genema.icu

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:70:23:1c:c6:21:77:94:b4:5b:aa:8f:1a:c2:0d:07:e6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=genema.icu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:70:23:1c:c6:21:77:94:b4:5b:aa:8f:1a:c2:0d:07:e6
Serial Number (int): 297555844538423179013526639742796574820326
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:a2:28:c8:2a:2e:ef:74:26:62:8f:14:28:5b:d8:91:fe:b8:d6:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:c8:a5:08:f3:5a:08:71:0c:cb:d7:6d:c4:3b:c8:ad:66:b0:00:02
Fingerprint (sha256): eb:f0:97:19:52:3f:cd:aa:26:fc:c1:e1:36:a5:67:dc:6e:87:44:5d:c1:4d:2f:ef:a3:b7:38:f7:fe:cd:93:cc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate genema.icu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for genema.icu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.analny.icu
*.aspley.au
*.corocoro.icu
*.dailytrader.com.au
*.devuqajuqidew.bar
*.diary-workbook-journal.bar
*.eastmarketnoodlehouse.com
*.ebay-kleinanzweigen.de
*.emergancydental.com
*.foodprocessor.de
*.genema.icu
*.hardware-versand.net
*.hoteles.com.au
*.ketoisumxsdiet.com
*.legitmateways.com
*.lmstreaming2.com
*.londonslifestyles.com
*.longislandpelletfuel.com
*.loomoviess.com
*.lumiduo.com
*.mitost.de
*.modellflugversicherung.de
*.novamovies.net
*.nrawning.co.uk
*.nugstv.net
*.nursingschool.de
*.nursinguniform.de
*.painterilliteracy.top
*.petershepherdtyres.co.uk
*.sexmatxa.net
*.skiffvintageknittingpatterns.co.uk
*.sowmstvdyficyp.com
*.spiceymania.com
*.staygreat2020.com
*.staywindrockpark.com
*.steauamuntilorisverna.com
*.suhutterlfy.com
*.techubly.com
*.timforserenity.com
*.toffeesharw.com
*.trendyrings.net
*.troymobbs.com
*.tutorialcsip.com
*.twa.com.pl
*.twobrotherspa.com
*.typeinggamezone.com
*.writing-pages-world.bar
*.xn--brswe-jua.de
*.xn--brutksten-z2a.de
*.ytt.de
analny.icu
aspley.au
corocoro.icu
dailytrader.com.au
devuqajuqidew.bar
diary-workbook-journal.bar
eastmarketnoodlehouse.com
ebay-kleinanzweigen.de
emergancydental.com
foodprocessor.de
genema.icu
hardware-versand.net
hoteles.com.au
ketoisumxsdiet.com
legitmateways.com
lmstreaming2.com
londonslifestyles.com
longislandpelletfuel.com
loomoviess.com
lumiduo.com
mitost.de
modellflugversicherung.de
novamovies.net
nrawning.co.uk
nugstv.net
nursingschool.de
nursinguniform.de
painterilliteracy.top
petershepherdtyres.co.uk
sexmatxa.net
skiffvintageknittingpatterns.co.uk
sowmstvdyficyp.com
spiceymania.com
staygreat2020.com
staywindrockpark.com
steauamuntilorisverna.com
suhutterlfy.com
techubly.com
timforserenity.com
toffeesharw.com
trendyrings.net
troymobbs.com
tutorialcsip.com
twa.com.pl
twobrotherspa.com
typeinggamezone.com
writing-pages-world.bar
xn--brswe-jua.de
xn--brutksten-z2a.de
ytt.de

Other certificates including the domain name genema.icu

(limited to 100 certificates)
*.alfa.szczecin.pl
fgxdpz.icu
genema.icu
freeadult.cyou
genema.icu

Certificate

The complete raw certificate details for genema.icu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINoDCCDIigAwIBAgISA2pwIxzGIXeUtFuqjxrCDQfmMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMDcwODQ2NDhaFw0yNDAxMDUwODQ2NDdaMBUxEzARBgNVBAMT
CmdlbmVtYS5pY3UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDlksil
KV+CcGWY29H7cSOWpjgBYrvMfko1xNa80OcEh6pWcAefVNGrr9nkmwEF4/4tHua5
X0tyHR0Yv2A+Bt/1dNGpt6SspTuLZQx76uILXF0d7N+z7PChl88EMxEZAkq+uvNd
LWqgJF8VJj0MF4HKDPFaUddmZ0V1L+pIEF+rnv7y0ZWVX7T4TXXHHNwrmFeVSPGW
oJg5zNg14PSD1UfQIUw7auUjCzm8540hXfweJW5ch/uLSkCP5Nkd5QkG6HnHVhdP
YNH1/78M+mSps1nC4nmRbRONOBFuXYP23ekrPzhKnSf73/KUu5UY/jwGtgOOmMO1
KJCyhCaPkSOKkoVApWz3XcYGUfy50w3obOSz0+UAh8NUYi0GlylrAM/P9uVfwyyp
ZfhmlgjilkmTA/GR9vo66kKH6brUi5p08hFEN2cf1Pnzot4Pa+RQf393YPLYVdJS
EyEKj/jPtsX6SkF5ywBfvddmZw6Yk0Nbm/IS6jzyIRKHRvQznA7f9folvRLzlDsk
x5EEjaL1inh09oC8xLfJHSJCpUCiOKq0G3vyVEOt47+AHXwLp2hhrginjDAFrOW9
Nz/BnEz5A7TCg1bBVEMveRoGXCFVLdR2FO4SVSHEnNjbodu09s10H015lxmVDl8P
vtvR//po84H+4M2GSNtWtJ72lrQrSXpdeqNBkwIDAQABo4IJyzCCCccwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQioijIKi7vdCZijxQoW9iR/rjW5zAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCB9MGA1UdEQSCB8owggfGggwqLmFuYWxueS5pY3WCCyou
YXNwbGV5LmF1gg4qLmNvcm9jb3JvLmljdYIUKi5kYWlseXRyYWRlci5jb20uYXWC
EyouZGV2dXFhanVxaWRldy5iYXKCHCouZGlhcnktd29ya2Jvb2stam91cm5hbC5i
YXKCGyouZWFzdG1hcmtldG5vb2RsZWhvdXNlLmNvbYIYKi5lYmF5LWtsZWluYW56
d2VpZ2VuLmRlghUqLmVtZXJnYW5jeWRlbnRhbC5jb22CEiouZm9vZHByb2Nlc3Nv
ci5kZYIMKi5nZW5lbWEuaWN1ghYqLmhhcmR3YXJlLXZlcnNhbmQubmV0ghAqLmhv
dGVsZXMuY29tLmF1ghQqLmtldG9pc3VteHNkaWV0LmNvbYITKi5sZWdpdG1hdGV3
YXlzLmNvbYISKi5sbXN0cmVhbWluZzIuY29tghcqLmxvbmRvbnNsaWZlc3R5bGVz
LmNvbYIaKi5sb25naXNsYW5kcGVsbGV0ZnVlbC5jb22CECoubG9vbW92aWVzcy5j
b22CDSoubHVtaWR1by5jb22CCyoubWl0b3N0LmRlghsqLm1vZGVsbGZsdWd2ZXJz
aWNoZXJ1bmcuZGWCECoubm92YW1vdmllcy5uZXSCECoubnJhd25pbmcuY28udWuC
DCoubnVnc3R2Lm5ldIISKi5udXJzaW5nc2Nob29sLmRlghMqLm51cnNpbmd1bmlm
b3JtLmRlghcqLnBhaW50ZXJpbGxpdGVyYWN5LnRvcIIaKi5wZXRlcnNoZXBoZXJk
dHlyZXMuY28udWuCDiouc2V4bWF0eGEubmV0giQqLnNraWZmdmludGFnZWtuaXR0
aW5ncGF0dGVybnMuY28udWuCFCouc293bXN0dmR5ZmljeXAuY29tghEqLnNwaWNl
eW1hbmlhLmNvbYITKi5zdGF5Z3JlYXQyMDIwLmNvbYIWKi5zdGF5d2luZHJvY2tw
YXJrLmNvbYIbKi5zdGVhdWFtdW50aWxvcmlzdmVybmEuY29tghEqLnN1aHV0dGVy
bGZ5LmNvbYIOKi50ZWNodWJseS5jb22CFCoudGltZm9yc2VyZW5pdHkuY29tghEq
LnRvZmZlZXNoYXJ3LmNvbYIRKi50cmVuZHlyaW5ncy5uZXSCDyoudHJveW1vYmJz
LmNvbYISKi50dXRvcmlhbGNzaXAuY29tggwqLnR3YS5jb20ucGyCEyoudHdvYnJv
dGhlcnNwYS5jb22CFSoudHlwZWluZ2dhbWV6b25lLmNvbYIZKi53cml0aW5nLXBh
Z2VzLXdvcmxkLmJhcoISKi54bi0tYnJzd2UtanVhLmRlghYqLnhuLS1icnV0a3N0
ZW4tejJhLmRlgggqLnl0dC5kZYIKYW5hbG55LmljdYIJYXNwbGV5LmF1ggxjb3Jv
Y29yby5pY3WCEmRhaWx5dHJhZGVyLmNvbS5hdYIRZGV2dXFhanVxaWRldy5iYXKC
GmRpYXJ5LXdvcmtib29rLWpvdXJuYWwuYmFyghllYXN0bWFya2V0bm9vZGxlaG91
c2UuY29tghZlYmF5LWtsZWluYW56d2VpZ2VuLmRlghNlbWVyZ2FuY3lkZW50YWwu
Y29tghBmb29kcHJvY2Vzc29yLmRlggpnZW5lbWEuaWN1ghRoYXJkd2FyZS12ZXJz
YW5kLm5ldIIOaG90ZWxlcy5jb20uYXWCEmtldG9pc3VteHNkaWV0LmNvbYIRbGVn
aXRtYXRld2F5cy5jb22CEGxtc3RyZWFtaW5nMi5jb22CFWxvbmRvbnNsaWZlc3R5
bGVzLmNvbYIYbG9uZ2lzbGFuZHBlbGxldGZ1ZWwuY29tgg5sb29tb3ZpZXNzLmNv
bYILbHVtaWR1by5jb22CCW1pdG9zdC5kZYIZbW9kZWxsZmx1Z3ZlcnNpY2hlcnVu
Zy5kZYIObm92YW1vdmllcy5uZXSCDm5yYXduaW5nLmNvLnVrggpudWdzdHYubmV0
ghBudXJzaW5nc2Nob29sLmRlghFudXJzaW5ndW5pZm9ybS5kZYIVcGFpbnRlcmls
bGl0ZXJhY3kudG9wghhwZXRlcnNoZXBoZXJkdHlyZXMuY28udWuCDHNleG1hdHhh
Lm5ldIIic2tpZmZ2aW50YWdla25pdHRpbmdwYXR0ZXJucy5jby51a4ISc293bXN0
dmR5ZmljeXAuY29tgg9zcGljZXltYW5pYS5jb22CEXN0YXlncmVhdDIwMjAuY29t
ghRzdGF5d2luZHJvY2twYXJrLmNvbYIZc3RlYXVhbXVudGlsb3Jpc3Zlcm5hLmNv
bYIPc3VodXR0ZXJsZnkuY29tggx0ZWNodWJseS5jb22CEnRpbWZvcnNlcmVuaXR5
LmNvbYIPdG9mZmVlc2hhcncuY29tgg90cmVuZHlyaW5ncy5uZXSCDXRyb3ltb2Ji
cy5jb22CEHR1dG9yaWFsY3NpcC5jb22CCnR3YS5jb20ucGyCEXR3b2Jyb3RoZXJz
cGEuY29tghN0eXBlaW5nZ2FtZXpvbmUuY29tghd3cml0aW5nLXBhZ2VzLXdvcmxk
LmJhcoIQeG4tLWJyc3dlLWp1YS5kZYIUeG4tLWJydXRrc3Rlbi16MmEuZGWCBnl0
dC5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA
7wB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABiwmISmMAAAQD
AEYwRAIgdHrOBt6OZ/2H8H2Et57VKOVTwuk76hBLoj5dreMsdQsCICmWU10VFiFz
7mwgQCS+hTMAvT8Oj75GkuJYSiSsAn/1AHYA7s3QZNXbGs7FXLedtM0TojKHRny8
7N7DUUhZRnEftZsAAAGLCYhK9gAABAMARzBFAiEA/G/zLKpLbOEaLL6k5pUe870e
Ordokzctygmd+1CppBkCIEyITeghuf21ZCzam70nrEcABllwInvJU7dIxiBUfKpb
MA0GCSqGSIb3DQEBCwUAA4IBAQBVWU2cE9u10hQENCedBzkPv7aH2co9NuisTvoo
ZpvKxISZ7Ftik2L2cJRXE4W8+G6LjzOaAlnl6WymypwxDGyyTP4hUx1We57OH6iU
j11dR0SJofYbmwJ+V/GHurgCSAFtZBM3C70a6JSbweLBvgTDOIW3YOvpcqselHXd
l3eJ8yfS8t8sqY/PI3kpdnc6sLGXNUky3GyyHJxRRf0/Y64q4cFVAbgfKFBFSmxW
RmEqLbX7P7/h1GHol/myR4I2YhPLeNME2kPheLdFOeY3dwNTJh2Siuqb0OkJo0cW
b3hDkXIXJ8NZ5J+M47UZznXH09vFUI3B6PWBfvuIoXBt287R
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297555844538423179013526639742796574820326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 08:46:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 08:46:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'genema.icu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936577653831453853819604541115147625028730387737776191779586846761800219492558182164661517289755725610558742070401294916064797315733657692728953094038837890631669854968256468112944857937675568509457394127555303563186236280842199448559859282199345837346184505391127867597029791000423771010326194784803641192947103279595367741055751084089087346880624519787616124874479711887519730210672642146690749086622254000909371079828218633448425570882716054198664278614710691756796306768781347492156799688877774708850211532428154935874804757749829006997486645441572034091242127532432301652144191315193339320099578519568555697229398350477631520904870950871755410399263408656730837301242114756659612563533150407877691302741309276451161829642295992920091174491487829476238803995428495857944872038051161783527066277448644874666838607061847243664137313186476475884986061429527287151808307555529337460172738486641736352420166014487086090909975629452819327232118905414458101413727413279405186635398053067273935714799614535474062416223705090978550675991913846080055063108281998719870021893666841732880051492366119303158465643980798245234719431513629171645696957538900938999945263494119004314593927564456299492219385328514672035044089042409992433688592787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22a228c82a2eef7426628f14285bd891feb8d6e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1994 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analny.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspley.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corocoro.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devuqajuqidew.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diary-workbook-journal.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanzweigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emergancydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genema.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardware-versand.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketoisumxsdiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legitmateways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lmstreaming2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londonslifestyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longislandpelletfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loomoviess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumiduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modellflugversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.painterilliteracy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sowmstvdyficyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiceymania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staygreat2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staywindrockpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steauamuntilorisverna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suhutterlfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timforserenity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toffeesharw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.troymobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutorialcsip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twobrotherspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.typeinggamezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.writing-pages-world.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brswe-jua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brutksten-z2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ytt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analny.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspley.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corocoro.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devuqajuqidew.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diary-workbook-journal.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanzweigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergancydental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genema.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardware-versand.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketoisumxsdiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legitmateways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmstreaming2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonslifestyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longislandpelletfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loomoviess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modellflugversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painterilliteracy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sowmstvdyficyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiceymania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staygreat2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staywindrockpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steauamuntilorisverna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suhutterlfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timforserenity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toffeesharw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troymobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorialcsip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twobrotherspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typeinggamezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writing-pages-world.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brswe-jua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brutksten-z2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b09884a6300000403004630440220747ace06de8e67fd87f07d84b79ed528e553c2e93bea104ba23e5dade32c750b02202996535d15162173ee6c204024be853300bd3f0e8fbe4692e2584a24ac027ff5007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b09884af60000040300473045022100fc6ff32caa4b6ce11a2cbea4e6951ef3bd1e3ab76893372dca099dfb50a9a41902204c884de821b9fdb5642cda9bbd27ac4700065970227bc953b748c620547caa5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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