epstein-syndrom.de

Issued by R3

About this certificate

This digital certificate with serial number 03:f6:a6:45:27:09:ca:ff:c8:b8:5d:75:6e:45:bc:84:37:61 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=epstein-syndrom.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:a6:45:27:09:ca:ff:c8:b8:5d:75:6e:45:bc:84:37:61
Serial Number (int): 345267330965404990090855923412228068620129
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:a4:77:c5:44:59:a9:e0:be:f2:f5:e2:fe:b5:b1:e4:ff:2b:78:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:36:f1:26:2f:7f:70:81:80:d4:02:4e:02:71:87:0a:9b:1d:17:33
Fingerprint (sha256): de:ae:9c:37:0d:16:6d:e8:b7:fd:61:36:8f:7f:fe:ee:38:a9:8e:7a:19:e1:5e:cd:a6:43:a7:8d:78:0e:6b:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate epstein-syndrom.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epstein-syndrom.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1tasconline.com
*.aetnaproducer.com
*.cbizflex.com
*.choase.com
*.cmnf-enf.com
*.computerfair.com.au
*.donniewahlberg.net
*.downgradeios7.com
*.einjaehriges-berufkraut.de
*.empatthie.de
*.epstein-syndrom.de
*.fencefair.net
*.fingerhub.com
*.flordalottery.com
*.gemgrading.net
*.gheilpflanzen.de
*.goatdhe.net
*.heafyheafy.com
*.hibbylobby.com
*.istodayajewishholiday.com
*.kawkawlintrailers.com
*.kbbatv.com
*.keywordanalyzer.org
*.les-brassieres-du-coeur.org
*.lexnexis.com
*.mathewsfordba.com
*.mineceraft.net
*.mybestbuyonline.com
*.mylaverne.com
*.mytoolsgatewayedi.com
*.nryflix.com
*.perskspot.com
*.reflect.tech
*.schuessler-salze-4.de
*.sfdbi.com
*.smallpeniscure.com
*.souindcloud.com
*.specksavers.com
*.streptokokcen.de
*.swtich2tmobile.com
*.teamiviewer.com
*.thromboseg.de
*.turtlrbeach.com
*.usbanksinglepoint.com
*.videohuns.com
*.whoopi-goldberg.net
*.xn--heilkruterde-lcb.de
*.xn--orthopdiee-v5a.de
*.xn--steuererkilrung-blb.de
*.yourcupidmatches.com
1tasconline.com
aetnaproducer.com
cbizflex.com
choase.com
cmnf-enf.com
computerfair.com.au
donniewahlberg.net
downgradeios7.com
einjaehriges-berufkraut.de
empatthie.de
epstein-syndrom.de
fencefair.net
fingerhub.com
flordalottery.com
gemgrading.net
gheilpflanzen.de
goatdhe.net
heafyheafy.com
hibbylobby.com
istodayajewishholiday.com
kawkawlintrailers.com
kbbatv.com
keywordanalyzer.org
les-brassieres-du-coeur.org
lexnexis.com
mathewsfordba.com
mineceraft.net
mybestbuyonline.com
mylaverne.com
mytoolsgatewayedi.com
nryflix.com
perskspot.com
reflect.tech
schuessler-salze-4.de
sfdbi.com
smallpeniscure.com
souindcloud.com
specksavers.com
streptokokcen.de
swtich2tmobile.com
teamiviewer.com
thromboseg.de
turtlrbeach.com
usbanksinglepoint.com
videohuns.com
whoopi-goldberg.net
xn--heilkruterde-lcb.de
xn--orthopdiee-v5a.de
xn--steuererkilrung-blb.de
yourcupidmatches.com

Other certificates including the domain name epstein-syndrom.de

(limited to 100 certificates)
epstein-syndrom.de
sydneydata.com.au
thegymkin.com
epstein-syndrom.de
epstein-syndrom.de
epstein-syndrom.de
epstein-syndrom.de
southernlightsbooks.com
epstein-syndrom.de
mytoolsgatewayedi.com
pokexgame.com
epstein-syndrom.de

Certificate

The complete raw certificate details for epstein-syndrom.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINdzCCDF+gAwIBAgISA/amRScJyv/IuF11bkW8hDdhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTQwNjE2MzdaFw0yNDAyMTIwNjE2MzZaMB0xGzAZBgNVBAMT
EmVwc3RlaW4tc3luZHJvbS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAO4xjV+cOyUiYeE68mX6u983OJMQKwkrcGlQCL2jAdiBPtvXWLusOtaRWUW3
MJKi6t3cJWe3KmXoKwu+L2AtJ2Gi+B59ZjhpYZ3jmHSeaVGoXH+UwKdOZbiDMGyL
ltSVK8Rv8KFJlTH7A0ET14yf9p/hZz8nzp6aOrJ9Dgmkj23ud+5NZRY8w1oksJc+
24nXr++wJl77WPYmekqg0+XDXpDp/++i7v4B15Or0qROG8yN3wx1sxDxOw0nRSOG
HkPc8j1VlECycGp+b52wdGdFnvbQauzvwOstXpgwSImzr8LToqoWJiND+IMNb7s7
j3Q44mSBjModH6FywEZDhb27qhp5CH3k8kwMfo7eN8bu/FfMDz3wtYoTRc77/iDe
RESi7iQ354xDW4OVrAeisUJUlIe982XREht+B+zPT+W+fTUSMaY5u3geCVr4njOD
r+YbqtECa81369SYqr6iwYA+7ftjIne7fIcwg7hIrWvR7mtmh23bt4xlKpOoetPn
oK9dtY//TEsi3d7ckg72M2bULM1P6P4VG9YpL1+65xfy0P52CcjJWew4gjC8sq3n
rDdwjnPqXZ8iP8EhzMmFwwUNJY1wDwUZowR7LtoGGtC4hMu6wdJHxoEl6vgK2nSa
FHzwFzZmQA/Gn44Qw8qrzvNmM7TRyCLd8Nfql0hE/d7ZL2UFAgMBAAGjggmaMIIJ
ljAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFGkd8VEWangvvL14v61seT/K3jzMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIHoQYDVR0RBIIHmDCCB5SCESouMXRhc2Nv
bmxpbmUuY29tghMqLmFldG5hcHJvZHVjZXIuY29tgg4qLmNiaXpmbGV4LmNvbYIM
Ki5jaG9hc2UuY29tgg4qLmNtbmYtZW5mLmNvbYIVKi5jb21wdXRlcmZhaXIuY29t
LmF1ghQqLmRvbm5pZXdhaGxiZXJnLm5ldIITKi5kb3duZ3JhZGVpb3M3LmNvbYIc
Ki5laW5qYWVocmlnZXMtYmVydWZrcmF1dC5kZYIOKi5lbXBhdHRoaWUuZGWCFCou
ZXBzdGVpbi1zeW5kcm9tLmRlgg8qLmZlbmNlZmFpci5uZXSCDyouZmluZ2VyaHVi
LmNvbYITKi5mbG9yZGFsb3R0ZXJ5LmNvbYIQKi5nZW1ncmFkaW5nLm5ldIISKi5n
aGVpbHBmbGFuemVuLmRlgg0qLmdvYXRkaGUubmV0ghAqLmhlYWZ5aGVhZnkuY29t
ghAqLmhpYmJ5bG9iYnkuY29tghsqLmlzdG9kYXlhamV3aXNoaG9saWRheS5jb22C
Fyoua2F3a2F3bGludHJhaWxlcnMuY29tggwqLmtiYmF0di5jb22CFSoua2V5d29y
ZGFuYWx5emVyLm9yZ4IdKi5sZXMtYnJhc3NpZXJlcy1kdS1jb2V1ci5vcmeCDiou
bGV4bmV4aXMuY29tghMqLm1hdGhld3Nmb3JkYmEuY29tghAqLm1pbmVjZXJhZnQu
bmV0ghUqLm15YmVzdGJ1eW9ubGluZS5jb22CDyoubXlsYXZlcm5lLmNvbYIXKi5t
eXRvb2xzZ2F0ZXdheWVkaS5jb22CDSoubnJ5ZmxpeC5jb22CDyoucGVyc2tzcG90
LmNvbYIOKi5yZWZsZWN0LnRlY2iCFyouc2NodWVzc2xlci1zYWx6ZS00LmRlggsq
LnNmZGJpLmNvbYIUKi5zbWFsbHBlbmlzY3VyZS5jb22CESouc291aW5kY2xvdWQu
Y29tghEqLnNwZWNrc2F2ZXJzLmNvbYISKi5zdHJlcHRva29rY2VuLmRlghQqLnN3
dGljaDJ0bW9iaWxlLmNvbYIRKi50ZWFtaXZpZXdlci5jb22CDyoudGhyb21ib3Nl
Zy5kZYIRKi50dXJ0bHJiZWFjaC5jb22CFyoudXNiYW5rc2luZ2xlcG9pbnQuY29t
gg8qLnZpZGVvaHVucy5jb22CFSoud2hvb3BpLWdvbGRiZXJnLm5ldIIZKi54bi0t
aGVpbGtydXRlcmRlLWxjYi5kZYIXKi54bi0tb3J0aG9wZGllZS12NWEuZGWCHCou
eG4tLXN0ZXVlcmVya2lscnVuZy1ibGIuZGWCFioueW91cmN1cGlkbWF0Y2hlcy5j
b22CDzF0YXNjb25saW5lLmNvbYIRYWV0bmFwcm9kdWNlci5jb22CDGNiaXpmbGV4
LmNvbYIKY2hvYXNlLmNvbYIMY21uZi1lbmYuY29tghNjb21wdXRlcmZhaXIuY29t
LmF1ghJkb25uaWV3YWhsYmVyZy5uZXSCEWRvd25ncmFkZWlvczcuY29tghplaW5q
YWVocmlnZXMtYmVydWZrcmF1dC5kZYIMZW1wYXR0aGllLmRlghJlcHN0ZWluLXN5
bmRyb20uZGWCDWZlbmNlZmFpci5uZXSCDWZpbmdlcmh1Yi5jb22CEWZsb3JkYWxv
dHRlcnkuY29tgg5nZW1ncmFkaW5nLm5ldIIQZ2hlaWxwZmxhbnplbi5kZYILZ29h
dGRoZS5uZXSCDmhlYWZ5aGVhZnkuY29tgg5oaWJieWxvYmJ5LmNvbYIZaXN0b2Rh
eWFqZXdpc2hob2xpZGF5LmNvbYIVa2F3a2F3bGludHJhaWxlcnMuY29tggprYmJh
dHYuY29tghNrZXl3b3JkYW5hbHl6ZXIub3JnghtsZXMtYnJhc3NpZXJlcy1kdS1j
b2V1ci5vcmeCDGxleG5leGlzLmNvbYIRbWF0aGV3c2ZvcmRiYS5jb22CDm1pbmVj
ZXJhZnQubmV0ghNteWJlc3RidXlvbmxpbmUuY29tgg1teWxhdmVybmUuY29tghVt
eXRvb2xzZ2F0ZXdheWVkaS5jb22CC25yeWZsaXguY29tgg1wZXJza3Nwb3QuY29t
ggxyZWZsZWN0LnRlY2iCFXNjaHVlc3NsZXItc2FsemUtNC5kZYIJc2ZkYmkuY29t
ghJzbWFsbHBlbmlzY3VyZS5jb22CD3NvdWluZGNsb3VkLmNvbYIPc3BlY2tzYXZl
cnMuY29tghBzdHJlcHRva29rY2VuLmRlghJzd3RpY2gydG1vYmlsZS5jb22CD3Rl
YW1pdmlld2VyLmNvbYINdGhyb21ib3NlZy5kZYIPdHVydGxyYmVhY2guY29tghV1
c2JhbmtzaW5nbGVwb2ludC5jb22CDXZpZGVvaHVucy5jb22CE3dob29waS1nb2xk
YmVyZy5uZXSCF3huLS1oZWlsa3J1dGVyZGUtbGNiLmRlghV4bi0tb3J0aG9wZGll
ZS12NWEuZGWCGnhuLS1zdGV1ZXJlcmtpbHJ1bmctYmxiLmRlghR5b3VyY3VwaWRt
YXRjaGVzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi8yw
czUAAAQDAEcwRQIhAJgC5qYbHxS+s4q/KzRxmaqVD/dkT9ySn8qTNKm5trMIAiBI
QosNOC+hTykyMzIzfAVcn1bxePOB5ECfTWK94/6cogB2AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABi8ywczwAAAQDAEcwRQIgKdwsrmy7vyKdGapm
dZGbs08A2Xj8+lFvbqx5n78ekY0CIQDliGkXXm0VTottAlRoZCzyFRp5l5ousArZ
YxU8XI3BlzANBgkqhkiG9w0BAQsFAAOCAQEAfTF9sIXwBbS6ObwDG5K2aKjrXrKb
HTqz5UQKJqwI/7BgcePq9U8odkciYm7t2sW3pxDYrzfoX97n/aYnRTKCXFYjWFro
xs4W5iwTT1klhSEKH8n8EM6ZS9mS1WLE/9sJ8EuN4omRq7xcLOQvy4BQTXp2JPtn
0QsFltyAL9ZsLAV1MJY1/OyJPU5ml99aNYQKIp2dlhLZGnNlNQYzD/NIJkqcfUSC
mtbNoI+Xowck1x8T1zmOXv+DgEb5l+b+H9iBT9gornDDtB3U/MSMmV8FemYw2W2P
96rpqBsZv6QmMPk1+PcvNI/9tY1tqoCvYtwI5iJjBNqelb1qVuLouxWZzA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345267330965404990090855923412228068620129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 06:16:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 06:16:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epstein-syndrom.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971744958120716186044447033446581775699592436895166876745293793694422632525863884754435924634829945298742689145823703248064770478579902729284360878367513349156511825524896726978627938059439728246268057389659013502394159425412220771894019235279888550023369716017194666960391538493583854705391827630286271430422440492863581691560153688706679294979496701360355350394652422932872415623717098648319218707253594151710522531499754509344514477394028714283279006698319459569466059754059847918888242102914861511119403793157998575016914354936444899686933546366963995055305725507922768503432791765390787387825192328044974133940138570793164166779132928359728446038263926498946938099771897615804043698699640492726169859823071125546187291665687381112034235564884644988586836060265184923871803156874425016672485446738122855693929480687199872347196517670839465881215243567320096263404118846180653686693899934280484773278055534937571848495196804931455189394368692872723877408777643350275438322721453060400877529159559657740541315829900759630667940458823760759081903092452057326163580072911442084875435051581278828880881896160466715040908088553709458080369663040165796723691564486793623378535768956983370619320332129887232077266976559344181192172725509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51a477c54459a9e0bef2f5e2feb5b1e4ff2b78f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1944 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1tasconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aetnaproducer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbizflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmnf-enf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computerfair.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donniewahlberg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downgradeios7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.einjaehriges-berufkraut.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empatthie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epstein-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fencefair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fingerhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flordalottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemgrading.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gheilpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goatdhe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heafyheafy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hibbylobby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istodayajewishholiday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kawkawlintrailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbbatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keywordanalyzer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.les-brassieres-du-coeur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mathewsfordba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mineceraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybestbuyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylaverne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytoolsgatewayedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nryflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perskspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reflect.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-salze-4.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfdbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smallpeniscure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.souindcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specksavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streptokokcen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swtich2tmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamiviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thromboseg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turtlrbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usbanksinglepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videohuns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whoopi-goldberg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--heilkruterde-lcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--orthopdiee-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuererkilrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourcupidmatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1tasconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetnaproducer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbizflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmnf-enf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computerfair.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donniewahlberg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downgradeios7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einjaehriges-berufkraut.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empatthie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epstein-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fencefair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fingerhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flordalottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemgrading.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gheilpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goatdhe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heafyheafy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibbylobby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istodayajewishholiday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawkawlintrailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbbatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywordanalyzer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les-brassieres-du-coeur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathewsfordba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineceraft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybestbuyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylaverne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytoolsgatewayedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nryflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perskspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflect.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-salze-4.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfdbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallpeniscure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'souindcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specksavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streptokokcen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swtich2tmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamiviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thromboseg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turtlrbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usbanksinglepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videohuns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoopi-goldberg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--heilkruterde-lcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--orthopdiee-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuererkilrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourcupidmatches.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bccb0733500000403004730450221009802e6a61b1f14beb38abf2b347199aa950ff7644fdc929fca9334a9b9b6b308022048428b0d382fa14f29323332337c055c9f56f178f381e4409f4d62bde3fe9ca2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bccb0733c0000040300473045022029dc2cae6cbbbf229d19aa6675919bb34f00d978fcfa516f6eac799fbf1e918d022100e58869175e6d154e8b6d025468642cf2151a79979a2eb00ad963153c5c8dc197
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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