shanejustin.com

Issued by R3

About this certificate

This digital certificate with serial number 04:42:6b:71:e2:a2:ce:fb:a7:cd:68:be:9a:70:e3:36:b1:08 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shanejustin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:42:6b:71:e2:a2:ce:fb:a7:cd:68:be:9a:70:e3:36:b1:08
Serial Number (int): 371050598665640516506417645074651983294728
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f5:48:48:02:1e:c0:e9:20:f4:89:48:55:92:05:be:d2:ac:99:8f:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:e5:57:78:f1:02:10:2b:73:28:d7:73:6d:b8:01:6f:04:34:f9:fd
Fingerprint (sha256): d8:61:f4:0b:bd:10:87:96:a1:cb:29:49:b1:29:68:32:73:91:21:32:b2:48:40:33:79:91:64:dd:20:9b:80:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shanejustin.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shanejustin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.900degreezpizza.com
*.amindfulstudio.com
*.anicaclub.com
*.barbymodels.com
*.centurionam.com
*.chestnutcafeandeatery.com
*.collectableautomobile.com
*.conyacs.com
*.dondemeqtuendo.es
*.ehart.de
*.fastbody.com
*.firstnationationalcc.com
*.garmenconnect.com
*.gujaratitips.com
*.houltoninstitute.com
*.hpclearinghouse.net
*.infashpick.com
*.istioforosnews.com
*.jag-hair.com
*.kstueme.com
*.locuramarina63.com
*.lottothaibet.com
*.mcalts.com
*.mimxj.top
*.mitigationearnings.com
*.myparisvisit.com
*.nextstrait.cn
*.nyspri.com
*.nzproperty.com.au
*.oblogdakaren.com
*.ojtxhfug.com
*.omfcannabis.com
*.outlooo.com
*.pornochilango.com
*.practicalmaker.com
*.rentclothing.com
*.saitamaworld.net
*.secgamer.com
*.secureshop24.net
*.shanejustin.com
*.sims3cri.com
*.sixerscamp.com
*.sundevilletterwinner.com
*.termofisher.com
*.to2bebe.com
*.tostreams.tv
*.tuameglio.com
*.urbangym.es
*.vexyhvu.cn
*.yxs.de
900degreezpizza.com
amindfulstudio.com
anicaclub.com
barbymodels.com
centurionam.com
chestnutcafeandeatery.com
collectableautomobile.com
conyacs.com
dondemeqtuendo.es
ehart.de
fastbody.com
firstnationationalcc.com
garmenconnect.com
gujaratitips.com
houltoninstitute.com
hpclearinghouse.net
infashpick.com
istioforosnews.com
jag-hair.com
kstueme.com
locuramarina63.com
lottothaibet.com
mcalts.com
mimxj.top
mitigationearnings.com
myparisvisit.com
nextstrait.cn
nyspri.com
nzproperty.com.au
oblogdakaren.com
ojtxhfug.com
omfcannabis.com
outlooo.com
pornochilango.com
practicalmaker.com
rentclothing.com
saitamaworld.net
secgamer.com
secureshop24.net
shanejustin.com
sims3cri.com
sixerscamp.com
sundevilletterwinner.com
termofisher.com
to2bebe.com
tostreams.tv
tuameglio.com
urbangym.es
vexyhvu.cn
yxs.de

Other certificates including the domain name shanejustin.com

(limited to 100 certificates)
pusatgrosirsepatumurah.com
garminpilot.com
shanejustin.com
www.shanejustin.com
www.shanejustin.com
www.shanejustin.com
www.shanejustin.com
expages.com
shanejustin.com
chicksdelivery.com
www.shanejustin.com
www.shanejustin.com
www.shanejustin.com
wwwselecoes.com
ontarian.com
www.shanejustin.com
eleitesingles.com
www.shanejustin.com
ontarian.com
shanejustin.com
www.shanejustin.com
ontarian.com

Certificate

The complete raw certificate details for shanejustin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM7DCCC9SgAwIBAgISBEJrceKizvunzWi+mnDjNrEIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMDcxODQzNTZaFw0yNDA2MDUxODQzNTVaMBoxGDAWBgNVBAMT
D3NoYW5lanVzdGluLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
AMNbHrGZ3jauiLCnsHLSsNru4z3pTmRYRiECaPhxl5Bmo1/lrxRk65ShPmkNQ7cz
bSsi5tbbVmtQZHhkIqr63/kqrpHf0ZEsDtHrgPzr4jBwHitk8wkvUixf8+0zBqY4
bzVNQh1tJgWI+9LCfyrnBAB7G5Gi9j9hKvmt/HaYVmhPGrO7FjhGRQTri+ZToNrt
ijRg8IMx2qJMbg0ttTf1B4izn0Jgndy9qqKx2sjNuInAY9Otegs0YCDyZo5XjA2i
JhzcV5xKSU/sBaVZ/EcNad484I/lbBe/bbD90eh0l2lkPLaVt2x4uWzZj4JYnEmX
o3NuU7GA9Q6Gjxp+bk1JpokaKRGFGGcjjtFA5NE5zJoOsg73fFO2P4sXxKUPsw8N
oSuR3fZN/o8Qj2QfooVnhOd59Bj9hcHt8FL+VhzD2ZtDZ73H+8YpxKuGieGc3cqP
qGOro52RZZOfUtdlygJ2E8J+lkyz0ZquKFMjSwNU2LuP9EE5qC6rBOpgiVsOdmlm
AnMFi7ESuybrvlKk4/cOeIBYqI5zO8sIL/Q/N0H8RutBJz73/YQMkohZDihf6Xl9
U8EbzKTHjAUUeIG2nhdMHxuEwuuHotQkXYChrrlSlfts4RFLsapcSFlc2Axw6yXo
GF3ZRSslctylTJIi9zwyXNbjaYDiVcCzFhnqhUNwWKsnAgMBAAGjggkSMIIJDjAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFPVISAIewOkg9IlIVZIFvtKsmY87MB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMIIHGQYDVR0RBIIHEDCCBwyCFSouOTAwZGVncmVl
enBpenphLmNvbYIUKi5hbWluZGZ1bHN0dWRpby5jb22CDyouYW5pY2FjbHViLmNv
bYIRKi5iYXJieW1vZGVscy5jb22CESouY2VudHVyaW9uYW0uY29tghsqLmNoZXN0
bnV0Y2FmZWFuZGVhdGVyeS5jb22CGyouY29sbGVjdGFibGVhdXRvbW9iaWxlLmNv
bYINKi5jb255YWNzLmNvbYITKi5kb25kZW1lcXR1ZW5kby5lc4IKKi5laGFydC5k
ZYIOKi5mYXN0Ym9keS5jb22CGiouZmlyc3RuYXRpb25hdGlvbmFsY2MuY29tghMq
Lmdhcm1lbmNvbm5lY3QuY29tghIqLmd1amFyYXRpdGlwcy5jb22CFiouaG91bHRv
bmluc3RpdHV0ZS5jb22CFSouaHBjbGVhcmluZ2hvdXNlLm5ldIIQKi5pbmZhc2hw
aWNrLmNvbYIUKi5pc3Rpb2Zvcm9zbmV3cy5jb22CDiouamFnLWhhaXIuY29tgg0q
LmtzdHVlbWUuY29tghQqLmxvY3VyYW1hcmluYTYzLmNvbYISKi5sb3R0b3RoYWli
ZXQuY29tggwqLm1jYWx0cy5jb22CCyoubWlteGoudG9wghgqLm1pdGlnYXRpb25l
YXJuaW5ncy5jb22CEioubXlwYXJpc3Zpc2l0LmNvbYIPKi5uZXh0c3RyYWl0LmNu
ggwqLm55c3ByaS5jb22CEyoubnpwcm9wZXJ0eS5jb20uYXWCEioub2Jsb2dkYWth
cmVuLmNvbYIOKi5vanR4aGZ1Zy5jb22CESoub21mY2FubmFiaXMuY29tgg0qLm91
dGxvb28uY29tghMqLnBvcm5vY2hpbGFuZ28uY29tghQqLnByYWN0aWNhbG1ha2Vy
LmNvbYISKi5yZW50Y2xvdGhpbmcuY29tghIqLnNhaXRhbWF3b3JsZC5uZXSCDiou
c2VjZ2FtZXIuY29tghIqLnNlY3VyZXNob3AyNC5uZXSCESouc2hhbmVqdXN0aW4u
Y29tgg4qLnNpbXMzY3JpLmNvbYIQKi5zaXhlcnNjYW1wLmNvbYIaKi5zdW5kZXZp
bGxldHRlcndpbm5lci5jb22CESoudGVybW9maXNoZXIuY29tgg0qLnRvMmJlYmUu
Y29tgg4qLnRvc3RyZWFtcy50doIPKi50dWFtZWdsaW8uY29tgg0qLnVyYmFuZ3lt
LmVzggwqLnZleHlodnUuY26CCCoueXhzLmRlghM5MDBkZWdyZWV6cGl6emEuY29t
ghJhbWluZGZ1bHN0dWRpby5jb22CDWFuaWNhY2x1Yi5jb22CD2JhcmJ5bW9kZWxz
LmNvbYIPY2VudHVyaW9uYW0uY29tghljaGVzdG51dGNhZmVhbmRlYXRlcnkuY29t
ghljb2xsZWN0YWJsZWF1dG9tb2JpbGUuY29tggtjb255YWNzLmNvbYIRZG9uZGVt
ZXF0dWVuZG8uZXOCCGVoYXJ0LmRlggxmYXN0Ym9keS5jb22CGGZpcnN0bmF0aW9u
YXRpb25hbGNjLmNvbYIRZ2FybWVuY29ubmVjdC5jb22CEGd1amFyYXRpdGlwcy5j
b22CFGhvdWx0b25pbnN0aXR1dGUuY29tghNocGNsZWFyaW5naG91c2UubmV0gg5p
bmZhc2hwaWNrLmNvbYISaXN0aW9mb3Jvc25ld3MuY29tggxqYWctaGFpci5jb22C
C2tzdHVlbWUuY29tghJsb2N1cmFtYXJpbmE2My5jb22CEGxvdHRvdGhhaWJldC5j
b22CCm1jYWx0cy5jb22CCW1pbXhqLnRvcIIWbWl0aWdhdGlvbmVhcm5pbmdzLmNv
bYIQbXlwYXJpc3Zpc2l0LmNvbYINbmV4dHN0cmFpdC5jboIKbnlzcHJpLmNvbYIR
bnpwcm9wZXJ0eS5jb20uYXWCEG9ibG9nZGFrYXJlbi5jb22CDG9qdHhoZnVnLmNv
bYIPb21mY2FubmFiaXMuY29tggtvdXRsb29vLmNvbYIRcG9ybm9jaGlsYW5nby5j
b22CEnByYWN0aWNhbG1ha2VyLmNvbYIQcmVudGNsb3RoaW5nLmNvbYIQc2FpdGFt
YXdvcmxkLm5ldIIMc2VjZ2FtZXIuY29tghBzZWN1cmVzaG9wMjQubmV0gg9zaGFu
ZWp1c3Rpbi5jb22CDHNpbXMzY3JpLmNvbYIOc2l4ZXJzY2FtcC5jb22CGHN1bmRl
dmlsbGV0dGVyd2lubmVyLmNvbYIPdGVybW9maXNoZXIuY29tggt0bzJiZWJlLmNv
bYIMdG9zdHJlYW1zLnR2gg10dWFtZWdsaW8uY29tggt1cmJhbmd5bS5lc4IKdmV4
eWh2dS5jboIGeXhzLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcA
AAGOGnGaiwAABAMARzBFAiBMivMWzJJgNd4viaLWCwOTzwvG/ZZndXvpp9RSekek
owIhANCPkoa+l4I10QticwXyM+aoPFYPkW9n0ZlTKRY7e8MsAHYAdv+IPwq2+5VR
wmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOGnGctwAABAMARzBFAiBpboi40FUn
/mttvlqYfXnPVylCIOmr6USA4ausgDld/QIhAM2k7oqJs+2OtUuQxpecTBfxsxOV
9zg4kEDr2BVyvZmOMA0GCSqGSIb3DQEBCwUAA4IBAQA83mJcXdRqr4lIEpZN3Ybw
CfPm0yXcyb9tRra2HgiOEFdgOJ7yKGXD2ufIcWREELe61EhrbsAnRn6iQvZXaCRr
1Vc/jCID/PZaR2vsSSfdmrxfFuXAKIFDQxZTgC6dmLHRml4clvA3dXXyYd27bQzu
TXYdkdRpGZmBNN023KSsLGLwuYvhBDLirIvg/NQzWymdeYgLb3HvWZOsB+oGCE4H
ApfPYVTsUcQLTbbyPGVNAvNnqiyipIQXcP99coCIXsy9Ezfh3jvuFWM8Vqiadc89
r64tPOvmmRrOH75V3qXbGqrTw2isVPOi6k5ZqjuZAuy5Hyd8fZtLJ1KjAM2iLRbq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371050598665640516506417645074651983294728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 18:43:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 18:43:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shanejustin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796982689940566517358497395097479251722678675521785947394019077308409704893221146243591745162366993401095688281057174998404206492490753153423159180645947470852838083833839922285232428801771398272653992245647249940930603414492816041879413634997547272893393072551145093717514824616246692953948383361066307146459218822003126213115674487698492082765804577107549926398546897849663641384981593956330528638290947244423893944798997879750741124372406438306934056256538245439894676924407933915830625872376814738367224742502123297892281484197029517689091126142169738904266960532919687235363027200237667245239995631506493885183627835380433639526011578490161134312605412912973335828624554686180614631221271520603165482355953510574451627554460379342194864175945241908789228974420657567223364289985312072652131514726160508515473101495317785447029689817332402344264066126912081119428972983425983021929288697582873515152167119380201389014136505903564253388706254754692643291386472586397661535623967979190584206416342768434585221801585065448516476466119882543495398024026546241982759462440010451638484444551402782095377234181469759030548277288483043740263305016917318022513060686382694405230973532171717291275196301921312759545654829900420033875061543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f54848021ec0e920f48948559205bed2ac998f3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1808 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.900degreezpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amindfulstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anicaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbymodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centurionam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chestnutcafeandeatery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collectableautomobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conyacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dondemeqtuendo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstnationationalcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garmenconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gujaratitips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houltoninstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpclearinghouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infashpick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istioforosnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jag-hair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kstueme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locuramarina63.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lottothaibet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcalts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mimxj.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitigationearnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myparisvisit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextstrait.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyspri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oblogdakaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ojtxhfug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omfcannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outlooo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornochilango.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.practicalmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saitamaworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secgamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secureshop24.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shanejustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sims3cri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixerscamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sundevilletterwinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.termofisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.to2bebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tostreams.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuameglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbangym.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vexyhvu.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yxs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '900degreezpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amindfulstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anicaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbymodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurionam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chestnutcafeandeatery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectableautomobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conyacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dondemeqtuendo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstnationationalcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garmenconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gujaratitips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houltoninstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpclearinghouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infashpick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istioforosnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jag-hair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kstueme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locuramarina63.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottothaibet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcalts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimxj.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitigationearnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myparisvisit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextstrait.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyspri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oblogdakaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojtxhfug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omfcannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlooo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornochilango.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practicalmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saitamaworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secgamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureshop24.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanejustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sims3cri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixerscamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sundevilletterwinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termofisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'to2bebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tostreams.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuameglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbangym.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vexyhvu.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yxs.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e1a719a8b000004030047304502204c8af316cc926035de2f89a2d60b0393cf0bc6fd9667757be9a7d4527a47a4a3022100d08f9286be978235d10b627305f233e6a83c560f916f67d1995329163b7bc32c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e1a719cb700000403004730450220696e88b8d05527fe6b6dbe5a987d79cf57294220e9abe94480e1abac80395dfd022100cda4ee8a89b3ed8eb54b90c6979c4c17f1b31395f738389040ebd81572bd998e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003cde625c5dd46aaf894812964ddd86f009f3e6d325dcc9bf6d46b6b61e088e105760389ef22865c3dae7c871644410b7bad4486b6ec027467ea242f65768246bd5573f8c2203fcf65a476bec4927dd9abc5f16e5c0288143431653802e9d98b1d19a5e1c96f0377575f261ddbb6d0cee4d761d91d46919998134dd36dca4ac2c62f0b98be10432e2ac8be0fcd4335b299d79880b6f71ef5993ac07ea06084e070297cf6154ec51c40b4db6f23c654d02f367aa2ca2a4841770ff7d7280885eccbd1337e1de3bee15633c56a89a75cf3dafae2d3cebe6991ace1fbe55dea5db1aaad3c368ac54f3a2ea4e59aa3b9902ecb91f277c7d9b4b2752a300cda22d16ea