thematerialgirl.co

Issued by R3

About this certificate

This digital certificate with serial number 04:f3:a5:bc:9b:f0:92:1c:be:7b:b8:6d:fb:cf:3b:70:b3:f0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thematerialgirl.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:a5:bc:9b:f0:92:1c:be:7b:b8:6d:fb:cf:3b:70:b3:f0
Serial Number (int): 431358060822776416005040012659473461064688
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:7b:3c:3f:fb:96:9a:51:72:76:ee:aa:fc:ff:f1:eb:8c:15:64:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:f3:60:cd:2e:b9:ff:8b:f8:06:d1:11:17:7c:c2:c5:ee:fb:2a:b7
Fingerprint (sha256): c7:9d:14:4c:87:de:e3:61:52:28:4b:89:23:17:f0:ea:86:cf:31:eb:a2:2e:ba:a8:d2:e2:58:55:5a:3b:fd:8e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thematerialgirl.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thematerialgirl.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.artbooks.au
*.attendintro.com
*.ayturk.net
*.baufinanzieung.de
*.chapmancartridgesandsafes.co.uk
*.chruchschickenfeedback.com
*.clipinhairextensions.com.au
*.craftycritters.com.au
*.creativepaperproductsltd.co.uk
*.dotmash.com
*.echthaarpinsel.de
*.gogofashion.de
*.hairbows.de
*.hobbyfabrik.de
*.huilikang.biz
*.ielifestyleseduction.com
*.instantquote.au
*.interestonlyloan.au
*.kan78.live
*.keywortool.io
*.konjunktiv.de
*.kredite-mit-schufa.de
*.leedsbuildingsoceity.co.uk
*.leedsbulidingsociety.co.uk
*.licolnafs.com
*.meitauto.de
*.mismga.com
*.nusp.org
*.ostatnigwizdek.shop
*.postings.au
*.removalssydney.com.au
*.reuch.de
*.ronald7.net
*.rutracer.org
*.salina-ny.us
*.securustechnet.com
*.simplemanbrand.com
*.soccerballs.au
*.speakenglish.au
*.sping.io
*.sydneysurfpro.com
*.thematerialgirl.co
*.tillamookbay.cc
*.toplessbar.com.au
*.voter-owned.org
*.workprocedures.com.au
*.wormfarms.au
*.wwwe-zpassny.com
*.x-bit.net
*.xn--millionr-gesucht-1nb.de
artbooks.au
attendintro.com
ayturk.net
baufinanzieung.de
chapmancartridgesandsafes.co.uk
chruchschickenfeedback.com
clipinhairextensions.com.au
craftycritters.com.au
creativepaperproductsltd.co.uk
dotmash.com
echthaarpinsel.de
gogofashion.de
hairbows.de
hobbyfabrik.de
huilikang.biz
ielifestyleseduction.com
instantquote.au
interestonlyloan.au
kan78.live
keywortool.io
konjunktiv.de
kredite-mit-schufa.de
leedsbuildingsoceity.co.uk
leedsbulidingsociety.co.uk
licolnafs.com
meitauto.de
mismga.com
nusp.org
ostatnigwizdek.shop
postings.au
removalssydney.com.au
reuch.de
ronald7.net
rutracer.org
salina-ny.us
securustechnet.com
simplemanbrand.com
soccerballs.au
speakenglish.au
sping.io
sydneysurfpro.com
thematerialgirl.co
tillamookbay.cc
toplessbar.com.au
voter-owned.org
workprocedures.com.au
wormfarms.au
wwwe-zpassny.com
x-bit.net
xn--millionr-gesucht-1nb.de

Other certificates including the domain name thematerialgirl.co

(limited to 100 certificates)
thematerialgirl.co
www.thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
itstonystark.xyz
itstonystark.xyz
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
*.8xvk.com
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co
thematerialgirl.co

Certificate

The complete raw certificate details for thematerialgirl.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINZzCCDE+gAwIBAgISBPOlvJvwkhy+e7ht+887cLPwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDEwMzIwNThaFw0yNDA1MDEwMzIwNTdaMB0xGzAZBgNVBAMT
EnRoZW1hdGVyaWFsZ2lybC5jbzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAJwRrTNnaHQoWNqt6mj9HO93RSIoqKmnipiXlG0kLsVu4NftZtcrSs8PRabH
GMABcoY4jWLxi7lSeZThMhe8iUIA2skklB3V8YG4U0x86wtFS9geU4mgJv+9aiy/
y0+WOv6ZCwLhBWRXnH6e2KAZNY8SpK5j9QLkgOpchlvmQB4OAjNaeNbvnMA3gvQf
do6z/kwIrgDZwVXTOHymyB71dR1+QtcJ2obfXe9y90FlqxjUbP3n9COkOhojS34V
Ub47jkuaVbKR8SX3wacghTYaIWpYhdvHXl7uQ6SR/8F6d3nygVC5Sss6xl2hUzed
jApPjy1fOZudZWh9DHhsBUpbKujTT/1xSZm60ou3XGOSLKv92YbmnohSa0jn7XpN
O5NmFGtYY53RrVu3Vxa0+1XMm2VIt6ElQCTSZbV+hxUPvlZ9RuTWbj7T27nSiW/J
xGdjywbSlgU85sPUVtBft/S6YQzRpr4RhLRhx3DyrsJiBUCdPArVrbknzyFJWlSX
p94xOKYyERQqoZ9J0jmU5YKgNocNFsGPyfJK6NpvfZAIzznkWYGY3Ef81XUTo6ox
CgKg06bFaix5AdgO7PHnvBswoKpi5iK1zA72glrumyM8eXvdP4+VoUC9O39i/dSg
W4udYoihIePstnLqxu5suAnV9YCf6X3Uluo/MP+iN9hJw37FAgMBAAGjggmKMIIJ
hjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJ57PD/7lppRcnbuqvz/8euMFWQCMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIHjwYDVR0RBIIHhjCCB4KCDSouYXJ0Ym9v
a3MuYXWCESouYXR0ZW5kaW50cm8uY29tggwqLmF5dHVyay5uZXSCEyouYmF1Zmlu
YW56aWV1bmcuZGWCISouY2hhcG1hbmNhcnRyaWRnZXNhbmRzYWZlcy5jby51a4Ic
Ki5jaHJ1Y2hzY2hpY2tlbmZlZWRiYWNrLmNvbYIdKi5jbGlwaW5oYWlyZXh0ZW5z
aW9ucy5jb20uYXWCFyouY3JhZnR5Y3JpdHRlcnMuY29tLmF1giAqLmNyZWF0aXZl
cGFwZXJwcm9kdWN0c2x0ZC5jby51a4INKi5kb3RtYXNoLmNvbYITKi5lY2h0aGFh
cnBpbnNlbC5kZYIQKi5nb2dvZmFzaGlvbi5kZYINKi5oYWlyYm93cy5kZYIQKi5o
b2JieWZhYnJpay5kZYIPKi5odWlsaWthbmcuYml6ghoqLmllbGlmZXN0eWxlc2Vk
dWN0aW9uLmNvbYIRKi5pbnN0YW50cXVvdGUuYXWCFSouaW50ZXJlc3Rvbmx5bG9h
bi5hdYIMKi5rYW43OC5saXZlgg8qLmtleXdvcnRvb2wuaW+CDyoua29uanVua3Rp
di5kZYIXKi5rcmVkaXRlLW1pdC1zY2h1ZmEuZGWCHCoubGVlZHNidWlsZGluZ3Nv
Y2VpdHkuY28udWuCHCoubGVlZHNidWxpZGluZ3NvY2lldHkuY28udWuCDyoubGlj
b2xuYWZzLmNvbYINKi5tZWl0YXV0by5kZYIMKi5taXNtZ2EuY29tggoqLm51c3Au
b3JnghUqLm9zdGF0bmlnd2l6ZGVrLnNob3CCDSoucG9zdGluZ3MuYXWCFyoucmVt
b3ZhbHNzeWRuZXkuY29tLmF1ggoqLnJldWNoLmRlgg0qLnJvbmFsZDcubmV0gg4q
LnJ1dHJhY2VyLm9yZ4IOKi5zYWxpbmEtbnkudXOCFCouc2VjdXJ1c3RlY2huZXQu
Y29tghQqLnNpbXBsZW1hbmJyYW5kLmNvbYIQKi5zb2NjZXJiYWxscy5hdYIRKi5z
cGVha2VuZ2xpc2guYXWCCiouc3BpbmcuaW+CEyouc3lkbmV5c3VyZnByby5jb22C
FCoudGhlbWF0ZXJpYWxnaXJsLmNvghEqLnRpbGxhbW9va2JheS5jY4ITKi50b3Bs
ZXNzYmFyLmNvbS5hdYIRKi52b3Rlci1vd25lZC5vcmeCFyoud29ya3Byb2NlZHVy
ZXMuY29tLmF1gg4qLndvcm1mYXJtcy5hdYISKi53d3dlLXpwYXNzbnkuY29tggsq
LngtYml0Lm5ldIIdKi54bi0tbWlsbGlvbnItZ2VzdWNodC0xbmIuZGWCC2FydGJv
b2tzLmF1gg9hdHRlbmRpbnRyby5jb22CCmF5dHVyay5uZXSCEWJhdWZpbmFuemll
dW5nLmRlgh9jaGFwbWFuY2FydHJpZGdlc2FuZHNhZmVzLmNvLnVrghpjaHJ1Y2hz
Y2hpY2tlbmZlZWRiYWNrLmNvbYIbY2xpcGluaGFpcmV4dGVuc2lvbnMuY29tLmF1
ghVjcmFmdHljcml0dGVycy5jb20uYXWCHmNyZWF0aXZlcGFwZXJwcm9kdWN0c2x0
ZC5jby51a4ILZG90bWFzaC5jb22CEWVjaHRoYWFycGluc2VsLmRlgg5nb2dvZmFz
aGlvbi5kZYILaGFpcmJvd3MuZGWCDmhvYmJ5ZmFicmlrLmRlgg1odWlsaWthbmcu
Yml6ghhpZWxpZmVzdHlsZXNlZHVjdGlvbi5jb22CD2luc3RhbnRxdW90ZS5hdYIT
aW50ZXJlc3Rvbmx5bG9hbi5hdYIKa2FuNzgubGl2ZYINa2V5d29ydG9vbC5pb4IN
a29uanVua3Rpdi5kZYIVa3JlZGl0ZS1taXQtc2NodWZhLmRlghpsZWVkc2J1aWxk
aW5nc29jZWl0eS5jby51a4IabGVlZHNidWxpZGluZ3NvY2lldHkuY28udWuCDWxp
Y29sbmFmcy5jb22CC21laXRhdXRvLmRlggptaXNtZ2EuY29tgghudXNwLm9yZ4IT
b3N0YXRuaWd3aXpkZWsuc2hvcIILcG9zdGluZ3MuYXWCFXJlbW92YWxzc3lkbmV5
LmNvbS5hdYIIcmV1Y2guZGWCC3JvbmFsZDcubmV0ggxydXRyYWNlci5vcmeCDHNh
bGluYS1ueS51c4ISc2VjdXJ1c3RlY2huZXQuY29tghJzaW1wbGVtYW5icmFuZC5j
b22CDnNvY2NlcmJhbGxzLmF1gg9zcGVha2VuZ2xpc2guYXWCCHNwaW5nLmlvghFz
eWRuZXlzdXJmcHJvLmNvbYISdGhlbWF0ZXJpYWxnaXJsLmNvgg90aWxsYW1vb2ti
YXkuY2OCEXRvcGxlc3NiYXIuY29tLmF1gg92b3Rlci1vd25lZC5vcmeCFXdvcmtw
cm9jZWR1cmVzLmNvbS5hdYIMd29ybWZhcm1zLmF1ghB3d3dlLXpwYXNzbnkuY29t
ggl4LWJpdC5uZXSCG3huLS1taWxsaW9uci1nZXN1Y2h0LTFuYi5kZTATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjWLmBfwAAAQDAEgwRgIhANv6AWLr
g+LeYrxu6IG+8By1q+i9c4y0DKXmJQmjcfWDAiEAvhwASjDCIGK0MY9f4dMuMmli
wusLHiycO0DyBo2dNioAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6
dAAAAY1i5gaZAAAEAwBIMEYCIQClNVmpmHjJdoyDZGdJdTKj252tVWs3+In7PAKo
riKH/wIhAPxhnWqLRhjCwDAUdCjnT2AHZ34SICuBgcTrvnnnxmEJMA0GCSqGSIb3
DQEBCwUAA4IBAQCdyl5HDgP3k0HiLoQzWFEqcu4vbb7y0TyqcquJEVBSiJYf8vt4
8sXOiys1T7iNfwAZ8zkVpUiCDQ0DmgWZeGnR8FB0CeYHAX6JtdZDXXp/DkeCZE7Q
vzt2TjL/SjGzJyqckZI+IqRao604wMY6RROv44VLitrtDzpP5rfVqK0ykTIEXTeJ
yqa+S6q2B9Cb7kIw8t9LN43LruFVOGRt65EvNbzbuCRrM2kaMiOm6Zxn+vqgl5Nv
EOHm5Gz8t6y4NWTp977qF2bsSJnvqhDFPLVB5QkqCZz17jj94Egqj5t1oMQ0pW39
M65Cpq+/M4ijocKBgE7leeVb3XQDnEGkk3H3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnBGtM2dodChY2q3qaP0c
73dFIiioqaeKmJeUbSQuxW7g1+1m1ytKzw9FpscYwAFyhjiNYvGLuVJ5lOEyF7yJ
QgDaySSUHdXxgbhTTHzrC0VL2B5TiaAm/71qLL/LT5Y6/pkLAuEFZFecfp7YoBk1
jxKkrmP1AuSA6lyGW+ZAHg4CM1p41u+cwDeC9B92jrP+TAiuANnBVdM4fKbIHvV1
HX5C1wnaht9d73L3QWWrGNRs/ef0I6Q6GiNLfhVRvjuOS5pVspHxJffBpyCFNhoh
aliF28deXu5DpJH/wXp3efKBULlKyzrGXaFTN52MCk+PLV85m51laH0MeGwFSlsq
6NNP/XFJmbrSi7dcY5Isq/3ZhuaeiFJrSOftek07k2YUa1hjndGtW7dXFrT7Vcyb
ZUi3oSVAJNJltX6HFQ++Vn1G5NZuPtPbudKJb8nEZ2PLBtKWBTzmw9RW0F+39Lph
DNGmvhGEtGHHcPKuwmIFQJ08CtWtuSfPIUlaVJen3jE4pjIRFCqhn0nSOZTlgqA2
hw0WwY/J8kro2m99kAjPOeRZgZjcR/zVdROjqjEKAqDTpsVqLHkB2A7s8ee8GzCg
qmLmIrXMDvaCWu6bIzx5e90/j5WhQL07f2L91KBbi51iiKEh4+y2curG7my4CdX1
gJ/pfdSW6j8w/6I32EnDfsUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431358060822776416005040012659473461064688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 03:20:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 03:20:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thematerialgirl.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636706170298801192346621951964071567683447957048425686171343539159630030939392519130767406789068470395948839113355583630459722531034485624752204073991978734455967145899369055274835434360175822967809759980875986041362072485185692081543821450982335173487696576478513226227833348193186007652731854265260586069449277216438191238144348272769289846565957036325700750131682059568467551131556951373926180797456598722865075919781936194844087098351207899035638255859624462450440670620757409781635080558122939034203057031489034447116864136999909296330705165046520004444036581879674206169961913721166209803689873342999544691360558446599655836372310962696149377211533736104595973009825235484978866181588666559032096757466507878658205011808773677066377164287534841256250136138509675385746488377588004496925797781762577253560485648079491054626697588105399876627885229778273826515340392001422643013627885783410707888884825327703313713974548580582464856984846825715014176130767189467225565597117354932798761341530943545785115275917175284798099344541909213352807969951426443297045201889359476898278467617399494040226473298586450811982495078057157886708899454633915595901518764681338481317435279033333154606839333231009485181350555524483490570018455237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e7b3c3ffb969a517276eeaafcfff1eb8c156402
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1926 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artbooks.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attendintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayturk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baufinanzieung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chapmancartridgesandsafes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chruchschickenfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clipinhairextensions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craftycritters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativepaperproductsltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echthaarpinsel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gogofashion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairbows.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hobbyfabrik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huilikang.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ielifestyleseduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instantquote.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interestonlyloan.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kan78.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keywortool.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konjunktiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kredite-mit-schufa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leedsbuildingsoceity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leedsbulidingsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licolnafs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meitauto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mismga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nusp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ostatnigwizdek.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postings.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.removalssydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronald7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rutracer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salina-ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securustechnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplemanbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soccerballs.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speakenglish.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sping.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydneysurfpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thematerialgirl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tillamookbay.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toplessbar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voter-owned.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workprocedures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wormfarms.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwe-zpassny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x-bit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--millionr-gesucht-1nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artbooks.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attendintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayturk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baufinanzieung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapmancartridgesandsafes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chruchschickenfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clipinhairextensions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftycritters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativepaperproductsltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echthaarpinsel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogofashion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairbows.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobbyfabrik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huilikang.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ielifestyleseduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantquote.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interestonlyloan.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kan78.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywortool.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konjunktiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kredite-mit-schufa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leedsbuildingsoceity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leedsbulidingsociety.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licolnafs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meitauto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mismga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nusp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostatnigwizdek.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postings.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removalssydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronald7.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutracer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salina-ny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securustechnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplemanbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerballs.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speakenglish.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sping.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneysurfpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thematerialgirl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tillamookbay.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toplessbar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voter-owned.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workprocedures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wormfarms.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwe-zpassny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x-bit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--millionr-gesucht-1nb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d62e605fc0000040300483046022100dbfa0162eb83e2de62bc6ee881bef01cb5abe8bd738cb40ca5e62509a371f583022100be1c004a30c22062b4318f5fe1d32e326962c2eb0b1e2c9c3b40f2068d9d362a00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d62e606990000040300483046022100a53559a99878c9768c836467497532a3db9dad556b37f889fb3c02a8ae2287ff022100fc619d6a8b4618c2c030147428e74f6007677e12202b8181c4ebbe79e7c66109
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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