youandeny.it

Issued by R3

About this certificate

This digital certificate with serial number 04:1b:14:19:a0:5d:a2:91:dc:e4:ec:03:c0:d0:10:44:5c:fe was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=youandeny.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1b:14:19:a0:5d:a2:91:dc:e4:ec:03:c0:d0:10:44:5c:fe
Serial Number (int): 357663485253847555395227745593271232257278
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:5a:67:2a:48:ec:55:a6:0e:f0:b5:85:ac:00:0d:1e:66:ab:0f:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:a2:15:2a:7d:9a:4a:bc:61:7f:dd:98:b2:3b:24:47:b5:12:4d:bc
Fingerprint (sha256): ec:0f:5b:e9:be:a8:2a:52:8b:af:66:1c:87:5d:0e:bd:9e:82:2b:4e:96:76:95:cc:51:5e:87:80:f4:8e:5c:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate youandeny.it

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for youandeny.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123movirs.co
*.adamsatticmusic.com
*.alzheimerspillbox.co
*.anarchyva.com
*.anprototype.cn
*.apjcpcontrol.net
*.avsee24.tv
*.biz2credit.cm
*.carinsurancesearch.info
*.criticallifeinsurance.info
*.dracobeauty.com
*.eflowers580.org
*.endoclaims.co
*.englishlyrics.co
*.favocard.com
*.fedatmcd.com
*.fixtor.si
*.fotolog.com.ar
*.fvff.es
*.gaon26.com
*.gradetolautoparts.com
*.gradyonsei.com
*.halalpetproducts.co.uk
*.kelplunacy.com
*.legendshirts.co
*.libreros.es
*.limusinenservice.de
*.longislandhshockey.net
*.mahtematig.de
*.masrahmat.net
*.matrixhack.nl
*.maxapi.net
*.obstbaeme.de
*.pamhf.com
*.papetlessemployee.com
*.private-krakenversicherung.de
*.ptt3bzstch2.com
*.radbrew.net
*.rowersedge.com
*.satorijourneys.com
*.selcuksportshd147.com
*.shareallfree.info
*.soctechgeek.com
*.soundbeforesight.com
*.teethnwhitening.com
*.thecozycottage.net
*.vecteurdimage.com
*.xn--granitsplen-0hb.de
*.youandeny.it
123movirs.co
adamsatticmusic.com
alzheimerspillbox.co
anarchyva.com
anprototype.cn
apjcpcontrol.net
avsee24.tv
biz2credit.cm
carinsurancesearch.info
criticallifeinsurance.info
dracobeauty.com
eflowers580.org
endoclaims.co
englishlyrics.co
favocard.com
fedatmcd.com
fixtor.si
fotolog.com.ar
fvff.es
gaon26.com
gradetolautoparts.com
gradyonsei.com
halalpetproducts.co.uk
kelplunacy.com
legendshirts.co
libreros.es
limusinenservice.de
longislandhshockey.net
mahtematig.de
masrahmat.net
matrixhack.nl
maxapi.net
obstbaeme.de
pamhf.com
papetlessemployee.com
private-krakenversicherung.de
ptt3bzstch2.com
radbrew.net
rowersedge.com
satorijourneys.com
selcuksportshd147.com
shareallfree.info
soctechgeek.com
soundbeforesight.com
teethnwhitening.com
thecozycottage.net
vecteurdimage.com
xn--granitsplen-0hb.de
youandeny.it

Other certificates including the domain name youandeny.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for youandeny.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM/jCCC+agAwIBAgISBBsUGaBdopHc5OwDwNAQRFz+MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTAyMDM1MjFaFw0yNDA0MDkyMDM1MjBaMBcxFTATBgNVBAMT
DHlvdWFuZGVueS5pdDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKqf
hXUCxL0nA/N4NmeiJYKMqwZVLTP7q9aWsbiSbWHTe0ao/NHzvqqsXbyffXyzDfDc
yQllBZbE9dPdzU0EbRXcjKbnxsZC3d6EcTtWkPShmTrJCwmbTBWRhgZ/T97PL3+y
Pio5iTvJHH0WKSb/Qa5IPkBd4IPF7SmTj4mbTlCSKxg2/qqpvUyfIacY5Numph7N
Jai6NhQaIfCmlauiPSkmvh3TvE+QP81YjCGm9gCE4IekAlaZWpKrNtdj2VMCU2Gi
RiR/uz7K3Phyc3NTeb1F3fuOZdgEq3uafhAbxbpE4YiuyWAQkAOz1Lx5A9uTqfVX
vqpVVSFJenL0GlBdo6vN4uOwlWBtIpl43ypbW94MQ//fUOZyGIkD8SR4txaWcMn3
SEPhDOnI2ZLW+DD6n372D/hIZm/JqIReA41UOIrvrEocgUhJM+J+GTyYJ/OHmmYu
+p2flbHgH4aaaTMfU8PP2EbVmKhLjVSBZAEnpXlBWMXDmcXqrZsDVppdZTk8S9kV
E1VIzI0MXTB2MJP7XQceVlnRB8I0g7sfxDeS0/2epDcNNWuId63rnvPMqCLu9/l2
+YwpD03H5Vbnay0PSLgdZBJxD4wwR0xoVV9mqW0j2N1XBbfnR/2Fmw5Ti6rHC3b2
hXGaFP95pdGUXgBeH8WKf1rMGFvBtMLhAZc/Uwr7AgMBAAGjggknMIIJIzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFDhaZypI7FWmDvC1hawADR5mqw9HMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIHLwYDVR0RBIIHJjCCByKCDiouMTIzbW92aXJzLmNv
ghUqLmFkYW1zYXR0aWNtdXNpYy5jb22CFiouYWx6aGVpbWVyc3BpbGxib3guY2+C
DyouYW5hcmNoeXZhLmNvbYIQKi5hbnByb3RvdHlwZS5jboISKi5hcGpjcGNvbnRy
b2wubmV0ggwqLmF2c2VlMjQudHaCDyouYml6MmNyZWRpdC5jbYIZKi5jYXJpbnN1
cmFuY2VzZWFyY2guaW5mb4IcKi5jcml0aWNhbGxpZmVpbnN1cmFuY2UuaW5mb4IR
Ki5kcmFjb2JlYXV0eS5jb22CESouZWZsb3dlcnM1ODAub3Jngg8qLmVuZG9jbGFp
bXMuY2+CEiouZW5nbGlzaGx5cmljcy5jb4IOKi5mYXZvY2FyZC5jb22CDiouZmVk
YXRtY2QuY29tggsqLmZpeHRvci5zaYIQKi5mb3RvbG9nLmNvbS5hcoIJKi5mdmZm
LmVzggwqLmdhb24yNi5jb22CFyouZ3JhZGV0b2xhdXRvcGFydHMuY29tghAqLmdy
YWR5b25zZWkuY29tghgqLmhhbGFscGV0cHJvZHVjdHMuY28udWuCECoua2VscGx1
bmFjeS5jb22CESoubGVnZW5kc2hpcnRzLmNvgg0qLmxpYnJlcm9zLmVzghUqLmxp
bXVzaW5lbnNlcnZpY2UuZGWCGCoubG9uZ2lzbGFuZGhzaG9ja2V5Lm5ldIIPKi5t
YWh0ZW1hdGlnLmRlgg8qLm1hc3JhaG1hdC5uZXSCDyoubWF0cml4aGFjay5ubIIM
Ki5tYXhhcGkubmV0gg4qLm9ic3RiYWVtZS5kZYILKi5wYW1oZi5jb22CFyoucGFw
ZXRsZXNzZW1wbG95ZWUuY29tgh8qLnByaXZhdGUta3Jha2VudmVyc2ljaGVydW5n
LmRlghEqLnB0dDNienN0Y2gyLmNvbYINKi5yYWRicmV3Lm5ldIIQKi5yb3dlcnNl
ZGdlLmNvbYIUKi5zYXRvcmlqb3VybmV5cy5jb22CFyouc2VsY3Vrc3BvcnRzaGQx
NDcuY29tghMqLnNoYXJlYWxsZnJlZS5pbmZvghEqLnNvY3RlY2hnZWVrLmNvbYIW
Ki5zb3VuZGJlZm9yZXNpZ2h0LmNvbYIVKi50ZWV0aG53aGl0ZW5pbmcuY29tghQq
LnRoZWNvenljb3R0YWdlLm5ldIITKi52ZWN0ZXVyZGltYWdlLmNvbYIYKi54bi0t
Z3Jhbml0c3BsZW4tMGhiLmRlgg4qLnlvdWFuZGVueS5pdIIMMTIzbW92aXJzLmNv
ghNhZGFtc2F0dGljbXVzaWMuY29tghRhbHpoZWltZXJzcGlsbGJveC5jb4INYW5h
cmNoeXZhLmNvbYIOYW5wcm90b3R5cGUuY26CEGFwamNwY29udHJvbC5uZXSCCmF2
c2VlMjQudHaCDWJpejJjcmVkaXQuY22CF2Nhcmluc3VyYW5jZXNlYXJjaC5pbmZv
ghpjcml0aWNhbGxpZmVpbnN1cmFuY2UuaW5mb4IPZHJhY29iZWF1dHkuY29tgg9l
Zmxvd2VyczU4MC5vcmeCDWVuZG9jbGFpbXMuY2+CEGVuZ2xpc2hseXJpY3MuY2+C
DGZhdm9jYXJkLmNvbYIMZmVkYXRtY2QuY29tgglmaXh0b3Iuc2mCDmZvdG9sb2cu
Y29tLmFyggdmdmZmLmVzggpnYW9uMjYuY29tghVncmFkZXRvbGF1dG9wYXJ0cy5j
b22CDmdyYWR5b25zZWkuY29tghZoYWxhbHBldHByb2R1Y3RzLmNvLnVrgg5rZWxw
bHVuYWN5LmNvbYIPbGVnZW5kc2hpcnRzLmNvggtsaWJyZXJvcy5lc4ITbGltdXNp
bmVuc2VydmljZS5kZYIWbG9uZ2lzbGFuZGhzaG9ja2V5Lm5ldIINbWFodGVtYXRp
Zy5kZYINbWFzcmFobWF0Lm5ldIINbWF0cml4aGFjay5ubIIKbWF4YXBpLm5ldIIM
b2JzdGJhZW1lLmRlgglwYW1oZi5jb22CFXBhcGV0bGVzc2VtcGxveWVlLmNvbYId
cHJpdmF0ZS1rcmFrZW52ZXJzaWNoZXJ1bmcuZGWCD3B0dDNienN0Y2gyLmNvbYIL
cmFkYnJldy5uZXSCDnJvd2Vyc2VkZ2UuY29tghJzYXRvcmlqb3VybmV5cy5jb22C
FXNlbGN1a3Nwb3J0c2hkMTQ3LmNvbYIRc2hhcmVhbGxmcmVlLmluZm+CD3NvY3Rl
Y2hnZWVrLmNvbYIUc291bmRiZWZvcmVzaWdodC5jb22CE3RlZXRobndoaXRlbmlu
Zy5jb22CEnRoZWNvenljb3R0YWdlLm5ldIIRdmVjdGV1cmRpbWFnZS5jb22CFnhu
LS1ncmFuaXRzcGxlbi0waGIuZGWCDHlvdWFuZGVueS5pdDATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0D+VqAvqd
MOscUgHLVt0sgdm7v6s52IRzAAABjPVNIbUAAAQDAEcwRQIhANUYn2gERJmqlh/o
0MdDRUEG4k6l5nX8LrzPZuBzqPy6AiAITBXWao8YUvVhrunlGDJEjFSAyMbTAWlB
Y6xknWimbwB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjPVN
Ig8AAAQDAEYwRAIgVOenHh2wJQ5wb0l8IE5YggqM5fLmdepPCrsIr0q24QkCIEwW
FRTwwgKSSGsQrEiQTRx7s9xQ7CojqYbJK0JiqXKsMA0GCSqGSIb3DQEBCwUAA4IB
AQAYg0N8MkKTZ2f8ypMWXbPxlwOSF6wTinlWBn1DM/LbhzUbdQJt/J9XWGbWqcR7
UXV98S3ChM9UOF0J9rfYS8wzwvS8DUCRJ9eWF9KKoTb/QPygSH/U8LYDuB0oCS3B
S+R7FCs8XZ7XWc/FzKPfyQwb7+OB15OyZh1CdQ73ekJJPyNUiENH9PubUWfUTA1O
WPuFdfxjHlzvi5MyofRbXox35a2shFWYK1r94wEk2glvtyL3YwROZuQXjGRo7Ujv
jpmEzHGdWYdf9ZbuI7pyZHSc2TWpbpHTcRNDGdMdw/rEGFNTjk4cC3XJTSio7T6b
DxM6BL5jG+PdQU1Fa2+2G02Q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357663485253847555395227745593271232257278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 20:35:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 20:35:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'youandeny.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696081640756276000811622452607368918733157160127507332427798740915163216541208799554027575595304428935136377049915517385192779747440180286353487777378800861086202453763556241273047727361983929883855873533789123915496604967532583034600343564272827775578714852414380208634905239949813717128268539715745837681343426134986634433090543454061323578332184961055873908597841327131535809670574746770028473959133083363806914319738918734419012773539442537182082883830068934588017297391160391373914411655578088268994074245258765664273703333739058970528832767535130945767833411480585769417546361541614654586168292040423323312503108295364604088226176909468468174325789011636494587318184594426719037477494886655002801599774693367036373394519084252346512006309956642299158137813014940132684580508479519916771797167926970982148327972943253289988091660151203605439412347409048080986808121065774450451802039108181732429602721538231463381118469735023838499331527983718785656295051603981249633873484978478320993344119997654388265782000961628030930926579039292728233323998289312996953607622831330549795141872885126312254920566521345362856729624332927521799038588477130985016282691876858924082775370535960183696091732615914394612508608434257725818141870843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							385a672a48ec55a60ef0b585ac000d1e66ab0f47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1830 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123movirs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamsatticmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alzheimerspillbox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anarchyva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anprototype.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apjcpcontrol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avsee24.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biz2credit.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carinsurancesearch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criticallifeinsurance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dracobeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eflowers580.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endoclaims.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.englishlyrics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.favocard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedatmcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixtor.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotolog.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fvff.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaon26.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gradetolautoparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gradyonsei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halalpetproducts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kelplunacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legendshirts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libreros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.limusinenservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longislandhshockey.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mahtematig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masrahmat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixhack.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obstbaeme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pamhf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papetlessemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.private-krakenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptt3bzstch2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radbrew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rowersedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satorijourneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selcuksportshd147.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shareallfree.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soctechgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundbeforesight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teethnwhitening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecozycottage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vecteurdimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--granitsplen-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youandeny.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123movirs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamsatticmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alzheimerspillbox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anarchyva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anprototype.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apjcpcontrol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avsee24.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz2credit.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carinsurancesearch.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criticallifeinsurance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dracobeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eflowers580.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endoclaims.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishlyrics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'favocard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedatmcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixtor.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotolog.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fvff.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaon26.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradetolautoparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradyonsei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halalpetproducts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelplunacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legendshirts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libreros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limusinenservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longislandhshockey.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahtematig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masrahmat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixhack.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obstbaeme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamhf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papetlessemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-krakenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptt3bzstch2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radbrew.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowersedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satorijourneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selcuksportshd147.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareallfree.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soctechgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundbeforesight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teethnwhitening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecozycottage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vecteurdimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--granitsplen-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youandeny.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf54d21b50000040300473045022100d5189f68044499aa961fe8d0c743454106e24ea5e675fc2ebccf66e073a8fcba0220084c15d66a8f1852f561aee9e51832448c5480c8c6d301694163ac649d68a66f00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cf54d220f0000040300463044022054e7a71e1db0250e706f497c204e58820a8ce5f2e675ea4f0abb08af4ab6e10902204c161514f0c20292486b10ac48904d1c7bb3dc50ec2a23a986c92b4262a972ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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