morningstarcop.com

Issued by R3

About this certificate

This digital certificate with serial number 04:89:b5:b5:5d:27:d4:af:ab:7a:2d:7c:fe:54:1a:21:14:d1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=morningstarcop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:89:b5:b5:5d:27:d4:af:ab:7a:2d:7c:fe:54:1a:21:14:d1
Serial Number (int): 395309359957597835329314937755914920334545
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:8c:3d:31:35:fd:d6:d0:bc:1b:94:91:5f:da:7c:d3:4f:b4:c7:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:76:01:77:06:06:ab:29:ee:67:63:9e:1f:84:50:9f:2a:d4:b1:bf
Fingerprint (sha256): bc:8d:ad:7e:98:19:8d:c0:dd:cc:df:01:81:33:c8:ca:6a:8f:20:8c:8a:a8:8c:13:09:44:e7:c6:d6:7d:89:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate morningstarcop.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for morningstarcop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123videos.tv
*.a9fascore.com
*.abookwormsguideto.com
*.antiques-bible.com
*.arvestnetwork.com
*.atozcss.com
*.bghqlqufo.com
*.bravotgo.com
*.capitalcityclassicbr.com
*.casacarinosa.com
*.dealleak.com
*.digibytemining.com
*.dodtxt.com
*.duocin.com
*.freepornohard.com
*.fullcirclecare.org
*.gmadealsandsteals.com
*.hamidishop.com
*.hausmaniac.com
*.hypixal.net
*.jacquieetmichelleelite.com
*.kitfutobol.com
*.litdurgy.com
*.livinginlovecourse.com
*.milunvinos.com
*.morningstarcop.com
*.mqngapark.com
*.noniderama.net
*.onetouchpost.com
*.peliculasymusicasyjuegos.com
*.phoneandroid.com
*.ppfstudiox.com
*.rsbeautyacademy.com
*.rxdipbiv.com
*.shopee.us
*.stackassisst.com
*.story-bot.com
*.t3mediaffairs.com
*.thequinnfuneral-home.com
*.truemovies.net
*.untdstatdropromuniflamtionnprpdwuhy.com
*.victorypharma.com
*.vienmekenstp.com
*.wafer-art.com
*.wwwafe.com
*.wwwgohealthprotein.info
*.wwwixbmod88.info
*.xvidirs.com
*.zappoks.com
*.zenandammo.com
123videos.tv
a9fascore.com
abookwormsguideto.com
antiques-bible.com
arvestnetwork.com
atozcss.com
bghqlqufo.com
bravotgo.com
capitalcityclassicbr.com
casacarinosa.com
dealleak.com
digibytemining.com
dodtxt.com
duocin.com
freepornohard.com
fullcirclecare.org
gmadealsandsteals.com
hamidishop.com
hausmaniac.com
hypixal.net
jacquieetmichelleelite.com
kitfutobol.com
litdurgy.com
livinginlovecourse.com
milunvinos.com
morningstarcop.com
mqngapark.com
noniderama.net
onetouchpost.com
peliculasymusicasyjuegos.com
phoneandroid.com
ppfstudiox.com
rsbeautyacademy.com
rxdipbiv.com
shopee.us
stackassisst.com
story-bot.com
t3mediaffairs.com
thequinnfuneral-home.com
truemovies.net
untdstatdropromuniflamtionnprpdwuhy.com
victorypharma.com
vienmekenstp.com
wafer-art.com
wwwafe.com
wwwgohealthprotein.info
wwwixbmod88.info
xvidirs.com
zappoks.com
zenandammo.com

Other certificates including the domain name morningstarcop.com

(limited to 100 certificates)
nodmgbq.xyz
morningstarcop.com
morningstarcop.com
ganqing5.net

Certificate

The complete raw certificate details for morningstarcop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINVDCCDDygAwIBAgISBIm1tV0n1K+rei18/lQaIRTRMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjYwNjM4NTRaFw0yNDAzMjUwNjM4NTNaMB0xGzAZBgNVBAMT
Em1vcm5pbmdzdGFyY29wLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAN/QROuclERADegM5RFnS5iZyWCK15g+7Amt+3IacOE/CgniKw7H8rLXAwCh
h8JBo6q9/OWy9BWji/K61ChSHVcm+TxCn5Wo8pH/P2sbkBuIg492ykAOgouuzrGe
39AK6hSPwpXp2x4C7cxew/ZN/1ByA/3/R7g40rIm/ZuB8SjSJfYkMLIjMKxaPs4W
BD9OJ9HJYI9lggKrpCLG8C3Do2TjJF1shta/W3or3LJF7QpwZU+k9Vw25hF4POv0
bfyd0BPFsEPDoOHHflRwXhGjq4rYXcdpplRo+EOozsAdHJYi8F6RtRUy4TsLt1w2
DVS+bdwhEdqCfg6oSZ+75ccIPDTZnaNh5bysvzJFhj0WrYAyqoXUJTL1zlPbhalN
ojgAUwB4pCQKT+OM9YMQHSJAkDbLBeAfG77V/Lht2EYRNxqbng4mNXkOWQpq/EoV
LsnG2fIDNxOdyz6mVJniNdRttTuBVRiuATEgfCQK3j7KLh6shQWvW0lee9WXJTi4
BCD/AZjqIfifDTsKwR4N9rjQD1EtuGWfMQfohis83SnmW4nuENvrpVQfX724RzI5
p8NgSyL6OEXmSomfkI0Go31EXGUGNHiPG7jI77+nmPKaM+TY7FU6Oh/1sHWXL9wg
qmKidI/0wgr6T5s/4i9IG/+3TGkiEwA1MKcSvBRlYreqsCebAgMBAAGjggl3MIIJ
czAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHGMPTE1/dbQvBuUkV/afNNPtMcGMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIHfwYDVR0RBIIHdjCCB3KCDiouMTIzdmlk
ZW9zLnR2gg8qLmE5ZmFzY29yZS5jb22CFyouYWJvb2t3b3Jtc2d1aWRldG8uY29t
ghQqLmFudGlxdWVzLWJpYmxlLmNvbYITKi5hcnZlc3RuZXR3b3JrLmNvbYINKi5h
dG96Y3NzLmNvbYIPKi5iZ2hxbHF1Zm8uY29tgg4qLmJyYXZvdGdvLmNvbYIaKi5j
YXBpdGFsY2l0eWNsYXNzaWNici5jb22CEiouY2FzYWNhcmlub3NhLmNvbYIOKi5k
ZWFsbGVhay5jb22CFCouZGlnaWJ5dGVtaW5pbmcuY29tggwqLmRvZHR4dC5jb22C
DCouZHVvY2luLmNvbYITKi5mcmVlcG9ybm9oYXJkLmNvbYIUKi5mdWxsY2lyY2xl
Y2FyZS5vcmeCFyouZ21hZGVhbHNhbmRzdGVhbHMuY29tghAqLmhhbWlkaXNob3Au
Y29tghAqLmhhdXNtYW5pYWMuY29tgg0qLmh5cGl4YWwubmV0ghwqLmphY3F1aWVl
dG1pY2hlbGxlZWxpdGUuY29tghAqLmtpdGZ1dG9ib2wuY29tgg4qLmxpdGR1cmd5
LmNvbYIYKi5saXZpbmdpbmxvdmVjb3Vyc2UuY29tghAqLm1pbHVudmlub3MuY29t
ghQqLm1vcm5pbmdzdGFyY29wLmNvbYIPKi5tcW5nYXBhcmsuY29tghAqLm5vbmlk
ZXJhbWEubmV0ghIqLm9uZXRvdWNocG9zdC5jb22CHioucGVsaWN1bGFzeW11c2lj
YXN5anVlZ29zLmNvbYISKi5waG9uZWFuZHJvaWQuY29tghAqLnBwZnN0dWRpb3gu
Y29tghUqLnJzYmVhdXR5YWNhZGVteS5jb22CDioucnhkaXBiaXYuY29tggsqLnNo
b3BlZS51c4ISKi5zdGFja2Fzc2lzc3QuY29tgg8qLnN0b3J5LWJvdC5jb22CEyou
dDNtZWRpYWZmYWlycy5jb22CGioudGhlcXVpbm5mdW5lcmFsLWhvbWUuY29tghAq
LnRydWVtb3ZpZXMubmV0gikqLnVudGRzdGF0ZHJvcHJvbXVuaWZsYW10aW9ubnBy
cGR3dWh5LmNvbYITKi52aWN0b3J5cGhhcm1hLmNvbYISKi52aWVubWVrZW5zdHAu
Y29tgg8qLndhZmVyLWFydC5jb22CDCoud3d3YWZlLmNvbYIZKi53d3dnb2hlYWx0
aHByb3RlaW4uaW5mb4ISKi53d3dpeGJtb2Q4OC5pbmZvgg0qLnh2aWRpcnMuY29t
gg0qLnphcHBva3MuY29tghAqLnplbmFuZGFtbW8uY29tggwxMjN2aWRlb3MudHaC
DWE5ZmFzY29yZS5jb22CFWFib29rd29ybXNndWlkZXRvLmNvbYISYW50aXF1ZXMt
YmlibGUuY29tghFhcnZlc3RuZXR3b3JrLmNvbYILYXRvemNzcy5jb22CDWJnaHFs
cXVmby5jb22CDGJyYXZvdGdvLmNvbYIYY2FwaXRhbGNpdHljbGFzc2ljYnIuY29t
ghBjYXNhY2FyaW5vc2EuY29tggxkZWFsbGVhay5jb22CEmRpZ2lieXRlbWluaW5n
LmNvbYIKZG9kdHh0LmNvbYIKZHVvY2luLmNvbYIRZnJlZXBvcm5vaGFyZC5jb22C
EmZ1bGxjaXJjbGVjYXJlLm9yZ4IVZ21hZGVhbHNhbmRzdGVhbHMuY29tgg5oYW1p
ZGlzaG9wLmNvbYIOaGF1c21hbmlhYy5jb22CC2h5cGl4YWwubmV0ghpqYWNxdWll
ZXRtaWNoZWxsZWVsaXRlLmNvbYIOa2l0ZnV0b2JvbC5jb22CDGxpdGR1cmd5LmNv
bYIWbGl2aW5naW5sb3ZlY291cnNlLmNvbYIObWlsdW52aW5vcy5jb22CEm1vcm5p
bmdzdGFyY29wLmNvbYINbXFuZ2FwYXJrLmNvbYIObm9uaWRlcmFtYS5uZXSCEG9u
ZXRvdWNocG9zdC5jb22CHHBlbGljdWxhc3ltdXNpY2FzeWp1ZWdvcy5jb22CEHBo
b25lYW5kcm9pZC5jb22CDnBwZnN0dWRpb3guY29tghNyc2JlYXV0eWFjYWRlbXku
Y29tggxyeGRpcGJpdi5jb22CCXNob3BlZS51c4IQc3RhY2thc3Npc3N0LmNvbYIN
c3RvcnktYm90LmNvbYIRdDNtZWRpYWZmYWlycy5jb22CGHRoZXF1aW5uZnVuZXJh
bC1ob21lLmNvbYIOdHJ1ZW1vdmllcy5uZXSCJ3VudGRzdGF0ZHJvcHJvbXVuaWZs
YW10aW9ubnBycGR3dWh5LmNvbYIRdmljdG9yeXBoYXJtYS5jb22CEHZpZW5tZWtl
bnN0cC5jb22CDXdhZmVyLWFydC5jb22CCnd3d2FmZS5jb22CF3d3d2dvaGVhbHRo
cHJvdGVpbi5pbmZvghB3d3dpeGJtb2Q4OC5pbmZvggt4dmlkaXJzLmNvbYILemFw
cG9rcy5jb22CDnplbmFuZGFtbW8uY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
2bu/qznYhHMAAAGMpQ/wAQAABAMARjBEAiArmrmKXQBn10ytL9VefnwvRIy0YYuL
VDmg1j3sxR8xeAIgO2GrDBPixdIkodKMglfy63I5LTupTLL98EHyCKqJGK8AdgAp
0DobtnSqcRzTA1tlV8FPiqeLT+g4lEnspFP5RL0kaAAAAYylD/DMAAAEAwBHMEUC
IG5YOoBmX4kNnZyitRLJZAJuQfBsdL9MFIT7aQuSRWWNAiEAiz7UUG/Mkb63emqM
uyoX4lhZk22fYxqYvaYgDp0Vt4QwDQYJKoZIhvcNAQELBQADggEBAAyToCkzp2re
CWT6WwJF0LWNqU+Qh8cSX2MjcO+bx0kqRLjucW0jpXooU6e1ruSEmZ7YdCw8ldbs
P9ZeIo0RKEoL4pFalnvkOWeHD/jV1vX9ngCu9JT5XSTLqGqKsm+x2EID/OZKcY5Z
kHDjGvR/RMJa1mRVaMcGc0Xpx3opKy9zaGSL1VPIBf7benGzRhNud7UgSTupXdoF
laxvhTL4IMJGn4rvDCGtdYSka/XwW8bbn93vsxErcYyJEe16kFOTTmOVk3sQJxfz
o9QTCxnp29XO6znyEaJECncXdJN4E+yN5gs1UbXxyZtT+uyDOLmlLhCyB0g9SavS
D8a5c5QSdO4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA39BE65yUREAN6AzlEWdL
mJnJYIrXmD7sCa37chpw4T8KCeIrDsfystcDAKGHwkGjqr385bL0FaOL8rrUKFId
Vyb5PEKflajykf8/axuQG4iDj3bKQA6Ci67OsZ7f0ArqFI/ClenbHgLtzF7D9k3/
UHID/f9HuDjSsib9m4HxKNIl9iQwsiMwrFo+zhYEP04n0clgj2WCAqukIsbwLcOj
ZOMkXWyG1r9beivcskXtCnBlT6T1XDbmEXg86/Rt/J3QE8WwQ8Og4cd+VHBeEaOr
ithdx2mmVGj4Q6jOwB0cliLwXpG1FTLhOwu3XDYNVL5t3CER2oJ+DqhJn7vlxwg8
NNmdo2HlvKy/MkWGPRatgDKqhdQlMvXOU9uFqU2iOABTAHikJApP44z1gxAdIkCQ
NssF4B8bvtX8uG3YRhE3GpueDiY1eQ5ZCmr8ShUuycbZ8gM3E53LPqZUmeI11G21
O4FVGK4BMSB8JArePsouHqyFBa9bSV571ZclOLgEIP8BmOoh+J8NOwrBHg32uNAP
US24ZZ8xB+iGKzzdKeZbie4Q2+ulVB9fvbhHMjmnw2BLIvo4ReZKiZ+QjQajfURc
ZQY0eI8buMjvv6eY8poz5NjsVTo6H/WwdZcv3CCqYqJ0j/TCCvpPmz/iL0gb/7dM
aSITADUwpxK8FGVit6qwJ5sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395309359957597835329314937755914920334545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 06:38:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 06:38:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'morningstarcop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913079628295555070909396834709779231384612053317682822396361032961577550240833610232761818620488776375633661796415806632032980823743477686909030006796672335164072406948197934060315004277498628098688704479091304986496673835886573874298154980566419742641480773172560403949149381509779309711137437125586941229459449305556874088533158537262563326882474037126330207788890337502382558220402144476022799052006079065534655770568915697617214912922773992226616363461090932210938254283282395618814725009428215923958292352129137427089659213943057061665490951973142448358701995215198844552248112378818138217523547996180729084250069304691178172032761456233223776514694878912130393707638032067514723601299701346678065796017693491763509372042841102791017837899721672986213547685055522641016676559557711673955944728086392682121025562664834558566264150252237865688161373295637631601791633827326927362230364689173597582200074412875819071401137795573657813975665522575889632925931661060266599915714723129088189803793326499792948546911175568286226794560134584010206704514068511422987581303278944697311349538619249467938779042790133273772336158660288902642781763624616190364697931854301300570043082765312017603023087747931981721310459375300385785097758619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							718c3d3135fdd6d0bc1b94915fda7cd34fb4c706
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123videos.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a9fascore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abookwormsguideto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antiques-bible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arvestnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atozcss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bghqlqufo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravotgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalcityclassicbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casacarinosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealleak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digibytemining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodtxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duocin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freepornohard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullcirclecare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmadealsandsteals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamidishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hausmaniac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypixal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacquieetmichelleelite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitfutobol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.litdurgy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livinginlovecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milunvinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morningstarcop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mqngapark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noniderama.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onetouchpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peliculasymusicasyjuegos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phoneandroid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppfstudiox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rsbeautyacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxdipbiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopee.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stackassisst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.story-bot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t3mediaffairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thequinnfuneral-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truemovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.untdstatdropromuniflamtionnprpdwuhy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorypharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vienmekenstp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wafer-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwgohealthprotein.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwixbmod88.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvidirs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zappoks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zenandammo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123videos.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a9fascore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abookwormsguideto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiques-bible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvestnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atozcss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bghqlqufo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravotgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalcityclassicbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casacarinosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealleak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digibytemining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodtxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duocin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freepornohard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullcirclecare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmadealsandsteals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamidishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hausmaniac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypixal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacquieetmichelleelite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitfutobol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litdurgy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livinginlovecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milunvinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstarcop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqngapark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noniderama.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetouchpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peliculasymusicasyjuegos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneandroid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppfstudiox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsbeautyacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxdipbiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopee.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stackassisst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'story-bot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't3mediaffairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thequinnfuneral-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truemovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untdstatdropromuniflamtionnprpdwuhy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorypharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vienmekenstp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wafer-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwgohealthprotein.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwixbmod88.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvidirs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zappoks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenandammo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca50ff001000004030046304402202b9ab98a5d0067d74cad2fd55e7e7c2f448cb4618b8b5439a0d63decc51f317802203b61ab0c13e2c5d224a1d28c8257f2eb72392d3ba94cb2fdf041f208aa8918af00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ca50ff0cc000004030047304502206e583a80665f890d9d9ca2b512c964026e41f06c74bf4c1484fb690b9245658d0221008b3ed4506fcc91beb77a6a8cbb2a17e25859936d9f631a98bda6200e9d15b784
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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