tinatora.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6d:79:a8:15:26:76:11:a8:ac:08:12:c2:c0:df:76:39:1f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tinatora.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:79:a8:15:26:76:11:a8:ac:08:12:c2:c0:df:76:39:1f
Serial Number (int): 298589345112003053560698451237804354976031
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:24:2b:c9:ec:1b:65:9b:2f:1c:97:b0:54:77:6b:df:e2:e1:50:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:42:3f:aa:a7:64:f1:5b:67:61:a2:f3:c9:94:bc:a5:f7:f6:73:1e
Fingerprint (sha256): b2:aa:73:3b:eb:28:3f:a8:0e:03:2c:f6:92:1f:5f:52:81:71:a7:52:9a:da:85:9e:39:a1:37:c8:42:1c:6a:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tinatora.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tinatora.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.athenag.com
*.bestprograminglanguagefor.me
*.bestsapps.com
*.boatie.com.au
*.cardreader.co.za
*.checkershistory.com
*.constructionsupplyinc.net
*.dakryozystitis.de
*.f2ml.in
*.farshir.com
*.fitoutsolutions.com.au
*.gantert.eu
*.ggtcagba.org
*.jewal.eu
*.lovetoshoprewards.co.uk
*.mdr69.cc
*.mrsolves.com
*.mylittlekingdom.co
*.natuurwinkels.be
*.nerinaazad.cc
*.neutrophilie.de
*.noticializando.com
*.openwatch.co
*.perfectcaresalons.com
*.pesonaedusolution.com
*.pikyanga.com
*.polos.com.au
*.poolequipment.com.au
*.prebu.net
*.president-men.com
*.recentmagazine.com
*.sejongstudent.com
*.shuchstore.co.uk
*.stromabrechnungen.de
*.surveyboard.cc
*.thekicklahoma.com
*.tinatora.com
*.wohnungspflanzen.de
*.x0n0x.com
*.xn--auszugsschrnke-gib.de
*.xn--cholesterindit-iib.de
*.xn--hngeampel-v2a.de
*.xn--hpftier-n2a.de
*.xn--lid-una.de
*.xn--mikrne-eua.de
*.xn--reptilienzubehr-mtb.de
*.xn--sextauschbrse-rmb.de
*.xn--south-beach-dit-elb.de
*.xn--travestieknstler-szb.de
*.youteb.de
athenag.com
bestprograminglanguagefor.me
bestsapps.com
boatie.com.au
cardreader.co.za
checkershistory.com
constructionsupplyinc.net
dakryozystitis.de
f2ml.in
farshir.com
fitoutsolutions.com.au
gantert.eu
ggtcagba.org
jewal.eu
lovetoshoprewards.co.uk
mdr69.cc
mrsolves.com
mylittlekingdom.co
natuurwinkels.be
nerinaazad.cc
neutrophilie.de
noticializando.com
openwatch.co
perfectcaresalons.com
pesonaedusolution.com
pikyanga.com
polos.com.au
poolequipment.com.au
prebu.net
president-men.com
recentmagazine.com
sejongstudent.com
shuchstore.co.uk
stromabrechnungen.de
surveyboard.cc
thekicklahoma.com
tinatora.com
wohnungspflanzen.de
x0n0x.com
xn--auszugsschrnke-gib.de
xn--cholesterindit-iib.de
xn--hngeampel-v2a.de
xn--hpftier-n2a.de
xn--lid-una.de
xn--mikrne-eua.de
xn--reptilienzubehr-mtb.de
xn--sextauschbrse-rmb.de
xn--south-beach-dit-elb.de
xn--travestieknstler-szb.de
youteb.de

Other certificates including the domain name tinatora.com

(limited to 100 certificates)
tinatora.com
tinatora.com
tinatora.com
tinatora.com
tinatora.com

Certificate

The complete raw certificate details for tinatora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINijCCDHKgAwIBAgISA215qBUmdhGorAgSwsDfdjkfMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTExOTU0MjVaFw0yNDA2MDkxOTU0MjRaMBcxFTATBgNVBAMT
DHRpbmF0b3JhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANuZ
0ey7IilDt1epIqL0DPIgtBfEqkE2dxoKuj0aAFyvLNQI5tJNZ1lEoJ2sIQgedrEe
0yhbPaAleljMy8Thhq58r4NTTI5HCcvK6K4rTOgGBAQxNZci2kbxmbvw/sX5l0I2
59dEX3yXyvW3S3vU1cWC9ZM7vnVtcXCHCH7+02wMfwe3dcW9KEvPZ+vQ4+D/aaLp
JL2JuH2hKPEMBvlbahPd1DAQlNH4I1RRxs8ZzaaibW/SiPmPkjavWNlkLTekHnzY
XI94n6kuEKoTblD5vTAhtzBtWXLXv1o6mZqA3TmCG4Nhb2uXodLYl3sZ/HZNZsRE
5CeQpPzBGdMnG+gCUL0gN+5DlaQRgGPSzmzTYuemGTDbTx21hCeXenRUc7ebzAB7
/M7cJ7tSgkPNOwYE7qC4whdiT2pmid8u971z8E0ai3PCgVTQbHkpjeBYqT707Xce
rzxJgIL5qhqMeNJQ1/1Md8Xcle5UmRkylEY7vGqcgjEMNBFbYbzQs4Lx00HOMkan
r5DR1Jnx75NhmiriH4iiLWXx6nPWXaGxKFffCaq8nakZGyMWsWXy7BhDH7GURNQs
+EhPXFg8D2QvZx1gIme62/YHq/uEdkxMKvhO8n8zwDBGBoszL9CkDshlY0VcscGO
6oY4jUtWpMtmcgaaP5oHMnyez4QOP4jdkb7Vi1MHAgMBAAGjggmzMIIJrzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFN4kK8nsG2WbLxyXsFR3a9/i4VDqMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIHuQYDVR0RBIIHsDCCB6yCDSouYXRoZW5hZy5jb22C
HiouYmVzdHByb2dyYW1pbmdsYW5ndWFnZWZvci5tZYIPKi5iZXN0c2FwcHMuY29t
gg8qLmJvYXRpZS5jb20uYXWCEiouY2FyZHJlYWRlci5jby56YYIVKi5jaGVja2Vy
c2hpc3RvcnkuY29tghsqLmNvbnN0cnVjdGlvbnN1cHBseWluYy5uZXSCEyouZGFr
cnlvenlzdGl0aXMuZGWCCSouZjJtbC5pboINKi5mYXJzaGlyLmNvbYIYKi5maXRv
dXRzb2x1dGlvbnMuY29tLmF1ggwqLmdhbnRlcnQuZXWCDiouZ2d0Y2FnYmEub3Jn
ggoqLmpld2FsLmV1ghkqLmxvdmV0b3Nob3ByZXdhcmRzLmNvLnVrggoqLm1kcjY5
LmNjgg4qLm1yc29sdmVzLmNvbYIUKi5teWxpdHRsZWtpbmdkb20uY2+CEioubmF0
dXVyd2lua2Vscy5iZYIPKi5uZXJpbmFhemFkLmNjghEqLm5ldXRyb3BoaWxpZS5k
ZYIUKi5ub3RpY2lhbGl6YW5kby5jb22CDioub3BlbndhdGNoLmNvghcqLnBlcmZl
Y3RjYXJlc2Fsb25zLmNvbYIXKi5wZXNvbmFlZHVzb2x1dGlvbi5jb22CDioucGlr
eWFuZ2EuY29tgg4qLnBvbG9zLmNvbS5hdYIWKi5wb29sZXF1aXBtZW50LmNvbS5h
dYILKi5wcmVidS5uZXSCEyoucHJlc2lkZW50LW1lbi5jb22CFCoucmVjZW50bWFn
YXppbmUuY29tghMqLnNlam9uZ3N0dWRlbnQuY29tghIqLnNodWNoc3RvcmUuY28u
dWuCFiouc3Ryb21hYnJlY2hudW5nZW4uZGWCECouc3VydmV5Ym9hcmQuY2OCEyou
dGhla2lja2xhaG9tYS5jb22CDioudGluYXRvcmEuY29tghUqLndvaG51bmdzcGZs
YW56ZW4uZGWCCyoueDBuMHguY29tghsqLnhuLS1hdXN6dWdzc2Nocm5rZS1naWIu
ZGWCGyoueG4tLWNob2xlc3RlcmluZGl0LWlpYi5kZYIWKi54bi0taG5nZWFtcGVs
LXYyYS5kZYIUKi54bi0taHBmdGllci1uMmEuZGWCECoueG4tLWxpZC11bmEuZGWC
EyoueG4tLW1pa3JuZS1ldWEuZGWCHCoueG4tLXJlcHRpbGllbnp1YmVoci1tdGIu
ZGWCGioueG4tLXNleHRhdXNjaGJyc2Utcm1iLmRlghwqLnhuLS1zb3V0aC1iZWFj
aC1kaXQtZWxiLmRlgh0qLnhuLS10cmF2ZXN0aWVrbnN0bGVyLXN6Yi5kZYILKi55
b3V0ZWIuZGWCC2F0aGVuYWcuY29tghxiZXN0cHJvZ3JhbWluZ2xhbmd1YWdlZm9y
Lm1lgg1iZXN0c2FwcHMuY29tgg1ib2F0aWUuY29tLmF1ghBjYXJkcmVhZGVyLmNv
LnphghNjaGVja2Vyc2hpc3RvcnkuY29tghljb25zdHJ1Y3Rpb25zdXBwbHlpbmMu
bmV0ghFkYWtyeW96eXN0aXRpcy5kZYIHZjJtbC5pboILZmFyc2hpci5jb22CFmZp
dG91dHNvbHV0aW9ucy5jb20uYXWCCmdhbnRlcnQuZXWCDGdndGNhZ2JhLm9yZ4II
amV3YWwuZXWCF2xvdmV0b3Nob3ByZXdhcmRzLmNvLnVrgghtZHI2OS5jY4IMbXJz
b2x2ZXMuY29tghJteWxpdHRsZWtpbmdkb20uY2+CEG5hdHV1cndpbmtlbHMuYmWC
DW5lcmluYWF6YWQuY2OCD25ldXRyb3BoaWxpZS5kZYISbm90aWNpYWxpemFuZG8u
Y29tggxvcGVud2F0Y2guY2+CFXBlcmZlY3RjYXJlc2Fsb25zLmNvbYIVcGVzb25h
ZWR1c29sdXRpb24uY29tggxwaWt5YW5nYS5jb22CDHBvbG9zLmNvbS5hdYIUcG9v
bGVxdWlwbWVudC5jb20uYXWCCXByZWJ1Lm5ldIIRcHJlc2lkZW50LW1lbi5jb22C
EnJlY2VudG1hZ2F6aW5lLmNvbYIRc2Vqb25nc3R1ZGVudC5jb22CEHNodWNoc3Rv
cmUuY28udWuCFHN0cm9tYWJyZWNobnVuZ2VuLmRlgg5zdXJ2ZXlib2FyZC5jY4IR
dGhla2lja2xhaG9tYS5jb22CDHRpbmF0b3JhLmNvbYITd29obnVuZ3NwZmxhbnpl
bi5kZYIJeDBuMHguY29tghl4bi0tYXVzenVnc3NjaHJua2UtZ2liLmRlghl4bi0t
Y2hvbGVzdGVyaW5kaXQtaWliLmRlghR4bi0taG5nZWFtcGVsLXYyYS5kZYISeG4t
LWhwZnRpZXItbjJhLmRlgg54bi0tbGlkLXVuYS5kZYIReG4tLW1pa3JuZS1ldWEu
ZGWCGnhuLS1yZXB0aWxpZW56dWJlaHItbXRiLmRlghh4bi0tc2V4dGF1c2NoYnJz
ZS1ybWIuZGWCGnhuLS1zb3V0aC1iZWFjaC1kaXQtZWxiLmRlght4bi0tdHJhdmVz
dGlla25zdGxlci1zemIuZGWCCXlvdXRlYi5kZTATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+VqAvqdMOscUgHL
Vt0sgdm7v6s52IRzAAABji9LkjcAAAQDAEcwRQIhAKr16pukysBHiJUr/JUTB9cC
irVPK1ircs0gn2cM9xoFAiAu9a83WaKuHHAB05WpAfSExhVMxfFB+4Awdsau2Ha+
wgB3AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABji9LkkUAAAQD
AEgwRgIhAOIFTyL8YbEoFfzZagolWpoelYhPcfPMoZCB6XGuK4tEAiEAr6DIHgXZ
SZUClBP0Pn4BkCRPRE47nuZMAQqX1JZ0M/0wDQYJKoZIhvcNAQELBQADggEBAAmg
TpC5KBfZ6m6BiyPlRgKd02lUV4hrtmvQ24vrfY0F+4ieXEaEMfmofEZ7LShe2nJH
bZgaalrFbZax/RypoLISXQ4VJhTZqx5QG94qcCHwX01FZPJOWlj9+ua4BNZYCFaf
Bq8+2Thc00yIz3ScuoBXfmvOOdnZy3dcDPQMUhtkTOJ3H1UG7mPN9H8AnWVyldrl
L72em0ixriNr/O5qCa5TOnDBPIkB8Py1kzrNtsnQqzPcmWKrSctxYn1INv+J2EYe
yWHW4xHaSSMbQVoGhzTfnyBIyB/gItIDWKWqNNrCemwlULBlAqaEROvH/s0MYi6Z
6pEW+fiRr8yvaHSJGl8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298589345112003053560698451237804354976031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 19:54:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 19:54:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tinatora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895893343575812115496293871578389181583372732175938001450905721573350714983261579665049936930032645534877515540957946426863859273539903744489102128152832294521364783996799424431838717181583441276133365283806860708607017607301932733996843462986061856859024198311377094465798902065940089319924904751829760603631252875907954126453577564845696923046024744162480630479390787743633308594703172655613960796346119126374651014570045399794815289935991890646809251952458987548772343756642302100842890279928193248125759770902815322763654780511893797333126394048827012033422368990828173769984384816539943346260489286758191628107217583516147561182844506730310863610915373880130059548444765318351386194732774006984382784423385225453830854203327296172429592458301553591890198194518896505142060014830495988129793115392253983079459675617751492643977254968496393669170200437986258971537256915412505922503911831975928159550412159722312785265987055773659929033485609783231850561653208576586192194336673552540920411111023007162068043024291906143528684491199827974477805915149342547855703112064830622111360387210441995291151439891904282601870881859611465167081561036335756787335716260561715960526392286689933905165712736376084813292980549981022736599438087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de242bc9ec1b659b2f1c97b054776bdfe2e150ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1968 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athenag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestprograminglanguagefor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardreader.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkershistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constructionsupplyinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dakryozystitis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f2ml.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farshir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitoutsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gantert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggtcagba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewal.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovetoshoprewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdr69.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrsolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylittlekingdom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natuurwinkels.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nerinaazad.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neutrophilie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noticializando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openwatch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectcaresalons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pesonaedusolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pikyanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poolequipment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prebu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.president-men.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recentmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sejongstudent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuchstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromabrechnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveyboard.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekicklahoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinatora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wohnungspflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x0n0x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--auszugsschrnke-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--cholesterindit-iib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hngeampel-v2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hpftier-n2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lid-una.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mikrne-eua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--reptilienzubehr-mtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sextauschbrse-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--south-beach-dit-elb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--travestieknstler-szb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youteb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestprograminglanguagefor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardreader.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkershistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructionsupplyinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakryozystitis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f2ml.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farshir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitoutsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gantert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggtcagba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewal.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovetoshoprewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdr69.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylittlekingdom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natuurwinkels.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerinaazad.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutrophilie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticializando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openwatch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectcaresalons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pesonaedusolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikyanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolequipment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'president-men.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recentmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sejongstudent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuchstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromabrechnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveyboard.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekicklahoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinatora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnungspflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x0n0x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--auszugsschrnke-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cholesterindit-iib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hngeampel-v2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hpftier-n2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lid-una.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mikrne-eua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--reptilienzubehr-mtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sextauschbrse-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--south-beach-dit-elb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--travestieknstler-szb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youteb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2f4b92370000040300473045022100aaf5ea9ba4cac04788952bfc951307d7028ab54f2b58ab72cd209f670cf71a0502202ef5af3759a2ae1c7001d395a901f484c6154cc5f141fb803076c6aed876bec2007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e2f4b92450000040300483046022100e2054f22fc61b12815fcd96a0a255a9a1e95884f71f3cca19081e971ae2b8b44022100afa0c81e05d94995029413f43e7e0190244f444e3b9ee64c010a97d4967433fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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