jcpenneygiftcard.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0b:2d:0c:ee:38:ed:21:b9:7d:4c:ed:93:0e:27:77:67:9a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jcpenneygiftcard.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0b:2d:0c:ee:38:ed:21:b9:7d:4c:ed:93:0e:27:77:67:9a
Serial Number (int): 352252132162267584804530187832786893105050
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8e:d3:e8:1e:d2:c7:cf:19:e0:2d:08:c9:e3:fd:59:c4:41:2c:47:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:f2:c5:4e:93:77:6b:0a:ed:df:91:84:9c:f8:77:fb:94:3d:c7:06
Fingerprint (sha256): e0:fb:73:24:6c:24:df:4c:76:9b:1e:b4:ee:2d:20:c2:16:b6:ce:43:86:c7:16:cd:66:d0:ec:67:b6:a3:b0:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jcpenneygiftcard.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jcpenneygiftcard.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.artificialaquarium.com
*.astroid.info
*.austinjounl.co
*.bikramglasgow.com
*.calculem.us
*.cambiaelmenu.com
*.carriagecrossinghoa.com
*.chiropractor.education
*.clareandjessiestephens.com
*.controles-coupons.com
*.ctaigalist.org
*.denprime.com
*.earnbylearn.xyz
*.elshrouk-dates.com
*.fivecon.io
*.hanasojapaneselanguage.com
*.hotelpuertonuevo.com
*.ijrpet.org
*.iproclaim.church
*.jcpenneygiftcard.com
*.jiali16.xyz
*.koolchip.com
*.kritterz.net
*.mesero.online
*.mqh7t4.com
*.nftmovement.io
*.otpresearch.com
*.parsoneaultconsultingllc.com
*.pgsbazar.com
*.proelectriciannewarknj.com
*.roiracket.com
*.route30beer.com
*.roxascityonlinemarket.com
*.rrmphilscorp.com
*.ruipubiology.com
*.ruminaterotund.com
*.runnersdenrace.com
*.russosestatesalesllc.com
*.ruthiegracecakeco.net
*.rutzalmacen.com
*.setlle.com
*.stafidutz.net
*.styles2psr.com
*.thesecretjewel.com
*.toichiase.net
*.unrul.me
*.verizonenaterprise.com
*.vringenieriamercadeo.com
*.vzlomal.net
*.wequeer.net
artificialaquarium.com
astroid.info
austinjounl.co
bikramglasgow.com
calculem.us
cambiaelmenu.com
carriagecrossinghoa.com
chiropractor.education
clareandjessiestephens.com
controles-coupons.com
ctaigalist.org
denprime.com
earnbylearn.xyz
elshrouk-dates.com
fivecon.io
hanasojapaneselanguage.com
hotelpuertonuevo.com
ijrpet.org
iproclaim.church
jcpenneygiftcard.com
jiali16.xyz
koolchip.com
kritterz.net
mesero.online
mqh7t4.com
nftmovement.io
otpresearch.com
parsoneaultconsultingllc.com
pgsbazar.com
proelectriciannewarknj.com
roiracket.com
route30beer.com
roxascityonlinemarket.com
rrmphilscorp.com
ruipubiology.com
ruminaterotund.com
runnersdenrace.com
russosestatesalesllc.com
ruthiegracecakeco.net
rutzalmacen.com
setlle.com
stafidutz.net
styles2psr.com
thesecretjewel.com
toichiase.net
unrul.me
verizonenaterprise.com
vringenieriamercadeo.com
vzlomal.net
wequeer.net

Other certificates including the domain name jcpenneygiftcard.com

(limited to 100 certificates)
toothbrushcoupons.net
jcpenneygiftcard.com
roxascityonlinemarket.com
jcpenneygiftcard.com

Certificate

The complete raw certificate details for jcpenneygiftcard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINfjCCDGagAwIBAgISBAstDO447SG5fUztkw4nd2eaMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMzAxMTQ3MThaFw0yNDAyMjgxMTQ3MTdaMB8xHTAbBgNVBAMT
FGpjcGVubmV5Z2lmdGNhcmQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAyN5pP3sLPuyLxxS77kbDd6jqBYdVHfpnA0wqhSOSZzfaDWuD+wNNWM3t
ezax6i17yJ97kvkDd+ApVGhHhgecaKTTWYkovXUMRwiVeeg3Si/IjDjY2YirqlRJ
innDCcctyqHaZYmSz8h9lWrgjm8FFfMaSx5ZDhZRXfXZMap/diPl3DmlGTKU7krm
SUY9830vomXV6UG/49qLEh+ftbcKVVfXMk81bsZ176E3CkjBg7r7mbZ8BDG7cGvz
fe2m364Mm/A3wX8Qe4J8XK37XKEXvCDHMDWgvLWmxathdMQtJwmkExg2q2cp9fz1
aif65rFEMf/JPbz8iaQ/wr/ox/VeY3FQtKXdwn1D3rzuU/Yx8Ju9aMRFhGL2a+vX
gC3oEdInmzW0tcw2j5sOkhfc10xJiiQnZHi1gZN97HK6iyLce5O+fmHmr9x6SubK
/K1NnO9xFstZtNVAfhGOSj+ZoadKCOdugE84XFRq9f+U5A0vAX5ca622PAfJ9BUb
XjrqiwURr+tsVHBVZqKH2CjJdEbxCdvMSHNq6f1x2K6DjL5n3F3cvOtpR9mJt/XA
5sdsy/9llBVr3k4ToCgAsWRNfGKx0ePdkkJqBPupsQf9Cfal3ei2Vl6b1C6T70u/
pFaUmAEQJw0W0zqCC8umYo6qnPvL4TVy8Imvm5ahYrVIbsi6mAsCAwEAAaOCCZ8w
ggmbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUjtPoHtLHzxngLQjJ4/1ZxEEsR64w
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggenBgNVHREEggeeMIIHmoIYKi5hcnRp
ZmljaWFsYXF1YXJpdW0uY29tgg4qLmFzdHJvaWQuaW5mb4IQKi5hdXN0aW5qb3Vu
bC5jb4ITKi5iaWtyYW1nbGFzZ293LmNvbYINKi5jYWxjdWxlbS51c4ISKi5jYW1i
aWFlbG1lbnUuY29tghkqLmNhcnJpYWdlY3Jvc3Npbmdob2EuY29tghgqLmNoaXJv
cHJhY3Rvci5lZHVjYXRpb26CHCouY2xhcmVhbmRqZXNzaWVzdGVwaGVucy5jb22C
FyouY29udHJvbGVzLWNvdXBvbnMuY29tghAqLmN0YWlnYWxpc3Qub3Jngg4qLmRl
bnByaW1lLmNvbYIRKi5lYXJuYnlsZWFybi54eXqCFCouZWxzaHJvdWstZGF0ZXMu
Y29tggwqLmZpdmVjb24uaW+CHCouaGFuYXNvamFwYW5lc2VsYW5ndWFnZS5jb22C
FiouaG90ZWxwdWVydG9udWV2by5jb22CDCouaWpycGV0Lm9yZ4ISKi5pcHJvY2xh
aW0uY2h1cmNoghYqLmpjcGVubmV5Z2lmdGNhcmQuY29tgg0qLmppYWxpMTYueHl6
gg4qLmtvb2xjaGlwLmNvbYIOKi5rcml0dGVyei5uZXSCDyoubWVzZXJvLm9ubGlu
ZYIMKi5tcWg3dDQuY29tghAqLm5mdG1vdmVtZW50LmlvghEqLm90cHJlc2VhcmNo
LmNvbYIeKi5wYXJzb25lYXVsdGNvbnN1bHRpbmdsbGMuY29tgg4qLnBnc2JhemFy
LmNvbYIcKi5wcm9lbGVjdHJpY2lhbm5ld2Fya25qLmNvbYIPKi5yb2lyYWNrZXQu
Y29tghEqLnJvdXRlMzBiZWVyLmNvbYIbKi5yb3hhc2NpdHlvbmxpbmVtYXJrZXQu
Y29tghIqLnJybXBoaWxzY29ycC5jb22CEioucnVpcHViaW9sb2d5LmNvbYIUKi5y
dW1pbmF0ZXJvdHVuZC5jb22CFCoucnVubmVyc2RlbnJhY2UuY29tghoqLnJ1c3Nv
c2VzdGF0ZXNhbGVzbGxjLmNvbYIXKi5ydXRoaWVncmFjZWNha2Vjby5uZXSCESou
cnV0emFsbWFjZW4uY29tggwqLnNldGxsZS5jb22CDyouc3RhZmlkdXR6Lm5ldIIQ
Ki5zdHlsZXMycHNyLmNvbYIUKi50aGVzZWNyZXRqZXdlbC5jb22CDyoudG9pY2hp
YXNlLm5ldIIKKi51bnJ1bC5tZYIYKi52ZXJpem9uZW5hdGVycHJpc2UuY29tghoq
LnZyaW5nZW5pZXJpYW1lcmNhZGVvLmNvbYINKi52emxvbWFsLm5ldIINKi53ZXF1
ZWVyLm5ldIIWYXJ0aWZpY2lhbGFxdWFyaXVtLmNvbYIMYXN0cm9pZC5pbmZvgg5h
dXN0aW5qb3VubC5jb4IRYmlrcmFtZ2xhc2dvdy5jb22CC2NhbGN1bGVtLnVzghBj
YW1iaWFlbG1lbnUuY29tghdjYXJyaWFnZWNyb3NzaW5naG9hLmNvbYIWY2hpcm9w
cmFjdG9yLmVkdWNhdGlvboIaY2xhcmVhbmRqZXNzaWVzdGVwaGVucy5jb22CFWNv
bnRyb2xlcy1jb3Vwb25zLmNvbYIOY3RhaWdhbGlzdC5vcmeCDGRlbnByaW1lLmNv
bYIPZWFybmJ5bGVhcm4ueHl6ghJlbHNocm91ay1kYXRlcy5jb22CCmZpdmVjb24u
aW+CGmhhbmFzb2phcGFuZXNlbGFuZ3VhZ2UuY29tghRob3RlbHB1ZXJ0b251ZXZv
LmNvbYIKaWpycGV0Lm9yZ4IQaXByb2NsYWltLmNodXJjaIIUamNwZW5uZXlnaWZ0
Y2FyZC5jb22CC2ppYWxpMTYueHl6ggxrb29sY2hpcC5jb22CDGtyaXR0ZXJ6Lm5l
dIINbWVzZXJvLm9ubGluZYIKbXFoN3Q0LmNvbYIObmZ0bW92ZW1lbnQuaW+CD290
cHJlc2VhcmNoLmNvbYIccGFyc29uZWF1bHRjb25zdWx0aW5nbGxjLmNvbYIMcGdz
YmF6YXIuY29tghpwcm9lbGVjdHJpY2lhbm5ld2Fya25qLmNvbYINcm9pcmFja2V0
LmNvbYIPcm91dGUzMGJlZXIuY29tghlyb3hhc2NpdHlvbmxpbmVtYXJrZXQuY29t
ghBycm1waGlsc2NvcnAuY29tghBydWlwdWJpb2xvZ3kuY29tghJydW1pbmF0ZXJv
dHVuZC5jb22CEnJ1bm5lcnNkZW5yYWNlLmNvbYIYcnVzc29zZXN0YXRlc2FsZXNs
bGMuY29tghVydXRoaWVncmFjZWNha2Vjby5uZXSCD3J1dHphbG1hY2VuLmNvbYIK
c2V0bGxlLmNvbYINc3RhZmlkdXR6Lm5ldIIOc3R5bGVzMnBzci5jb22CEnRoZXNl
Y3JldGpld2VsLmNvbYINdG9pY2hpYXNlLm5ldIIIdW5ydWwubWWCFnZlcml6b25l
bmF0ZXJwcmlzZS5jb22CGHZyaW5nZW5pZXJpYW1lcmNhZGVvLmNvbYILdnpsb21h
bC5uZXSCC3dlcXVlZXIubmV0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYB
BAHWeQIEAgSB9ASB8QDvAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H6
1BcAAAGMIETz+wAABAMARjBEAiB/ZzYBgw5HFs1sQPF4of/bnVEN6Su0y0WKXr51
q4MRMQIgPLqxWkhba0xRB+ri5SN0m7HLFaDd0Mtf+KLs95Ui82kAdgDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYwgRPQ+AAAEAwBHMEUCIQD/GAo5
2D7KLXOP9hFjX65akPB/GbE0eTXLzMiGcEVoyQIgbJnanvI8BEkYxLb5gth5xp9b
RK2EP8OGAzirOdO6a88wDQYJKoZIhvcNAQELBQADggEBABgrWebVJvSWPD68OSqm
DOMKF50I3njqiwQ1cwmIbCRjvaZYW37je56JgpFBOxG/suhirP8k68zGZuNL6P15
0lzgEnaFIwWchsLbrmXjGan3c5mWFjZKDt7nzAdt7i54x0vWZC17i9IjyV8TD0Mb
BH23ohmPjfCBV1Ne34zlGCyRAG8WQLWIPqZDomCcz13OAd1SpBpFLND3fjnnYKed
qKRF96ZVOzqV7faLNFOSmXQ+15xmjWo3HcQw5jyLZ4gc158P+yA+QK6ujY5Rlkfr
22KYVygB6zkF2NXhSTLdy+/p9hpTXKj3YcKeR0aJCq8qo+0Bwnlm8R4FUCWze5YU
g04=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352252132162267584804530187832786893105050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 11:47:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 11:47:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jcpenneygiftcard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819473181675548018618343116430661733833250210016410190556431437828743166986588329702893372450372444208525463317991787671156957436880257732461177008376614819849307013781074330982800019730668629529523847556288967269455855608344065409870573731944980040205338358868461812393408944041383527731978790439753035042613379122605190429917592122165135277608748674781167784300690621893130458014366805276661261797393433283962830874818868456599676874482795934074715502006849891299031224174995974449808082703052504995930835580192735564900262795017235064956315442688861039128059160632898069502893313660351489533876841987567032761204677257965251152641855941286483762109043076144135934082599151547850923531880155589076958012441981083010972872086172254371900154063874422594922082067306465416578294674749427480024685240859825477884980681246028086927972092033214418113016670769372164808137031944209072844937600831261838847633668980764671796934857479372988176561925266959044280301157543933249171008115040718917015849141723254942811240369271553401677223808341267379415065372044130021216362569663116874319331626812750594075985770708221120433442223935196116673202864045326817354636468879122060721784672297950789358555406615597382853624974170234560832637409291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ed3e81ed2c7cf19e02d08c9e3fd59c4412c47ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1950 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artificialaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astroid.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinjounl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikramglasgow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calculem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambiaelmenu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carriagecrossinghoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiropractor.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clareandjessiestephens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controles-coupons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctaigalist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earnbylearn.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elshrouk-dates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fivecon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanasojapaneselanguage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelpuertonuevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijrpet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iproclaim.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcpenneygiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiali16.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koolchip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kritterz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesero.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mqh7t4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nftmovement.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otpresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parsoneaultconsultingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pgsbazar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proelectriciannewarknj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roiracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.route30beer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roxascityonlinemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrmphilscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruipubiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruminaterotund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersdenrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.russosestatesalesllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruthiegracecakeco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rutzalmacen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.setlle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stafidutz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.styles2psr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesecretjewel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toichiase.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unrul.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verizonenaterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vringenieriamercadeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vzlomal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wequeer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artificialaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astroid.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinjounl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikramglasgow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambiaelmenu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriagecrossinghoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiropractor.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clareandjessiestephens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controles-coupons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctaigalist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earnbylearn.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elshrouk-dates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivecon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanasojapaneselanguage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelpuertonuevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijrpet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iproclaim.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpenneygiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiali16.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koolchip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kritterz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesero.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqh7t4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nftmovement.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otpresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsoneaultconsultingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgsbazar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proelectriciannewarknj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roiracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'route30beer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roxascityonlinemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrmphilscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruipubiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruminaterotund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersdenrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russosestatesalesllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruthiegracecakeco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutzalmacen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setlle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stafidutz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styles2psr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretjewel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toichiase.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unrul.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verizonenaterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vringenieriamercadeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzlomal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wequeer.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c2044f3fb000004030046304402207f673601830e4716cd6c40f178a1ffdb9d510de92bb4cb458a5ebe75ab83113102203cbab15a485b6b4c5107eae2e523749bb1cb15a0ddd0cb5ff8a2ecf79522f369007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c2044f43e0000040300473045022100ff180a39d83eca2d738ff611635fae5a90f07f19b1347935cbccc886704568c902206c99da9ef23c044918c4b6f982d879c69f5b44ad843fc3860338ab39d3ba6bcf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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