magshimim.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2e:57:86:ac:8b:7a:cb:d2:ca:7a:c4:3b:3b:09:3d:f3:e9 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magshimim.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2e:57:86:ac:8b:7a:cb:d2:ca:7a:c4:3b:3b:09:3d:f3:e9
Serial Number (int): 364218474708441657249797375931488841626601
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8d:71:60:b0:5e:fe:e1:81:8e:6f:b9:c9:a5:9b:fa:55:b1:02:90:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:14:6c:40:12:49:05:7e:bf:e0:f9:7e:f6:85:10:82:2d:92:c1:18
Fingerprint (sha256): ac:af:17:4e:08:81:5d:12:e2:27:14:ae:3f:6f:8a:06:0a:d9:c3:40:12:59:63:df:f0:37:f0:18:09:3a:61:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate magshimim.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magshimim.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abdoo.com
*.acurafinance.com
*.applebys.com
*.carlsonpartners.com
*.chenghang.com
*.comerciojusto.com
*.coyote.cm
*.coyoteridgegolf.com
*.empiricists.com
*.estiloviajes.com
*.evoluta.com
*.fanian.com
*.figueira.net
*.filipinobasketball.com
*.fliton.com
*.gregorytoussaint.com
*.greycliffe.com
*.insurancebrain.com.au
*.insuremysmallbusiness.com.au
*.intelefone.com
*.iqos.eu
*.jcconcursos.com
*.klassefest.com
*.kp-automotive.com
*.kretchmer.com
*.kunja.com
*.magshimim.com
*.maunder.com
*.mercadobarato.com
*.mertesdorf.com
*.mormonmatters.com
*.mp-2.com
*.naturallygreen.com
*.neufahrzeuge.com
*.ohiocashadvance.com
*.oranit.com
*.oztradienetwork.com.au
*.patnanews.in
*.peetz.com
*.pixiepress.com
*.pornhud.de
*.preter.com
*.putatan.com
*.rojel.com
*.shima.net
*.streameast.lc
*.themixtape.com
*.tienda-contrareembolso.com
*.tiengnhac.com
*.wsopro.com
abdoo.com
acurafinance.com
applebys.com
carlsonpartners.com
chenghang.com
comerciojusto.com
coyote.cm
coyoteridgegolf.com
empiricists.com
estiloviajes.com
evoluta.com
fanian.com
figueira.net
filipinobasketball.com
fliton.com
gregorytoussaint.com
greycliffe.com
insurancebrain.com.au
insuremysmallbusiness.com.au
intelefone.com
iqos.eu
jcconcursos.com
klassefest.com
kp-automotive.com
kretchmer.com
kunja.com
magshimim.com
maunder.com
mercadobarato.com
mertesdorf.com
mormonmatters.com
mp-2.com
naturallygreen.com
neufahrzeuge.com
ohiocashadvance.com
oranit.com
oztradienetwork.com.au
patnanews.in
peetz.com
pixiepress.com
pornhud.de
preter.com
putatan.com
rojel.com
shima.net
streameast.lc
themixtape.com
tienda-contrareembolso.com
tiengnhac.com
wsopro.com

Other certificates including the domain name magshimim.com

(limited to 100 certificates)
electboley.com
balancemachine.com
magshimim.com
karolys.com
magshimim.com
magshimim.com
snapcchat.com
gdgate.com
nudelive.stream
magshimim.com
cemalettin.com
deflorstion.com

Certificate

The complete raw certificate details for magshimim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMkTCCC3mgAwIBAgISBC5XhqyLesvSynrEOzsJPfPpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTcwOTQ0NTlaFw0yMzEwMTUwOTQ0NThaMBgxFjAUBgNVBAMT
DW1hZ3NoaW1pbS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDM
al14OPBwl1II7vkMbZ/ErWfoxRIf5ebDhnhoiCX7Z53GBCyRbXfagqwQzM/Hn3MP
zPoCLxXRqDwtjRfk855BV772bMG7G7y1PZySeH8zNoPRiH9AN1lHfCIwTuXKoNar
v3bPJnTLN1Yf7NDbZXR5FO5tiCH0asBs5ksqe7uuoTPW1D8OTgBNr0vbU4xsRewC
zHYYzL3u9OLFNCMAqBP4JGOukjMOetPC9T+qy7kCkFZ3GBi1NvivQnzKjRp9LOxd
Ur24O5ml71MUcyM3QV761Ivtk6X9M1VxDyVMTBY4WLE7Aou7I56QbvMMHrtK+Q/Y
EsAqHKAPICVzJG31tz3WgNc1nB2T52Adca3glsACGvTqL0g8+EypxpRqtRLVNfip
+fx3RYOa27o0/x27O2da0eX/DQUgEwooXmsy4o9lowterySi90GUGA+r0gqsEJaR
AiSFvJ/k7lK8Kmt3u/oLLOHdDCc4qmdUz30YBKAV7iPhG42cwiDdBQ1JEjyuO90+
605eYj6OLihBtDBKbJR28N70BaewcEc3KgnCoLBGcNHpa++lNycRk056aJlDiJnw
uOtO1EAIP2YZeelaH0aVTyszUmCa+bTm3HUMPJXl/k+6/SYSRdQl2AIu5BgzcW8+
CQpSvnUJQryaWl23gGS0rY0s8zUKON6eD/JzNgtG0QIDAQABo4IIuTCCCLUwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSNcWCwXv7hgY5vucmlm/pVsQKQRTAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCBr8GA1UdEQSCBrYwggayggsqLmFiZG9vLmNvbYIS
Ki5hY3VyYWZpbmFuY2UuY29tgg4qLmFwcGxlYnlzLmNvbYIVKi5jYXJsc29ucGFy
dG5lcnMuY29tgg8qLmNoZW5naGFuZy5jb22CEyouY29tZXJjaW9qdXN0by5jb22C
CyouY295b3RlLmNtghUqLmNveW90ZXJpZGdlZ29sZi5jb22CESouZW1waXJpY2lz
dHMuY29tghIqLmVzdGlsb3ZpYWplcy5jb22CDSouZXZvbHV0YS5jb22CDCouZmFu
aWFuLmNvbYIOKi5maWd1ZWlyYS5uZXSCGCouZmlsaXBpbm9iYXNrZXRiYWxsLmNv
bYIMKi5mbGl0b24uY29tghYqLmdyZWdvcnl0b3Vzc2FpbnQuY29tghAqLmdyZXlj
bGlmZmUuY29tghcqLmluc3VyYW5jZWJyYWluLmNvbS5hdYIeKi5pbnN1cmVteXNt
YWxsYnVzaW5lc3MuY29tLmF1ghAqLmludGVsZWZvbmUuY29tggkqLmlxb3MuZXWC
ESouamNjb25jdXJzb3MuY29tghAqLmtsYXNzZWZlc3QuY29tghMqLmtwLWF1dG9t
b3RpdmUuY29tgg8qLmtyZXRjaG1lci5jb22CCyoua3VuamEuY29tgg8qLm1hZ3No
aW1pbS5jb22CDSoubWF1bmRlci5jb22CEyoubWVyY2Fkb2JhcmF0by5jb22CECou
bWVydGVzZG9yZi5jb22CEyoubW9ybW9ubWF0dGVycy5jb22CCioubXAtMi5jb22C
FCoubmF0dXJhbGx5Z3JlZW4uY29tghIqLm5ldWZhaHJ6ZXVnZS5jb22CFSoub2hp
b2Nhc2hhZHZhbmNlLmNvbYIMKi5vcmFuaXQuY29tghgqLm96dHJhZGllbmV0d29y
ay5jb20uYXWCDioucGF0bmFuZXdzLmluggsqLnBlZXR6LmNvbYIQKi5waXhpZXBy
ZXNzLmNvbYIMKi5wb3JuaHVkLmRlggwqLnByZXRlci5jb22CDSoucHV0YXRhbi5j
b22CCyoucm9qZWwuY29tggsqLnNoaW1hLm5ldIIPKi5zdHJlYW1lYXN0LmxjghAq
LnRoZW1peHRhcGUuY29tghwqLnRpZW5kYS1jb250cmFyZWVtYm9sc28uY29tgg8q
LnRpZW5nbmhhYy5jb22CDCoud3NvcHJvLmNvbYIJYWJkb28uY29tghBhY3VyYWZp
bmFuY2UuY29tggxhcHBsZWJ5cy5jb22CE2Nhcmxzb25wYXJ0bmVycy5jb22CDWNo
ZW5naGFuZy5jb22CEWNvbWVyY2lvanVzdG8uY29tggljb3lvdGUuY22CE2NveW90
ZXJpZGdlZ29sZi5jb22CD2VtcGlyaWNpc3RzLmNvbYIQZXN0aWxvdmlhamVzLmNv
bYILZXZvbHV0YS5jb22CCmZhbmlhbi5jb22CDGZpZ3VlaXJhLm5ldIIWZmlsaXBp
bm9iYXNrZXRiYWxsLmNvbYIKZmxpdG9uLmNvbYIUZ3JlZ29yeXRvdXNzYWludC5j
b22CDmdyZXljbGlmZmUuY29tghVpbnN1cmFuY2VicmFpbi5jb20uYXWCHGluc3Vy
ZW15c21hbGxidXNpbmVzcy5jb20uYXWCDmludGVsZWZvbmUuY29tggdpcW9zLmV1
gg9qY2NvbmN1cnNvcy5jb22CDmtsYXNzZWZlc3QuY29tghFrcC1hdXRvbW90aXZl
LmNvbYINa3JldGNobWVyLmNvbYIJa3VuamEuY29tgg1tYWdzaGltaW0uY29tggtt
YXVuZGVyLmNvbYIRbWVyY2Fkb2JhcmF0by5jb22CDm1lcnRlc2RvcmYuY29tghFt
b3Jtb25tYXR0ZXJzLmNvbYIIbXAtMi5jb22CEm5hdHVyYWxseWdyZWVuLmNvbYIQ
bmV1ZmFocnpldWdlLmNvbYITb2hpb2Nhc2hhZHZhbmNlLmNvbYIKb3Jhbml0LmNv
bYIWb3p0cmFkaWVuZXR3b3JrLmNvbS5hdYIMcGF0bmFuZXdzLmlugglwZWV0ei5j
b22CDnBpeGllcHJlc3MuY29tggpwb3JuaHVkLmRlggpwcmV0ZXIuY29tggtwdXRh
dGFuLmNvbYIJcm9qZWwuY29tgglzaGltYS5uZXSCDXN0cmVhbWVhc3QubGOCDnRo
ZW1peHRhcGUuY29tghp0aWVuZGEtY29udHJhcmVlbWJvbHNvLmNvbYINdGllbmdu
aGFjLmNvbYIKd3NvcHJvLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisG
AQQB1nkCBAIEgfYEgfMA8QB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlej
UutSAAABiWN0FtkAAAQDAEgwRgIhAKl96qydpKGJVvwej8ppokDA7DJrP5LRHg2y
Tl6lGxnvAiEA3oeI45Sk0OJfotjzQug9vpJum5U3MZgdDFcLq48uXPAAdgC3Pvsk
35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYljdBjDAAAEAwBHMEUCIEYr
xf9DfNmmo+xlR+QwmwiZAiW4OPiPcRBq1t9JbVQ1AiEAn9xjXvm3A5XR2OvSJ4RN
FHdyRKJqLUFWSPG3z0E4DEswDQYJKoZIhvcNAQELBQADggEBAG/HCGv4l8Fm/hmF
UXalNbfgsMyAiXO/e+vS7xyCb8xTy24BR29JWES4eCNjVVhsqwRx4zZqIegtFxmg
/3pxBIzi2ExU1qCYt+2FZfvXW7C572jj8pZd8gQis6pDGrRamZ1S2cz7NqwWzTHT
yze08uriSLT/xwT0LMv5MbcYYUSKcIGLs9TaTfNFc3uNy9YsQ5H74K0/jWg0vwsh
7YmZ4SOF6RxyudmUzjztgaWAfpskhWe6yLdx3Hx5oVSuq6LZ/bHhRapdVyhbVM62
SkaDqhROVV9uObJlCqwFovR+WmrG7JMMPgGFzVy4BgIBbRlPg7Hyp5UPuEdOv4lU
yM9nJEs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364218474708441657249797375931488841626601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 09:44:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 09:44:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magshimim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833942436021823793614411392329574401781687277869586994894559632295755946609389761624957541224912155905502321008213784671699944577386270568074660688817334627178028044485165729560344379603744379091705552282426562425395231955551280625785388801129402880867088009841349699984752588184953781673110517786298439106937601529943913007518836203324252048687470929944493705421795967737209559496922694244634147702751205465379299032386715058550647412282607485728153355562384359532561484553143015051196468724691368901886436173143979596373248930997076306436036666246132330961150176346290181118244605976298662139411122419208367264676053017901584670570268035973284971606107424420020027686786092402975646126948517133742283726841938129984354960728108709879128708426737485651227539016338518204351175454893611441124336254311267159651628752930018830326583220089835674706674656544361541496629542546220549836907037808975265841902975227536748469231102041193593943972438828346064768057759417984758380823292439460882574409042476196753536341575515638466125709800155384773788896341771021308909211117179482412932782996412195261977716067702306068714393131164300564513052525513522009690096755088582734459628823559001440017407428682081719392429417823846749738550118097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d7160b05efee1818e6fb9c9a59bfa55b1029045
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1718 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abdoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acurafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applebys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carlsonpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chenghang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comerciojusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coyote.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coyoteridgegolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empiricists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estiloviajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evoluta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.figueira.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filipinobasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fliton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gregorytoussaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greycliffe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insurancebrain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insuremysmallbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelefone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iqos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcconcursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klassefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kp-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kretchmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kunja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magshimim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercadobarato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mertesdorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mormonmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp-2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturallygreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neufahrzeuge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohiocashadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oranit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oztradienetwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patnanews.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peetz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixiepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornhud.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.putatan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rojel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shima.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streameast.lc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themixtape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tienda-contrareembolso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiengnhac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acurafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applebys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlsonpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chenghang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comerciojusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coyote.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coyoteridgegolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empiricists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estiloviajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evoluta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figueira.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filipinobasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fliton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregorytoussaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greycliffe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancebrain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuremysmallbusiness.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelefone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcconcursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klassefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kretchmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magshimim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercadobarato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mertesdorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mormonmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp-2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturallygreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neufahrzeuge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiocashadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oranit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oztradienetwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patnanews.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peetz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixiepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornhud.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putatan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rojel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shima.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streameast.lc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themixtape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienda-contrareembolso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiengnhac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsopro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189637416d90000040300483046022100a97deaac9da4a18956fc1e8fca69a240c0ec326b3f92d11e0db24e5ea51b19ef022100de8788e394a4d0e25fa2d8f342e83dbe926e9b953731981d0c570bab8f2e5cf0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189637418c300000403004730450220462bc5ff437cd9a6a3ec6547e4309b08990225b838f88f71106ad6df496d54350221009fdc635ef9b70395d1d8ebd227844d14777244a26a2d415648f1b7cf41380c4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006fc7086bf897c166fe19855176a535b7e0b0cc808973bf7bebd2ef1c826fcc53cb6e01476f495844b878236355586cab0471e3366a21e82d1719a0ff7a71048ce2d84c54d6a098b7ed8565fbd75bb0b9ef68e3f2965df20422b3aa431ab45a999d52d9ccfb36ac16cd31d3cb37b4f2eae248b4ffc704f42ccbf931b71861448a70818bb3d4da4df345737b8dcbd62c4391fbe0ad3f8d6834bf0b21ed8999e12385e91c72b9d994ce3ced81a5807e9b248567bac8b771dc7c79a154aeaba2d9fdb1e145aa5d57285b54ceb64a4683aa144e555f6e39b2650aac05a2f47e5a6ac6ec930c3e0185cd5cb80602016d194f83b1f2a7950fb8474ebf8954c8cf67244b