169465409888772091107951448959160982193890384158278854950897902262077435945231979262094124522281842899345258477228127286173763983259628865667126740771007832502805781278361028037951590565665945636775795302334407336031843602677512155808816307486174088241267085998705911005178802263923666792003735661696238515935740855267401151466066419299361794762904370978034904706372972856420494875022512644450400389937630866823989059443634253865464905706822077992595848984522458953625199361031475157257269984467397708409034466694398241344567156321340426651593006917356396256871006033512880169987511696358646752072570112416672942845804522932509444104524647950849933094169490802205174060817614237204075228014142480758433527029294079303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							666785efe6261fbceada96a25d6846bb4b5e7613
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1666 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aircurtains.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athenahealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bet9ja.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caninecop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capgemini.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceylav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d2pad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daluthtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecoshelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fronteras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garminhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gashi-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.importerinusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jordistudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keenfootweat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laroja.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leonie-pur.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.life.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernfirm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movie-for-life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msroundcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mudomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netfli.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvadahealthlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renovation.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentsourceinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rflctv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivadavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryokurian.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqeetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suedbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theolivebranch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thermofisher.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tickleabuse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.to7fa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trev.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urdustan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uza.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venturesurgery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villagetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visiondc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webbfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wildlifegifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwepicgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wywisely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youtjbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zrimed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircurtains.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenahealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bet9ja.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caninecop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capgemini.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceylav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd2pad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daluthtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecoshelters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fronteras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garminhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gashi-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'importerinusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordistudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keenfootweat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laroja.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonie-pur.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernfirm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movie-for-life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msroundcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netfli.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvadahealthlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovation.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentsourceinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rflctv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivadavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryokurian.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqeetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suedbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theolivebranch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermofisher.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickleabuse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'to7fa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trev.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urdustan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uza.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturesurgery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villagetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visiondc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webbfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildlifegifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwepicgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wywisely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtjbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zrimed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f6cb6d33a0000040300483046022100e5eda10af12c81b2b4fec4059d29afea6bff6015c5a887b940630bb7c17c83fc022100eff0d92ab4d445f757e1d824a32c2e0d289513bd73aad423e68509e03e8884a700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f6cb6d3330000040300473045022100f6fa094d163c629e7f2102fa59e7b64d2d7eff5fff41a3b6bdcf1eda764cd35102202b32ccf6e4afc2c937fda5a207e1a74642a6a5cf97862e527c63f66280bf876e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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