yesnetdigita.com

Issued by R10

About this certificate

This digital certificate with serial number 03:47:70:5a:50:7a:ee:34:a5:71:f4:43:08:a2:47:17:3e:fc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yesnetdigita.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:47:70:5a:50:7a:ee:34:a5:71:f4:43:08:a2:47:17:3e:fc
Serial Number (int): 285646248321244874754669625635023009300220
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:7d:22:6d:f1:2f:b4:7c:45:e0:4b:79:36:70:ad:e7:d7:59:56:87
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): a2:bf:85:4c:be:8d:e4:7f:1d:19:be:0e:6f:2a:16:14:a2:65:ad:8a
Fingerprint (sha256): e1:b9:dc:c9:d4:ca:e3:16:70:5f:86:f5:d2:29:9b:24:c4:8e:22:7f:4b:ab:f4:64:04:0e:da:7f:18:3c:04:c9

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate yesnetdigita.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yesnetdigita.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airbaskets.com
*.aspirateurprofessionnel.com
*.bailbondscompany.com
*.cannabisinhalation.com
*.collegeofmarin.com
*.coronadoisland.org
*.craniumgames.com
*.dieselmechanics.net
*.disfracestuyo.com
*.energiaxx1.com
*.eventcoordinators.com
*.freeclerk.com
*.freeeffort.com
*.freeprotest.com
*.gebrauchtwaqgen.de
*.gmn.com.pl
*.goldenretrievers.com.au
*.hkm.au
*.homosexual.com.au
*.idbadges.org
*.irunner.com.au
*.issf6matchmakingbroken.com
*.lifegenerate.com
*.lifttruck.org
*.loan86.cc
*.magnesium.com.au
*.mtsv.de
*.newiacourse.com
*.noawti.store
*.osa.de
*.oyunindir.online
*.partyvector.com
*.porgameshub.com
*.relaincetruckandequipment.com
*.shamskebabhouse.com.au
*.sharkccesories.com
*.sip-den.com
*.soberresources.com
*.sonntagsspiele.de
*.standoutmagazine.us
*.superblender.co
*.sydneybathroomsupply.com.au
*.tikitak.cc
*.tubedy.mobi
*.vendingmachinerepair.com
*.vmwusa.com
*.voicepayments.com
*.websuccessuniversity.com
*.xn--espressolffel-qmb.de
*.yesnetdigita.com
airbaskets.com
aspirateurprofessionnel.com
bailbondscompany.com
cannabisinhalation.com
collegeofmarin.com
coronadoisland.org
craniumgames.com
dieselmechanics.net
disfracestuyo.com
energiaxx1.com
eventcoordinators.com
freeclerk.com
freeeffort.com
freeprotest.com
gebrauchtwaqgen.de
gmn.com.pl
goldenretrievers.com.au
hkm.au
homosexual.com.au
idbadges.org
irunner.com.au
issf6matchmakingbroken.com
lifegenerate.com
lifttruck.org
loan86.cc
magnesium.com.au
mtsv.de
newiacourse.com
noawti.store
osa.de
oyunindir.online
partyvector.com
porgameshub.com
relaincetruckandequipment.com
shamskebabhouse.com.au
sharkccesories.com
sip-den.com
soberresources.com
sonntagsspiele.de
standoutmagazine.us
superblender.co
sydneybathroomsupply.com.au
tikitak.cc
tubedy.mobi
vendingmachinerepair.com
vmwusa.com
voicepayments.com
websuccessuniversity.com
xn--espressolffel-qmb.de
yesnetdigita.com

Other certificates including the domain name yesnetdigita.com

(limited to 100 certificates)
717dy.org
btcvg.com
activelearprimary.co.uk
mysmurf.net
yesnetdigita.com

Certificate

The complete raw certificate details for yesnetdigita.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINgzCCDGugAwIBAgISA0dwWlB67jSlcfRDCKJHFz78MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjQwNjA3MDY1NDQ2WhcNMjQwOTA1MDY1NDQ1WjAbMRkwFwYDVQQD
ExB5ZXNuZXRkaWdpdGEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAvGVChT6sZkjRQI4Rfs4vM4lLovVDap2icuynmEJkxOfxkAhFPBcdZ64/eLcf
lynKsNw4lW8QgWRJXjD9dFvelKug9fVQrv0Wf7F6pjlWm4cyS5Mh+lv0kBqhokFL
YfsmCInv+4nUYz3KQC0mXv7oXy6Stjqsn3NtpyvorwCZpFTpDiO80rPdngARIcJ4
uIh3zQFTaev+3XakDcrPdMahfONMEDx6PSVFQyhBP96x9CvvSGczw396KNCAB186
z5vH5h4X9eGi0Y26NiAlaMglHU5hX65Zhsxkxy5K+BKEKjsyWs6Zmaua9dWDIrM+
xy1pREdswPSOvPzfG0bNsVLKZ1ryL6sC1bv+PwZyZa9EYON1MAhuup66yXTMCty0
56JnktdUglLcPK5krrWjx5wTC0AZIKAVAJ5n2lBuagYcmVckC4LcyudVbZlWKwjR
YH61E2/URkp49QpakJFIeW4+K0EmwEGtg2MbX8OWcFl+74cD3kk+joh/DBi4Rl7t
ETAT9c26TjOTlMAu8hinZgA3D+uq7CFutOMkbkpexaxA5nOlwcDl5H5cx3kTG+Aa
46hry1v8QZj0dnEyTGJe5H80/4+3t3fm1wH7WwgbWYXoiJCUFhZnKOKYkmWUeH/A
wztkcr5TraDT1ZbpodXZTMLk05x9YGfMObjJpOn4o8XxcrECAwEAAaOCCacwggmj
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUnn0ibfEvtHxF4Et5NnCt59dZVocwHwYD
VR0jBBgwFoAUu7zDR6XkvKnGw6RyDBCNojXhyOgwVwYIKwYBBQUHAQEESzBJMCIG
CCsGAQUFBzABhhZodHRwOi8vcjEwLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdo
dHRwOi8vcjEwLmkubGVuY3Iub3JnLzCCB60GA1UdEQSCB6QwggegghAqLmFpcmJh
c2tldHMuY29tgh0qLmFzcGlyYXRldXJwcm9mZXNzaW9ubmVsLmNvbYIWKi5iYWls
Ym9uZHNjb21wYW55LmNvbYIYKi5jYW5uYWJpc2luaGFsYXRpb24uY29tghQqLmNv
bGxlZ2VvZm1hcmluLmNvbYIUKi5jb3JvbmFkb2lzbGFuZC5vcmeCEiouY3Jhbml1
bWdhbWVzLmNvbYIVKi5kaWVzZWxtZWNoYW5pY3MubmV0ghMqLmRpc2ZyYWNlc3R1
eW8uY29tghAqLmVuZXJnaWF4eDEuY29tghcqLmV2ZW50Y29vcmRpbmF0b3JzLmNv
bYIPKi5mcmVlY2xlcmsuY29tghAqLmZyZWVlZmZvcnQuY29tghEqLmZyZWVwcm90
ZXN0LmNvbYIUKi5nZWJyYXVjaHR3YXFnZW4uZGWCDCouZ21uLmNvbS5wbIIZKi5n
b2xkZW5yZXRyaWV2ZXJzLmNvbS5hdYIIKi5oa20uYXWCEyouaG9tb3NleHVhbC5j
b20uYXWCDiouaWRiYWRnZXMub3JnghAqLmlydW5uZXIuY29tLmF1ghwqLmlzc2Y2
bWF0Y2htYWtpbmdicm9rZW4uY29tghIqLmxpZmVnZW5lcmF0ZS5jb22CDyoubGlm
dHRydWNrLm9yZ4ILKi5sb2FuODYuY2OCEioubWFnbmVzaXVtLmNvbS5hdYIJKi5t
dHN2LmRlghEqLm5ld2lhY291cnNlLmNvbYIOKi5ub2F3dGkuc3RvcmWCCCoub3Nh
LmRlghIqLm95dW5pbmRpci5vbmxpbmWCESoucGFydHl2ZWN0b3IuY29tghEqLnBv
cmdhbWVzaHViLmNvbYIfKi5yZWxhaW5jZXRydWNrYW5kZXF1aXBtZW50LmNvbYIY
Ki5zaGFtc2tlYmFiaG91c2UuY29tLmF1ghQqLnNoYXJrY2Nlc29yaWVzLmNvbYIN
Ki5zaXAtZGVuLmNvbYIUKi5zb2JlcnJlc291cmNlcy5jb22CEyouc29ubnRhZ3Nz
cGllbGUuZGWCFSouc3RhbmRvdXRtYWdhemluZS51c4IRKi5zdXBlcmJsZW5kZXIu
Y2+CHSouc3lkbmV5YmF0aHJvb21zdXBwbHkuY29tLmF1ggwqLnRpa2l0YWsuY2OC
DSoudHViZWR5Lm1vYmmCGioudmVuZGluZ21hY2hpbmVyZXBhaXIuY29tggwqLnZt
d3VzYS5jb22CEyoudm9pY2VwYXltZW50cy5jb22CGioud2Vic3VjY2Vzc3VuaXZl
cnNpdHkuY29tghoqLnhuLS1lc3ByZXNzb2xmZmVsLXFtYi5kZYISKi55ZXNuZXRk
aWdpdGEuY29tgg5haXJiYXNrZXRzLmNvbYIbYXNwaXJhdGV1cnByb2Zlc3Npb25u
ZWwuY29tghRiYWlsYm9uZHNjb21wYW55LmNvbYIWY2FubmFiaXNpbmhhbGF0aW9u
LmNvbYISY29sbGVnZW9mbWFyaW4uY29tghJjb3JvbmFkb2lzbGFuZC5vcmeCEGNy
YW5pdW1nYW1lcy5jb22CE2RpZXNlbG1lY2hhbmljcy5uZXSCEWRpc2ZyYWNlc3R1
eW8uY29tgg5lbmVyZ2lheHgxLmNvbYIVZXZlbnRjb29yZGluYXRvcnMuY29tgg1m
cmVlY2xlcmsuY29tgg5mcmVlZWZmb3J0LmNvbYIPZnJlZXByb3Rlc3QuY29tghJn
ZWJyYXVjaHR3YXFnZW4uZGWCCmdtbi5jb20ucGyCF2dvbGRlbnJldHJpZXZlcnMu
Y29tLmF1ggZoa20uYXWCEWhvbW9zZXh1YWwuY29tLmF1ggxpZGJhZGdlcy5vcmeC
DmlydW5uZXIuY29tLmF1ghppc3NmNm1hdGNobWFraW5nYnJva2VuLmNvbYIQbGlm
ZWdlbmVyYXRlLmNvbYINbGlmdHRydWNrLm9yZ4IJbG9hbjg2LmNjghBtYWduZXNp
dW0uY29tLmF1ggdtdHN2LmRlgg9uZXdpYWNvdXJzZS5jb22CDG5vYXd0aS5zdG9y
ZYIGb3NhLmRlghBveXVuaW5kaXIub25saW5lgg9wYXJ0eXZlY3Rvci5jb22CD3Bv
cmdhbWVzaHViLmNvbYIdcmVsYWluY2V0cnVja2FuZGVxdWlwbWVudC5jb22CFnNo
YW1za2ViYWJob3VzZS5jb20uYXWCEnNoYXJrY2Nlc29yaWVzLmNvbYILc2lwLWRl
bi5jb22CEnNvYmVycmVzb3VyY2VzLmNvbYIRc29ubnRhZ3NzcGllbGUuZGWCE3N0
YW5kb3V0bWFnYXppbmUudXOCD3N1cGVyYmxlbmRlci5jb4Ibc3lkbmV5YmF0aHJv
b21zdXBwbHkuY29tLmF1ggp0aWtpdGFrLmNjggt0dWJlZHkubW9iaYIYdmVuZGlu
Z21hY2hpbmVyZXBhaXIuY29tggp2bXd1c2EuY29tghF2b2ljZXBheW1lbnRzLmNv
bYIYd2Vic3VjY2Vzc3VuaXZlcnNpdHkuY29tghh4bi0tZXNwcmVzc29sZmZlbC1x
bWIuZGWCEHllc25ldGRpZ2l0YS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u
385KPxa0ygAAAY/xsWYqAAAEAwBGMEQCIGnkGrkdo9qyRlacr/sLygmYd+usfwvL
i/ELbZNABbUYAiAGzBNaFqOCmV5b25fW9PpxaZQZ/7WIIdqKypnQRYYs3wB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj/GxZjoAAAQDAEcwRQIh
AOE/UXC71OdIAVBiQnOzAFGB5aEnBAz/ihRS8LhNqmyxAiBGBUFuzANTGKHT0yQf
seatc5K/X9/XqnIssJNPy/uxTjANBgkqhkiG9w0BAQsFAAOCAQEACon33SPGocpR
xO2GoGIWnDa049rGR0gQPe3m9NqvFQp7UTanriP2WSP4S4kgZvnf5DIsvsg1gDja
5OEZM8bu06z/ABF3n9muvGZKjxKUTEQ+AQpVYGWqhPrMBCVhQC7qFkONx/rM0IOo
VwtMo/74JoJer6yIz+J/pcOBJ6pdYSCBSLnAjMkHHHZYZI8wc0y+2jGWUnnyVEF0
EYhfAAVVNLNJA8dVfpmUlrZ8gNSldVm5wIq8EQvcA73NXVD6zBxyp/Bm/iS51c65
DpBm6i3hZdrsCxDXw4iZ4jjNLQx4kE3w0GVEMW1xYn0Q860Omw2qcUr/FYgUKh5w
xjPLeeWpQw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285646248321244874754669625635023009300220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 06:54:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 06:54:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yesnetdigita.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768586772790335876523444151218287459348727531038641670367078133665895911341668834850015663944397596347503209243378238872192578130955643668077899995503954840350087323968926932345116891728116789075985339706393402963969541994665633750137775060380369826069849731226212012707862845845871783658969342354254295929566131792758271996396122529001899405864562191684231491754146036485933074872416583809140591523514952396993380387862727329521789453822985899420005100754689178475872990977828761338475617028809738606741693291950136360381269158991036267956139486075294711329051032027167603838890647558993996577471959536374484116311258856237137074280099928417084101551959117803123281583702026227714401026123849968586279582960862512825282190697672753518786634897874964171241743805159025433906705332710320618999100572699182605644832841606182965746120906756817793029951019173203281085789394478605818005356229346392893164409450742560070680858102034392769696943445423562714851038842624515873733225296104167672258039526375762708193534912049269697851452038384740544345843272091080803475365746416974763331623531530562863405041176852727927063397126514978919499747300718781050547430387667027057139288622927279937071718171148366663998111642193960887165742314161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e7d226df12fb47c45e04b793670ade7d7595687
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1956 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airbaskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspirateurprofessionnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bailbondscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannabisinhalation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collegeofmarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coronadoisland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craniumgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dieselmechanics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disfracestuyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.energiaxx1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eventcoordinators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeeffort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeprotest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gebrauchtwaqgen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmn.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldenretrievers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkm.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homosexual.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idbadges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irunner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.issf6matchmakingbroken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifegenerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifttruck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loan86.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnesium.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtsv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newiacourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noawti.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oyunindir.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partyvector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porgameshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relaincetruckandequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shamskebabhouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharkccesories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sip-den.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soberresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonntagsspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.standoutmagazine.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superblender.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydneybathroomsupply.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tikitak.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubedy.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vendingmachinerepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicepayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websuccessuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--espressolffel-qmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesnetdigita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airbaskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspirateurprofessionnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bailbondscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisinhalation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeofmarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronadoisland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craniumgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dieselmechanics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disfracestuyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiaxx1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventcoordinators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeclerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeeffort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeprotest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebrauchtwaqgen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmn.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenretrievers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkm.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homosexual.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idbadges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irunner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issf6matchmakingbroken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifegenerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifttruck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loan86.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnesium.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newiacourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noawti.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyunindir.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyvector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porgameshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaincetruckandequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamskebabhouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkccesories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip-den.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soberresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonntagsspiele.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standoutmagazine.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superblender.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneybathroomsupply.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikitak.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubedy.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendingmachinerepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicepayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websuccessuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--espressolffel-qmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesnetdigita.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff1b1662a0000040300463044022069e41ab91da3dab246569caffb0bca099877ebac7f0bcb8bf10b6d934005b518022006cc135a16a382995e5bdb97d6f4fa71699419ffb58821da8aca99d045862cdf00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff1b1663a0000040300473045022100e13f5170bbd4e7480150624273b3005181e5a127040cff8a1452f0b84daa6cb102204605416ecc035318a1d3d3241fb1e6ad7392bf5fdfd7aa722cb0934fcbfbb14e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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