skimthefat.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:e3:39:05:ee:bb:b3:b0:fc:1a:15:f7:a8:ce:f1:77:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=skimthefat.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:5d:e3:39:05:ee:bb:b3:b0:fc:1a:15:f7:a8:ce:f1:77:15
Serial Number (int): 380397434686978817703911954128089279198997
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:df:d1:2d:a5:90:cf:cf:ea:2d:43:60:3f:09:19:a5:33:a6:3c:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:a0:5c:9e:de:cc:66:f1:55:d5:63:cd:7c:f1:aa:b5:8a:da:24:15
Fingerprint (sha256): da:41:ab:9e:ec:ad:ab:2a:52:70:cf:09:1e:32:b0:5e:14:40:e6:e0:27:f8:3c:56:9c:7c:91:0f:cc:67:3a:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate skimthefat.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skimthefat.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.21pubnative.net
*.4980.in
*.520se.com
*.acasadochopp.com
*.ameromarket.com
*.arteemodafirenze.com
*.autoenlinea.com
*.bloomndales.com
*.currentbitcoinexchangerate.com
*.delicatedeliveryservice.online
*.diinvestasi.com
*.financialcalculator.com
*.fmyfreecams.com
*.galereya.biz
*.gbresort.com
*.giampaolo.com
*.hammaacher.com
*.hearthstonedecks.net
*.hotoles.com
*.howtocakes.com
*.hsaeci.com
*.indianastudentloans.com
*.italiankeywords.com
*.kohamaoficial.com
*.laspiedras.com
*.livgrades.com
*.macen.com
*.morgageeducation.com
*.myscigna.com
*.nameingmagic.com
*.navufederal.com
*.nilestany.com
*.nishimuro.com
*.ollie.com.au
*.onani2.com
*.onlyinpgh.com
*.phim3x.online
*.poeplaner.com
*.served.com.au
*.skimthefat.com
*.sodexco-international.com
*.spaeker.com
*.theapp.com.au
*.torah.com.au
*.uconfrim.com
*.vienthammyarina.com
*.walletinvestir.com
*.walmartmoneycards.com
*.whalic.com
*.zinopziz.com
21pubnative.net
4980.in
520se.com
acasadochopp.com
ameromarket.com
arteemodafirenze.com
autoenlinea.com
bloomndales.com
currentbitcoinexchangerate.com
delicatedeliveryservice.online
diinvestasi.com
financialcalculator.com
fmyfreecams.com
galereya.biz
gbresort.com
giampaolo.com
hammaacher.com
hearthstonedecks.net
hotoles.com
howtocakes.com
hsaeci.com
indianastudentloans.com
italiankeywords.com
kohamaoficial.com
laspiedras.com
livgrades.com
macen.com
morgageeducation.com
myscigna.com
nameingmagic.com
navufederal.com
nilestany.com
nishimuro.com
ollie.com.au
onani2.com
onlyinpgh.com
phim3x.online
poeplaner.com
served.com.au
skimthefat.com
sodexco-international.com
spaeker.com
theapp.com.au
torah.com.au
uconfrim.com
vienthammyarina.com
walletinvestir.com
walmartmoneycards.com
whalic.com
zinopziz.com

Other certificates including the domain name skimthefat.com

(limited to 100 certificates)
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com
skimthefat.com

Certificate

The complete raw certificate details for skimthefat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM9DCCC9ygAwIBAgISBF3jOQXuu7Ow/BoV96jO8XcVMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDgwNDE4MzVaFw0yNDA1MDgwNDE4MzRaMBkxFzAVBgNVBAMT
DnNraW10aGVmYXQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
tWOPHG93wnqVLW2SYjhcjemxJhUOs5KBAFUUs5iyydgle0Blm0qGNT0oxbA9SB0Z
lM9NRiuUsQq642vbNbPzWc8bdZliylqOFGplYQtSDSoU0iUJ3NzyK6tg1Wnc4HrA
Ceas3dxwgsbWbOxFy1X3bEeMZczDtWbecwVTDPHLazC3PyMuyWkR7P7QFAej1rN4
0gTCZuuv5vnabBGAXhFo0qJEen+n60QhUnaNbeqoGSO//TphVqC4flNH5Zwletsb
3KQr8c+ijQNvUaIy56X1z6GJVnuicvQoisIeullrSGi6Lp4+CCp20MdOhMm19kY0
+x98yCjs3epWOmYHUA1fAyloJsQBwnJklV/jlAnXSK9Erbr40pc9vXqtRebmS+nh
JQ+5xRme5jS+aIobtNS4ovEA+uKqYzE+iVE/7AuyCZq/uEaaxo3ypT4+KIoXenvD
4+ZGj4dJ+c11CYjJ55F4cef1t5u95ecSAyy79zAKc3QJrsc3jvdgo4CJLO8YlZPc
7WFo/geQv3qnly5eUOizxqDlGPIji2dWSgT4kFU4CQVjdeJXvHFqlIG/zQWJTyYW
7BI9Kkqvyrl6sw2StSPjrshkzQ12iMaCgbRO5bcmpdHvRAhanA4lEIwbfzdHDQ7h
6W1Aojr95P/ULahtAzzWBNdmdZjOQjj+KhFcjzUEhaUCAwEAAaOCCRswggkXMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUvt/RLaWQz8/qLUNgPwkZpTOmPFswHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggchBgNVHREEggcYMIIHFIIRKi4yMXB1Ym5hdGl2
ZS5uZXSCCSouNDk4MC5pboILKi41MjBzZS5jb22CEiouYWNhc2Fkb2Nob3BwLmNv
bYIRKi5hbWVyb21hcmtldC5jb22CFiouYXJ0ZWVtb2RhZmlyZW56ZS5jb22CESou
YXV0b2VubGluZWEuY29tghEqLmJsb29tbmRhbGVzLmNvbYIgKi5jdXJyZW50Yml0
Y29pbmV4Y2hhbmdlcmF0ZS5jb22CICouZGVsaWNhdGVkZWxpdmVyeXNlcnZpY2Uu
b25saW5lghEqLmRpaW52ZXN0YXNpLmNvbYIZKi5maW5hbmNpYWxjYWxjdWxhdG9y
LmNvbYIRKi5mbXlmcmVlY2Ftcy5jb22CDiouZ2FsZXJleWEuYml6gg4qLmdicmVz
b3J0LmNvbYIPKi5naWFtcGFvbG8uY29tghAqLmhhbW1hYWNoZXIuY29tghYqLmhl
YXJ0aHN0b25lZGVja3MubmV0gg0qLmhvdG9sZXMuY29tghAqLmhvd3RvY2FrZXMu
Y29tggwqLmhzYWVjaS5jb22CGSouaW5kaWFuYXN0dWRlbnRsb2Fucy5jb22CFSou
aXRhbGlhbmtleXdvcmRzLmNvbYITKi5rb2hhbWFvZmljaWFsLmNvbYIQKi5sYXNw
aWVkcmFzLmNvbYIPKi5saXZncmFkZXMuY29tggsqLm1hY2VuLmNvbYIWKi5tb3Jn
YWdlZWR1Y2F0aW9uLmNvbYIOKi5teXNjaWduYS5jb22CEioubmFtZWluZ21hZ2lj
LmNvbYIRKi5uYXZ1ZmVkZXJhbC5jb22CDyoubmlsZXN0YW55LmNvbYIPKi5uaXNo
aW11cm8uY29tgg4qLm9sbGllLmNvbS5hdYIMKi5vbmFuaTIuY29tgg8qLm9ubHlp
bnBnaC5jb22CDyoucGhpbTN4Lm9ubGluZYIPKi5wb2VwbGFuZXIuY29tgg8qLnNl
cnZlZC5jb20uYXWCECouc2tpbXRoZWZhdC5jb22CGyouc29kZXhjby1pbnRlcm5h
dGlvbmFsLmNvbYINKi5zcGFla2VyLmNvbYIPKi50aGVhcHAuY29tLmF1gg4qLnRv
cmFoLmNvbS5hdYIOKi51Y29uZnJpbS5jb22CFSoudmllbnRoYW1teWFyaW5hLmNv
bYIUKi53YWxsZXRpbnZlc3Rpci5jb22CFyoud2FsbWFydG1vbmV5Y2FyZHMuY29t
ggwqLndoYWxpYy5jb22CDiouemlub3B6aXouY29tgg8yMXB1Ym5hdGl2ZS5uZXSC
BzQ5ODAuaW6CCTUyMHNlLmNvbYIQYWNhc2Fkb2Nob3BwLmNvbYIPYW1lcm9tYXJr
ZXQuY29tghRhcnRlZW1vZGFmaXJlbnplLmNvbYIPYXV0b2VubGluZWEuY29tgg9i
bG9vbW5kYWxlcy5jb22CHmN1cnJlbnRiaXRjb2luZXhjaGFuZ2VyYXRlLmNvbYIe
ZGVsaWNhdGVkZWxpdmVyeXNlcnZpY2Uub25saW5lgg9kaWludmVzdGFzaS5jb22C
F2ZpbmFuY2lhbGNhbGN1bGF0b3IuY29tgg9mbXlmcmVlY2Ftcy5jb22CDGdhbGVy
ZXlhLmJpeoIMZ2JyZXNvcnQuY29tgg1naWFtcGFvbG8uY29tgg5oYW1tYWFjaGVy
LmNvbYIUaGVhcnRoc3RvbmVkZWNrcy5uZXSCC2hvdG9sZXMuY29tgg5ob3d0b2Nh
a2VzLmNvbYIKaHNhZWNpLmNvbYIXaW5kaWFuYXN0dWRlbnRsb2Fucy5jb22CE2l0
YWxpYW5rZXl3b3Jkcy5jb22CEWtvaGFtYW9maWNpYWwuY29tgg5sYXNwaWVkcmFz
LmNvbYINbGl2Z3JhZGVzLmNvbYIJbWFjZW4uY29tghRtb3JnYWdlZWR1Y2F0aW9u
LmNvbYIMbXlzY2lnbmEuY29tghBuYW1laW5nbWFnaWMuY29tgg9uYXZ1ZmVkZXJh
bC5jb22CDW5pbGVzdGFueS5jb22CDW5pc2hpbXVyby5jb22CDG9sbGllLmNvbS5h
dYIKb25hbmkyLmNvbYINb25seWlucGdoLmNvbYINcGhpbTN4Lm9ubGluZYINcG9l
cGxhbmVyLmNvbYINc2VydmVkLmNvbS5hdYIOc2tpbXRoZWZhdC5jb22CGXNvZGV4
Y28taW50ZXJuYXRpb25hbC5jb22CC3NwYWVrZXIuY29tgg10aGVhcHAuY29tLmF1
ggx0b3JhaC5jb20uYXWCDHVjb25mcmltLmNvbYITdmllbnRoYW1teWFyaW5hLmNv
bYISd2FsbGV0aW52ZXN0aXIuY29tghV3YWxtYXJ0bW9uZXljYXJkcy5jb22CCndo
YWxpYy5jb22CDHppbm9weml6LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI
WUZxH7WbAAABjYcnS4MAAAQDAEgwRgIhAN+9CocvNBsn3pue8ewcB5lUyuTd7g9M
C72JuXRcceUkAiEAqqKiThYIvcIkX8YkReE1q+ykoAK9mQHLxAZCIlfAv44AdgBI
sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY2HJ01nAAAEAwBHMEUC
IHPb3bLh4Qep4OZEIwKhVKOgL0QvJKScgaKjunBpKD3PAiEA2tZxPh89C9pUslRr
g26LrIh3ThlwXBUxmMbGx2rcsA0wDQYJKoZIhvcNAQELBQADggEBAJaL87FykYcx
kbIxJtb1zwQP4B6hjzFO5XBSb7cZvPTD+nnv6mjdPOCAd8sX7hLj+SS8JOOnF69K
iDDKdLb8AC9faysm2HB+s3Aiii10D8BNNVmYqMeOV63xTbWSWvf9BD3w2Risbr21
MDJUh1MzybJQsFn+8hIh4SB+GNFEux0GEORDA1pV8aHxlkOH+wVc6xVSWJjCMYnU
mpf8/Y/aWnzPVcbUxjIangRCxQfnMPji56rpsJrQ93DE2LL+5Wra8uzN/FV7/lL6
TuVWDWBQ4rJSHfboIVMIiSERE8N0RVVjrgRi95wZW6+6rCQQ9Qd6F+5mWMcT9XXo
3cMYnavo6+M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtWOPHG93wnqVLW2SYjhc
jemxJhUOs5KBAFUUs5iyydgle0Blm0qGNT0oxbA9SB0ZlM9NRiuUsQq642vbNbPz
Wc8bdZliylqOFGplYQtSDSoU0iUJ3NzyK6tg1Wnc4HrACeas3dxwgsbWbOxFy1X3
bEeMZczDtWbecwVTDPHLazC3PyMuyWkR7P7QFAej1rN40gTCZuuv5vnabBGAXhFo
0qJEen+n60QhUnaNbeqoGSO//TphVqC4flNH5Zwletsb3KQr8c+ijQNvUaIy56X1
z6GJVnuicvQoisIeullrSGi6Lp4+CCp20MdOhMm19kY0+x98yCjs3epWOmYHUA1f
AyloJsQBwnJklV/jlAnXSK9Erbr40pc9vXqtRebmS+nhJQ+5xRme5jS+aIobtNS4
ovEA+uKqYzE+iVE/7AuyCZq/uEaaxo3ypT4+KIoXenvD4+ZGj4dJ+c11CYjJ55F4
cef1t5u95ecSAyy79zAKc3QJrsc3jvdgo4CJLO8YlZPc7WFo/geQv3qnly5eUOiz
xqDlGPIji2dWSgT4kFU4CQVjdeJXvHFqlIG/zQWJTyYW7BI9Kkqvyrl6sw2StSPj
rshkzQ12iMaCgbRO5bcmpdHvRAhanA4lEIwbfzdHDQ7h6W1Aojr95P/ULahtAzzW
BNdmdZjOQjj+KhFcjzUEhaUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380397434686978817703911954128089279198997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 04:18:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 04:18:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skimthefat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740002159891837348281922852631309936223216249829722406619264126535520844729679239906387120551646197677740927317856223174806411270583609219443243101089461956046488702943323833014500878144832298944589258590440750723883936178419687636553831609822811717174789306402781221191439331667249487538579792970762596458670589933168506225140712259939343537794452345180586059773106675515450544389933918256204555137745403571789129321335654360219453041594495805554504306880726387283918071834678154405615795954259231973714785687388701755788145807622015924906919697747797542255136676691404684641390600933249196631828801577355796939599811965807200819711760753196807261476415829615141141514705499615187041939654563131202127515012365313144416342380523514717798178613929148489165826036883880733453622441695286532838031268385902585587178741383464168681324001619838221209461656236434788186767152877519851239104300334720644005385488070746478529033756554202280334756645522838062816202987121411751890853365324617034825257893379065349932384198257998733783842419525934134783151624854296971335598447109571185839910482991817508466726895280164611650436902343013681817856505992153501679213263676263265932789795451360970418140295345454488402935052012243392364126963109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bedfd12da590cfcfea2d43603f0919a533a63c5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1816 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.21pubnative.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4980.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.520se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acasadochopp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ameromarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arteemodafirenze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloomndales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currentbitcoinexchangerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delicatedeliveryservice.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diinvestasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financialcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmyfreecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galereya.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gbresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giampaolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hammaacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearthstonedecks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtocakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsaeci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianastudentloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.italiankeywords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kohamaoficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laspiedras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgageeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myscigna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nameingmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navufederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nilestany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nishimuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ollie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onani2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlyinpgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phim3x.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poeplaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.served.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skimthefat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodexco-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaeker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theapp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uconfrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vienthammyarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walletinvestir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmartmoneycards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whalic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zinopziz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21pubnative.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4980.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '520se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acasadochopp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameromarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteemodafirenze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomndales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currentbitcoinexchangerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delicatedeliveryservice.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diinvestasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmyfreecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galereya.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giampaolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hammaacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearthstonedecks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtocakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsaeci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianastudentloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italiankeywords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohamaoficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laspiedras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgageeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myscigna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nameingmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navufederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilestany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nishimuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onani2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyinpgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phim3x.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poeplaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'served.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skimthefat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodexco-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaeker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uconfrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vienthammyarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walletinvestir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmartmoneycards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whalic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinopziz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d87274b830000040300483046022100dfbd0a872f341b27de9b9ef1ec1c079954cae4ddee0f4c0bbd89b9745c71e524022100aaa2a24e1608bdc2245fc62445e135abeca4a002bd9901cbc406422257c0bf8e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d87274d670000040300473045022073dbddb2e1e107a9e0e6442302a154a3a02f442f24a49c81a2a3ba7069283dcf022100dad6713e1f3d0bda54b2546b836e8bac88774e19705c153198c6c6c76adcb00d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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