marksapplianceok.com
Issued by R3
About this certificate
This digital certificate with serial number 04:d6:26:cc:eb:84:b3:b1:f8:e8:ff:b9:5e:b6:be:a2:e3:00 was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=marksapplianceok.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:d6:26:cc:eb:84:b3:b1:f8:e8:ff:b9:5e:b6:be:a2:e3:00Serial Number (int): 421321144917400772957762822876950339707648
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 74:a0:eb:76:9a:e3:d5:94:44:c0:61:50:96:aa:48:45:1f:78:60:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 85:8b:e2:e8:2c:e6:c5:28:6a:63:c2:c1:94:96:c2:93:3b:aa:63:46
Fingerprint (sha256): b1:1e:48:58:98:c3:d3:5c:a7:74:2b:37:44:71:c2:6a:ce:ac:64:6c:43:2d:9b:78:7b:af:a9:99:5d:9d:59:fc
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate marksapplianceok.com
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for marksapplianceok.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.16h00min.de
*.190ml.de
*.6cueca.de
*.acendemos.de
*.affiliatemarketingservice.com
*.atozanimalcare.com
*.bitcoinbrokers.com
*.cabecera.de
*.campbellhausfield.com
*.circlepizza.com
*.coinleasing.com
*.com2scans.com
*.dancegreetings.de
*.dl-adner.de
*.elaborazione.com
*.facetas.com
*.flagshipcompanies.com
*.freemontana.com
*.gymsets.com.au
*.kamin-ofen-feuer-kraus.de
*.kewen.com
*.kladd.com
*.lacasadearte.com
*.marksapplianceok.com
*.meduri.com
*.migliorati.com
*.mycoradar.de
*.myvideoplayer.com
*.nagerbande.de
*.netgonasia.com
*.netwap.com
*.pesquei.cc
*.prestame.com
*.puertoricodating.com
*.radiologie-leipzig-schoenefeld.de
*.reshetar.com
*.secundario.online
*.surgewire.de
*.teneri.com
*.thebighorn.com
*.thefamilyattic.com
*.uchio.com
*.uchuu.com
*.vanhofen.de
*.varughese.com
*.vebitcoin.co
*.vetfinder.com.au
*.wollert-malente.de
*.zrak.com
*.zxez.com
16h00min.de
190ml.de
6cueca.de
acendemos.de
affiliatemarketingservice.com
atozanimalcare.com
bitcoinbrokers.com
cabecera.de
campbellhausfield.com
circlepizza.com
coinleasing.com
com2scans.com
dancegreetings.de
dl-adner.de
elaborazione.com
facetas.com
flagshipcompanies.com
freemontana.com
gymsets.com.au
kamin-ofen-feuer-kraus.de
kewen.com
kladd.com
lacasadearte.com
marksapplianceok.com
meduri.com
migliorati.com
mycoradar.de
myvideoplayer.com
nagerbande.de
netgonasia.com
netwap.com
pesquei.cc
prestame.com
puertoricodating.com
radiologie-leipzig-schoenefeld.de
reshetar.com
secundario.online
surgewire.de
teneri.com
thebighorn.com
thefamilyattic.com
uchio.com
uchuu.com
vanhofen.de
varughese.com
vebitcoin.co
vetfinder.com.au
wollert-malente.de
zrak.com
zxez.com
*.190ml.de
*.6cueca.de
*.acendemos.de
*.affiliatemarketingservice.com
*.atozanimalcare.com
*.bitcoinbrokers.com
*.cabecera.de
*.campbellhausfield.com
*.circlepizza.com
*.coinleasing.com
*.com2scans.com
*.dancegreetings.de
*.dl-adner.de
*.elaborazione.com
*.facetas.com
*.flagshipcompanies.com
*.freemontana.com
*.gymsets.com.au
*.kamin-ofen-feuer-kraus.de
*.kewen.com
*.kladd.com
*.lacasadearte.com
*.marksapplianceok.com
*.meduri.com
*.migliorati.com
*.mycoradar.de
*.myvideoplayer.com
*.nagerbande.de
*.netgonasia.com
*.netwap.com
*.pesquei.cc
*.prestame.com
*.puertoricodating.com
*.radiologie-leipzig-schoenefeld.de
*.reshetar.com
*.secundario.online
*.surgewire.de
*.teneri.com
*.thebighorn.com
*.thefamilyattic.com
*.uchio.com
*.uchuu.com
*.vanhofen.de
*.varughese.com
*.vebitcoin.co
*.vetfinder.com.au
*.wollert-malente.de
*.zrak.com
*.zxez.com
16h00min.de
190ml.de
6cueca.de
acendemos.de
affiliatemarketingservice.com
atozanimalcare.com
bitcoinbrokers.com
cabecera.de
campbellhausfield.com
circlepizza.com
coinleasing.com
com2scans.com
dancegreetings.de
dl-adner.de
elaborazione.com
facetas.com
flagshipcompanies.com
freemontana.com
gymsets.com.au
kamin-ofen-feuer-kraus.de
kewen.com
kladd.com
lacasadearte.com
marksapplianceok.com
meduri.com
migliorati.com
mycoradar.de
myvideoplayer.com
nagerbande.de
netgonasia.com
netwap.com
pesquei.cc
prestame.com
puertoricodating.com
radiologie-leipzig-schoenefeld.de
reshetar.com
secundario.online
surgewire.de
teneri.com
thebighorn.com
thefamilyattic.com
uchio.com
uchuu.com
vanhofen.de
varughese.com
vebitcoin.co
vetfinder.com.au
wollert-malente.de
zrak.com
zxez.com
Other certificates including the domain name marksapplianceok.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for marksapplianceok.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMqDCCC5CgAwIBAgISBNYmzOuEs7H46P+5Xra+ouMAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTQyMjEzNDNaFw0yNDA4MTIyMjEzNDJaMB8xHTAbBgNVBAMT FG1hcmtzYXBwbGlhbmNlb2suY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAwv1MCbkfmPIGMvwCDWu2szso/shxHVPNQLCPw7ZeHyTbFTuwQ6JqMHJ1 mZsLLnCJGnetduk4mVqtxRI7vY0615ZuSsrBrIyPg5xC6nZ3Cvl+R7PUhmLwtp+G RUVDaT4CP+jHHfxe3k9NNQ0xO94jsDv6JS/gNeMB1dVOSmWGHZIOJx6vDOowoX5N hLMzD8BupKhfpmXM+HL5un3b4wgtPsZQvg9uZuBCr17zHOnv18Ixbj12jV1w3PwM LQF+2GwlG/w5rbAqKCujDWjYJhdT5gfbUCkVzLJRM5Ee8JWRUYC8E96BjxlxG0I/ NK2+Ts85DyLuKSUJzdC0Nk4mdCpfSf6zGqdQc6IwJ2X9JGpLFKUh2p8HTUxh1ZcP a+KU2SlPJg/eOgZz5flw69CTImeJjsnIIhbNcXMTqBNXiqcd9IlxU1n9FleYi9r2 PG2oqxerQa3Jhmw5KvQb0VADg7UVLnqVDK66olJdmtE6aVOugsZTxttqt7GoV/bo hoXtQ7j7vO/o8e+cPHYtS/ardPj8RRAPlReAZcyfOJ5yK9smNqh/Az3F4TLFl39p eP5PT2Ig9KGYe/R/Iv8cf0smkiWpxyMm/PN3r1DWWv1gMdvwVqxiY1sqrobOM5dF HsgRvTzZzqEwbkimiCNfxurRT8ew8zUIxQDov0dRbmk8W+Grpp8CAwEAAaOCCMkw ggjFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUdKDrdprj1ZREwGFQlqpIRR94YNww HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggbRBgNVHREEggbIMIIGxIINKi4xNmgw MG1pbi5kZYIKKi4xOTBtbC5kZYILKi42Y3VlY2EuZGWCDiouYWNlbmRlbW9zLmRl gh8qLmFmZmlsaWF0ZW1hcmtldGluZ3NlcnZpY2UuY29tghQqLmF0b3phbmltYWxj YXJlLmNvbYIUKi5iaXRjb2luYnJva2Vycy5jb22CDSouY2FiZWNlcmEuZGWCFyou Y2FtcGJlbGxoYXVzZmllbGQuY29tghEqLmNpcmNsZXBpenphLmNvbYIRKi5jb2lu bGVhc2luZy5jb22CDyouY29tMnNjYW5zLmNvbYITKi5kYW5jZWdyZWV0aW5ncy5k ZYINKi5kbC1hZG5lci5kZYISKi5lbGFib3JhemlvbmUuY29tgg0qLmZhY2V0YXMu Y29tghcqLmZsYWdzaGlwY29tcGFuaWVzLmNvbYIRKi5mcmVlbW9udGFuYS5jb22C ECouZ3ltc2V0cy5jb20uYXWCGyoua2FtaW4tb2Zlbi1mZXVlci1rcmF1cy5kZYIL Ki5rZXdlbi5jb22CCyoua2xhZGQuY29tghIqLmxhY2FzYWRlYXJ0ZS5jb22CFiou bWFya3NhcHBsaWFuY2Vvay5jb22CDCoubWVkdXJpLmNvbYIQKi5taWdsaW9yYXRp LmNvbYIOKi5teWNvcmFkYXIuZGWCEyoubXl2aWRlb3BsYXllci5jb22CDyoubmFn ZXJiYW5kZS5kZYIQKi5uZXRnb25hc2lhLmNvbYIMKi5uZXR3YXAuY29tggwqLnBl c3F1ZWkuY2OCDioucHJlc3RhbWUuY29tghYqLnB1ZXJ0b3JpY29kYXRpbmcuY29t giMqLnJhZGlvbG9naWUtbGVpcHppZy1zY2hvZW5lZmVsZC5kZYIOKi5yZXNoZXRh ci5jb22CEyouc2VjdW5kYXJpby5vbmxpbmWCDiouc3VyZ2V3aXJlLmRlggwqLnRl bmVyaS5jb22CECoudGhlYmlnaG9ybi5jb22CFCoudGhlZmFtaWx5YXR0aWMuY29t ggsqLnVjaGlvLmNvbYILKi51Y2h1dS5jb22CDSoudmFuaG9mZW4uZGWCDyoudmFy dWdoZXNlLmNvbYIOKi52ZWJpdGNvaW4uY2+CEioudmV0ZmluZGVyLmNvbS5hdYIU Ki53b2xsZXJ0LW1hbGVudGUuZGWCCiouenJhay5jb22CCiouenhlei5jb22CCzE2 aDAwbWluLmRlgggxOTBtbC5kZYIJNmN1ZWNhLmRlggxhY2VuZGVtb3MuZGWCHWFm ZmlsaWF0ZW1hcmtldGluZ3NlcnZpY2UuY29tghJhdG96YW5pbWFsY2FyZS5jb22C EmJpdGNvaW5icm9rZXJzLmNvbYILY2FiZWNlcmEuZGWCFWNhbXBiZWxsaGF1c2Zp ZWxkLmNvbYIPY2lyY2xlcGl6emEuY29tgg9jb2lubGVhc2luZy5jb22CDWNvbTJz Y2Fucy5jb22CEWRhbmNlZ3JlZXRpbmdzLmRlggtkbC1hZG5lci5kZYIQZWxhYm9y YXppb25lLmNvbYILZmFjZXRhcy5jb22CFWZsYWdzaGlwY29tcGFuaWVzLmNvbYIP ZnJlZW1vbnRhbmEuY29tgg5neW1zZXRzLmNvbS5hdYIZa2FtaW4tb2Zlbi1mZXVl ci1rcmF1cy5kZYIJa2V3ZW4uY29tgglrbGFkZC5jb22CEGxhY2FzYWRlYXJ0ZS5j b22CFG1hcmtzYXBwbGlhbmNlb2suY29tggptZWR1cmkuY29tgg5taWdsaW9yYXRp LmNvbYIMbXljb3JhZGFyLmRlghFteXZpZGVvcGxheWVyLmNvbYINbmFnZXJiYW5k ZS5kZYIObmV0Z29uYXNpYS5jb22CCm5ldHdhcC5jb22CCnBlc3F1ZWkuY2OCDHBy ZXN0YW1lLmNvbYIUcHVlcnRvcmljb2RhdGluZy5jb22CIXJhZGlvbG9naWUtbGVp cHppZy1zY2hvZW5lZmVsZC5kZYIMcmVzaGV0YXIuY29tghFzZWN1bmRhcmlvLm9u bGluZYIMc3VyZ2V3aXJlLmRlggp0ZW5lcmkuY29tgg50aGViaWdob3JuLmNvbYIS dGhlZmFtaWx5YXR0aWMuY29tggl1Y2hpby5jb22CCXVjaHV1LmNvbYILdmFuaG9m ZW4uZGWCDXZhcnVnaGVzZS5jb22CDHZlYml0Y29pbi5jb4IQdmV0ZmluZGVyLmNv bS5hdYISd29sbGVydC1tYWxlbnRlLmRlggh6cmFrLmNvbYIIenhlei5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBIsONr 2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY95YhpAAAAEAwBGMEQCIAk5 h5MQU1CURyIi/DMx1tvJFnYxtOlD6+SgNtWTsCXWAiBdIyeELiq03Ecl/ixQy1+G wasF3kMJUV8YDV6+kUKQqgB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs +GRuAAABj3liGj0AAAQDAEcwRQIhAPGwDQFpO79WUScDTaC6R0/pyCXxZp5mIjzk a6C7T1DgAiA8CL28pY0eH0qgrQAwANappItzNZqFWAOK0B9fOFZMeTANBgkqhkiG 9w0BAQsFAAOCAQEApPpRfUaSQl+z29oZoh200l86gqkE/hftpJ+uuvCczRPKyZWj SIFb6trfUW5E/MKacA+KLdf4xnQIrY3eM3vthsruQ12gc0Gfb5jD1pHW/fT+MJtX iF9zsxo8ga/38umVSea7ojqrmkf/LFfip5q16DpoGUxgsv9PdC0XVCsePPD21cl1 b9R+t8VOTS9DpU7kHu5niNoFkhPKhLgWm93yDh2La1hbZ1wUHmjM90Y/MRx52G9f aNHgc49f3kgTLRrxPLbfB6+zkkCEndYhE1JCiO4tzro4Jilj12HZkALpkTF2bpW4 Uun7qoIaQG3Uzavumzb48179fPERSjLM66Uhmg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwv1MCbkfmPIGMvwCDWu2 szso/shxHVPNQLCPw7ZeHyTbFTuwQ6JqMHJ1mZsLLnCJGnetduk4mVqtxRI7vY06 15ZuSsrBrIyPg5xC6nZ3Cvl+R7PUhmLwtp+GRUVDaT4CP+jHHfxe3k9NNQ0xO94j sDv6JS/gNeMB1dVOSmWGHZIOJx6vDOowoX5NhLMzD8BupKhfpmXM+HL5un3b4wgt PsZQvg9uZuBCr17zHOnv18Ixbj12jV1w3PwMLQF+2GwlG/w5rbAqKCujDWjYJhdT 5gfbUCkVzLJRM5Ee8JWRUYC8E96BjxlxG0I/NK2+Ts85DyLuKSUJzdC0Nk4mdCpf Sf6zGqdQc6IwJ2X9JGpLFKUh2p8HTUxh1ZcPa+KU2SlPJg/eOgZz5flw69CTImeJ jsnIIhbNcXMTqBNXiqcd9IlxU1n9FleYi9r2PG2oqxerQa3Jhmw5KvQb0VADg7UV LnqVDK66olJdmtE6aVOugsZTxttqt7GoV/bohoXtQ7j7vO/o8e+cPHYtS/ardPj8 RRAPlReAZcyfOJ5yK9smNqh/Az3F4TLFl39peP5PT2Ig9KGYe/R/Iv8cf0smkiWp xyMm/PN3r1DWWv1gMdvwVqxiY1sqrobOM5dFHsgRvTzZzqEwbkimiCNfxurRT8ew 8zUIxQDov0dRbmk8W+Grpp8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 421321144917400772957762822876950339707648 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 22:13:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 22:13:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marksapplianceok.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795487518331886331489877579150680300184133244486702675273721730031797023395760724806453907361247893793113293768193613086968728629322009100210128643245952256513740609351495187177994942342985717069486277683824292241383352124643357186622975504099453713968753592788088707619515703030196517528106485273891294327128877372312145558745186643018891303112045736599034505101660512797335391847630512837916430042644762692553153268191246338757019894783261870951515628693042279296654668331969389210055411978640689521410703930157038023813577253424009575176897609441799842626098667251211525656096400849716310078452114288784378705687301293303256972726005492233086333062098497175444044869031071807638736101518076551017347531789321441461492597735848489608198645930829910866157054424184144161312906773603785314699467637369363346170410387882910093301844550149795307209821684050576757595066609380020487841817017278683841333207572761216976428108917226348707511599731636414158756191076020242223439246056999328772433497640559172819156679514155088492090958943981670639793808013871881505362593304646686690327139365417930731687414938781009172355337468263170403774625370272819945997804294709688745619782527890101940128417944404899089213046687849769741011267593887 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 74a0eb769ae3d59444c0615096aa48451f7860dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1736 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.16h00min.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.190ml.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6cueca.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acendemos.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affiliatemarketingservice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atozanimalcare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinbrokers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabecera.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campbellhausfield.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circlepizza.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinleasing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.com2scans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dancegreetings.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dl-adner.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elaborazione.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facetas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flagshipcompanies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemontana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gymsets.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamin-ofen-feuer-kraus.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kewen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kladd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacasadearte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marksapplianceok.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meduri.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migliorati.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycoradar.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myvideoplayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nagerbande.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netgonasia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netwap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pesquei.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prestame.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puertoricodating.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiologie-leipzig-schoenefeld.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reshetar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secundario.online' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surgewire.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teneri.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebighorn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefamilyattic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uchio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uchuu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanhofen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varughese.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vebitcoin.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetfinder.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wollert-malente.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zrak.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zxez.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16h00min.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '190ml.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6cueca.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acendemos.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliatemarketingservice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atozanimalcare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinbrokers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabecera.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campbellhausfield.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlepizza.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinleasing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com2scans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancegreetings.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-adner.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elaborazione.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facetas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagshipcompanies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemontana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymsets.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamin-ofen-feuer-kraus.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kewen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kladd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacasadearte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marksapplianceok.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meduri.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migliorati.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycoradar.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvideoplayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagerbande.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netgonasia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netwap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pesquei.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestame.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puertoricodating.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiologie-leipzig-schoenefeld.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshetar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secundario.online' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surgewire.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teneri.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebighorn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefamilyattic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchuu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanhofen.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varughese.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vebitcoin.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetfinder.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wollert-malente.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zrak.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zxez.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f79621a40000004030046304402200939879310535094472222fc3331d6dbc9167631b4e943ebe4a036d593b025d602205d2327842e2ab4dc4725fe2c50cb5f86c1ab05de4309515f180d5ebe914290aa0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f79621a3d0000040300473045022100f1b00d01693bbf565127034da0ba474fe9c825f1669e66223ce46ba0bb4f50e002203c08bdbca58d1e1f4aa0ad003000d6a9a48b73359a8558038ad01f5f38564c79 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a4fa517d4692425fb3dbda19a21db4d25f3a82a904fe17eda49faebaf09ccd13cac995a348815beadadf516e44fcc29a700f8a2dd7f8c67408ad8dde337bed86caee435da073419f6f98c3d691d6fdf4fe309b57885f73b31a3c81aff7f2e99549e6bba23aab9a47ff2c57e2a79ab5e83a68194c60b2ff4f742d17542b1e3cf0f6d5c9756fd47eb7c54e4d2f43a54ee41eee6788da059213ca84b8169bddf20e1d8b6b585b675c141e68ccf7463f311c79d86f5f68d1e0738f5fde48132d1af13cb6df07afb39240849dd62113524288ee2dceba38262963d761d99002e99131766e95b852e9fbaa821a406dd4cdabee9b36f8f35efd7cf1114a32cceba5219a