mennonnosapiens.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2b:04:31:c8:86:a2:0f:33:44:c8:5e:68:88:3f:32:ce:0d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mennonnosapiens.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2b:04:31:c8:86:a2:0f:33:44:c8:5e:68:88:3f:32:ce:0d
Serial Number (int): 363086860906319197840299484815568053390861
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b8:cb:dd:37:d8:5a:21:20:bf:87:b6:6f:69:2c:d8:cf:fe:14:5e:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:2b:05:78:12:99:e6:e0:34:cf:0c:2b:64:7c:1a:6f:fd:77:fd:f9
Fingerprint (sha256): ae:5a:2d:85:03:e7:e0:44:69:7e:0f:64:e9:5d:ed:33:18:bd:28:08:95:74:42:1b:21:8c:d0:1e:df:90:64:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mennonnosapiens.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mennonnosapiens.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abusando.eu
*.allrecepi.com
*.ambev.me
*.arredamentoperfetto.com
*.brookdalecollege.com
*.ceramicpots.com.au
*.cheapfavorsshop.com
*.cheapjersys.com
*.donloup.com
*.empleabilidaduamericana.com
*.estremadura.com
*.fondsandporter.com
*.foodhandleverification.com
*.footish.live
*.getideas.website
*.graphicalai.com
*.hmg3344.top
*.houseparty.site
*.irma.re
*.laurenbjewlery.com
*.lionimperium.com.au
*.localyadvanced.re
*.materialtestinginstruments.com
*.mennonnosapiens.com
*.metatoken.site
*.myford.online
*.neodesignart.com
*.nottion.site
*.obelixhdstream.online
*.otters.info
*.palacestation.co
*.penis.re
*.poolviewspa.com
*.primelending.cm
*.radio24horas.com
*.redox.re
*.removetamponsfromhervaginawhenthestringbreaks.re
*.rnrn.club
*.roommateflatfinder.com
*.sanbernardinovalleycollege.com
*.sewherewego.com
*.shpes.life
*.stoptrichet.com
*.teamveiwer.online
*.top-net.online
*.uncommongifts.com.au
*.uu067.com
*.victoryprophouse.com
*.wava.online
*.willdispute.com.au
abusando.eu
allrecepi.com
ambev.me
arredamentoperfetto.com
brookdalecollege.com
ceramicpots.com.au
cheapfavorsshop.com
cheapjersys.com
donloup.com
empleabilidaduamericana.com
estremadura.com
fondsandporter.com
foodhandleverification.com
footish.live
getideas.website
graphicalai.com
hmg3344.top
houseparty.site
irma.re
laurenbjewlery.com
lionimperium.com.au
localyadvanced.re
materialtestinginstruments.com
mennonnosapiens.com
metatoken.site
myford.online
neodesignart.com
nottion.site
obelixhdstream.online
otters.info
palacestation.co
penis.re
poolviewspa.com
primelending.cm
radio24horas.com
redox.re
removetamponsfromhervaginawhenthestringbreaks.re
rnrn.club
roommateflatfinder.com
sanbernardinovalleycollege.com
sewherewego.com
shpes.life
stoptrichet.com
teamveiwer.online
top-net.online
uncommongifts.com.au
uu067.com
victoryprophouse.com
wava.online
willdispute.com.au

Other certificates including the domain name mennonnosapiens.com

(limited to 100 certificates)
sni.cloudflaressl.com
mennonnosapiens.com
mennonnosapiens.com
mennonnosapiens.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for mennonnosapiens.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINgzCCDGugAwIBAgISBCsEMciGog8zRMheaIg/Ms4NMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjYwMjE1MjJaFw0yNDA2MjQwMjE1MjFaMB4xHDAaBgNVBAMT
E21lbm5vbm5vc2FwaWVucy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCtStKK1sLMpIle127Le69EFxKNeFbnrm2E0HnZqxxmQ92sPE2ATPLYKhGA
8x5aF1SoMxtQssZgJ/Ui7pi0XYmGu7pfkYScaK893prdf1w0AZN1SMeP2lDEdhl0
I9hN9TAiSmak4w3z8aQtwogIZtuN4dhOk3JPxdcATJRaoLmG9woQ70qy8TSl+QTw
6yWkXrnbgi1B/PvxOXCvd1FBDi0etrHmOgAyP6jthKgtN4/beAiIDvoZN//OCcbv
ehGfBncGd+7SAPUefrdIhRstaEcMvkfOpnkVKZvK6rhFViM0fpYNi7kdyad+WgnD
OuzZzB5LYwSlT6W9ZfjMhFqfXt2GUlEcEezoe6qooiAjZbjUffId3md4Axhd3tG4
BtuWNTuaerT0lN4b8uDhh7luDPLKPVM3pRuSKt3c8e9bm2raWCiErQo+aMD/LaRj
z6ZtSvbYtKvYIfNaA4xWoP2ZA7RsDUUCSZwct7V8pGQ3LVYmzbSTxU8vdiqL+69c
6fwKNROtn4HzMDOlebykKzmcQNyTeemG0rtVfg/+YxpGHCkkcQvnnZOHbsDO9PaX
uMngSknv3vAcZoIpW9/Fz1Eosp9Sal08YA85tsKM87yFx/pctqEPXI5mJksVlhaL
sOAn/d6zefApYEoIkqNLyIiHRF1M1Whl3uw8th121aCqYszq3QIDAQABo4IJpTCC
CaEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS4y9032FohIL+Htm9pLNjP/hReUzAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzCCB60GA1UdEQSCB6Qwggeggg0qLmFidXNh
bmRvLmV1gg8qLmFsbHJlY2VwaS5jb22CCiouYW1iZXYubWWCGSouYXJyZWRhbWVu
dG9wZXJmZXR0by5jb22CFiouYnJvb2tkYWxlY29sbGVnZS5jb22CFCouY2VyYW1p
Y3BvdHMuY29tLmF1ghUqLmNoZWFwZmF2b3Jzc2hvcC5jb22CESouY2hlYXBqZXJz
eXMuY29tgg0qLmRvbmxvdXAuY29tgh0qLmVtcGxlYWJpbGlkYWR1YW1lcmljYW5h
LmNvbYIRKi5lc3RyZW1hZHVyYS5jb22CFCouZm9uZHNhbmRwb3J0ZXIuY29tghwq
LmZvb2RoYW5kbGV2ZXJpZmljYXRpb24uY29tgg4qLmZvb3Rpc2gubGl2ZYISKi5n
ZXRpZGVhcy53ZWJzaXRlghEqLmdyYXBoaWNhbGFpLmNvbYINKi5obWczMzQ0LnRv
cIIRKi5ob3VzZXBhcnR5LnNpdGWCCSouaXJtYS5yZYIUKi5sYXVyZW5iamV3bGVy
eS5jb22CFSoubGlvbmltcGVyaXVtLmNvbS5hdYITKi5sb2NhbHlhZHZhbmNlZC5y
ZYIgKi5tYXRlcmlhbHRlc3RpbmdpbnN0cnVtZW50cy5jb22CFSoubWVubm9ubm9z
YXBpZW5zLmNvbYIQKi5tZXRhdG9rZW4uc2l0ZYIPKi5teWZvcmQub25saW5lghIq
Lm5lb2Rlc2lnbmFydC5jb22CDioubm90dGlvbi5zaXRlghcqLm9iZWxpeGhkc3Ry
ZWFtLm9ubGluZYINKi5vdHRlcnMuaW5mb4ISKi5wYWxhY2VzdGF0aW9uLmNvggoq
LnBlbmlzLnJlghEqLnBvb2x2aWV3c3BhLmNvbYIRKi5wcmltZWxlbmRpbmcuY22C
EioucmFkaW8yNGhvcmFzLmNvbYIKKi5yZWRveC5yZYIyKi5yZW1vdmV0YW1wb25z
ZnJvbWhlcnZhZ2luYXdoZW50aGVzdHJpbmdicmVha3MucmWCCyoucm5ybi5jbHVi
ghgqLnJvb21tYXRlZmxhdGZpbmRlci5jb22CICouc2FuYmVybmFyZGlub3ZhbGxl
eWNvbGxlZ2UuY29tghEqLnNld2hlcmV3ZWdvLmNvbYIMKi5zaHBlcy5saWZlghEq
LnN0b3B0cmljaGV0LmNvbYITKi50ZWFtdmVpd2VyLm9ubGluZYIQKi50b3AtbmV0
Lm9ubGluZYIWKi51bmNvbW1vbmdpZnRzLmNvbS5hdYILKi51dTA2Ny5jb22CFiou
dmljdG9yeXByb3Bob3VzZS5jb22CDSoud2F2YS5vbmxpbmWCFCoud2lsbGRpc3B1
dGUuY29tLmF1ggthYnVzYW5kby5ldYINYWxscmVjZXBpLmNvbYIIYW1iZXYubWWC
F2FycmVkYW1lbnRvcGVyZmV0dG8uY29tghRicm9va2RhbGVjb2xsZWdlLmNvbYIS
Y2VyYW1pY3BvdHMuY29tLmF1ghNjaGVhcGZhdm9yc3Nob3AuY29tgg9jaGVhcGpl
cnN5cy5jb22CC2RvbmxvdXAuY29tghtlbXBsZWFiaWxpZGFkdWFtZXJpY2FuYS5j
b22CD2VzdHJlbWFkdXJhLmNvbYISZm9uZHNhbmRwb3J0ZXIuY29tghpmb29kaGFu
ZGxldmVyaWZpY2F0aW9uLmNvbYIMZm9vdGlzaC5saXZlghBnZXRpZGVhcy53ZWJz
aXRlgg9ncmFwaGljYWxhaS5jb22CC2htZzMzNDQudG9wgg9ob3VzZXBhcnR5LnNp
dGWCB2lybWEucmWCEmxhdXJlbmJqZXdsZXJ5LmNvbYITbGlvbmltcGVyaXVtLmNv
bS5hdYIRbG9jYWx5YWR2YW5jZWQucmWCHm1hdGVyaWFsdGVzdGluZ2luc3RydW1l
bnRzLmNvbYITbWVubm9ubm9zYXBpZW5zLmNvbYIObWV0YXRva2VuLnNpdGWCDW15
Zm9yZC5vbmxpbmWCEG5lb2Rlc2lnbmFydC5jb22CDG5vdHRpb24uc2l0ZYIVb2Jl
bGl4aGRzdHJlYW0ub25saW5lggtvdHRlcnMuaW5mb4IQcGFsYWNlc3RhdGlvbi5j
b4IIcGVuaXMucmWCD3Bvb2x2aWV3c3BhLmNvbYIPcHJpbWVsZW5kaW5nLmNtghBy
YWRpbzI0aG9yYXMuY29tgghyZWRveC5yZYIwcmVtb3ZldGFtcG9uc2Zyb21oZXJ2
YWdpbmF3aGVudGhlc3RyaW5nYnJlYWtzLnJlgglybnJuLmNsdWKCFnJvb21tYXRl
ZmxhdGZpbmRlci5jb22CHnNhbmJlcm5hcmRpbm92YWxsZXljb2xsZWdlLmNvbYIP
c2V3aGVyZXdlZ28uY29tggpzaHBlcy5saWZlgg9zdG9wdHJpY2hldC5jb22CEXRl
YW12ZWl3ZXIub25saW5lgg50b3AtbmV0Lm9ubGluZYIUdW5jb21tb25naWZ0cy5j
b20uYXWCCXV1MDY3LmNvbYIUdmljdG9yeXByb3Bob3VzZS5jb22CC3dhdmEub25s
aW5lghJ3aWxsZGlzcHV0ZS5jb20uYXUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3
iviabfUX2AAAAY54wWAsAAAEAwBHMEUCIQCpiTIGQcZRgoSwc8HNJ6iqRJ1U9kLu
FomellWWDsIkmwIgCw98RSHh9HXN0zsnGAkwMotW5UxDGEdddURQWzeDbU8AdQBI
sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY54wWAEAAAEAwBGMEQC
ICULRpy9pe7UOqnpJ7oR9THMzejDHfbablquRd6L3RycAiA5Z6lASsLJFlbXyEO1
1CplDer8H7gbWCSmJyIdTnn1iTANBgkqhkiG9w0BAQsFAAOCAQEAYFBS3p3zrHED
qF5QtqxQkyLUii2p2O6MvCWW5ie/uJXebl3jVyF0LUM46XnM9vocAYoBPBbcley8
c4y5Ogq6ciKP1+HcQBcFQJVzur4f6L6jd5giUNQoTZ4e8g51T4UhMK80bC38p5fH
oTsc+aODIMjVuFiH+/gtV3WtCg+GT3OmVtYv3Lkw+ZDUT9MV4sbVEKqwW0hh3pR/
HDj5IfUSSEOEG1/gtXJOqT2y03IwCj5wsSD537mrgeLs7vJSYsnjT4KQV+5/1Reo
k2ZHyxFHmokKZCv7fgZGmP9ofi5ws16JNWDu7AFVJmb7QQKh8z89X53J3FOUSoP/
PyU6q9Rv6Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363086860906319197840299484815568053390861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 02:15:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 02:15:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mennonnosapiens.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706970802231699315403427433184270136513995184460933616357742884780608805398779841235677528276459038403003186385934991007996277078481067998413426717581922422004549336978616020871617502314043940459210952022965044107560457020497680855210658535649758457043236407721726470674347575274851977193798496708023950434256973002230440315822441540937230930895306228082678917713702081849209794080308056222592211876418605654600547635905154161070817285320179566448706411164523579501498205655113831946523833100858209756035498127920591045990158616466565059433902742280649279518225259992215719847806366414302880561068581625897378940316709323789560340439720324424193099115458113481466190672510765214734551880909998083565408000361816510060949005606851077009202894882056225390461032904236549968018912530182664017711085224508478379538000115046148875707676025837410122758660182660724100267730688959202203146947474480399981707355743542997491381622251677385537899123367661570798714869521150995968173004423555138495113926705996479134118424540845501728300734786043168149069009106788480388015828577569362325083927046895527465971059743899187510262679580291917129382801401712559392501845082997594706783107069841873257480174013423222184210071028563050004779268631261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8cbdd37d85a2120bf87b66f692cd8cffe145e53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1956 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abusando.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allrecepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambev.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arredamentoperfetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brookdalecollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceramicpots.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapfavorsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapjersys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donloup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empleabilidaduamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estremadura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fondsandporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodhandleverification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footish.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getideas.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphicalai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hmg3344.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houseparty.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irma.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laurenbjewlery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lionimperium.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.localyadvanced.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.materialtestinginstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mennonnosapiens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metatoken.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myford.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neodesignart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nottion.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obelixhdstream.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otters.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palacestation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penis.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poolviewspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primelending.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio24horas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redox.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.removetamponsfromhervaginawhenthestringbreaks.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rnrn.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roommateflatfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanbernardinovalleycollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sewherewego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shpes.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoptrichet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamveiwer.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.top-net.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncommongifts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uu067.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoryprophouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wava.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willdispute.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abusando.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allrecepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambev.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arredamentoperfetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookdalecollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceramicpots.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapfavorsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapjersys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donloup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empleabilidaduamericana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estremadura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondsandporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodhandleverification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footish.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getideas.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphicalai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmg3344.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseparty.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irma.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurenbjewlery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionimperium.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localyadvanced.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materialtestinginstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mennonnosapiens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metatoken.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myford.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neodesignart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nottion.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obelixhdstream.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otters.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palacestation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penis.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolviewspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primelending.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio24horas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redox.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removetamponsfromhervaginawhenthestringbreaks.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnrn.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roommateflatfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanbernardinovalleycollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewherewego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shpes.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoptrichet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamveiwer.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top-net.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncommongifts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uu067.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoryprophouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wava.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willdispute.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e78c1602c0000040300473045022100a989320641c6518284b073c1cd27a8aa449d54f642ee16899e9655960ec2249b02200b0f7c4521e1f475cdd33b27180930328b56e54c4318475d7544505b37836d4f00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e78c1600400000403004630440220250b469cbda5eed43aa9e927ba11f531cccde8c31df6da6e5aae45de8bdd1c9c02203967a9404ac2c91656d7c843b5d42a650deafc1fb81b5824a627221d4e79f589
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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