livingafterfaith.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a4:54:16:ea:bf:bc:46:06:c6:24:65:57:73:c0:78:16:f6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=livingafterfaith.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a4:54:16:ea:bf:bc:46:06:c6:24:65:57:73:c0:78:16:f6
Serial Number (int): 404367226045526409427379211496234648344310
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:fb:dd:26:72:f9:a6:46:c6:c6:7d:49:16:c6:34:7a:e2:6d:7c:41
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 76:19:45:3d:d6:27:88:e3:e7:4d:db:7a:24:69:dd:2a:4f:81:db:8e
Fingerprint (sha256): b1:0b:fb:4d:94:41:9c:67:ab:72:c8:0e:03:50:b0:15:56:02:20:0a:27:88:b5:fd:08:9f:69:42:ff:c7:91:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate livingafterfaith.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livingafterfaith.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aurismagnetic.co.uk
*.baddiehb.com
*.bddysf.net
*.bordeaux.com.au
*.brandies.com.au
*.cabriozubehoer.de
*.carsaleonline.com.au
*.chicagobreastaugmentationspecialists.com
*.cncsoftware.com.au
*.donna.com.au
*.echoviren.de
*.edugameshub.com
*.electriccooktop.com.au
*.foldingchairs.com.au
*.geburtstagspiel.de
*.glaskoerperblutung.de
*.graviditaet.de
*.groeber.eu
*.ishit.de
*.kiemenbogen.de
*.kumocolab.org
*.livingafterfaith.com
*.maunfield.sk
*.ment.es
*.muttertagsreisen.de
*.peoplewarerh.com
*.qaru.site
*.relieflogy.com
*.rough.com.au
*.scheitelpunktform.de
*.scrabblewordfind.org
*.sellenanzeige.de
*.spieldecken.de
*.sportartickel.de
*.theloftmatlock.co.uk
*.therecruiter.com.au
*.tunnelspiele.de
*.ukrjournal.com
*.vibrationssiebmaschine.de
*.winvape.net
*.wirelessspeakers.com.au
*.womenswatches.de
*.xn--babymuse-4za.de
*.xn--kalorienzhlen-jfb.de
*.xn--knpfkissen-beb.de
*.xn--lampenbgel-geb.de
*.xn--lukemie-5wa.de
*.xn--sophaguskarzinom-lwb.de
*.xn--tischkrtchen-lcb.de
*.xn--ventilationsstrung-q3b.de
aurismagnetic.co.uk
baddiehb.com
bddysf.net
bordeaux.com.au
brandies.com.au
cabriozubehoer.de
carsaleonline.com.au
chicagobreastaugmentationspecialists.com
cncsoftware.com.au
donna.com.au
echoviren.de
edugameshub.com
electriccooktop.com.au
foldingchairs.com.au
geburtstagspiel.de
glaskoerperblutung.de
graviditaet.de
groeber.eu
ishit.de
kiemenbogen.de
kumocolab.org
livingafterfaith.com
maunfield.sk
ment.es
muttertagsreisen.de
peoplewarerh.com
qaru.site
relieflogy.com
rough.com.au
scheitelpunktform.de
scrabblewordfind.org
sellenanzeige.de
spieldecken.de
sportartickel.de
theloftmatlock.co.uk
therecruiter.com.au
tunnelspiele.de
ukrjournal.com
vibrationssiebmaschine.de
winvape.net
wirelessspeakers.com.au
womenswatches.de
xn--babymuse-4za.de
xn--kalorienzhlen-jfb.de
xn--knpfkissen-beb.de
xn--lampenbgel-geb.de
xn--lukemie-5wa.de
xn--sophaguskarzinom-lwb.de
xn--tischkrtchen-lcb.de
xn--ventilationsstrung-q3b.de

Other certificates including the domain name livingafterfaith.com

(limited to 100 certificates)
livingafterfaith.com
livingafterfaith.com
clinicaltrial.com.au
livingafterfaith.com
livingafterfaith.com
livingafterfaith.com

Certificate

The complete raw certificate details for livingafterfaith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN0zCCDLugAwIBAgISBKRUFuq/vEYGxiRlV3PAeBb2MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTMxOTM3MTRaFw0yMzEyMTIxOTM3MTNaMB8xHTAbBgNVBAMT
FGxpdmluZ2FmdGVyZmFpdGguY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAzZcfVjH68w9kF+McNtNWRQZjNszZHZEDvhgRb6PbQUKy3/yWnUuc7GH+
cN6gX1kuQasj+gl0LojdlaHboAZ6Nb03J8ANIgHIxP7QmcnyEVz9DZbQaui29FbF
1dKZQchBuLWNMHDbqHxNEAplKZF+NjIdGzMe2ZjBFacostYC/2zfj2+VO5ee6z7K
feE7xfZH8LlVSzQt5HiMIOCmoX1daNCXwcwdINU2VFu3ZCS/nk4q8kKn0oBD+SiD
EpdoLmIZiHXqKxfjaViarH7HauWw+sAAwtuKetC44lvQqlLL4Hf3iW2yET8FfPEH
1/ESNlcRGINBggq6rtwLp+tvuJJY8EU1kj5xAYDCEaTTBCgi+r+ZNXgiLt5/mODA
78H/h+sHUfvjfcEDsBqAgZt3XHf9wJJ0+D/sn+o1coI8rwmDOymKlRz3Km30vvCg
MZuH82wcE1PGVH7XhTd9bA7pP8MzvJews4LGI9zQOY5ndGSq+Gp+I3+QDslDJ4pG
GJQcSxxjqbSLPzWlYLasFvhfH5IWDGxFL20ET2Ik++a8s3OPTQcUsohQ+rkZehjI
+5YNlgw3HSpwh7rS8/bvUrBiTQCv6/wGZCAleOT0cgJoXcIAK7fLwRUK6BfWl7mv
/3PjyPPPm6HY7z3x6PMVgwWa2O2WkEuZqsG1AxQbQa+Kba80IB8CAwEAAaOCCfQw
ggnwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJPvdJnL5pkbGxn1JFsY0euJtfEEw
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggf7BgNVHREEggfyMIIH7oIVKi5hdXJp
c21hZ25ldGljLmNvLnVrgg4qLmJhZGRpZWhiLmNvbYIMKi5iZGR5c2YubmV0ghEq
LmJvcmRlYXV4LmNvbS5hdYIRKi5icmFuZGllcy5jb20uYXWCEyouY2FicmlvenVi
ZWhvZXIuZGWCFiouY2Fyc2FsZW9ubGluZS5jb20uYXWCKiouY2hpY2Fnb2JyZWFz
dGF1Z21lbnRhdGlvbnNwZWNpYWxpc3RzLmNvbYIUKi5jbmNzb2Z0d2FyZS5jb20u
YXWCDiouZG9ubmEuY29tLmF1gg4qLmVjaG92aXJlbi5kZYIRKi5lZHVnYW1lc2h1
Yi5jb22CGCouZWxlY3RyaWNjb29rdG9wLmNvbS5hdYIWKi5mb2xkaW5nY2hhaXJz
LmNvbS5hdYIUKi5nZWJ1cnRzdGFnc3BpZWwuZGWCFyouZ2xhc2tvZXJwZXJibHV0
dW5nLmRlghAqLmdyYXZpZGl0YWV0LmRlggwqLmdyb2ViZXIuZXWCCiouaXNoaXQu
ZGWCECoua2llbWVuYm9nZW4uZGWCDyoua3Vtb2NvbGFiLm9yZ4IWKi5saXZpbmdh
ZnRlcmZhaXRoLmNvbYIOKi5tYXVuZmllbGQuc2uCCSoubWVudC5lc4IVKi5tdXR0
ZXJ0YWdzcmVpc2VuLmRlghIqLnBlb3BsZXdhcmVyaC5jb22CCyoucWFydS5zaXRl
ghAqLnJlbGllZmxvZ3kuY29tgg4qLnJvdWdoLmNvbS5hdYIWKi5zY2hlaXRlbHB1
bmt0Zm9ybS5kZYIWKi5zY3JhYmJsZXdvcmRmaW5kLm9yZ4ISKi5zZWxsZW5hbnpl
aWdlLmRlghAqLnNwaWVsZGVja2VuLmRlghIqLnNwb3J0YXJ0aWNrZWwuZGWCFiou
dGhlbG9mdG1hdGxvY2suY28udWuCFSoudGhlcmVjcnVpdGVyLmNvbS5hdYIRKi50
dW5uZWxzcGllbGUuZGWCECoudWtyam91cm5hbC5jb22CGyoudmlicmF0aW9uc3Np
ZWJtYXNjaGluZS5kZYINKi53aW52YXBlLm5ldIIZKi53aXJlbGVzc3NwZWFrZXJz
LmNvbS5hdYISKi53b21lbnN3YXRjaGVzLmRlghUqLnhuLS1iYWJ5bXVzZS00emEu
ZGWCGioueG4tLWthbG9yaWVuemhsZW4tamZiLmRlghcqLnhuLS1rbnBma2lzc2Vu
LWJlYi5kZYIXKi54bi0tbGFtcGVuYmdlbC1nZWIuZGWCFCoueG4tLWx1a2VtaWUt
NXdhLmRlgh0qLnhuLS1zb3BoYWd1c2thcnppbm9tLWx3Yi5kZYIZKi54bi0tdGlz
Y2hrcnRjaGVuLWxjYi5kZYIfKi54bi0tdmVudGlsYXRpb25zc3RydW5nLXEzYi5k
ZYITYXVyaXNtYWduZXRpYy5jby51a4IMYmFkZGllaGIuY29tggpiZGR5c2YubmV0
gg9ib3JkZWF1eC5jb20uYXWCD2JyYW5kaWVzLmNvbS5hdYIRY2FicmlvenViZWhv
ZXIuZGWCFGNhcnNhbGVvbmxpbmUuY29tLmF1gihjaGljYWdvYnJlYXN0YXVnbWVu
dGF0aW9uc3BlY2lhbGlzdHMuY29tghJjbmNzb2Z0d2FyZS5jb20uYXWCDGRvbm5h
LmNvbS5hdYIMZWNob3ZpcmVuLmRlgg9lZHVnYW1lc2h1Yi5jb22CFmVsZWN0cmlj
Y29va3RvcC5jb20uYXWCFGZvbGRpbmdjaGFpcnMuY29tLmF1ghJnZWJ1cnRzdGFn
c3BpZWwuZGWCFWdsYXNrb2VycGVyYmx1dHVuZy5kZYIOZ3JhdmlkaXRhZXQuZGWC
Cmdyb2ViZXIuZXWCCGlzaGl0LmRlgg5raWVtZW5ib2dlbi5kZYINa3Vtb2NvbGFi
Lm9yZ4IUbGl2aW5nYWZ0ZXJmYWl0aC5jb22CDG1hdW5maWVsZC5za4IHbWVudC5l
c4ITbXV0dGVydGFnc3JlaXNlbi5kZYIQcGVvcGxld2FyZXJoLmNvbYIJcWFydS5z
aXRlgg5yZWxpZWZsb2d5LmNvbYIMcm91Z2guY29tLmF1ghRzY2hlaXRlbHB1bmt0
Zm9ybS5kZYIUc2NyYWJibGV3b3JkZmluZC5vcmeCEHNlbGxlbmFuemVpZ2UuZGWC
DnNwaWVsZGVja2VuLmRlghBzcG9ydGFydGlja2VsLmRlghR0aGVsb2Z0bWF0bG9j
ay5jby51a4ITdGhlcmVjcnVpdGVyLmNvbS5hdYIPdHVubmVsc3BpZWxlLmRlgg51
a3Jqb3VybmFsLmNvbYIZdmlicmF0aW9uc3NpZWJtYXNjaGluZS5kZYILd2ludmFw
ZS5uZXSCF3dpcmVsZXNzc3BlYWtlcnMuY29tLmF1ghB3b21lbnN3YXRjaGVzLmRl
ghN4bi0tYmFieW11c2UtNHphLmRlghh4bi0ta2Fsb3JpZW56aGxlbi1qZmIuZGWC
FXhuLS1rbnBma2lzc2VuLWJlYi5kZYIVeG4tLWxhbXBlbmJnZWwtZ2ViLmRlghJ4
bi0tbHVrZW1pZS01d2EuZGWCG3huLS1zb3BoYWd1c2thcnppbm9tLWx3Yi5kZYIX
eG4tLXRpc2Noa3J0Y2hlbi1sY2IuZGWCHXhuLS12ZW50aWxhdGlvbnNzdHJ1bmct
cTNiLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGKkEMnNwAA
BAMARzBFAiEAxr0pJwKCjN/sVW4wFtU8JyXbUvcEQlSzwRncFjpDYkUCIG3wZExe
UGukFadkpSpRsvgN7OZoBuGORDpdrgGWo6iZAHYAejKMVNi3LbYg6jjgUh7phBZw
MhOFTTvSK8E6V6NS61IAAAGKkEMnTAAABAMARzBFAiEAhzpEVnzs39WRmorDfMyS
JpDEflUmil9kU34E/rC07qMCIFRyNu4y7hYiTDBuLsxVSSIQ+au5lQgMcwfh0MS1
fLucMA0GCSqGSIb3DQEBCwUAA4IBAQAZj6WNrS6V1/eTNRpvWddnKfTotD/uwMHi
pOQSIRN0jRIzVb1D2SyoaDi4Vlz+rfqlsZ/r/pieUuqAZ2Ay3PSwDPmH5Yb8RlAq
vDCopmrBapiGkUxMtmCGxFL7n+Tdgqf3LNumb/kOvVJ0z2zZpouGdy9b0cYUF5XM
ZBgPQOXdBCIX4Uh5UY6Tp65knyk4Z9N7nq4ilwRp8nEG2sCo9lN40sdsZV6S5VV5
v2X0p0ImqtC4DwNbBo/TxbxI49u7EsnJRElVXMLlLOzv/R2OKiOCnvAtDCc0IcEB
HxytRbeWKUyQXPt/xJni0nZjLLknIf+srgIjuEi7icO4MnOSzIuL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404367226045526409427379211496234648344310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 19:37:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 19:37:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingafterfaith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838735337222876901222394613566772977620391429983462016015176723879151661517864306659363598482992909474197683499641657229448161979676425499479328273963670143932590671697843627203481485343045758360582461157739303286426467774734984436337891530344001405587126202527279621464584704901660251369992136409501089394248216957212173413342883440976992405244508599524350424222306539500687979181172849279081252465815659668073603578038876400929496562442418762465176490807239289839537754229074854887135618817711775387511724666926212990572956217896860554366442709843999582694703820288605840869649398691319948614181427847341300332681153758527980691054255309244332086966863626650553439060961270792497705421247721570161081651061208384753030067693147404025745940316762997780358894742884287267541763516953874493184828728401283843568300440521852143220901432478130565602020013397166570185176361732837615195052806668174588190267310252624925573552224439392445719097811879578323254886401363031962431626730642133156397473231830575275936675263360318675335201892425507550517650591330843419000732592913607225349960670690290055413962491098542857859548002019774544381384355866592136597220936468562733161488031722798049991389051339284805516514415092197151048415322143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24fbdd2672f9a646c6c67d4916c6347ae26d7c41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurismagnetic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baddiehb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bddysf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bordeaux.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabriozubehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carsaleonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicagobreastaugmentationspecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cncsoftware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donna.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echoviren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edugameshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electriccooktop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foldingchairs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geburtstagspiel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glaskoerperblutung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graviditaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groeber.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ishit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiemenbogen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kumocolab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingafterfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maunfield.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ment.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muttertagsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peoplewarerh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qaru.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relieflogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rough.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheitelpunktform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrabblewordfind.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sellenanzeige.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spieldecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportartickel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theloftmatlock.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therecruiter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tunnelspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukrjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vibrationssiebmaschine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winvape.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wirelessspeakers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womenswatches.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--babymuse-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kalorienzhlen-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--knpfkissen-beb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lampenbgel-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lukemie-5wa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sophaguskarzinom-lwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tischkrtchen-lcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ventilationsstrung-q3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurismagnetic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baddiehb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bddysf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bordeaux.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabriozubehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsaleonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagobreastaugmentationspecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cncsoftware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donna.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echoviren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edugameshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electriccooktop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foldingchairs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geburtstagspiel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaskoerperblutung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graviditaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groeber.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiemenbogen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kumocolab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingafterfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maunfield.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ment.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muttertagsreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplewarerh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaru.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relieflogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rough.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheitelpunktform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrabblewordfind.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellenanzeige.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spieldecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportartickel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theloftmatlock.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therecruiter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunnelspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukrjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibrationssiebmaschine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winvape.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirelessspeakers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenswatches.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--babymuse-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kalorienzhlen-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--knpfkissen-beb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lampenbgel-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lukemie-5wa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sophaguskarzinom-lwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tischkrtchen-lcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ventilationsstrung-q3b.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a904327370000040300473045022100c6bd292702828cdfec556e3016d53c2725db52f7044254b3c119dc163a43624502206df0644c5e506ba415a764a52a51b2f80dece66806e18e443a5dae0196a3a8990076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9043274c0000040300473045022100873a44567cecdfd5919a8ac37ccc922690c47e55268a5f64537e04feb0b4eea30220547236ee32ee16224c306e2ecc55492210f9abb995080c7307e1d0c4b57cbb9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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