kidzhealth.org

Issued by R3

About this certificate

This digital certificate with serial number 03:6e:3a:7d:70:59:00:cd:50:d3:c4:64:0e:1f:fc:87:7e:85 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kidzhealth.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:3a:7d:70:59:00:cd:50:d3:c4:64:0e:1f:fc:87:7e:85
Serial Number (int): 298845664696128243179170260054112253476485
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:9f:bd:8c:e1:4b:04:12:ff:67:5f:52:a3:27:9a:03:f7:c5:f2:46
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:f1:39:77:82:7a:04:27:e8:03:6d:71:ec:b7:e1:44:1b:b9:76:02
Fingerprint (sha256): dd:e1:2e:63:8c:b5:40:17:32:54:97:3b:d1:bb:45:9f:6a:38:d8:bf:cd:0a:10:c0:0f:56:17:46:71:3f:d4:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kidzhealth.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kidzhealth.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.10xundergrad.com
*.21lifestyle.com
*.668jq.com
*.ahhlok.com
*.altagamastore.com
*.antarescommunication.com
*.anuragtyagi.com
*.aweli.biz
*.balkanchronicle.com
*.bed.cm
*.bracioroom.com
*.bsrclaysus.com
*.buzzme.live
*.chinlandcar.com
*.cineblog01.gratis
*.ddreamsgames.com
*.drbackcrack.com
*.epubvip.com
*.examecrc.com
*.famups.net
*.givegary.org
*.golchinbook.com
*.groupdiscussionsolutions.com
*.hanautabiyori24.com
*.happiness-conceptstore.com
*.kalteisen.com
*.kidzhealth.org
*.libertad21.com
*.marboo.io
*.meridiancu.com
*.mkhandcrafting.com
*.naturallightz.com
*.nfhglc.cn
*.nftheros.me
*.orgyahoo.com
*.orlando.exposed
*.orrcadillac.com
*.ovesrstock.com
*.ovoerstock.com
*.pdamlhokseumawe.com
*.preciouscatshop.com
*.scoopinfo.net
*.selfzeal.com
*.shundinesfrybreadstand.com
*.stationdentalpractice.com
*.tamilboxer.com
*.tecnicauchosgomas.com
*.tipsiana.com
*.vigneshmeenueyeclinic.com
*.wffnproof.com
10xundergrad.com
21lifestyle.com
668jq.com
ahhlok.com
altagamastore.com
antarescommunication.com
anuragtyagi.com
aweli.biz
balkanchronicle.com
bed.cm
bracioroom.com
bsrclaysus.com
buzzme.live
chinlandcar.com
cineblog01.gratis
ddreamsgames.com
drbackcrack.com
epubvip.com
examecrc.com
famups.net
givegary.org
golchinbook.com
groupdiscussionsolutions.com
hanautabiyori24.com
happiness-conceptstore.com
kalteisen.com
kidzhealth.org
libertad21.com
marboo.io
meridiancu.com
mkhandcrafting.com
naturallightz.com
nfhglc.cn
nftheros.me
orgyahoo.com
orlando.exposed
orrcadillac.com
ovesrstock.com
ovoerstock.com
pdamlhokseumawe.com
preciouscatshop.com
scoopinfo.net
selfzeal.com
shundinesfrybreadstand.com
stationdentalpractice.com
tamilboxer.com
tecnicauchosgomas.com
tipsiana.com
vigneshmeenueyeclinic.com
wffnproof.com

Other certificates including the domain name kidzhealth.org

(limited to 100 certificates)
kidzhealth.org
kidzhealth.hajidanumrohmalang.com
kidzhealth.org
kidzhealth.org
kidzhealth.org
kidzhealth.org
kidzhealth.org
kidzhealth.org
kidzhealth.org

Certificate

The complete raw certificate details for kidzhealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINATCCC+mgAwIBAgISA246fXBZAM1Q08RkDh/8h36FMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjkxODU4NDhaFw0yNDAyMjcxODU4NDdaMBkxFzAVBgNVBAMT
DmtpZHpoZWFsdGgub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
s6iyMVcfEjxL5anOWE/KepAivuMDRsUNTng57h2wFJFM17ELrLh8tNaao1Et1U72
342b7wI4984pBKXI3RsAs+08qlqVVr/fO+oRhLBz/q8MGDU9XxrnjxBOrOWRCDQP
sxeoKqxPqN9EirkYLxN8rfR9kzheeoBB/R2q7fa8/Vjfs4nvFy82NaTOgoaQKs5V
5ZCHAgbfi5DYhdVygDi4fNNxP1YD6iZC8kzOUl/raXjIQ3kJh5Zok+oHkGEHExor
vv+aRIZto+aVcNH7bVN8TMR1bA7oyWuo0vhdE/uZKImClpJltNxwWq7BYlyCnZUD
fd7yAEcJXgwT5hFNnYn4egofa2IHSeuAf+T89U+8DH2J61CJSzJuhUthigbtF4Sb
bvorAtL9ct9k2lhyIYXPAeGJu4RbK6lvx00+h0V+OZZRsKtFAiGnIhuTvnomvtZW
9voKdhu+kJ/7R8In64DSLDQ52L7OYkwL2XJtcRLuo2YHDn86++ToQ+av4elvziMD
GyzpAlObi7x90E6zoBRzZr7fUN/il4TrOPKTI7gBoNY5mLUB+L/ROVNjhMn5OBX4
R76VysmLQeeCYicHTbUPsjZQu5Qh2FvPu/gp8DMTVqI5CzINQ4qjIsfg6dyh2FET
YiRg69q9YJfSjL2T5xByPQG4uegtSirAo+2Hgs+GdmcCAwEAAaOCCSgwggkkMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUxZ+9jOFLBBL/Z19SoyeaA/fF8kYwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggcvBgNVHREEggcmMIIHIoISKi4xMHh1bmRlcmdy
YWQuY29tghEqLjIxbGlmZXN0eWxlLmNvbYILKi42NjhqcS5jb22CDCouYWhobG9r
LmNvbYITKi5hbHRhZ2FtYXN0b3JlLmNvbYIaKi5hbnRhcmVzY29tbXVuaWNhdGlv
bi5jb22CESouYW51cmFndHlhZ2kuY29tggsqLmF3ZWxpLmJpeoIVKi5iYWxrYW5j
aHJvbmljbGUuY29tgggqLmJlZC5jbYIQKi5icmFjaW9yb29tLmNvbYIQKi5ic3Jj
bGF5c3VzLmNvbYINKi5idXp6bWUubGl2ZYIRKi5jaGlubGFuZGNhci5jb22CEyou
Y2luZWJsb2cwMS5ncmF0aXOCEiouZGRyZWFtc2dhbWVzLmNvbYIRKi5kcmJhY2tj
cmFjay5jb22CDSouZXB1YnZpcC5jb22CDiouZXhhbWVjcmMuY29tggwqLmZhbXVw
cy5uZXSCDiouZ2l2ZWdhcnkub3JnghEqLmdvbGNoaW5ib29rLmNvbYIeKi5ncm91
cGRpc2N1c3Npb25zb2x1dGlvbnMuY29tghUqLmhhbmF1dGFiaXlvcmkyNC5jb22C
HCouaGFwcGluZXNzLWNvbmNlcHRzdG9yZS5jb22CDyoua2FsdGVpc2VuLmNvbYIQ
Ki5raWR6aGVhbHRoLm9yZ4IQKi5saWJlcnRhZDIxLmNvbYILKi5tYXJib28uaW+C
ECoubWVyaWRpYW5jdS5jb22CFCoubWtoYW5kY3JhZnRpbmcuY29tghMqLm5hdHVy
YWxsaWdodHouY29tggsqLm5maGdsYy5jboINKi5uZnRoZXJvcy5tZYIOKi5vcmd5
YWhvby5jb22CESoub3JsYW5kby5leHBvc2VkghEqLm9ycmNhZGlsbGFjLmNvbYIQ
Ki5vdmVzcnN0b2NrLmNvbYIQKi5vdm9lcnN0b2NrLmNvbYIVKi5wZGFtbGhva3Nl
dW1hd2UuY29tghUqLnByZWNpb3VzY2F0c2hvcC5jb22CDyouc2Nvb3BpbmZvLm5l
dIIOKi5zZWxmemVhbC5jb22CHCouc2h1bmRpbmVzZnJ5YnJlYWRzdGFuZC5jb22C
Gyouc3RhdGlvbmRlbnRhbHByYWN0aWNlLmNvbYIQKi50YW1pbGJveGVyLmNvbYIX
Ki50ZWNuaWNhdWNob3Nnb21hcy5jb22CDioudGlwc2lhbmEuY29tghsqLnZpZ25l
c2htZWVudWV5ZWNsaW5pYy5jb22CDyoud2ZmbnByb29mLmNvbYIQMTB4dW5kZXJn
cmFkLmNvbYIPMjFsaWZlc3R5bGUuY29tggk2NjhqcS5jb22CCmFoaGxvay5jb22C
EWFsdGFnYW1hc3RvcmUuY29tghhhbnRhcmVzY29tbXVuaWNhdGlvbi5jb22CD2Fu
dXJhZ3R5YWdpLmNvbYIJYXdlbGkuYml6ghNiYWxrYW5jaHJvbmljbGUuY29tggZi
ZWQuY22CDmJyYWNpb3Jvb20uY29tgg5ic3JjbGF5c3VzLmNvbYILYnV6em1lLmxp
dmWCD2NoaW5sYW5kY2FyLmNvbYIRY2luZWJsb2cwMS5ncmF0aXOCEGRkcmVhbXNn
YW1lcy5jb22CD2RyYmFja2NyYWNrLmNvbYILZXB1YnZpcC5jb22CDGV4YW1lY3Jj
LmNvbYIKZmFtdXBzLm5ldIIMZ2l2ZWdhcnkub3Jngg9nb2xjaGluYm9vay5jb22C
HGdyb3VwZGlzY3Vzc2lvbnNvbHV0aW9ucy5jb22CE2hhbmF1dGFiaXlvcmkyNC5j
b22CGmhhcHBpbmVzcy1jb25jZXB0c3RvcmUuY29tgg1rYWx0ZWlzZW4uY29tgg5r
aWR6aGVhbHRoLm9yZ4IObGliZXJ0YWQyMS5jb22CCW1hcmJvby5pb4IObWVyaWRp
YW5jdS5jb22CEm1raGFuZGNyYWZ0aW5nLmNvbYIRbmF0dXJhbGxpZ2h0ei5jb22C
CW5maGdsYy5jboILbmZ0aGVyb3MubWWCDG9yZ3lhaG9vLmNvbYIPb3JsYW5kby5l
eHBvc2Vkgg9vcnJjYWRpbGxhYy5jb22CDm92ZXNyc3RvY2suY29tgg5vdm9lcnN0
b2NrLmNvbYITcGRhbWxob2tzZXVtYXdlLmNvbYITcHJlY2lvdXNjYXRzaG9wLmNv
bYINc2Nvb3BpbmZvLm5ldIIMc2VsZnplYWwuY29tghpzaHVuZGluZXNmcnlicmVh
ZHN0YW5kLmNvbYIZc3RhdGlvbmRlbnRhbHByYWN0aWNlLmNvbYIOdGFtaWxib3hl
ci5jb22CFXRlY25pY2F1Y2hvc2dvbWFzLmNvbYIMdGlwc2lhbmEuY29tghl2aWdu
ZXNobWVlbnVleWVjbGluaWMuY29tgg13ZmZucHJvb2YuY29tMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAO1N3dT4tuYBOizBb
Bv5AO2fYT8P0x70ADS1yb+H61BcAAAGMHKmi6AAABAMARjBEAiAo8yJ/fqIQPvD7
WlR/9ojP3YHhSRiF08I+Gxjjc9wbqwIgCrVqB/nBu7JJ7mJcxcx9u5+MgueJkGKX
6rKd5gwW6K0AdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYwc
qaLxAAAEAwBIMEYCIQDSXIOjFXiWffnF8CBGaREplz8+a4YMds/OPC6eXnSU9AIh
ALck/EsNbe7dUOSsXAXDiPumvrD/KKUdDKqru+ODZoxYMA0GCSqGSIb3DQEBCwUA
A4IBAQBqXSslhREN1648Tkw0ghWMCpkGRcbYD6Cjc7KrMLU8eY8VEj2NtFmrUi/z
u8FhZbxrHbOuIcpnHh2BPFQFr0C9+7e/Rb5rR5IpxSpTwtGby//D5lC+flWdsQ5s
9UY136LXxLrqneKTL7qGLITEDeYHDBbP9hPvtuHS4sEjCwLK4GqfSMx3MwPkYe5y
cUZGN+vyDGt7kDJXf2OO49+Z0zyK8sch+nCGVSGyYkr+lfAYdY6pjYoZVwsxX4Wi
4ORavG2ejukQpJB3OXUEtdzB9+l14ZzAdsIjfIfmjA7U856jx3ZHvd3P+rxwOsid
aeY2PCd9jZ2KbAEh972ERunXghW9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298845664696128243179170260054112253476485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 18:58:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 18:58:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kidzhealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732944647169350170664526526830435223398749589342476447912527529755933157383220037390515138392464060016040876716455211472451606471941021581872303901330180476336766871882706307460707894543205758279868876953243011069754662724196026824261335808057885113160917023850141702926379862129985022535508739172769746008665454530471634847728922627148002292293559058252431510405768236672581373168488545611948858051774928333484876137031352140597597614807949006881857814608218561758147560307250639623093237643396333951450002951678709469056286495497927506347663353499218744390965942025948271520148899494547461753519257637038290645534136428256330063393719985122934036537202438414309680752712252825408210084798617148623571849393494492429605575752059048446837840519878593331471648647352336433054381043142455403213927359337536331385444436068953604650933468073606904695113169509472671296899327328692562085004731831605435953006453623159965782620778670921301793991116441071664640844338657597046597637046833622439861128087096113092142111291766289952908666034590837030090468266813602457119081818256510923170306627605710956001929298244415275455995152000889870861996065790947220171611244960735081403010299384921373758307812112729095236052665507870258937945552487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c59fbd8ce14b0412ff675f52a3279a03f7c5f246
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1830 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10xundergrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.21lifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.668jq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahhlok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altagamastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antarescommunication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anuragtyagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aweli.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balkanchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bed.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bracioroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsrclaysus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzme.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinlandcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cineblog01.gratis'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddreamsgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drbackcrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epubvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examecrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.famups.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givegary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golchinbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupdiscussionsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanautabiyori24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happiness-conceptstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalteisen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidzhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libertad21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marboo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meridiancu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkhandcrafting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturallightz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfhglc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nftheros.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orgyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orlando.exposed'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orrcadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovesrstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovoerstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdamlhokseumawe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preciouscatshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoopinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selfzeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shundinesfrybreadstand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stationdentalpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamilboxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnicauchosgomas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tipsiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vigneshmeenueyeclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wffnproof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10xundergrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21lifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '668jq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahhlok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altagamastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antarescommunication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anuragtyagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aweli.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balkanchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bed.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracioroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsrclaysus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzme.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinlandcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cineblog01.gratis'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddreamsgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drbackcrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epubvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examecrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famups.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givegary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golchinbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupdiscussionsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanautabiyori24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happiness-conceptstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalteisen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidzhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertad21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marboo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridiancu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkhandcrafting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturallightz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfhglc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nftheros.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlando.exposed'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orrcadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovesrstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovoerstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdamlhokseumawe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciouscatshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoopinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfzeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shundinesfrybreadstand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stationdentalpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamilboxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnicauchosgomas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipsiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vigneshmeenueyeclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wffnproof.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c1ca9a2e80000040300463044022028f3227f7ea2103ef0fb5a547ff688cfdd81e1491885d3c23e1b18e373dc1bab02200ab56a07f9c1bbb249ee625cc5cc7dbb9f8c82e789906297eab29de60c16e8ad007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1ca9a2f10000040300483046022100d25c83a31578967df9c5f02046691129973f3e6b860c76cfce3c2e9e5e7494f4022100b724fc4b0d6deedd50e4ac5c05c388fba6beb0ff28a51d0caaabbbe383668c58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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