negarin.shop

Issued by R3

About this certificate

This digital certificate with serial number 03:00:4e:3b:f9:9c:e2:8a:57:7c:6c:8f:9b:d3:67:3d:50:c4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=negarin.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:4e:3b:f9:9c:e2:8a:57:7c:6c:8f:9b:d3:67:3d:50:c4
Serial Number (int): 261440848987216312451403284706608770011332
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:a5:f3:ed:e7:09:3b:7b:10:07:af:5d:e7:3b:8a:f9:03:9a:9f:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:b1:18:1a:0b:55:00:fc:f9:ae:3b:2f:ec:6b:bc:54:da:4c:92:1d
Fingerprint (sha256): f9:c8:77:f0:c2:57:76:86:a3:f0:0e:76:fa:bf:35:5b:3a:63:2d:46:ab:53:de:19:b0:7c:df:21:54:fc:39:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate negarin.shop

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for negarin.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adepthunters.com
*.ahotwatch.com
*.alikatia.com
*.athapookalam.com
*.atl3c.com
*.azebb.com
*.bharmaltoolsandmachinery.com
*.carriageparkatboise.com
*.cozeonestore.com
*.cozonestore.com
*.craigslistmedford.com
*.daatawards.com
*.erovidex.com
*.esco-tel.com
*.furniture-95029.com
*.hectorsoundz.com
*.helvacim.com
*.ins-dir.com
*.js53777.com
*.kanazawaramen.com
*.kushionsplussize.com
*.livescoreb.com
*.melhoresofertasdomundo.com
*.metodomilionariadigital.com
*.motorheadco.com
*.mydeals.net
*.myforeverstore.com
*.myfrenchhouse.com
*.mywealth24.com
*.negarin.shop
*.nephronlubes.com
*.pokemon-porn-hentai.com
*.quicbook.com
*.savinggracehelaing.com
*.sexvedeos.com
*.tascilarlojistik.com
*.tech2talk.com
*.terevacolas.com
*.thecaihub.com
*.thiyawala.com
*.torrentfreak.tv
*.travelconsentdoc.com
*.tvquem.com
*.upholdweb.com
*.vouchersglobe.com
*.xieyutech.com
*.xiiihotpepperseeds.com
*.yorkshireterrier.au
*.zalantec.com
*.zyahoo.com
adepthunters.com
ahotwatch.com
alikatia.com
athapookalam.com
atl3c.com
azebb.com
bharmaltoolsandmachinery.com
carriageparkatboise.com
cozeonestore.com
cozonestore.com
craigslistmedford.com
daatawards.com
erovidex.com
esco-tel.com
furniture-95029.com
hectorsoundz.com
helvacim.com
ins-dir.com
js53777.com
kanazawaramen.com
kushionsplussize.com
livescoreb.com
melhoresofertasdomundo.com
metodomilionariadigital.com
motorheadco.com
mydeals.net
myforeverstore.com
myfrenchhouse.com
mywealth24.com
negarin.shop
nephronlubes.com
pokemon-porn-hentai.com
quicbook.com
savinggracehelaing.com
sexvedeos.com
tascilarlojistik.com
tech2talk.com
terevacolas.com
thecaihub.com
thiyawala.com
torrentfreak.tv
travelconsentdoc.com
tvquem.com
upholdweb.com
vouchersglobe.com
xieyutech.com
xiiihotpepperseeds.com
yorkshireterrier.au
zalantec.com
zyahoo.com

Other certificates including the domain name negarin.shop

(limited to 100 certificates)
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop

Certificate

The complete raw certificate details for negarin.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINMDCCDBigAwIBAgISAwBOO/mc4opXfGyPm9NnPVDEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDIwOTIzNDFaFw0yNDAzMDEwOTIzNDBaMBcxFTATBgNVBAMT
DG5lZ2FyaW4uc2hvcDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMTG
hh5gISsmPcbYuzTUBsfFDqd8RHvLunculXjNDeKLC8XWGqzjYFIWrq8BYQk/c+Ty
H20m28voHcEEC2iY1P/Kapt9M+8C8uluynUWl7UYSdAPIKGjR+3MZi1lufpOp7t9
1eIz/FEo1OMN0bWGbC/szmoJlbhy5tSmO/ZtWn+q99oAqNy5xrQDoJzmnLTlcGfO
cX9gzFtJcZov1w1ZzIvkdGFoqob/Wenlp8sa3Q+YSguZX/Rr5Oz0cSEE6KdzVBfl
i2DJFSk7bggBUrdZ/JMhJ4x7w7ZWee3ACTvKAY9M2OVZqWtMfGoOY9Mo22d0sNCt
+WH7sx01lXgYRGo0Y5w/BryKwTyAPrzeSi2b42qkA+NyLcqL8ep0Q2fdtGo8Ewak
MbefJZj/QZj1M3htBcs88Y5Df/drwErbQ8OcdMLpqwh/pvWyEQ9vwavOAPcT+oO2
qZEr5mTiTZ+8AI6Arm9OvuNlP3tTUjE2V5zV1uY0rkkUgT/5JVhLwEYraKOX8na4
qfkI/Dr3q22rV7WaikHOIfPOO4EhdcJxPSn5KEEkuhugpbGIu91wlTnqDX6Np2vg
nmY5yjmMF1rJrcpqBEoLrcwhDOoNKQCDyXFBZhQ0I+pZa0Bj9QMzNAGeNRKzRTvX
oeeEpfE418rNQs1XCu2U9yGVhVfrUVKYGtNgD0bhAgMBAAGjgglZMIIJVTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFMWl8+3nCTt7EAevXec7ivkDmp/+MB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIHXwYDVR0RBIIHVjCCB1KCEiouYWRlcHRodW50ZXJz
LmNvbYIPKi5haG90d2F0Y2guY29tgg4qLmFsaWthdGlhLmNvbYISKi5hdGhhcG9v
a2FsYW0uY29tggsqLmF0bDNjLmNvbYILKi5hemViYi5jb22CHiouYmhhcm1hbHRv
b2xzYW5kbWFjaGluZXJ5LmNvbYIZKi5jYXJyaWFnZXBhcmthdGJvaXNlLmNvbYIS
Ki5jb3plb25lc3RvcmUuY29tghEqLmNvem9uZXN0b3JlLmNvbYIXKi5jcmFpZ3Ns
aXN0bWVkZm9yZC5jb22CECouZGFhdGF3YXJkcy5jb22CDiouZXJvdmlkZXguY29t
gg4qLmVzY28tdGVsLmNvbYIVKi5mdXJuaXR1cmUtOTUwMjkuY29tghIqLmhlY3Rv
cnNvdW5kei5jb22CDiouaGVsdmFjaW0uY29tgg0qLmlucy1kaXIuY29tgg0qLmpz
NTM3NzcuY29tghMqLmthbmF6YXdhcmFtZW4uY29tghYqLmt1c2hpb25zcGx1c3Np
emUuY29tghAqLmxpdmVzY29yZWIuY29tghwqLm1lbGhvcmVzb2ZlcnRhc2RvbXVu
ZG8uY29tgh0qLm1ldG9kb21pbGlvbmFyaWFkaWdpdGFsLmNvbYIRKi5tb3Rvcmhl
YWRjby5jb22CDSoubXlkZWFscy5uZXSCFCoubXlmb3JldmVyc3RvcmUuY29tghMq
Lm15ZnJlbmNoaG91c2UuY29tghAqLm15d2VhbHRoMjQuY29tgg4qLm5lZ2FyaW4u
c2hvcIISKi5uZXBocm9ubHViZXMuY29tghkqLnBva2Vtb24tcG9ybi1oZW50YWku
Y29tgg4qLnF1aWNib29rLmNvbYIYKi5zYXZpbmdncmFjZWhlbGFpbmcuY29tgg8q
LnNleHZlZGVvcy5jb22CFioudGFzY2lsYXJsb2ppc3Rpay5jb22CDyoudGVjaDJ0
YWxrLmNvbYIRKi50ZXJldmFjb2xhcy5jb22CDyoudGhlY2FpaHViLmNvbYIPKi50
aGl5YXdhbGEuY29tghEqLnRvcnJlbnRmcmVhay50doIWKi50cmF2ZWxjb25zZW50
ZG9jLmNvbYIMKi50dnF1ZW0uY29tgg8qLnVwaG9sZHdlYi5jb22CEyoudm91Y2hl
cnNnbG9iZS5jb22CDyoueGlleXV0ZWNoLmNvbYIYKi54aWlpaG90cGVwcGVyc2Vl
ZHMuY29tghUqLnlvcmtzaGlyZXRlcnJpZXIuYXWCDiouemFsYW50ZWMuY29tggwq
Lnp5YWhvby5jb22CEGFkZXB0aHVudGVycy5jb22CDWFob3R3YXRjaC5jb22CDGFs
aWthdGlhLmNvbYIQYXRoYXBvb2thbGFtLmNvbYIJYXRsM2MuY29tgglhemViYi5j
b22CHGJoYXJtYWx0b29sc2FuZG1hY2hpbmVyeS5jb22CF2NhcnJpYWdlcGFya2F0
Ym9pc2UuY29tghBjb3plb25lc3RvcmUuY29tgg9jb3pvbmVzdG9yZS5jb22CFWNy
YWlnc2xpc3RtZWRmb3JkLmNvbYIOZGFhdGF3YXJkcy5jb22CDGVyb3ZpZGV4LmNv
bYIMZXNjby10ZWwuY29tghNmdXJuaXR1cmUtOTUwMjkuY29tghBoZWN0b3Jzb3Vu
ZHouY29tggxoZWx2YWNpbS5jb22CC2lucy1kaXIuY29tggtqczUzNzc3LmNvbYIR
a2FuYXphd2FyYW1lbi5jb22CFGt1c2hpb25zcGx1c3NpemUuY29tgg5saXZlc2Nv
cmViLmNvbYIabWVsaG9yZXNvZmVydGFzZG9tdW5kby5jb22CG21ldG9kb21pbGlv
bmFyaWFkaWdpdGFsLmNvbYIPbW90b3JoZWFkY28uY29tggtteWRlYWxzLm5ldIIS
bXlmb3JldmVyc3RvcmUuY29tghFteWZyZW5jaGhvdXNlLmNvbYIObXl3ZWFsdGgy
NC5jb22CDG5lZ2FyaW4uc2hvcIIQbmVwaHJvbmx1YmVzLmNvbYIXcG9rZW1vbi1w
b3JuLWhlbnRhaS5jb22CDHF1aWNib29rLmNvbYIWc2F2aW5nZ3JhY2VoZWxhaW5n
LmNvbYINc2V4dmVkZW9zLmNvbYIUdGFzY2lsYXJsb2ppc3Rpay5jb22CDXRlY2gy
dGFsay5jb22CD3RlcmV2YWNvbGFzLmNvbYINdGhlY2FpaHViLmNvbYINdGhpeWF3
YWxhLmNvbYIPdG9ycmVudGZyZWFrLnR2ghR0cmF2ZWxjb25zZW50ZG9jLmNvbYIK
dHZxdWVtLmNvbYINdXBob2xkd2ViLmNvbYIRdm91Y2hlcnNnbG9iZS5jb22CDXhp
ZXl1dGVjaC5jb22CFnhpaWlob3RwZXBwZXJzZWVkcy5jb22CE3lvcmtzaGlyZXRl
cnJpZXIuYXWCDHphbGFudGVjLmNvbYIKenlhaG9vLmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ADtTd3U+LbmAToswWwb+
QDtn2E/D9Me9AA0tcm/h+tQXAAABjCoOLJEAAAQDAEcwRQIgBPPJtzhibDf8+bMC
j2fcl65c+tMFZ1jtPaznyyosYrkCIQCeUXhFGF0Yy/FxL+2RuJN1wz8yV0KVxwD/
vS+RtiKD4gB3ACnQOhu2dKpxHNMDW2VXwU+Kp4tP6DiUSeykU/lEvSRoAAABjCoO
LU4AAAQDAEgwRgIhALi52/F/UsSP0JzVtVVr8u6ZAxVeCPBXMfcnAEQeW4k4AiEA
mlj4GL0Cb7pBcSHUsUYn1zppnHhjLX+RbLxAA0kAehUwDQYJKoZIhvcNAQELBQAD
ggEBAK6TAyBJoRp/ykZm99Bje0uL0ruKzeXDNM9EFTKZhC/w94f06I172vNdpzUm
W8/KxdAEqMaeWarB/+fcrOmbsn8Y3MKKBXNdmGQHB9mbBm8ANn/3m+CxsBXvZ0IQ
UcaSMiZtfg/XTlPAfcVaTcetWE+8sqigOjKtH/JzjrD3VEfvrbrYQuFdgXDFeydB
dD++BRDwpqsY0ZcpOmJN2gV3AglXwUBjeSSijXUkfcA32BBnmjs3eZAZ4w301YOx
Ec1xN7GP6X2z2D+eH5sToLcQH180vNDYsFsEI6Q7G28h0zzMsarOeweGtJHURtsk
AjwyCA+A8QrmulvEBlCu/x3jVLI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxMaGHmAhKyY9xti7NNQG
x8UOp3xEe8u6dy6VeM0N4osLxdYarONgUhaurwFhCT9z5PIfbSbby+gdwQQLaJjU
/8pqm30z7wLy6W7KdRaXtRhJ0A8goaNH7cxmLWW5+k6nu33V4jP8USjU4w3RtYZs
L+zOagmVuHLm1KY79m1af6r32gCo3LnGtAOgnOactOVwZ85xf2DMW0lxmi/XDVnM
i+R0YWiqhv9Z6eWnyxrdD5hKC5lf9Gvk7PRxIQTop3NUF+WLYMkVKTtuCAFSt1n8
kyEnjHvDtlZ57cAJO8oBj0zY5Vmpa0x8ag5j0yjbZ3Sw0K35YfuzHTWVeBhEajRj
nD8GvIrBPIA+vN5KLZvjaqQD43Ityovx6nRDZ920ajwTBqQxt58lmP9BmPUzeG0F
yzzxjkN/92vASttDw5x0wumrCH+m9bIRD2/Bq84A9xP6g7apkSvmZOJNn7wAjoCu
b06+42U/e1NSMTZXnNXW5jSuSRSBP/klWEvARitoo5fydrip+Qj8OverbatXtZqK
Qc4h8847gSF1wnE9KfkoQSS6G6ClsYi73XCVOeoNfo2na+CeZjnKOYwXWsmtymoE
SgutzCEM6g0pAIPJcUFmFDQj6llrQGP1AzM0AZ41ErNFO9eh54Sl8TjXys1CzVcK
7ZT3IZWFV+tRUpga02APRuECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261440848987216312451403284706608770011332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 09:23:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 09:23:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'negarin.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802773935984476545118481668095409163598915052247851472083226702599838115854749836735095964263308678906114674471211559322798919838486569264791822013422181432129445626942433418167382791543889491852235298158814542062096461446561698694545684987194894611339211028365489187129299142176406076036888602510671122445340583427662570046262958064046074336561259342894135117911442668134308546512654085591228021048862634964379637423139821435165831795185727351791504945771152288666417834263003209591549062061933092553547997960486122750940883725573964540910571191841318583708329139312070982787937752903729860082997955410629013292404909730118088743295543010546857921490535440804944508205580580746077636715394425742807580526063567739932971867060718978053666986478882385156773405971107422094099541548825398442812419705228148290539848823333824401889606785838311383875359875755785207709791065219080201967832756780247754469338011763308265619663555595981102015295669763115361966776635400219018066906990755214383808843796055374868580386610785536502663840111101551219394677381722305213554760681590927966025655878881833023980781427967304346470493360506297480998264228152584141612177458904089149220531940314527184506979636764276633351567369887853622974395401953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5a5f3ede7093b7b1007af5de73b8af9039a9ffe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adepthunters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahotwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alikatia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athapookalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atl3c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bharmaltoolsandmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carriageparkatboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cozeonestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cozonestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craigslistmedford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daatawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erovidex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esco-tel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniture-95029.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hectorsoundz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helvacim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ins-dir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.js53777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanazawaramen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kushionsplussize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livescoreb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melhoresofertasdomundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metodomilionariadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorheadco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydeals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myforeverstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfrenchhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywealth24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negarin.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nephronlubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokemon-porn-hentai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quicbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savinggracehelaing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexvedeos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tascilarlojistik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tech2talk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terevacolas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecaihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thiyawala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentfreak.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelconsentdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvquem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upholdweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vouchersglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xieyutech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiiihotpepperseeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkshireterrier.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adepthunters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahotwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alikatia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athapookalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atl3c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bharmaltoolsandmachinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriageparkatboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cozeonestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cozonestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigslistmedford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daatawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erovidex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esco-tel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniture-95029.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hectorsoundz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helvacim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ins-dir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js53777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanazawaramen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kushionsplussize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livescoreb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melhoresofertasdomundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metodomilionariadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorheadco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydeals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myforeverstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfrenchhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealth24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negarin.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nephronlubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemon-porn-hentai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savinggracehelaing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexvedeos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tascilarlojistik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech2talk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terevacolas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecaihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thiyawala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentfreak.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelconsentdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvquem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upholdweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vouchersglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xieyutech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiiihotpepperseeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshireterrier.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyahoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c2a0e2c910000040300473045022004f3c9b738626c37fcf9b3028f67dc97ae5cfad3056758ed3dace7cb2a2c62b90221009e517845185d18cbf1712fed91b89375c33f32574295c700ffbd2f91b62283e200770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c2a0e2d4e0000040300483046022100b8b9dbf17f52c48fd09cd5b5556bf2ee9903155e08f05731f72700441e5b89380221009a58f818bd026fba417121d4b14627d73a699c78632d7f916cbc400349007a15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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