bia2.org

Issued by R3

About this certificate

This digital certificate with serial number 04:39:d5:4e:68:23:48:01:36:33:1e:81:ba:8f:ee:6b:c4:19 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bia2.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:39:d5:4e:68:23:48:01:36:33:1e:81:ba:8f:ee:6b:c4:19
Serial Number (int): 368128771315957500654748191548100865410073
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:5d:3d:49:31:74:74:c1:b8:ea:f2:f5:98:7b:bc:d3:81:56:0e:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:3e:d3:9e:c4:69:b8:8b:c2:4e:f1:dd:36:16:2a:27:b9:a5:f3:f3
Fingerprint (sha256): d8:27:d1:e9:6b:d1:21:36:d0:0c:c8:19:ef:0a:27:94:46:b5:18:72:53:26:fc:f9:40:13:42:7b:24:3f:17:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bia2.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bia2.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.7dayweekend.com
*.aidengzi123.com
*.article.name
*.babysleep.org
*.band-redrich.com
*.bia2.org
*.blogoguru.com
*.btigershoping.com
*.chiringuito.com
*.delandstockyard.com
*.downloadbrowseratonce.com
*.dvgmidland.com.au
*.easyiphoneunlocking.com
*.ellsworthpaving.com
*.ernaehrungsperatung.de
*.everythinghurricane.com
*.faroundandfindout.com
*.findgolfcourse.com
*.hardshipbenefit.com
*.idrlavs.com
*.ivlevshop.com
*.jcacompetition.com
*.jetbrsins.com
*.jooseshop.com
*.lostarmour.net
*.mittelohretzuendung.de
*.newbalancr.com
*.novaparnamirim.com.br
*.oluwaseto.com
*.onlineclothing.com.au
*.passes.com.au
*.predtigeportraits.com
*.prosiebende.com
*.putasamor.com
*.qdhll.net
*.racekook.com
*.reilitor.com
*.safelinkwirelessca.com
*.schuessler-salz-34.de
*.shopaveratec.co
*.shreyan.com
*.soconnetworking.com
*.stteammit.me
*.teachbonzia.com
*.usa-hookups.com
*.wholesalecontracts.com
*.xn--steuere4rklrung-blb.de
*.xn--ysteuererklrung-blb.de
*.xps.au
*.zuckerknackerdiaet.de
7dayweekend.com
aidengzi123.com
article.name
babysleep.org
band-redrich.com
bia2.org
blogoguru.com
btigershoping.com
chiringuito.com
delandstockyard.com
downloadbrowseratonce.com
dvgmidland.com.au
easyiphoneunlocking.com
ellsworthpaving.com
ernaehrungsperatung.de
everythinghurricane.com
faroundandfindout.com
findgolfcourse.com
hardshipbenefit.com
idrlavs.com
ivlevshop.com
jcacompetition.com
jetbrsins.com
jooseshop.com
lostarmour.net
mittelohretzuendung.de
newbalancr.com
novaparnamirim.com.br
oluwaseto.com
onlineclothing.com.au
passes.com.au
predtigeportraits.com
prosiebende.com
putasamor.com
qdhll.net
racekook.com
reilitor.com
safelinkwirelessca.com
schuessler-salz-34.de
shopaveratec.co
shreyan.com
soconnetworking.com
stteammit.me
teachbonzia.com
usa-hookups.com
wholesalecontracts.com
xn--steuere4rklrung-blb.de
xn--ysteuererklrung-blb.de
xps.au
zuckerknackerdiaet.de

Other certificates including the domain name bia2.org

(limited to 100 certificates)
bia2.org
mylifewithyou.co.uk
medco.online
o2onluine.de
bia2.org
bia2.org
bia2.org
blackbull-wark.co.uk
computerupgrade.com.au
checkingaccountonline.org
bia2.org
bia2.org

Certificate

The complete raw certificate details for bia2.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINfzCCDGegAwIBAgISBDnVTmgjSAE2Mx6Buo/ua8QZMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTUwNzA4MTBaFw0yNDA0MTQwNzA4MDlaMBMxETAPBgNVBAMT
CGJpYTIub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvgrHVNqz
Lti6zIwrean9bBfTRrLn1uS3FA0A4gA3Eg7N+EyiEbe50u0L0mAXKZ/E+1E3GLsM
H/9z/1SVNdZTjsRFVLI70gHaABnOaKJZiQTuQujs5qr4Y4LPZDVbkd7tmMf9CDBk
+n/5hf0nPEVaieob9ZfYDveVRzHxG1SNcmzPCSxqXxvj8gnae9IyVQyY7b9tUnNT
olOAw4qoQ3Jxnebr44SsRwjjC7n7Hntqj1aW57qiR8DNPqMqQDAcZNdxmIKCkKDC
y6Lk8KE6VqeOXIhgHDz/XpwrEromk3R5Db49dRwci5N4GMZuy4W4uM1rJFy/CisL
aW4g4r00TpvyuDed0kfxlOmnUeC2Z3sqTY6/f0TGD9jyrglhMvlCII7wAkE4fkEK
T7+ALhv2DJMLlypT4oWP0+faqLX3k4Igd+taM/jJu8O7XRvbdb1uLlB06dm4S2tt
SJQvgxFc65HR7fTNQXGuThXE9GTIS7K/EwwAzVEXr4VXK63/Wdo4Y4ApPVBXsVOg
xDrWp6fdtM0NJOmZPM4NgyRhnKTQT5OD1idqKnfLAxborvjh5LX9GCAHgn1nAhD8
IEibNorQt18wjJoL0ksQRvrkRLE5YsjRS+o0+uBB4DLm50K+dKnoaludfqrdgOsa
HSy8Ggd34eG+EgK4sYNPAGTY9/udXIfp02cCAwEAAaOCCawwggmoMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUOF09STF0dMG46vL1mHu804FWDu4wHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggezBgNVHREEggeqMIIHpoIRKi43ZGF5d2Vla2VuZC5jb22C
ESouYWlkZW5nemkxMjMuY29tgg4qLmFydGljbGUubmFtZYIPKi5iYWJ5c2xlZXAu
b3JnghIqLmJhbmQtcmVkcmljaC5jb22CCiouYmlhMi5vcmeCDyouYmxvZ29ndXJ1
LmNvbYITKi5idGlnZXJzaG9waW5nLmNvbYIRKi5jaGlyaW5ndWl0by5jb22CFSou
ZGVsYW5kc3RvY2t5YXJkLmNvbYIbKi5kb3dubG9hZGJyb3dzZXJhdG9uY2UuY29t
ghMqLmR2Z21pZGxhbmQuY29tLmF1ghkqLmVhc3lpcGhvbmV1bmxvY2tpbmcuY29t
ghUqLmVsbHN3b3J0aHBhdmluZy5jb22CGCouZXJuYWVocnVuZ3NwZXJhdHVuZy5k
ZYIZKi5ldmVyeXRoaW5naHVycmljYW5lLmNvbYIXKi5mYXJvdW5kYW5kZmluZG91
dC5jb22CFCouZmluZGdvbGZjb3Vyc2UuY29tghUqLmhhcmRzaGlwYmVuZWZpdC5j
b22CDSouaWRybGF2cy5jb22CDyouaXZsZXZzaG9wLmNvbYIUKi5qY2Fjb21wZXRp
dGlvbi5jb22CDyouamV0YnJzaW5zLmNvbYIPKi5qb29zZXNob3AuY29tghAqLmxv
c3Rhcm1vdXIubmV0ghgqLm1pdHRlbG9ocmV0enVlbmR1bmcuZGWCECoubmV3YmFs
YW5jci5jb22CFyoubm92YXBhcm5hbWlyaW0uY29tLmJygg8qLm9sdXdhc2V0by5j
b22CFyoub25saW5lY2xvdGhpbmcuY29tLmF1gg8qLnBhc3Nlcy5jb20uYXWCFyou
cHJlZHRpZ2Vwb3J0cmFpdHMuY29tghEqLnByb3NpZWJlbmRlLmNvbYIPKi5wdXRh
c2Ftb3IuY29tggsqLnFkaGxsLm5ldIIOKi5yYWNla29vay5jb22CDioucmVpbGl0
b3IuY29tghgqLnNhZmVsaW5rd2lyZWxlc3NjYS5jb22CFyouc2NodWVzc2xlci1z
YWx6LTM0LmRlghEqLnNob3BhdmVyYXRlYy5jb4INKi5zaHJleWFuLmNvbYIVKi5z
b2Nvbm5ldHdvcmtpbmcuY29tgg4qLnN0dGVhbW1pdC5tZYIRKi50ZWFjaGJvbnpp
YS5jb22CESoudXNhLWhvb2t1cHMuY29tghgqLndob2xlc2FsZWNvbnRyYWN0cy5j
b22CHCoueG4tLXN0ZXVlcmU0cmtscnVuZy1ibGIuZGWCHCoueG4tLXlzdGV1ZXJl
cmtscnVuZy1ibGIuZGWCCCoueHBzLmF1ghcqLnp1Y2tlcmtuYWNrZXJkaWFldC5k
ZYIPN2RheXdlZWtlbmQuY29tgg9haWRlbmd6aTEyMy5jb22CDGFydGljbGUubmFt
ZYINYmFieXNsZWVwLm9yZ4IQYmFuZC1yZWRyaWNoLmNvbYIIYmlhMi5vcmeCDWJs
b2dvZ3VydS5jb22CEWJ0aWdlcnNob3BpbmcuY29tgg9jaGlyaW5ndWl0by5jb22C
E2RlbGFuZHN0b2NreWFyZC5jb22CGWRvd25sb2FkYnJvd3NlcmF0b25jZS5jb22C
EWR2Z21pZGxhbmQuY29tLmF1ghdlYXN5aXBob25ldW5sb2NraW5nLmNvbYITZWxs
c3dvcnRocGF2aW5nLmNvbYIWZXJuYWVocnVuZ3NwZXJhdHVuZy5kZYIXZXZlcnl0
aGluZ2h1cnJpY2FuZS5jb22CFWZhcm91bmRhbmRmaW5kb3V0LmNvbYISZmluZGdv
bGZjb3Vyc2UuY29tghNoYXJkc2hpcGJlbmVmaXQuY29tggtpZHJsYXZzLmNvbYIN
aXZsZXZzaG9wLmNvbYISamNhY29tcGV0aXRpb24uY29tgg1qZXRicnNpbnMuY29t
gg1qb29zZXNob3AuY29tgg5sb3N0YXJtb3VyLm5ldIIWbWl0dGVsb2hyZXR6dWVu
ZHVuZy5kZYIObmV3YmFsYW5jci5jb22CFW5vdmFwYXJuYW1pcmltLmNvbS5icoIN
b2x1d2FzZXRvLmNvbYIVb25saW5lY2xvdGhpbmcuY29tLmF1gg1wYXNzZXMuY29t
LmF1ghVwcmVkdGlnZXBvcnRyYWl0cy5jb22CD3Byb3NpZWJlbmRlLmNvbYINcHV0
YXNhbW9yLmNvbYIJcWRobGwubmV0ggxyYWNla29vay5jb22CDHJlaWxpdG9yLmNv
bYIWc2FmZWxpbmt3aXJlbGVzc2NhLmNvbYIVc2NodWVzc2xlci1zYWx6LTM0LmRl
gg9zaG9wYXZlcmF0ZWMuY2+CC3NocmV5YW4uY29tghNzb2Nvbm5ldHdvcmtpbmcu
Y29tggxzdHRlYW1taXQubWWCD3RlYWNoYm9uemlhLmNvbYIPdXNhLWhvb2t1cHMu
Y29tghZ3aG9sZXNhbGVjb250cmFjdHMuY29tghp4bi0tc3RldWVyZTRya2xydW5n
LWJsYi5kZYIaeG4tLXlzdGV1ZXJlcmtscnVuZy1ibGIuZGWCBnhwcy5hdYIVenVj
a2Vya25hY2tlcmRpYWV0LmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznY
hHMAAAGNDCnr9gAABAMASDBGAiEAu9KOpA9NNau0ls/icSZGpbo1GizRUMVGQRQL
AcKKNAkCIQC7L/tlReVSr7Qw4GezZL3nmrhS/D6Aoy/OTJN3yAPptQB1AHb/iD8K
tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjQwp7JsAAAQDAEYwRAIgbhlf
rTTkuwyAa3Vptof2TZ+KTqhs1pPQBCTQuHPMQ5ICIFIRqVQU50lPpdW3Mf6J+lP7
u5cqH+2Lle4nx5ltt0meMA0GCSqGSIb3DQEBCwUAA4IBAQBBwM5pic7QYf9+cmyH
JR9f29UxUZThizSpZuXqHUhn91yRYETJmbSKJKAnTVkXwVtJQci2OVrlwDaESCR/
8GOrkMf+wZoGAZsk4G+mES9f1FARZ2zUxePjsEUVZLdF53+DYvR63NpWkM/Mh/pT
+wos00HO1wFvWYx7fovubbyt2rD96wN9wPfJ9mQAkym30igES+Mm989qHKiftaNv
bdEIitpTtZm8V8oyHVY9ebRkpUsq3INY9lGmQZh5Pb7xO9XAqoty+KPGcQTGSykT
lrdwdC1wa13/0tpGxenZWzEVxP4nb97klAbcv/BEF3aMd6U4ppXDmKfYDmuNvhdM
EcOo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368128771315957500654748191548100865410073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 07:08:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 07:08:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bia2.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775304142489117123496860944590829577542936583398721449672974989971539148596732192022598303155011551259558356863322168336266476399779397250358624409888731884794407161552976126545928865652997443098969792885651568533952408397717923034160127643333458884490902090124491052391914315595152910780133631726748895736358031842237124430961711755942193618058690211542476774184183990778042532797864357509576871337676018824495924815659616771532017489389127700507137474973339157169395578969189051007213301333505228099882655135685426318260503073346334127483595627239925006169134351166018815002783118712721631081085114254130549241140659904525083902573776072363335050417046095314044839557396959473301381878777733968182467973237205253724994623567979243670312109207163397472175893062660990112738192402793029060533044747382230056204628938715595694889902248658466086112951003349630618595824523919430100723829001128710410491314537859443261786225052683952736107977235312669882627068514836317350539571576847916328983682739422369197792991272437203346533010001175266129558836457425447858644851346468851675691974678538765827004319415216140343964012418654904561217728391415553085176003900546236322421331859142627012203024315189382464337989488111725486643541037927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							385d3d49317474c1b8eaf2f5987bbcd381560eee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7dayweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aidengzi123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.article.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babysleep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.band-redrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bia2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogoguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btigershoping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiringuito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delandstockyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadbrowseratonce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dvgmidland.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyiphoneunlocking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellsworthpaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ernaehrungsperatung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everythinghurricane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faroundandfindout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findgolfcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardshipbenefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idrlavs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivlevshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcacompetition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetbrsins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jooseshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lostarmour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mittelohretzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newbalancr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novaparnamirim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oluwaseto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlineclothing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.predtigeportraits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prosiebende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.putasamor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qdhll.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racekook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reilitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safelinkwirelessca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-salz-34.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopaveratec.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shreyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soconnetworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stteammit.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachbonzia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usa-hookups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholesalecontracts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuere4rklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ysteuererklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xps.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuckerknackerdiaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7dayweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidengzi123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babysleep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'band-redrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bia2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogoguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btigershoping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiringuito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delandstockyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadbrowseratonce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvgmidland.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyiphoneunlocking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellsworthpaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ernaehrungsperatung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythinghurricane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faroundandfindout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findgolfcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardshipbenefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrlavs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivlevshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcacompetition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetbrsins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jooseshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostarmour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mittelohretzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbalancr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novaparnamirim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oluwaseto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineclothing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predtigeportraits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosiebende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putasamor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qdhll.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racekook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reilitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safelinkwirelessca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-salz-34.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopaveratec.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soconnetworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stteammit.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachbonzia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa-hookups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalecontracts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuere4rklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ysteuererklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xps.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuckerknackerdiaet.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0c29ebf60000040300483046022100bbd28ea40f4d35abb496cfe2712646a5ba351a2cd150c54641140b01c28a3409022100bb2ffb6545e552afb430e067b364bde79ab852fc3e80a32fce4c9377c803e9b500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d0c29ec9b000004030046304402206e195fad34e4bb0c806b7569b687f64d9f8a4ea86cd693d00424d0b873cc439202205211a95414e7494fa5d5b731fe89fa53fbbb972a1fed8b95ee27c7996db7499e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0041c0ce6989ced061ff7e726c87251f5fdbd5315194e18b34a966e5ea1d4867f75c916044c999b48a24a0274d5917c15b4941c8b6395ae5c0368448247ff063ab90c7fec19a06019b24e06fa6112f5fd45011676cd4c5e3e3b0451564b745e77f8362f47adcda5690cfcc87fa53fb0a2cd341ced7016f598c7b7e8bee6dbcaddab0fdeb037dc0f7c9f664009329b7d228044be326f7cf6a1ca89fb5a36f6dd1088ada53b599bc57ca321d563d79b464a54b2adc8358f651a64198793dbef13bd5c0aa8b72f8a3c67104c64b291396b770742d706b5dffd2da46c5e9d95b3115c4fe276fdee49406dcbff04417768c77a538a695c398a7d80e6b8dbe174c11c3a8