a3rf.net

Issued by R3

About this certificate

This digital certificate with serial number 04:98:6a:e9:6b:07:7e:49:7d:34:72:2c:52:78:bd:26:e4:21 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a3rf.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:98:6a:e9:6b:07:7e:49:7d:34:72:2c:52:78:bd:26:e4:21
Serial Number (int): 400314173642556381412707964657729983144993
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ee:21:2d:59:ab:c9:f2:f0:8e:3a:f3:a5:d8:c7:06:a9:1e:04:e3:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:f4:c2:93:3b:a6:cd:4b:25:28:ec:5d:67:b9:39:ef:9e:78:50:1b
Fingerprint (sha256): e5:62:7e:ef:6d:44:34:5a:a4:2b:fd:24:7a:ce:be:81:5b:b7:82:61:e1:a2:6d:eb:56:8f:a2:4c:eb:22:5c:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a3rf.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a3rf.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a3rf.net
*.agrifields.net
*.attwiteless.com
*.bankets.com
*.berkinstock.com
*.caravanparkscanberra.au
*.cardozofamilylaw.com
*.cbmcci.com
*.championmethodapp.com
*.coconuts.au
*.compositegardendecking.com
*.comsears.com
*.customaudiosound.com
*.cvkurier.at
*.freedreamdictionary.com
*.funds1.com
*.geelsquad.com
*.gymstallmats.com
*.halobird.com
*.healthblaster.com
*.hyves.us
*.jetbluecheckin.com
*.kitchnaid.com
*.latimws.com
*.lkinkedin.com
*.mailboxes.au
*.masntv.com
*.meter1.com
*.millerfurniture.com
*.night-club.us
*.nitrogengenerator.com
*.nizhuan.net
*.resack.com
*.rgbcan.com
*.sabbasjewels.com
*.sadantires.com
*.scoresandpdds.com
*.sharpvac.com
*.smartfoot.com
*.spoonsales.com
*.torcoletti.com
*.vedeosex.com
*.vegetableknife.com
*.vehiclecamera.com
*.venice.au
*.viewcreditscore.com
*.wfg-zuendwarenvertrieb.de
*.wwendys.com
*.xexvideo.com
*.youravoon.com
a3rf.net
agrifields.net
attwiteless.com
bankets.com
berkinstock.com
caravanparkscanberra.au
cardozofamilylaw.com
cbmcci.com
championmethodapp.com
coconuts.au
compositegardendecking.com
comsears.com
customaudiosound.com
cvkurier.at
freedreamdictionary.com
funds1.com
geelsquad.com
gymstallmats.com
halobird.com
healthblaster.com
hyves.us
jetbluecheckin.com
kitchnaid.com
latimws.com
lkinkedin.com
mailboxes.au
masntv.com
meter1.com
millerfurniture.com
night-club.us
nitrogengenerator.com
nizhuan.net
resack.com
rgbcan.com
sabbasjewels.com
sadantires.com
scoresandpdds.com
sharpvac.com
smartfoot.com
spoonsales.com
torcoletti.com
vedeosex.com
vegetableknife.com
vehiclecamera.com
venice.au
viewcreditscore.com
wfg-zuendwarenvertrieb.de
wwendys.com
xexvideo.com
youravoon.com

Other certificates including the domain name a3rf.net

(limited to 100 certificates)
smartfoot.com
shiot.shop
a3rf.net
a3rf.net
lawyerdir.net
a3rf.net
a3rf.net
eftelng.com
a3rf.net

Certificate

The complete raw certificate details for a3rf.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMrDCCC5SgAwIBAgISBJhq6WsHfkl9NHIsUni9JuQhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDIwOTIwNDlaFw0yNDAzMDEwOTIwNDhaMBMxETAPBgNVBAMT
CGEzcmYubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA16MkpvW8
Z6A4wNIpTiiW6BFfWZB0kY4XgtvB7INizBMB4RN0elmwbqLcLbNDPEpV2fCPHdbq
DQWOm9bnXSEOo3r4D2EVbVhXktUTP+GYFMwz9CqmqHrl7Dw9e2VWdYfwjSkJ7OkA
xgq+ERTFEOVCu2EfTxpo4atojgSOBbi62YjZ8//Zx13UKTVrBh+Vcc4zZu3D42ex
ZyI0BFcYdOHUdTomQHCJa5AXhh/R4nYYk8nPdUcx45fU/SbhhG9rhB/7VLAXsO8l
pdfcbzv82kE4JCmmVue4PIv/8JRxxkTOkblwHk7DZmqiIL4LPmyqGAAnFjApKqfT
MX69and6B8QaQmNPiFWbNpXfxurXds5VKErO8inIrkor7H0Di7QPhGnTypmCvELw
+muciMCbHCcHD86P5fVEXlyufvpS7K8nWnVtkpBbL8TqXk6rOsvCS+9hTcgVhqr1
H3CYBJekKeietTHa71COwIZ31lsJ/BCSNY8MaLkDQn7PkhHOvFqG6vNmxS0A9ThR
jVDoGg5fFVfmAzN86c3Dg2ZHOb7ikCsq53HnZIr9M2RcDx1szzJIqAOpvyFD/5YK
9QQinb4OB94lVb6B7HY/bQj9O2Zesx0YM2Emr28QFm2+s4hckOCzpkdPW3iz8lHF
PTnuNRJC7ujVUSG9r5jJbzyCZuOQbS5ka1cCAwEAAaOCCNkwggjVMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQU7iEtWavJ8vCOOvOl2McGqR4E43QwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggbfBgNVHREEggbWMIIG0oIKKi5hM3JmLm5ldIIQKi5hZ3Jp
ZmllbGRzLm5ldIIRKi5hdHR3aXRlbGVzcy5jb22CDSouYmFua2V0cy5jb22CESou
YmVya2luc3RvY2suY29tghkqLmNhcmF2YW5wYXJrc2NhbmJlcnJhLmF1ghYqLmNh
cmRvem9mYW1pbHlsYXcuY29tggwqLmNibWNjaS5jb22CFyouY2hhbXBpb25tZXRo
b2RhcHAuY29tgg0qLmNvY29udXRzLmF1ghwqLmNvbXBvc2l0ZWdhcmRlbmRlY2tp
bmcuY29tgg4qLmNvbXNlYXJzLmNvbYIWKi5jdXN0b21hdWRpb3NvdW5kLmNvbYIN
Ki5jdmt1cmllci5hdIIZKi5mcmVlZHJlYW1kaWN0aW9uYXJ5LmNvbYIMKi5mdW5k
czEuY29tgg8qLmdlZWxzcXVhZC5jb22CEiouZ3ltc3RhbGxtYXRzLmNvbYIOKi5o
YWxvYmlyZC5jb22CEyouaGVhbHRoYmxhc3Rlci5jb22CCiouaHl2ZXMudXOCFCou
amV0Ymx1ZWNoZWNraW4uY29tgg8qLmtpdGNobmFpZC5jb22CDSoubGF0aW13cy5j
b22CDyoubGtpbmtlZGluLmNvbYIOKi5tYWlsYm94ZXMuYXWCDCoubWFzbnR2LmNv
bYIMKi5tZXRlcjEuY29tghUqLm1pbGxlcmZ1cm5pdHVyZS5jb22CDyoubmlnaHQt
Y2x1Yi51c4IXKi5uaXRyb2dlbmdlbmVyYXRvci5jb22CDSoubml6aHVhbi5uZXSC
DCoucmVzYWNrLmNvbYIMKi5yZ2JjYW4uY29tghIqLnNhYmJhc2pld2Vscy5jb22C
ECouc2FkYW50aXJlcy5jb22CEyouc2NvcmVzYW5kcGRkcy5jb22CDiouc2hhcnB2
YWMuY29tgg8qLnNtYXJ0Zm9vdC5jb22CECouc3Bvb25zYWxlcy5jb22CECoudG9y
Y29sZXR0aS5jb22CDioudmVkZW9zZXguY29tghQqLnZlZ2V0YWJsZWtuaWZlLmNv
bYITKi52ZWhpY2xlY2FtZXJhLmNvbYILKi52ZW5pY2UuYXWCFSoudmlld2NyZWRp
dHNjb3JlLmNvbYIbKi53ZmctenVlbmR3YXJlbnZlcnRyaWViLmRlgg0qLnd3ZW5k
eXMuY29tgg4qLnhleHZpZGVvLmNvbYIPKi55b3VyYXZvb24uY29tgghhM3JmLm5l
dIIOYWdyaWZpZWxkcy5uZXSCD2F0dHdpdGVsZXNzLmNvbYILYmFua2V0cy5jb22C
D2JlcmtpbnN0b2NrLmNvbYIXY2FyYXZhbnBhcmtzY2FuYmVycmEuYXWCFGNhcmRv
em9mYW1pbHlsYXcuY29tggpjYm1jY2kuY29tghVjaGFtcGlvbm1ldGhvZGFwcC5j
b22CC2NvY29udXRzLmF1ghpjb21wb3NpdGVnYXJkZW5kZWNraW5nLmNvbYIMY29t
c2VhcnMuY29tghRjdXN0b21hdWRpb3NvdW5kLmNvbYILY3ZrdXJpZXIuYXSCF2Zy
ZWVkcmVhbWRpY3Rpb25hcnkuY29tggpmdW5kczEuY29tgg1nZWVsc3F1YWQuY29t
ghBneW1zdGFsbG1hdHMuY29tggxoYWxvYmlyZC5jb22CEWhlYWx0aGJsYXN0ZXIu
Y29tgghoeXZlcy51c4ISamV0Ymx1ZWNoZWNraW4uY29tgg1raXRjaG5haWQuY29t
ggtsYXRpbXdzLmNvbYINbGtpbmtlZGluLmNvbYIMbWFpbGJveGVzLmF1ggptYXNu
dHYuY29tggptZXRlcjEuY29tghNtaWxsZXJmdXJuaXR1cmUuY29tgg1uaWdodC1j
bHViLnVzghVuaXRyb2dlbmdlbmVyYXRvci5jb22CC25pemh1YW4ubmV0ggpyZXNh
Y2suY29tggpyZ2JjYW4uY29tghBzYWJiYXNqZXdlbHMuY29tgg5zYWRhbnRpcmVz
LmNvbYIRc2NvcmVzYW5kcGRkcy5jb22CDHNoYXJwdmFjLmNvbYINc21hcnRmb290
LmNvbYIOc3Bvb25zYWxlcy5jb22CDnRvcmNvbGV0dGkuY29tggx2ZWRlb3NleC5j
b22CEnZlZ2V0YWJsZWtuaWZlLmNvbYIRdmVoaWNsZWNhbWVyYS5jb22CCXZlbmlj
ZS5hdYITdmlld2NyZWRpdHNjb3JlLmNvbYIZd2ZnLXp1ZW5kd2FyZW52ZXJ0cmll
Yi5kZYILd3dlbmR5cy5jb22CDHhleHZpZGVvLmNvbYINeW91cmF2b29uLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ADtT
d3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjCoLji8AAAQDAEgwRgIh
ALJ9TS70diAQYklz7fV891zOiMca+8VZ/1HFW1vTmD0dAiEA8iqRfytykHo0UcLb
Sh6659vwTnqT7qxWhlBB3EqdKP8AdgAp0DobtnSqcRzTA1tlV8FPiqeLT+g4lEns
pFP5RL0kaAAAAYwqC47tAAAEAwBHMEUCIQD6I5bp+Zi42Y3US04KGkM87BYpczL7
crK1vLOCK85ZOQIgffwkr5rwpgIUGfkbCJf0V0PU5xXRaza5rmAiQuGWnVMwDQYJ
KoZIhvcNAQELBQADggEBAGBIVQ+iFHKDzd9JQL5Byqe/aXR+OeC/n3JVDJoJcDOS
2jb2KWOZvhysGRraOlNK04FkOlJl8zmn6DV6XvGqR9CwBO82VtxRJ3S2sqd5bbkg
51zvlDi96dDeaUeWWHZOE6jFMFXXufaftvFG75l0G97nNg9HT8TgGZgbN51rPEA4
2ubm8XztAfcHHzOyppw1CJihpRav4tcOuYAcIS7dkPdUDgJ9tMrWzNKt/Vwquo+S
58TT1e10KrPmgzSXfElekrc3i8ucsyo2KrBbfc3xWGWl9BHtD1yNtFN7RIkBU2/i
p2ONOPXN3d7UDNyEfTEPqyfaNXdBLPGLOz1+XYhyoCg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400314173642556381412707964657729983144993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 09:20:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 09:20:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a3rf.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879723342110108572797098815511550277249413705653173711036534142414283798300395180545491981749757245572320284808049290916893065035329852065843710271833833841228587624506930584502752277089105010015006026053817636523306503793231916929464011397193794122824018835822374461044733799396928317027533890002768232775943857897022843289308345432768535533953883167242436019629806050319500080151802580415324003746737043318506885831958651296159546808452791382168720875524189228055459857261143085223264622550308195035948284312399649445904514974502800163379659813783261427913479866451982551268766918463233405342182926154582973429893107452142221392213119361089891992822659273960756769710632731252468248179290272158995589508234803880661161158889584185470860317825318549665413498856973551766040935958912885524424957416397425556591975963020571672320288794521565085834298308907339996850311717435717171283738757422575386264799945469594632295614455611217322516392878191706374703098825546287523897032025868961982867412281165078616523249397650705141866840481838005630243554686082303106147605744067148502913710905685764951532152838513473554958426693634604147155565365177789237806943949049832727742747855214847179969791993625499023600711849415560295894950898519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee212d59abc9f2f08e3af3a5d8c706a91e04e374
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a3rf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agrifields.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attwiteless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berkinstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caravanparkscanberra.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardozofamilylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbmcci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.championmethodapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coconuts.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compositegardendecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comsears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customaudiosound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvkurier.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedreamdictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funds1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geelsquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gymstallmats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halobird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthblaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyves.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetbluecheckin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchnaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latimws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkinkedin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mailboxes.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meter1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millerfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.night-club.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitrogengenerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nizhuan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rgbcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabbasjewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sadantires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoresandpdds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharpvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartfoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spoonsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torcoletti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vedeosex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vegetableknife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vehiclecamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venice.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewcreditscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wfg-zuendwarenvertrieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwendys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xexvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youravoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3rf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrifields.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attwiteless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkinstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caravanparkscanberra.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardozofamilylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbmcci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'championmethodapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coconuts.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compositegardendecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customaudiosound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvkurier.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedreamdictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geelsquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymstallmats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halobird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthblaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyves.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetbluecheckin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchnaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latimws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkinkedin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailboxes.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meter1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millerfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'night-club.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitrogengenerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nizhuan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgbcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabbasjewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadantires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoresandpdds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharpvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartfoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoonsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torcoletti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vedeosex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegetableknife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiclecamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venice.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewcreditscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfg-zuendwarenvertrieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwendys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xexvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youravoon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c2a0b8e2f0000040300483046022100b27d4d2ef4762010624973edf57cf75cce88c71afbc559ff51c55b5bd3983d1d022100f22a917f2b72907a3451c2db4a1ebae7dbf04e7a93eeac56865041dc4a9d28ff00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c2a0b8eed0000040300473045022100fa2396e9f998b8d98dd44b4e0a1a433cec16297332fb72b2b5bcb3822bce593902207dfc24af9af0a6021419f91b0897f45743d4e715d16b36b9ae602242e1969d53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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