johnjenningsmusic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5a:81:8b:d3:39:2c:73:0e:a4:c5:de:b5:eb:6f:c0:bd:77 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=johnjenningsmusic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:81:8b:d3:39:2c:73:0e:a4:c5:de:b5:eb:6f:c0:bd:77
Serial Number (int): 379246753174763226856713845911593219571063
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:df:af:fa:ac:81:5e:dd:33:73:32:37:49:52:a2:21:88:08:91:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:86:ec:90:8b:62:a0:20:05:33:dc:40:7a:47:0b:3f:01:64:6f:13
Fingerprint (sha256): b1:8a:c7:81:75:74:48:f1:96:16:a8:2f:08:6a:3a:2a:e6:a9:68:7e:7a:d0:f5:5d:4a:66:23:18:b7:67:1a:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate johnjenningsmusic.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnjenningsmusic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.111cai.cn
*.acquistainsicurezza.com
*.advaybajpai.me
*.applewangxin.com
*.avtt5.info
*.barratijuca.com
*.bigfanmovie.com
*.biudy.com
*.brooklineopenstudios.com
*.celm34.net
*.cenamps.com
*.cpge-alcachy.com
*.dirtyteenporn.top
*.eurocraftupvc.com
*.fivecondos.com
*.flawlessgemcleaning.com
*.fororeptiles.org
*.govtjobalert.net
*.hersubenoarief.com
*.intirestaurantla.com
*.iqe.au
*.jilbabksa.com
*.johnjenningsmusic.com
*.katy160.com
*.kimoracochran.com
*.knockouts.au
*.kopfrechenaufgaben.de
*.medicomtoys.com
*.mhoy.com
*.mydavidweeklyhomes.com
*.northtexasmainecoon.com
*.oceanaccess.com
*.oceanacondos.com
*.paulwisebeats.com
*.pineappleelectronicsllc.com
*.pinoyovies.es
*.promogeeksmedia.com
*.raeandrowsilicones.com
*.reizstrombehandlung.de
*.robertwschmidtco.com
*.skysushiedh.com
*.sminkebeauty.com
*.southbayrentals.com
*.sqy.au
*.upxplore.me
*.vanderbiltgrace.com
*.watchtomovies.com
*.xpeb.com
*.xscape.cc
*.zjrcw.cc
111cai.cn
acquistainsicurezza.com
advaybajpai.me
applewangxin.com
avtt5.info
barratijuca.com
bigfanmovie.com
biudy.com
brooklineopenstudios.com
celm34.net
cenamps.com
cpge-alcachy.com
dirtyteenporn.top
eurocraftupvc.com
fivecondos.com
flawlessgemcleaning.com
fororeptiles.org
govtjobalert.net
hersubenoarief.com
intirestaurantla.com
iqe.au
jilbabksa.com
johnjenningsmusic.com
katy160.com
kimoracochran.com
knockouts.au
kopfrechenaufgaben.de
medicomtoys.com
mhoy.com
mydavidweeklyhomes.com
northtexasmainecoon.com
oceanaccess.com
oceanacondos.com
paulwisebeats.com
pineappleelectronicsllc.com
pinoyovies.es
promogeeksmedia.com
raeandrowsilicones.com
reizstrombehandlung.de
robertwschmidtco.com
skysushiedh.com
sminkebeauty.com
southbayrentals.com
sqy.au
upxplore.me
vanderbiltgrace.com
watchtomovies.com
xpeb.com
xscape.cc
zjrcw.cc

Other certificates including the domain name johnjenningsmusic.com

(limited to 100 certificates)
greenvillehumane.org
pokemaniac.net
pokemaniac.net
pokemaniac.net
mjj.de
pokemaniac.net
johnjenningsmusic.com
johnjenningsmusic.com
pokemaniac.net

Certificate

The complete raw certificate details for johnjenningsmusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINLTCCDBWgAwIBAgISBFqBi9M5LHMOpMXetetvwL13MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTIyMDMxNDdaFw0yNDAxMTAyMDMxNDZaMCAxHjAcBgNVBAMT
FWpvaG5qZW5uaW5nc211c2ljLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBALcbN/k06DPNuljKc+0l+jIYOzGVvhCnwlet18IylkAI9F01Efa6lb82
nfm2SWVgTMxDTTcaqJ3/d5pExV5vxwdXI4C2TmFW1he9dqIMVoBXI9x29QlZE0rC
wiufihCi3dkgnraBLH+e9AcF/omgplOxuHDJo/s2jt9w6Rm9aCDv3vCafSrc5l0O
oOFoaQeJ7S+zX8izcSa6VX12ekjfQbPDyqBX2wNyJ4k/LhfnKge0jBOsPGV/S8Ci
K4dK2xxOpZJqKKMBv0Ge+S+71r5ydcEwyLhRsJhRdhm58/u8lT8F2WUGiOaNjWva
bVqmUmjXtYFXqJqRX4y8G1dD/KASC8NdNvmISfD0sHg8IioG+6Ke0pUkCoLFfUWz
tslLJwi8nx9ZjTiThdGmems4FrXXtz9OsWhBOtcmPmmtzM2WNY+bOQ9CJR92bguw
T6mOmniGCaJuTvt5pCKnhRxl85Jv/Corxb6TLR5HNYVy4WyLiZhqSsCCExeFtq8w
6xDtnQDZBY5Tljw5yukHgHQz4Yz/5kditLMwNd+Bbt111dYNOLZSmtuDPAa+La3Y
CoJqsinViSUFKp2EK8Wo95SPcFDYhNCpXQkEH/J4K+9fXFdGRCFNiAvzxRQgVvy+
ofyEuu1qXtct0UzaKmf0rIykK4X545cTpn2ugZsKbrU/WEUn0PmFAgMBAAGjgglN
MIIJSTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFArfr/qsgV7dM3MyN0lSoiGICJEG
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIHUwYDVR0RBIIHSjCCB0aCCyouMTEx
Y2FpLmNughkqLmFjcXVpc3RhaW5zaWN1cmV6emEuY29tghAqLmFkdmF5YmFqcGFp
Lm1lghIqLmFwcGxld2FuZ3hpbi5jb22CDCouYXZ0dDUuaW5mb4IRKi5iYXJyYXRp
anVjYS5jb22CESouYmlnZmFubW92aWUuY29tggsqLmJpdWR5LmNvbYIaKi5icm9v
a2xpbmVvcGVuc3R1ZGlvcy5jb22CDCouY2VsbTM0Lm5ldIINKi5jZW5hbXBzLmNv
bYISKi5jcGdlLWFsY2FjaHkuY29tghMqLmRpcnR5dGVlbnBvcm4udG9wghMqLmV1
cm9jcmFmdHVwdmMuY29tghAqLmZpdmVjb25kb3MuY29tghkqLmZsYXdsZXNzZ2Vt
Y2xlYW5pbmcuY29tghIqLmZvcm9yZXB0aWxlcy5vcmeCEiouZ292dGpvYmFsZXJ0
Lm5ldIIUKi5oZXJzdWJlbm9hcmllZi5jb22CFiouaW50aXJlc3RhdXJhbnRsYS5j
b22CCCouaXFlLmF1gg8qLmppbGJhYmtzYS5jb22CFyouam9obmplbm5pbmdzbXVz
aWMuY29tgg0qLmthdHkxNjAuY29tghMqLmtpbW9yYWNvY2hyYW4uY29tgg4qLmtu
b2Nrb3V0cy5hdYIXKi5rb3BmcmVjaGVuYXVmZ2FiZW4uZGWCESoubWVkaWNvbXRv
eXMuY29tggoqLm1ob3kuY29tghgqLm15ZGF2aWR3ZWVrbHlob21lcy5jb22CGSou
bm9ydGh0ZXhhc21haW5lY29vbi5jb22CESoub2NlYW5hY2Nlc3MuY29tghIqLm9j
ZWFuYWNvbmRvcy5jb22CEyoucGF1bHdpc2ViZWF0cy5jb22CHSoucGluZWFwcGxl
ZWxlY3Ryb25pY3NsbGMuY29tgg8qLnBpbm95b3ZpZXMuZXOCFSoucHJvbW9nZWVr
c21lZGlhLmNvbYIYKi5yYWVhbmRyb3dzaWxpY29uZXMuY29tghgqLnJlaXpzdHJv
bWJlaGFuZGx1bmcuZGWCFioucm9iZXJ0d3NjaG1pZHRjby5jb22CESouc2t5c3Vz
aGllZGguY29tghIqLnNtaW5rZWJlYXV0eS5jb22CFSouc291dGhiYXlyZW50YWxz
LmNvbYIIKi5zcXkuYXWCDSoudXB4cGxvcmUubWWCFSoudmFuZGVyYmlsdGdyYWNl
LmNvbYITKi53YXRjaHRvbW92aWVzLmNvbYIKKi54cGViLmNvbYILKi54c2NhcGUu
Y2OCCiouempyY3cuY2OCCTExMWNhaS5jboIXYWNxdWlzdGFpbnNpY3VyZXp6YS5j
b22CDmFkdmF5YmFqcGFpLm1lghBhcHBsZXdhbmd4aW4uY29tggphdnR0NS5pbmZv
gg9iYXJyYXRpanVjYS5jb22CD2JpZ2Zhbm1vdmllLmNvbYIJYml1ZHkuY29tghhi
cm9va2xpbmVvcGVuc3R1ZGlvcy5jb22CCmNlbG0zNC5uZXSCC2NlbmFtcHMuY29t
ghBjcGdlLWFsY2FjaHkuY29tghFkaXJ0eXRlZW5wb3JuLnRvcIIRZXVyb2NyYWZ0
dXB2Yy5jb22CDmZpdmVjb25kb3MuY29tghdmbGF3bGVzc2dlbWNsZWFuaW5nLmNv
bYIQZm9yb3JlcHRpbGVzLm9yZ4IQZ292dGpvYmFsZXJ0Lm5ldIISaGVyc3ViZW5v
YXJpZWYuY29tghRpbnRpcmVzdGF1cmFudGxhLmNvbYIGaXFlLmF1gg1qaWxiYWJr
c2EuY29tghVqb2huamVubmluZ3NtdXNpYy5jb22CC2thdHkxNjAuY29tghFraW1v
cmFjb2NocmFuLmNvbYIMa25vY2tvdXRzLmF1ghVrb3BmcmVjaGVuYXVmZ2FiZW4u
ZGWCD21lZGljb210b3lzLmNvbYIIbWhveS5jb22CFm15ZGF2aWR3ZWVrbHlob21l
cy5jb22CF25vcnRodGV4YXNtYWluZWNvb24uY29tgg9vY2VhbmFjY2Vzcy5jb22C
EG9jZWFuYWNvbmRvcy5jb22CEXBhdWx3aXNlYmVhdHMuY29tghtwaW5lYXBwbGVl
bGVjdHJvbmljc2xsYy5jb22CDXBpbm95b3ZpZXMuZXOCE3Byb21vZ2Vla3NtZWRp
YS5jb22CFnJhZWFuZHJvd3NpbGljb25lcy5jb22CFnJlaXpzdHJvbWJlaGFuZGx1
bmcuZGWCFHJvYmVydHdzY2htaWR0Y28uY29tgg9za3lzdXNoaWVkaC5jb22CEHNt
aW5rZWJlYXV0eS5jb22CE3NvdXRoYmF5cmVudGFscy5jb22CBnNxeS5hdYILdXB4
cGxvcmUubWWCE3ZhbmRlcmJpbHRncmFjZS5jb22CEXdhdGNodG9tb3ZpZXMuY29t
ggh4cGViLmNvbYIJeHNjYXBlLmNjggh6anJjdy5jYzATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ADtTd3U+LbmAToswWwb+QDtn
2E/D9Me9AA0tcm/h+tQXAAABiyXNg/UAAAQDAEgwRgIhAIirlb9a3ixzm3UAYgsk
Hwmm6Frruz/ZGEm2fOLYXmdlAiEAngOeZWU3VkNd5mGoJTgCjiG6ZbfKfIt7hCG+
IiTsK2QAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYslzYPX
AAAEAwBHMEUCIHQZZbHK0KwsVFNTo2l681/aMUMvP15loQ52dRDXmBEiAiEAuZB9
8fC+gSPqiglw/Z9wFHPcXyZoxaO3rMyt12BWh4QwDQYJKoZIhvcNAQELBQADggEB
AJYfihPcBShYP/cYvCUwW67/Sg9zrSYb+LHQ5MK9o016MCOPYOEODvwe/jDMoowy
nKrW3fe0zb4LlVpn3BfLaVnVHEzVm0QyPpzAO+g/DsThWn0lT4YqxjhArwrEA0SY
Vv5Vm/QTCIc09tt18ITvRDLc8+6dcbFscUPrDZnCY2EZF9TTBrpSIZ039KQo/WlW
SiBLKNMzAxAzholIQTYyRi6E5NglT/DXFLmOp6Gp9XtkbpyPsX4LiYw14lJazeKh
8CzV2jah3P547n9AO0/sHFRdL7t/f59p9wa6cr2D0/0MGqQInf2xt91lBm+DICro
QMLUsdweX0HFXvOxv2CGe2Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379246753174763226856713845911593219571063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 20:31:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 20:31:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnjenningsmusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747008623780060597553580387065596963448861255239342602742771607091652638740502940068423196783404152232137343956092553348809460966780424636608414076760012588264699829113864134599813969538495738295195709560791579850197275759208794793398860678369852573406337332132097206318072134966184446528845441030270758000350151439947558697466190995901966003623923154426015416739143652604400766854324183907076827696757046327902265785747151921178440770309316666049907773089175312897349144053277230143491276754402337626556685106414819914865418381787365542788562956802211616403535547816767046843504108630007402778962018211360811836531588170885608439502665069224092795533813491470181432838865301377745314928807306782224747187648879935102890025502160721389441809113087880321790317325889474402574212923380660064625494707671455847886461884918259905161423367544062829743329587861763128081938106664850242527944315025234576001117009783038525740157120807544592802286370516959639595618481577373751003061469564093760761036979284439334797518369918463424622821837295958309367652094200658211507149369069004459223290485670290565749080370669258609840927945311304040233159174868780890588190450521274767389978406864196903305612822243577007367863709412271693300812020101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0adfaffaac815edd337332374952a22188089106
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1866 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.111cai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acquistainsicurezza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advaybajpai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applewangxin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avtt5.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barratijuca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigfanmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brooklineopenstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celm34.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cenamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpge-alcachy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dirtyteenporn.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurocraftupvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fivecondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flawlessgemcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fororeptiles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govtjobalert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hersubenoarief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intirestaurantla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iqe.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jilbabksa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnjenningsmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katy160.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimoracochran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knockouts.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kopfrechenaufgaben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicomtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydavidweeklyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northtexasmainecoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oceanaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oceanacondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paulwisebeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pineappleelectronicsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinoyovies.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promogeeksmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raeandrowsilicones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reizstrombehandlung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robertwschmidtco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skysushiedh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sminkebeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southbayrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upxplore.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanderbiltgrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchtomovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xpeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xscape.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zjrcw.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '111cai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquistainsicurezza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advaybajpai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applewangxin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtt5.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barratijuca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigfanmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklineopenstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celm34.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cenamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpge-alcachy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtyteenporn.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurocraftupvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivecondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flawlessgemcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fororeptiles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govtjobalert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hersubenoarief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intirestaurantla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqe.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jilbabksa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnjenningsmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katy160.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimoracochran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knockouts.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kopfrechenaufgaben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicomtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydavidweeklyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northtexasmainecoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanacondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulwisebeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pineappleelectronicsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinoyovies.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promogeeksmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raeandrowsilicones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reizstrombehandlung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertwschmidtco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skysushiedh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sminkebeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbayrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upxplore.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanderbiltgrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchtomovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xscape.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zjrcw.cc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b25cd83f5000004030048304602210088ab95bf5ade2c739b7500620b241f09a6e85aebbb3fd91849b67ce2d85e67650221009e039e65653756435de661a82538028e21ba65b7ca7c8b7b8421be2224ec2b64007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b25cd83d700000403004730450220741965b1cad0ac2c545353a3697af35fda31432f3f5e65a10e767510d7981122022100b9907df1f0be8123ea8a0970fd9f701473dc5f2668c5a3b7acccadd760568784
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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