ijfa.us

Issued by R3

About this certificate

This digital certificate with serial number 04:5b:70:70:74:68:b9:46:6b:af:8b:7d:31:cd:ad:0a:f3:75 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ijfa.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:70:70:74:68:b9:46:6b:af:8b:7d:31:cd:ad:0a:f3:75
Serial Number (int): 379564296550679036025355336366781872403317
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:64:9c:ed:3b:4c:2c:cc:c1:0d:e0:45:3c:43:f1:44:6b:56:4c:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:25:4d:d1:e9:74:64:a8:65:50:3c:55:2d:cf:0c:2c:8b:da:74:91
Fingerprint (sha256): d5:86:2c:44:e6:28:7a:76:39:13:21:6c:4d:cf:d9:4c:0b:f2:28:cb:eb:75:b6:ce:21:0a:bb:b9:40:8a:8b:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ijfa.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ijfa.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.askzoro.com
*.auth-3dsecurity.com
*.bgt4.info
*.calendrier.pw
*.cdan.net
*.edlmundo.es
*.efds.cf
*.erosberry.mobi
*.expertblinds.co.uk
*.fairwindonline.com
*.fcmovies.org
*.fcpeuroparts.com
*.flaybondi.com
*.greatfamilygifts.com
*.healthfitnesssolution.com
*.hoverboardscooterparts.com
*.ijfa.us
*.ikik.us
*.ilnessquiz.com
*.inttagram.com
*.justbagit.com
*.kool-aire.net
*.lawnrenewal.com
*.luongthevinh.in
*.lycammobile.us
*.m18.us
*.mnmlla.com
*.nomado.store
*.orders848515.info
*.phantomautoworks.com
*.powerstrikehammer.com
*.qbbe.org
*.ragina.com
*.reed-motors.com
*.robinhoodcarwash.com
*.roemahwiflogini.com
*.seducaosublimar.net
*.smartcarerwards.co.uk
*.stregnth.in
*.stretchmarkvanish.us
*.tubemilfporn.eu
*.twinhiwaydrivein.com
*.ubieranki.net
*.uies.us
*.vepoens.com
*.vidoo.tv
*.vote-global.com
*.wwwaventurascancan.com
*.wwwbancfirstrewards.com
*.wwwdiegosax.es
askzoro.com
auth-3dsecurity.com
bgt4.info
calendrier.pw
cdan.net
edlmundo.es
efds.cf
erosberry.mobi
expertblinds.co.uk
fairwindonline.com
fcmovies.org
fcpeuroparts.com
flaybondi.com
greatfamilygifts.com
healthfitnesssolution.com
hoverboardscooterparts.com
ijfa.us
ikik.us
ilnessquiz.com
inttagram.com
justbagit.com
kool-aire.net
lawnrenewal.com
luongthevinh.in
lycammobile.us
m18.us
mnmlla.com
nomado.store
orders848515.info
phantomautoworks.com
powerstrikehammer.com
qbbe.org
ragina.com
reed-motors.com
robinhoodcarwash.com
roemahwiflogini.com
seducaosublimar.net
smartcarerwards.co.uk
stregnth.in
stretchmarkvanish.us
tubemilfporn.eu
twinhiwaydrivein.com
ubieranki.net
uies.us
vepoens.com
vidoo.tv
vote-global.com
wwwaventurascancan.com
wwwbancfirstrewards.com
wwwdiegosax.es

Other certificates including the domain name ijfa.us

(limited to 100 certificates)
shopsforlease.com.au
*.4xtoolbox.com
carobd2.com
ijfa.us
africway.com
carobd2.com
carobd2.com
carnivalforshoes.com
ijfa.us
mahashikharwati.com
carobd2.com

Certificate

The complete raw certificate details for ijfa.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM7jCCC9agAwIBAgISBFtwcHRouUZrr4t9Mc2tCvN1MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMTIwMzE0MjJaFw0yMzA1MTMwMzE0MjFaMBIxEDAOBgNVBAMT
B2lqZmEudXMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDOv778wk/G
k3HxdWUCs9i19T7O+vE6jSURgI0nTtsWWFbzIO9setpdTW79XZHlPMR21t/rQ4p8
DlU6fEYXstkPeGf6yGFaAZleO7LLTxyaFe0hhfot6SpjvsCDEXL1SKsStoCWyAyV
vgqwqEcrYmlVs9Ktvn4nr43m5yV0dIXyolfdvEgyvHK5OyCaJsKN6eqgDSHX2S/e
xuWSmQQAC7PmxptEWXI9RzHwUvaDhD0u6Pw/WIScvbwAGaL8JVUdVuBLK6VkqhDw
pOKhCZvdszPmurCFl0eJ6jmzuqw80juShb9BK+YFYShQLYiRP9TY9Z7eWBBSfYAC
S3nwCTVHWnTq7YtGb4FDafs5ftlf42QTkjU86l4lo3YwlNARws11hhJ/4lK3Jd3Z
uGq5fu6p609B8GwhRUOlDIjhSNhQJAJ1nqikHj1EwNHrgQ8kh/pApBXEJasf5KWS
T4chZW8DhX0AOkbCad9bRnjBkDXinIS4a6O42pRXW0vDcGBp3w1T0MSr4M8uBPk0
eAOyHoDORioz2QDos6zdazfVWWxAlYRZNoZgLlpcNo7/Rw8hbYMsl/APIpCLwt6M
pCRyFbwxvqg44LV3DH3vEM5IKZ6a3b404G4RKvrkawmGZ8zdTCL7PoqnqEbdGvXE
et2EJ4qLZp6m2dkBEcdA6wJZMlnllywZzwIDAQABo4IJHDCCCRgwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBThZJztO0wszMEN4EU8Q/FEa1ZMvTAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCBukGA1UdEQSCBuAwggbcgg0qLmFza3pvcm8uY29tghUqLmF1
dGgtM2RzZWN1cml0eS5jb22CCyouYmd0NC5pbmZvgg8qLmNhbGVuZHJpZXIucHeC
CiouY2Rhbi5uZXSCDSouZWRsbXVuZG8uZXOCCSouZWZkcy5jZoIQKi5lcm9zYmVy
cnkubW9iaYIUKi5leHBlcnRibGluZHMuY28udWuCFCouZmFpcndpbmRvbmxpbmUu
Y29tgg4qLmZjbW92aWVzLm9yZ4ISKi5mY3BldXJvcGFydHMuY29tgg8qLmZsYXli
b25kaS5jb22CFiouZ3JlYXRmYW1pbHlnaWZ0cy5jb22CGyouaGVhbHRoZml0bmVz
c3NvbHV0aW9uLmNvbYIcKi5ob3ZlcmJvYXJkc2Nvb3RlcnBhcnRzLmNvbYIJKi5p
amZhLnVzggkqLmlraWsudXOCECouaWxuZXNzcXVpei5jb22CDyouaW50dGFncmFt
LmNvbYIPKi5qdXN0YmFnaXQuY29tgg8qLmtvb2wtYWlyZS5uZXSCESoubGF3bnJl
bmV3YWwuY29tghEqLmx1b25ndGhldmluaC5pboIQKi5seWNhbW1vYmlsZS51c4II
Ki5tMTgudXOCDCoubW5tbGxhLmNvbYIOKi5ub21hZG8uc3RvcmWCEyoub3JkZXJz
ODQ4NTE1LmluZm+CFioucGhhbnRvbWF1dG93b3Jrcy5jb22CFyoucG93ZXJzdHJp
a2VoYW1tZXIuY29tggoqLnFiYmUub3JnggwqLnJhZ2luYS5jb22CESoucmVlZC1t
b3RvcnMuY29tghYqLnJvYmluaG9vZGNhcndhc2guY29tghUqLnJvZW1haHdpZmxv
Z2luaS5jb22CFSouc2VkdWNhb3N1YmxpbWFyLm5ldIIXKi5zbWFydGNhcmVyd2Fy
ZHMuY28udWuCDSouc3RyZWdudGguaW6CFiouc3RyZXRjaG1hcmt2YW5pc2gudXOC
ESoudHViZW1pbGZwb3JuLmV1ghYqLnR3aW5oaXdheWRyaXZlaW4uY29tgg8qLnVi
aWVyYW5raS5uZXSCCSoudWllcy51c4INKi52ZXBvZW5zLmNvbYIKKi52aWRvby50
doIRKi52b3RlLWdsb2JhbC5jb22CGCoud3d3YXZlbnR1cmFzY2FuY2FuLmNvbYIZ
Ki53d3diYW5jZmlyc3RyZXdhcmRzLmNvbYIQKi53d3dkaWVnb3NheC5lc4ILYXNr
em9yby5jb22CE2F1dGgtM2RzZWN1cml0eS5jb22CCWJndDQuaW5mb4INY2FsZW5k
cmllci5wd4IIY2Rhbi5uZXSCC2VkbG11bmRvLmVzggdlZmRzLmNmgg5lcm9zYmVy
cnkubW9iaYISZXhwZXJ0YmxpbmRzLmNvLnVrghJmYWlyd2luZG9ubGluZS5jb22C
DGZjbW92aWVzLm9yZ4IQZmNwZXVyb3BhcnRzLmNvbYINZmxheWJvbmRpLmNvbYIU
Z3JlYXRmYW1pbHlnaWZ0cy5jb22CGWhlYWx0aGZpdG5lc3Nzb2x1dGlvbi5jb22C
GmhvdmVyYm9hcmRzY29vdGVycGFydHMuY29tggdpamZhLnVzggdpa2lrLnVzgg5p
bG5lc3NxdWl6LmNvbYINaW50dGFncmFtLmNvbYINanVzdGJhZ2l0LmNvbYINa29v
bC1haXJlLm5ldIIPbGF3bnJlbmV3YWwuY29tgg9sdW9uZ3RoZXZpbmguaW6CDmx5
Y2FtbW9iaWxlLnVzggZtMTgudXOCCm1ubWxsYS5jb22CDG5vbWFkby5zdG9yZYIR
b3JkZXJzODQ4NTE1LmluZm+CFHBoYW50b21hdXRvd29ya3MuY29tghVwb3dlcnN0
cmlrZWhhbW1lci5jb22CCHFiYmUub3JnggpyYWdpbmEuY29tgg9yZWVkLW1vdG9y
cy5jb22CFHJvYmluaG9vZGNhcndhc2guY29tghNyb2VtYWh3aWZsb2dpbmkuY29t
ghNzZWR1Y2Fvc3VibGltYXIubmV0ghVzbWFydGNhcmVyd2FyZHMuY28udWuCC3N0
cmVnbnRoLmlughRzdHJldGNobWFya3ZhbmlzaC51c4IPdHViZW1pbGZwb3JuLmV1
ghR0d2luaGl3YXlkcml2ZWluLmNvbYINdWJpZXJhbmtpLm5ldIIHdWllcy51c4IL
dmVwb2Vucy5jb22CCHZpZG9vLnR2gg92b3RlLWdsb2JhbC5jb22CFnd3d2F2ZW50
dXJhc2NhbmNhbi5jb22CF3d3d2JhbmNmaXJzdHJld2FyZHMuY29tgg53d3dkaWVn
b3NheC5lczBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB3ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZ
AAABhkPUxGcAAAQDAEgwRgIhAK8bvVBmTXDGaFMSzU6hc7olWuou9i8DWDtC8PCX
BIpVAiEA1uxI/itK4cVGu9ANyCBCkeca1Ry/GaL/+7xaBms1+QwAdgB6MoxU2Lct
tiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYZD1MRuAAAEAwBHMEUCIQCVBbh5
NR8wIB2oTEkUpITlgmYBFhuzZpQRJpQKGsT0ngIgbdY6btesQfQAe1jLYjYQnf4F
XeJ8MZJraplIhxSkXOswDQYJKoZIhvcNAQELBQADggEBADJTEc5rJmBAE4B6hL7w
8/nKUNdM6NwYtOrk966+gp+GBySuUMZiO3VIVSQ3LASGGjgJXn9D56nxhSzxjwb/
jiKYp+J5moL4o9HBPZ/lIWwoCd2I2Ta16mjO2v5c4yaa5S5jofW1aQv1x4aTke0L
w1XxZ/fV9z0VsHyV9XXnTaqZp2EnKxVwPPG/1mrJbjKlI5GEoXTmojEiVoDutnsQ
IzthHVo9x84pHhKKRPlbMaeXRaKOV/pCaOTt/I4fDWsqhjo7Vc1TZr+oWAjM8ey6
m2ReqQ+xwkl0O4DDt4LrFRdwJaE9cno8Cq0zIeEPbtKdhtS8oHpY4aRhmKjgVS5Q
47E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379564296550679036025355336366781872403317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-12 03:14:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-13 03:14:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ijfa.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843462363997229885923658666640903695294512564817111626487677284033430294218762038412471807834553436767941633550443784145985052894420202605425029568739015534977622055332762946502620464236998780594368960353996726978901710012843034070508214307784231606610821137703367224656310843384232584170682448450530515455644585395890604352147349759695572688599906753228318585684384493764223551514352329480162839311501622737535523423927190475536996545970026695485244396884485193436004665157335965233992827093466792446650798848959828481202119868470096943910068493395025037289382160206731627339112469947205729739200878298287410362049665698129760463331182103026652222773604769952196023646073630857900706609727044238377966755244984073903900555882398680465791789398518828767217927492635396651312711328154450711570215072810589677202413930152184597695318176862350918600319770858746653099396057600741703395244399167883028960175090400524919525540366486902411860578165933240036820740362304727855856106514045817942278675172726758212282373478384176280937764692698538191839012138760535263982731754498000099563123779905960314356758319230202738549814196977401495124066128478722831591355794288468225954387886492523009073373252002857593770840369901347514124203727311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1649ced3b4c2cccc10de0453c43f1446b564cbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1760 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askzoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auth-3dsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bgt4.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calendrier.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edlmundo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efds.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erosberry.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expertblinds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairwindonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcmovies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcpeuroparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaybondi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatfamilygifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthfitnesssolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoverboardscooterparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijfa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikik.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilnessquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inttagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justbagit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kool-aire.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawnrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luongthevinh.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lycammobile.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m18.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mnmlla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nomado.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orders848515.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phantomautoworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerstrikehammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qbbe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ragina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reed-motors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robinhoodcarwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roemahwiflogini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seducaosublimar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartcarerwards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stregnth.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stretchmarkvanish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubemilfporn.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinhiwaydrivein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubieranki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uies.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vepoens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidoo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vote-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwaventurascancan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbancfirstrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdiegosax.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askzoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-3dsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgt4.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendrier.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edlmundo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efds.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erosberry.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertblinds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairwindonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmovies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcpeuroparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaybondi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatfamilygifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfitnesssolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoverboardscooterparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijfa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikik.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilnessquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inttagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justbagit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kool-aire.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawnrenewal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luongthevinh.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lycammobile.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm18.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnmlla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomado.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders848515.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phantomautoworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerstrikehammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbbe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reed-motors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinhoodcarwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roemahwiflogini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seducaosublimar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcarerwards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stregnth.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretchmarkvanish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubemilfporn.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinhiwaydrivein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubieranki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uies.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vepoens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidoo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwaventurascancan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbancfirstrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdiegosax.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018643d4c4670000040300483046022100af1bbd50664d70c6685312cd4ea173ba255aea2ef62f03583b42f0f097048a55022100d6ec48fe2b4ae1c546bbd00dc8204291e71ad51cbf19a2fffbbc5a066b35f90c0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018643d4c46e00000403004730450221009505b879351f30201da84c4914a484e5826601161bb366941126940a1ac4f49e02206dd63a6ed7ac41f4007b58cb6236109dfe055de27c31926b6a99488714a45ceb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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