scriptureuntangled.ca

Issued by R10

About this certificate

This digital certificate with serial number 04:0b:d5:1e:23:80:4c:94:69:d6:33:38:f3:92:55:cf:cd:fe was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=scriptureuntangled.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0b:d5:1e:23:80:4c:94:69:d6:33:38:f3:92:55:cf:cd:fe
Serial Number (int): 352475531815228494021551885651869101444606
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:a8:98:6d:41:98:65:bc:a1:26:76:cc:bb:55:cb:7f:07:1d:d0:96
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): a7:f9:4f:97:54:ab:22:d1:c3:e4:d3:96:ac:2b:aa:9d:07:6d:29:ab
Fingerprint (sha256): b9:ce:07:18:4d:58:d0:7b:cc:57:c5:6f:9d:13:0d:ee:94:df:ad:9c:92:3f:6f:9a:b2:83:83:1c:e1:6e:87:ee

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate scriptureuntangled.ca

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scriptureuntangled.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airportids.com
aislinnwaltersmusic.com
annoncesrencontre.fr
arbitragecoach.com
arbitragedaily.com
arbitragefund.co.uk
arbitrageletter.com
aspi.info
authenticatedproducts.com
bayfieldcounty.com
besamebecerril.com
blacksbuildwealth.com
bluffton.net
californiahemp.org
canopykingdom.com
cardgrading.io
cdiipropertiesllc.com
chaikapi.in
cinemasex.com
coastalsurfacesolutions.info
cobankruptcy.com
cocles-comics.com
codyarmstrong.net
ctrlpew.net
danikats.com
digital2ls.com
divergentunion.net
enerpactoolgroup.in
enerpactoolsgroup.in
englishivyremoval.org
exchangedbyfaith.church
fanstastictshirts.com
gayberhood.com
getasolarquote.com
graftoncounty.com
grandrapidsgraphics.com
greenerystudio.com
homeloansinsurance.com
hotelmga.com
houstontxroofingcompanies.com
hubbartt.com
hvacbradenton.com
hydratight.net
i-10.com
ionicclay.com
lakelandwindowwashers.com
levitrajelly.com
lgbtqtravel.app
localdealspage.com
mdmeetings.statenationals.us
meketo.net
montezumacounty.com
montrealforum.com
nano-soma.com
nomificio.com
nyspeakers.com
omeiapad.eu.omeiapad.it
originalzeolite.net
ovu.co.in
owallst.net
panamanoni.com
poisonivyremovalservice.com
premiumthemelibrary.com
privateschoolfortworth.org
privateschoolsindallas.com
raipur.info
re.vg
reidenouerfinancialgroup.com
rencontregratuite.online
restaurantmanagementcareerfairs.com
rocketclutch.info
rogue-gaming.net
rtgb.tv
sanantoniotexasschools.com
sciforafrica.org
scriptureuntangled.ca
shaadidating.in
spectrumnez.com
spicytechnologies.net
squirtmilf.com
startyourschool.com
stepdadporn.com
surplushq.com
taxadvisoryottawa.com
tescomeu.com
themunds.com
vitavibration.com
wiki.screamerfanbase.com
wildbreed.co
wildcatblockchain.net
www.ferrelux.net
wwwjpnn.com
yusniel.com

Other certificates including the domain name scriptureuntangled.ca

(limited to 100 certificates)
scriptureuntangled.ca
scriptureuntangled.ca
scriptureuntangled.ca
scriptureuntangled.ca
scriptureuntangled.ca
scriptureuntangled.ca
scriptureuntangled.ca
scriptureuntangled.ca
scriptureuntangled.ca
scriptureuntangled.ca

Certificate

The complete raw certificate details for scriptureuntangled.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL+jCCCuKgAwIBAgISBAvVHiOATJRp1jM485JVz83+MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjQwNjA4MTEwMzI0WhcNMjQwOTA2MTEwMzIzWjAgMR4wHAYDVQQD
ExVzY3JpcHR1cmV1bnRhbmdsZWQuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDNBl+NK7ebsrkp0IRNtR8IvDb6YemuxFEP6wqN11FbMh6Ftg7fwIJU
SQam8Bg8kGuQd9DWlbPJFZvQ9fzjqIzwDjRfjm91hnE/YkEYwbZ+ZpmjwVmS7EjA
VwJ/uTjtfKFuIxrO5LGRD3uJu840QONJYwwpCsCS86zVY3UNQFFf+9WmHqbXownX
DAucowsi2p6MvVB4Xx9XlkN9IMN0PNNw2KHQS2BqfNbAeZUWjw7usBNdQUvSjQUB
z5JSHSSNo53kCwRoiiBBpeLIwuir/laqV8Ep7lv9G9FNAcEzJU8vc58zr6XKfORW
h8/0mzavPpbhKXr338CdV+C69ZNCjXLZAgMBAAGjggkZMIIJFTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFJSomG1BmGW8oSZ2zLtVy38HHdCWMB8GA1UdIwQYMBaAFLu8
w0el5LypxsOkcgwQjaI14cjoMFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYW
aHR0cDovL3IxMC5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMC5p
LmxlbmNyLm9yZy8wggceBgNVHREEggcVMIIHEYIOYWlycG9ydGlkcy5jb22CF2Fp
c2xpbm53YWx0ZXJzbXVzaWMuY29tghRhbm5vbmNlc3JlbmNvbnRyZS5mcoISYXJi
aXRyYWdlY29hY2guY29tghJhcmJpdHJhZ2VkYWlseS5jb22CE2FyYml0cmFnZWZ1
bmQuY28udWuCE2FyYml0cmFnZWxldHRlci5jb22CCWFzcGkuaW5mb4IZYXV0aGVu
dGljYXRlZHByb2R1Y3RzLmNvbYISYmF5ZmllbGRjb3VudHkuY29tghJiZXNhbWVi
ZWNlcnJpbC5jb22CFWJsYWNrc2J1aWxkd2VhbHRoLmNvbYIMYmx1ZmZ0b24ubmV0
ghJjYWxpZm9ybmlhaGVtcC5vcmeCEWNhbm9weWtpbmdkb20uY29tgg5jYXJkZ3Jh
ZGluZy5pb4IVY2RpaXByb3BlcnRpZXNsbGMuY29tggtjaGFpa2FwaS5pboINY2lu
ZW1hc2V4LmNvbYIcY29hc3RhbHN1cmZhY2Vzb2x1dGlvbnMuaW5mb4IQY29iYW5r
cnVwdGN5LmNvbYIRY29jbGVzLWNvbWljcy5jb22CEWNvZHlhcm1zdHJvbmcubmV0
ggtjdHJscGV3Lm5ldIIMZGFuaWthdHMuY29tgg5kaWdpdGFsMmxzLmNvbYISZGl2
ZXJnZW50dW5pb24ubmV0ghNlbmVycGFjdG9vbGdyb3VwLmlughRlbmVycGFjdG9v
bHNncm91cC5pboIVZW5nbGlzaGl2eXJlbW92YWwub3JnghdleGNoYW5nZWRieWZh
aXRoLmNodXJjaIIVZmFuc3Rhc3RpY3RzaGlydHMuY29tgg5nYXliZXJob29kLmNv
bYISZ2V0YXNvbGFycXVvdGUuY29tghFncmFmdG9uY291bnR5LmNvbYIXZ3JhbmRy
YXBpZHNncmFwaGljcy5jb22CEmdyZWVuZXJ5c3R1ZGlvLmNvbYIWaG9tZWxvYW5z
aW5zdXJhbmNlLmNvbYIMaG90ZWxtZ2EuY29tgh1ob3VzdG9udHhyb29maW5nY29t
cGFuaWVzLmNvbYIMaHViYmFydHQuY29tghFodmFjYnJhZGVudG9uLmNvbYIOaHlk
cmF0aWdodC5uZXSCCGktMTAuY29tgg1pb25pY2NsYXkuY29tghlsYWtlbGFuZHdp
bmRvd3dhc2hlcnMuY29tghBsZXZpdHJhamVsbHkuY29tgg9sZ2J0cXRyYXZlbC5h
cHCCEmxvY2FsZGVhbHNwYWdlLmNvbYIcbWRtZWV0aW5ncy5zdGF0ZW5hdGlvbmFs
cy51c4IKbWVrZXRvLm5ldIITbW9udGV6dW1hY291bnR5LmNvbYIRbW9udHJlYWxm
b3J1bS5jb22CDW5hbm8tc29tYS5jb22CDW5vbWlmaWNpby5jb22CDm55c3BlYWtl
cnMuY29tghdvbWVpYXBhZC5ldS5vbWVpYXBhZC5pdIITb3JpZ2luYWx6ZW9saXRl
Lm5ldIIJb3Z1LmNvLmluggtvd2FsbHN0Lm5ldIIOcGFuYW1hbm9uaS5jb22CG3Bv
aXNvbml2eXJlbW92YWxzZXJ2aWNlLmNvbYIXcHJlbWl1bXRoZW1lbGlicmFyeS5j
b22CGnByaXZhdGVzY2hvb2xmb3J0d29ydGgub3Jnghpwcml2YXRlc2Nob29sc2lu
ZGFsbGFzLmNvbYILcmFpcHVyLmluZm+CBXJlLnZnghxyZWlkZW5vdWVyZmluYW5j
aWFsZ3JvdXAuY29tghhyZW5jb250cmVncmF0dWl0ZS5vbmxpbmWCI3Jlc3RhdXJh
bnRtYW5hZ2VtZW50Y2FyZWVyZmFpcnMuY29tghFyb2NrZXRjbHV0Y2guaW5mb4IQ
cm9ndWUtZ2FtaW5nLm5ldIIHcnRnYi50doIac2FuYW50b25pb3RleGFzc2Nob29s
cy5jb22CEHNjaWZvcmFmcmljYS5vcmeCFXNjcmlwdHVyZXVudGFuZ2xlZC5jYYIP
c2hhYWRpZGF0aW5nLmlugg9zcGVjdHJ1bW5lei5jb22CFXNwaWN5dGVjaG5vbG9n
aWVzLm5ldIIOc3F1aXJ0bWlsZi5jb22CE3N0YXJ0eW91cnNjaG9vbC5jb22CD3N0
ZXBkYWRwb3JuLmNvbYINc3VycGx1c2hxLmNvbYIVdGF4YWR2aXNvcnlvdHRhd2Eu
Y29tggx0ZXNjb21ldS5jb22CDHRoZW11bmRzLmNvbYIRdml0YXZpYnJhdGlvbi5j
b22CGHdpa2kuc2NyZWFtZXJmYW5iYXNlLmNvbYIMd2lsZGJyZWVkLmNvghV3aWxk
Y2F0YmxvY2tjaGFpbi5uZXSCEHd3dy5mZXJyZWx1eC5uZXSCC3d3d2pwbm4uY29t
ggt5dXNuaWVsLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAAB
j/e7ZHcAAAQDAEgwRgIhAKW/Mq47OP7Ax7QSf5s2QX+vbjys7s4A0AfspWtWegQh
AiEA7lFQPwwRPGkIJ3Ob+zoGLKjofcpKXDpNVOeij1n6s4wAdQDuzdBk1dsazsVc
t520zROiModGfLzs3sNRSFlGcR+1mwAAAY/3u2RvAAAEAwBGMEQCH3OKTR3OPoqn
0Y2HPv98xjZ3l6+6OoN3vDbych9GdlYCIQCVsaM8oBIZFzRUbIcuxGSYXdmi4BKE
EvCnVzI/cGsUUzANBgkqhkiG9w0BAQsFAAOCAQEAV6jarlUPHQTkT5HXPcHhGmjr
EecaERQkjZoelAwz5iWUH+dFCqhVb2HvcAMAPGh6nW+jheybhMZ3kyuwXA2D4fhy
V7Gouzis4jJJyqVWv5EanHUF8lUn5KTuyAaMjidcS3Vac96Sai+6zNGg3ND3t3bt
6RshPTOEfXNXHPckSXqj8NxuLDUtAEnvC/EVINDEWYUYbqTAKLxxNYuCVUtkepA1
kvFZky6zV4P4iCl4IhYXJyTqL4y8Rj/dDIyPDzWyQEvsMFSaKl6P07kPh9jEuWZa
QGenxSpWTTe6TgG4hrLPEn150Jr07plP7/BvZDvkJZVixx+dBiKLhN+GrOp98A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQZfjSu3m7K5KdCETbUf
CLw2+mHprsRRD+sKjddRWzIehbYO38CCVEkGpvAYPJBrkHfQ1pWzyRWb0PX846iM
8A40X45vdYZxP2JBGMG2fmaZo8FZkuxIwFcCf7k47XyhbiMazuSxkQ97ibvONEDj
SWMMKQrAkvOs1WN1DUBRX/vVph6m16MJ1wwLnKMLItqejL1QeF8fV5ZDfSDDdDzT
cNih0EtganzWwHmVFo8O7rATXUFL0o0FAc+SUh0kjaOd5AsEaIogQaXiyMLoq/5W
qlfBKe5b/RvRTQHBMyVPL3OfM6+lynzkVofP9Js2rz6W4Sl699/AnVfguvWTQo1y
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352475531815228494021551885651869101444606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 11:03:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 11:03:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scriptureuntangled.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25881995283686870255658153550356787426089295773417168916282941260394710427950688426012965424675745652946088386810675127999126123252751485961532150926525294340676418380286256195748142051836286334897027102101953881855850256561303750352465833509435350552272795478193385925606666522852113427311704915984678099193560237162823627496917139808802859440153327433865895922155073566168431116145817292778895713249844148436087697429632229247298166286388031584780447390411816554294396643739381018254278123609226037397506379976499733550606371540179891304875516507242877088398648746416291365884701139978811523933631821581527739626201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94a8986d419865bca12676ccbb55cb7f071dd096
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1813 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislinnwaltersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annoncesrencontre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragecoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragefund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageletter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authenticatedproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayfieldcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besamebecerril.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blacksbuildwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiahemp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canopykingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardgrading.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdiipropertiesllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaikapi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemasex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalsurfacesolutions.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobankruptcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocles-comics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codyarmstrong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrlpew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danikats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital2ls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divergentunion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolgroup.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishivyremoval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangedbyfaith.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanstastictshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayberhood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getasolarquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graftoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandrapidsgraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenerystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloansinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelmga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontxroofingcompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubbartt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacbradenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydratight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionicclay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakelandwindowwashers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levitrajelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqtravel.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localdealspage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdmeetings.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meketo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montezumacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montrealforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nano-soma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomificio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyspeakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omeiapad.eu.omeiapad.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originalzeolite.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovu.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owallst.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamanoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyremovalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumthemelibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateschoolfortworth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateschoolsindallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raipur.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 're.vg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reidenouerfinancialgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontregratuite.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantmanagementcareerfairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketclutch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogue-gaming.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtgb.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniotexasschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciforafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptureuntangled.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadidating.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumnez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicytechnologies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squirtmilf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startyourschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepdadporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surplushq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxadvisoryottawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescomeu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitavibration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.screamerfanbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildbreed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcatblockchain.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ferrelux.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwjpnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yusniel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff7bb64770000040300483046022100a5bf32ae3b38fec0c7b4127f9b36417faf6e3caceece00d007eca56b567a0421022100ee51503f0c113c690827739bfb3a062ca8e87dca4a5c3a4d54e7a28f59fab38c007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff7bb646f0000040300463044021f738a4d1dce3e8aa7d18d873eff7cc6367797afba3a8377bc36f2721f46765602210095b1a33ca012191734546c872ec464985dd9a2e0128412f0a757323f706b1453
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057a8daae550f1d04e44f91d73dc1e11a68eb11e71a1114248d9a1e940c33e625941fe7450aa8556f61ef7003003c687a9d6fa385ec9b84c677932bb05c0d83e1f87257b1a8bb38ace23249caa556bf911a9c7505f25527e4a4eec8068c8e275c4b755a73de926a2fbaccd1a0dcd0f7b776ede91b213d33847d73571cf724497aa3f0dc6e2c352d0049ef0bf11520d0c45985186ea4c028bc71358b82554b647a903592f159932eb35783f88829782216172724ea2f8cbc463fdd0c8c8f0f35b2404bec30549a2a5e8fd3b90f87d8c4b9665a4067a7c52a564d37ba4e01b886b2cf127d79d09af4ee994feff06f643be4259562c71f9d06228b84df86acea7df0