minolausa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:21:bd:52:f0:0e:2a:03:35:a8:41:a0:2a:e7:f1:84:9a:ea was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=minolausa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:bd:52:f0:0e:2a:03:35:a8:41:a0:2a:e7:f1:84:9a:ea
Serial Number (int): 272817830632117959592187182821621025250026
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:68:6a:57:3a:9a:fb:b2:31:21:62:e6:b0:58:64:28:43:56:d3:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:96:af:c1:44:c1:19:48:68:a3:18:3b:09:8c:a0:d6:1e:38:d1:c7
Fingerprint (sha256): cd:35:29:15:f4:d6:14:1b:37:88:3b:02:2b:20:28:d6:5c:bd:f0:b5:25:61:de:45:a3:3b:e9:f1:a6:a7:af:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate minolausa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minolausa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adultcoloringguide.com
*.apacitation.com
*.artssupplies.com.au
*.asusus.com
*.australianremovalists.net.au
*.brickbuildconstror.com
*.btbuy.com
*.buenossiresbus.com
*.bugatti-eyewear.com
*.canals.scot
*.caomei502.com
*.cell-research.net
*.centrowalet.com
*.chanalmyanmar.com
*.damneddelicious.com
*.dekuperusa.com
*.dissolve.marketing
*.dr-rath-cell-world.net
*.farmaccounting.com.au
*.farmclassifieds.com.au
*.faxtar.com
*.fishfinders.com.au
*.forkliftsforhire.com.au
*.golfgetaways.com.au
*.howtoremoeflickandstickeyeli.com
*.hypropump.com
*.kinky.net.au
*.lexuspursuitvisa.com
*.ln-worldwide.com
*.manga-no-haru.net
*.maniainformatica.com
*.maquinariaspaco.com
*.minolausa.com
*.motorcycleparts.co.za
*.mutalone.com
*.ncmedicalboard.org
*.piccasa.com
*.rcacode.com
*.restauranttrebbiano.com
*.samsunguk.com
*.sarong.com.au
*.searchkeywordsa.com
*.sydneyvideoproduction.com.au
*.tachometers.com.au
*.tonstaar.com
*.toutubr.com
*.trysensa.com
*.valemaissaude.com
*.veganbox.com.au
*.yz.co.za
adultcoloringguide.com
apacitation.com
artssupplies.com.au
asusus.com
australianremovalists.net.au
brickbuildconstror.com
btbuy.com
buenossiresbus.com
bugatti-eyewear.com
canals.scot
caomei502.com
cell-research.net
centrowalet.com
chanalmyanmar.com
damneddelicious.com
dekuperusa.com
dissolve.marketing
dr-rath-cell-world.net
farmaccounting.com.au
farmclassifieds.com.au
faxtar.com
fishfinders.com.au
forkliftsforhire.com.au
golfgetaways.com.au
howtoremoeflickandstickeyeli.com
hypropump.com
kinky.net.au
lexuspursuitvisa.com
ln-worldwide.com
manga-no-haru.net
maniainformatica.com
maquinariaspaco.com
minolausa.com
motorcycleparts.co.za
mutalone.com
ncmedicalboard.org
piccasa.com
rcacode.com
restauranttrebbiano.com
samsunguk.com
sarong.com.au
searchkeywordsa.com
sydneyvideoproduction.com.au
tachometers.com.au
tonstaar.com
toutubr.com
trysensa.com
valemaissaude.com
veganbox.com.au
yz.co.za

Other certificates including the domain name minolausa.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for minolausa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINpDCCDIygAwIBAgISAyG9UvAOKgM1qEGgKufxhJrqMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTYxOTQxMDJaFw0yNDAyMTQxOTQxMDFaMBgxFjAUBgNVBAMT
DW1pbm9sYXVzYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDT
+/xZTx3IhJhUWnPavzPyNKbAK0neHiPzxHqCZwZLn25g5iq1ZzfprKxQ9UGuWHYT
EedP7pxeeOJO9N1xxsOlZfVd+OYUq7ZYzHvb0ZrZeHLt4+1+J8jDPG+rs4VsFlzD
whWq6AU46t8X/kiysRC27mj1XHFbKOP+CQstdmWMHmjQKVgS4hBxKxslbS4KaFfk
UPdoVAZ5nwBgTt4W97/gpFahlSn4nkoEoCdQUD3wYdCReOFE+YJhqsMiEuq1QG5x
6WstHgUmGZMELLb+xyIBtxGMFOAnVUV1bHxvCojVmq+8VEwFLY4mYQkpeOrESFyK
iz6Gc6qw7qTtCMku3TiUd6SViKU3dcUJtE5bOolfbyuPejsqjY+2b1jSQRmtTOqQ
Vle0HKjhi8Q+/3QKSVA+ORCl6P71MaCTUjZ5r6OdHi2GXCtdnoRolTQClSidc3bY
NpegL/R9rrXD80D0KzYbbgBWNpFlaXN6Fnqbevqxc9Onn9D1NtvrLNRJiBXGRwrX
qTAMP6CRCvBC7aOyN+US/Gn8kr7KmFGIC6iOU3YlSqpB+FMO3uEqacjyM114xv0G
tGDEgJ+Jtk4DZ8ey5T2BHLXK+lO9Yg0TAQkHZUt19EtWYOAg3UCOqYOEiJVKYl4C
6Hf7lRCvkeVY9vRfTxU32OmY5rnLrsVIbrz360qzKwIDAQABo4IJzDCCCcgwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSiaGpXOpr7sjEhYuawWGQoQ1bTcTAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzCCB9MGA1UdEQSCB8owggfGghgqLmFkdWx0Y29sb3Jp
bmdndWlkZS5jb22CESouYXBhY2l0YXRpb24uY29tghUqLmFydHNzdXBwbGllcy5j
b20uYXWCDCouYXN1c3VzLmNvbYIeKi5hdXN0cmFsaWFucmVtb3ZhbGlzdHMubmV0
LmF1ghgqLmJyaWNrYnVpbGRjb25zdHJvci5jb22CCyouYnRidXkuY29tghQqLmJ1
ZW5vc3NpcmVzYnVzLmNvbYIVKi5idWdhdHRpLWV5ZXdlYXIuY29tgg0qLmNhbmFs
cy5zY290gg8qLmNhb21laTUwMi5jb22CEyouY2VsbC1yZXNlYXJjaC5uZXSCESou
Y2VudHJvd2FsZXQuY29tghMqLmNoYW5hbG15YW5tYXIuY29tghUqLmRhbW5lZGRl
bGljaW91cy5jb22CECouZGVrdXBlcnVzYS5jb22CFCouZGlzc29sdmUubWFya2V0
aW5nghgqLmRyLXJhdGgtY2VsbC13b3JsZC5uZXSCFyouZmFybWFjY291bnRpbmcu
Y29tLmF1ghgqLmZhcm1jbGFzc2lmaWVkcy5jb20uYXWCDCouZmF4dGFyLmNvbYIU
Ki5maXNoZmluZGVycy5jb20uYXWCGSouZm9ya2xpZnRzZm9yaGlyZS5jb20uYXWC
FSouZ29sZmdldGF3YXlzLmNvbS5hdYIiKi5ob3d0b3JlbW9lZmxpY2thbmRzdGlj
a2V5ZWxpLmNvbYIPKi5oeXByb3B1bXAuY29tgg4qLmtpbmt5Lm5ldC5hdYIWKi5s
ZXh1c3B1cnN1aXR2aXNhLmNvbYISKi5sbi13b3JsZHdpZGUuY29tghMqLm1hbmdh
LW5vLWhhcnUubmV0ghYqLm1hbmlhaW5mb3JtYXRpY2EuY29tghUqLm1hcXVpbmFy
aWFzcGFjby5jb22CDyoubWlub2xhdXNhLmNvbYIXKi5tb3RvcmN5Y2xlcGFydHMu
Y28uemGCDioubXV0YWxvbmUuY29tghQqLm5jbWVkaWNhbGJvYXJkLm9yZ4INKi5w
aWNjYXNhLmNvbYINKi5yY2Fjb2RlLmNvbYIZKi5yZXN0YXVyYW50dHJlYmJpYW5v
LmNvbYIPKi5zYW1zdW5ndWsuY29tgg8qLnNhcm9uZy5jb20uYXWCFSouc2VhcmNo
a2V5d29yZHNhLmNvbYIeKi5zeWRuZXl2aWRlb3Byb2R1Y3Rpb24uY29tLmF1ghQq
LnRhY2hvbWV0ZXJzLmNvbS5hdYIOKi50b25zdGFhci5jb22CDSoudG91dHVici5j
b22CDioudHJ5c2Vuc2EuY29tghMqLnZhbGVtYWlzc2F1ZGUuY29tghEqLnZlZ2Fu
Ym94LmNvbS5hdYIKKi55ei5jby56YYIWYWR1bHRjb2xvcmluZ2d1aWRlLmNvbYIP
YXBhY2l0YXRpb24uY29tghNhcnRzc3VwcGxpZXMuY29tLmF1ggphc3VzdXMuY29t
ghxhdXN0cmFsaWFucmVtb3ZhbGlzdHMubmV0LmF1ghZicmlja2J1aWxkY29uc3Ry
b3IuY29tgglidGJ1eS5jb22CEmJ1ZW5vc3NpcmVzYnVzLmNvbYITYnVnYXR0aS1l
eWV3ZWFyLmNvbYILY2FuYWxzLnNjb3SCDWNhb21laTUwMi5jb22CEWNlbGwtcmVz
ZWFyY2gubmV0gg9jZW50cm93YWxldC5jb22CEWNoYW5hbG15YW5tYXIuY29tghNk
YW1uZWRkZWxpY2lvdXMuY29tgg5kZWt1cGVydXNhLmNvbYISZGlzc29sdmUubWFy
a2V0aW5nghZkci1yYXRoLWNlbGwtd29ybGQubmV0ghVmYXJtYWNjb3VudGluZy5j
b20uYXWCFmZhcm1jbGFzc2lmaWVkcy5jb20uYXWCCmZheHRhci5jb22CEmZpc2hm
aW5kZXJzLmNvbS5hdYIXZm9ya2xpZnRzZm9yaGlyZS5jb20uYXWCE2dvbGZnZXRh
d2F5cy5jb20uYXWCIGhvd3RvcmVtb2VmbGlja2FuZHN0aWNrZXllbGkuY29tgg1o
eXByb3B1bXAuY29tggxraW5reS5uZXQuYXWCFGxleHVzcHVyc3VpdHZpc2EuY29t
ghBsbi13b3JsZHdpZGUuY29tghFtYW5nYS1uby1oYXJ1Lm5ldIIUbWFuaWFpbmZv
cm1hdGljYS5jb22CE21hcXVpbmFyaWFzcGFjby5jb22CDW1pbm9sYXVzYS5jb22C
FW1vdG9yY3ljbGVwYXJ0cy5jby56YYIMbXV0YWxvbmUuY29tghJuY21lZGljYWxi
b2FyZC5vcmeCC3BpY2Nhc2EuY29tggtyY2Fjb2RlLmNvbYIXcmVzdGF1cmFudHRy
ZWJiaWFuby5jb22CDXNhbXN1bmd1ay5jb22CDXNhcm9uZy5jb20uYXWCE3NlYXJj
aGtleXdvcmRzYS5jb22CHHN5ZG5leXZpZGVvcHJvZHVjdGlvbi5jb20uYXWCEnRh
Y2hvbWV0ZXJzLmNvbS5hdYIMdG9uc3RhYXIuY29tggt0b3V0dWJyLmNvbYIMdHJ5
c2Vuc2EuY29tghF2YWxlbWFpc3NhdWRlLmNvbYIPdmVnYW5ib3guY29tLmF1ggh5
ei5jby56YTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi9ndoWwA
AAQDAEgwRgIhAPSuKc3qlBFwOjEJ6fsZxGb/TRPJP0xs11nkyB90YXlMAiEAzFrA
aqci4W5M9U8F3e6CdiI2Zx4EDiw9KRPagYsiSxQAdQB2/4g/Crb7lVHCYcz1h7o0
tKTNuyncaEIKn+ZnTFo6dAAAAYvZ3aHpAAAEAwBGMEQCIBjGia1qqRtQx4UZ5TkI
X9bVvSRkBRgEs92EgY13TX3PAiBKXWM77zqqHh3Y32uRjBP2c6DGLHEHWA5dG9PI
wUyOlTANBgkqhkiG9w0BAQsFAAOCAQEAqWnTlmHuwJ19SE/yWTeCmRbyqrfV2jcd
nWaC3OaYlJ5KWvn1BVOSzswn31Vqn7UUA5q+qLGUPFJgU97+9MS2HgaLDEetZyQU
H6J+58tQ0ISRwTlJZrSz32snEMQHW7qCmz00giypH8A4siBvdhwV1uf+/3k2lcMu
5H2RNoaR26/yS32XYOxiaKcBlaMtmdeGaycz+SWhye2WUgch0qRPpLViDgMUYm1z
oevRkFhNFjD2J1lrBQiySF2gDlUcu1omwH+lud9e76RyXmB1ANFA+OEOj7+QjhFz
BBtWgb3fokOdR6AXBStGrsyMtPDEjZHSqdEejU5XIoieYTkQFVMpag==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272817830632117959592187182821621025250026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 19:41:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 19:41:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minolausa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864820570696891361713268072039163329036767195176703538611846385957012461141421442771483423834873695919524017772873326869661320320974257174607308812224133680896839179151682380179612080964069792646020267744618258365225224320300277205445802776290650908281544187597564222330600766644055599446779390137878845796173527944440450922035885437833202852932383541580526607531757332849839904938756588036501932296091219589595933383875950075906977684439885370851101882032254824811198940337865308875638610724652648692915846933742755798040463360662057504713875800622457531845955878956137741316462872057946284323395302623875549168514918655533877038915043528927741500282322047915619133245425042288679656568450022655271174805084513770234089813251855753875897951081891142519061433704555127218536016622263216527802973248503982238611147718054578262309908706054210827247354478302495352764391311756071109015242781392888039272571094008853005758282650430570843989284818463260319258541585572160121927839565331185394143160989731667030415166767849107192525060951741297844125645204059867135962170718471224714583769384550943207598159163443832902538070685034513350840088473721430495800645355294916920428581523555181116442348829666295992994979112229125742453026632491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2686a573a9afbb2312162e6b05864284356d371
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1994 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultcoloringguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apacitation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artssupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asusus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australianremovalists.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brickbuildconstror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buenossiresbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bugatti-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canals.scot'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caomei502.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cell-research.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centrowalet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chanalmyanmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damneddelicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekuperusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dissolve.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr-rath-cell-world.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmaccounting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmclassifieds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faxtar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishfinders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forkliftsforhire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfgetaways.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtoremoeflickandstickeyeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypropump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinky.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexuspursuitvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ln-worldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manga-no-haru.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maniainformatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maquinariaspaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minolausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorcycleparts.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncmedicalboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piccasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcacode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restauranttrebbiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsunguk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarong.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchkeywordsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydneyvideoproduction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tachometers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonstaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toutubr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trysensa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valemaissaude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veganbox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yz.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultcoloringguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apacitation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artssupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asusus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianremovalists.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brickbuildconstror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buenossiresbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugatti-eyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canals.scot'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caomei502.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cell-research.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrowalet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chanalmyanmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damneddelicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekuperusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dissolve.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-rath-cell-world.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmaccounting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmclassifieds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faxtar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishfinders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forkliftsforhire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfgetaways.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtoremoeflickandstickeyeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypropump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinky.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexuspursuitvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ln-worldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manga-no-haru.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniainformatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maquinariaspaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minolausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorcycleparts.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncmedicalboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piccasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcacode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restauranttrebbiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsunguk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarong.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchkeywordsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneyvideoproduction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tachometers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonstaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toutubr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trysensa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valemaissaude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veganbox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yz.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd9dda16c0000040300483046022100f4ae29cdea9411703a3109e9fb19c466ff4d13c93f4c6cd759e4c81f7461794c022100cc5ac06aa722e16e4cf54f05ddee82762236671e040e2c3d2913da818b224b1400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bd9dda1e90000040300463044022018c689ad6aa91b50c78519e539085fd6d5bd2464051804b3dd84818d774d7dcf02204a5d633bef3aaa1e1dd8df6b918c13f673a0c62c7107580e5d1bd3c8c14c8e95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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