kleingartnetz.de

Issued by R3

About this certificate

This digital certificate with serial number 03:74:0c:7b:98:d2:73:ce:13:26:27:d3:03:8a:15:ca:cd:7f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kleingartnetz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:74:0c:7b:98:d2:73:ce:13:26:27:d3:03:8a:15:ca:cd:7f
Serial Number (int): 300826204846172634264222827627198114614655
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:bb:2b:6f:b8:1b:22:e6:94:da:da:86:d5:7c:37:cc:06:5f:f8:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:b5:1e:01:df:00:ac:61:69:8d:08:fa:3e:e2:3e:cb:0f:a3:ef:d1
Fingerprint (sha256): fa:70:d9:aa:14:9c:f4:74:1e:86:fc:c0:ab:64:6c:2c:cc:28:f8:ba:67:90:e5:e5:7e:9c:c6:a4:64:07:5a:68

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kleingartnetz.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kleingartnetz.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.44400.cc
*.agorajobs.co
*.aplt.tv
*.asks.com
*.autooacc.com
*.besregg.com
*.buscomachos.com
*.cancer-insight.org
*.condive.com
*.djsconstruction.biz
*.finecare.us
*.guestgarden.com
*.heatones.com
*.internationasweetheart.com
*.isaiminigo.net
*.iwuportal.com
*.jav18.com
*.kleingartnetz.de
*.lcchurchofjesuschrist.org
*.md-boutique.com
*.mnordstromrack.com
*.monypak.com
*.motilaloswalsecurities.com
*.mouserelectronic.com
*.mowhawkind.com
*.municipaldistricservices.com
*.musinotes.com
*.mybobfurniture.com
*.mymatsolutions.com
*.noyonbond.me
*.ogua.eu
*.panerabreak.com
*.pimslerulanguagecourse.com
*.playosomo.com
*.qiqilla.com
*.sculpturescompressionwear.co
*.september-news.za.com
*.solarmoviessc.com
*.tabuausadabrasil.com
*.ticketmastger.com
*.tradempowered.com
*.treehousearts.me
*.trretreat.com
*.valleyvetnj.com
*.vebo88.tv
*.vercord.net
*.vistapritn.com
*.wodmancastingx.com
*.ya1krevedko.com
*.zuillow.com
44400.cc
agorajobs.co
aplt.tv
asks.com
autooacc.com
besregg.com
buscomachos.com
cancer-insight.org
condive.com
djsconstruction.biz
finecare.us
guestgarden.com
heatones.com
internationasweetheart.com
isaiminigo.net
iwuportal.com
jav18.com
kleingartnetz.de
lcchurchofjesuschrist.org
md-boutique.com
mnordstromrack.com
monypak.com
motilaloswalsecurities.com
mouserelectronic.com
mowhawkind.com
municipaldistricservices.com
musinotes.com
mybobfurniture.com
mymatsolutions.com
noyonbond.me
ogua.eu
panerabreak.com
pimslerulanguagecourse.com
playosomo.com
qiqilla.com
sculpturescompressionwear.co
september-news.za.com
solarmoviessc.com
tabuausadabrasil.com
ticketmastger.com
tradempowered.com
treehousearts.me
trretreat.com
valleyvetnj.com
vebo88.tv
vercord.net
vistapritn.com
wodmancastingx.com
ya1krevedko.com
zuillow.com

Other certificates including the domain name kleingartnetz.de

(limited to 100 certificates)
kleingartnetz.de

Certificate

The complete raw certificate details for kleingartnetz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINETCCC/mgAwIBAgISA3QMe5jSc84TJifTA4oVys1/MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MjIwNDQzNTRaFw0yNDA4MjAwNDQzNTNaMBsxGTAXBgNVBAMT
EGtsZWluZ2FydG5ldHouZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDGFnSR8p1paBA736/x8pdhDjIwCDGpm26zmDyM0wk5sNiteeYfgu+9F+0UmaBi
NiU8dqEPvvK5Pk9IH9l/JQVsOwClDpTqc4dhAfgrmc6oXYyBTTbbgay5VMeMyfs/
vag7c5hQugewvG3hZXurYIQM0Wo0n5igRPY8DiEA7wNbHwGJl274RlfczVqvCDsB
zEkpTJ7ceFbq8HFxTLPyzDiPSclOVYHY4dAXGQYFtKtDiUnrxQwfPA+0jtCmslS1
xGBHYe6Z5aBmfAfWwT5aj3NTXcfsUNppTJO/PktySqyVR6Paoma4WKoxPy1b/TIe
+DMFIDKZ30QV+kVpQ9D0TOuiqJaQ+SFgEqKVrJFb0rjDlZN0miYFC7RtEGmPlM49
HcxT6s/7uWFSDFGQX5nBdb1i8Os1c15jLjdSZZzBtH9kisTCyN6bO9kXNuKhwqq6
52YHKf1uuvkgFPSA5CVNxX3cB7Br3M9ZUQhespjAdk4dWvisskBDQWLI6DQLQlZl
X8LVOEOIsnkDXf0qiIm7HlhJSWOvX33iGtOAERQohHxNrak9XrVkx4Ss35FOtvhF
PGEqCdrYgrG5QGApN1nN7F1UN/mNpEo8vhmC36rvCIn/95Rk0OWw37ARWFQqf9n1
K5+8E3W0ShZTTQKSxs8xvMq1c6YclFe46T0nimKyDFL9bQIDAQABo4IJNjCCCTIw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQguytvuBsi5pTa2obVfDfMBl/4bTAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCBzsGA1UdEQSCBzIwggcuggoqLjQ0NDAwLmNj
gg4qLmFnb3Jham9icy5jb4IJKi5hcGx0LnR2ggoqLmFza3MuY29tgg4qLmF1dG9v
YWNjLmNvbYINKi5iZXNyZWdnLmNvbYIRKi5idXNjb21hY2hvcy5jb22CFCouY2Fu
Y2VyLWluc2lnaHQub3Jngg0qLmNvbmRpdmUuY29tghUqLmRqc2NvbnN0cnVjdGlv
bi5iaXqCDSouZmluZWNhcmUudXOCESouZ3Vlc3RnYXJkZW4uY29tgg4qLmhlYXRv
bmVzLmNvbYIcKi5pbnRlcm5hdGlvbmFzd2VldGhlYXJ0LmNvbYIQKi5pc2FpbWlu
aWdvLm5ldIIPKi5pd3Vwb3J0YWwuY29tggsqLmphdjE4LmNvbYISKi5rbGVpbmdh
cnRuZXR6LmRlghsqLmxjY2h1cmNob2ZqZXN1c2NocmlzdC5vcmeCESoubWQtYm91
dGlxdWUuY29tghQqLm1ub3Jkc3Ryb21yYWNrLmNvbYINKi5tb255cGFrLmNvbYIc
Ki5tb3RpbGFsb3N3YWxzZWN1cml0aWVzLmNvbYIWKi5tb3VzZXJlbGVjdHJvbmlj
LmNvbYIQKi5tb3doYXdraW5kLmNvbYIeKi5tdW5pY2lwYWxkaXN0cmljc2Vydmlj
ZXMuY29tgg8qLm11c2lub3Rlcy5jb22CFCoubXlib2JmdXJuaXR1cmUuY29tghQq
Lm15bWF0c29sdXRpb25zLmNvbYIOKi5ub3lvbmJvbmQubWWCCSoub2d1YS5ldYIR
Ki5wYW5lcmFicmVhay5jb22CHCoucGltc2xlcnVsYW5ndWFnZWNvdXJzZS5jb22C
DyoucGxheW9zb21vLmNvbYINKi5xaXFpbGxhLmNvbYIeKi5zY3VscHR1cmVzY29t
cHJlc3Npb253ZWFyLmNvghcqLnNlcHRlbWJlci1uZXdzLnphLmNvbYITKi5zb2xh
cm1vdmllc3NjLmNvbYIWKi50YWJ1YXVzYWRhYnJhc2lsLmNvbYITKi50aWNrZXRt
YXN0Z2VyLmNvbYITKi50cmFkZW1wb3dlcmVkLmNvbYISKi50cmVlaG91c2VhcnRz
Lm1lgg8qLnRycmV0cmVhdC5jb22CESoudmFsbGV5dmV0bmouY29tggsqLnZlYm84
OC50doINKi52ZXJjb3JkLm5ldIIQKi52aXN0YXByaXRuLmNvbYIUKi53b2RtYW5j
YXN0aW5neC5jb22CESoueWExa3JldmVka28uY29tgg0qLnp1aWxsb3cuY29tggg0
NDQwMC5jY4IMYWdvcmFqb2JzLmNvggdhcGx0LnR2gghhc2tzLmNvbYIMYXV0b29h
Y2MuY29tggtiZXNyZWdnLmNvbYIPYnVzY29tYWNob3MuY29tghJjYW5jZXItaW5z
aWdodC5vcmeCC2NvbmRpdmUuY29tghNkanNjb25zdHJ1Y3Rpb24uYml6ggtmaW5l
Y2FyZS51c4IPZ3Vlc3RnYXJkZW4uY29tggxoZWF0b25lcy5jb22CGmludGVybmF0
aW9uYXN3ZWV0aGVhcnQuY29tgg5pc2FpbWluaWdvLm5ldIINaXd1cG9ydGFsLmNv
bYIJamF2MTguY29tghBrbGVpbmdhcnRuZXR6LmRlghlsY2NodXJjaG9mamVzdXNj
aHJpc3Qub3Jngg9tZC1ib3V0aXF1ZS5jb22CEm1ub3Jkc3Ryb21yYWNrLmNvbYIL
bW9ueXBhay5jb22CGm1vdGlsYWxvc3dhbHNlY3VyaXRpZXMuY29tghRtb3VzZXJl
bGVjdHJvbmljLmNvbYIObW93aGF3a2luZC5jb22CHG11bmljaXBhbGRpc3RyaWNz
ZXJ2aWNlcy5jb22CDW11c2lub3Rlcy5jb22CEm15Ym9iZnVybml0dXJlLmNvbYIS
bXltYXRzb2x1dGlvbnMuY29tggxub3lvbmJvbmQubWWCB29ndWEuZXWCD3BhbmVy
YWJyZWFrLmNvbYIacGltc2xlcnVsYW5ndWFnZWNvdXJzZS5jb22CDXBsYXlvc29t
by5jb22CC3FpcWlsbGEuY29tghxzY3VscHR1cmVzY29tcHJlc3Npb253ZWFyLmNv
ghVzZXB0ZW1iZXItbmV3cy56YS5jb22CEXNvbGFybW92aWVzc2MuY29tghR0YWJ1
YXVzYWRhYnJhc2lsLmNvbYIRdGlja2V0bWFzdGdlci5jb22CEXRyYWRlbXBvd2Vy
ZWQuY29tghB0cmVlaG91c2VhcnRzLm1lgg10cnJldHJlYXQuY29tgg92YWxsZXl2
ZXRuai5jb22CCXZlYm84OC50doILdmVyY29yZC5uZXSCDnZpc3RhcHJpdG4uY29t
ghJ3b2RtYW5jYXN0aW5neC5jb22CD3lhMWtyZXZlZGtvLmNvbYILenVpbGxvdy5j
b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIA
dwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY+e09bGAAAEAwBI
MEYCIQD5MBUjM+WIbw8B8BgL+NB7knXDlcmz+/26apGEW4T6gwIhAMHNEj7I33+D
V/E2gzSklYASNtl/ujag+O1FQ1bfBn9DAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp
3GhCCp/mZ0xaOnQAAAGPntPXJQAABAMASDBGAiEA7aXDj1MH2eNgO8e5fSZfHwFu
KmQic7wgD/dAKLTviesCIQDuZFW5YQkJ0UhfeUf6FichqjJY5s6UR0cHfZo+fML2
UDANBgkqhkiG9w0BAQsFAAOCAQEAnqk5X8FqTWlZUhi43PkDZHH+4sOelKhr8hus
oPabg2Kw3C9hfhAKDUqjyvKylkLFN3G5JccsfCLpPu0KF4j2Ci8hIY3Mg4T8ruui
I3bi4W7FWL0duOvhtoh6rERksmNbg3mYP2cB5RVFwxp7ENdBAfc5RwR5NwTof/FW
Kqmgk2Ed+VtB/JzTf/Fy4T029njywyMZa/EKX+8jcBlDZHheollfvAUaTmmAe982
afYnseeT4hqfnkYE+COQzLVI+kmrxZKEJXU7GAeUgzgoG6mDZI+7LzDIkoQGLXjr
1QifB1Q118ufU0rPu9WKCtBc9hb1NujMfn6yOA24RcdBWPFcyw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300826204846172634264222827627198114614655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 04:43:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 04:43:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kleingartnetz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808127376419244882787425535450097740806233766408800463500397349921988684562576355747848316047015131636749405297995895144739886656390691006713614628841231351363597397220088269518700063995989395285503158349364695532617756193103529331847936747273919822869477008149035826105013271576114581843187650318819514355651238504091012571353116948041154474934008428434609260443503678945954475243728983829981262890730392421955105061838528262449239095154135578518749431302693656653267949714352863040700459720968316710276986284756509508185272457210187649872648778221770061729043258688714677557907418134921180736791492337400253722644232322726083082803761579857593645327570523746138915383583696020147796806027574747635532274683992938370961099508002816803059297125823038577456068146238721735356239186089440631539034466203229892178401672047070201568719332754798470931286098547668344496531202170813154580408381906896264796494821348396242298961526951187618432920364846265817865686713332146539106459388152469645535567210475356772886767327620049041962733010324481218369067675318112912873549406598702502828599046003081355355630013787107324710087296734749428940506398450463255202161567815207259122165704109775615280217725425462395165500894218819754952899100013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20bb2b6fb81b22e694dada86d57c37cc065ff86d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.44400.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agorajobs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aplt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autooacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besregg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buscomachos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancer-insight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djsconstruction.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finecare.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guestgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heatones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internationasweetheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isaiminigo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwuportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jav18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleingartnetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcchurchofjesuschrist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.md-boutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mnordstromrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monypak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motilaloswalsecurities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mouserelectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mowhawkind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.municipaldistricservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musinotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybobfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymatsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noyonbond.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogua.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panerabreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimslerulanguagecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playosomo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qiqilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sculpturescompressionwear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.september-news.za.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarmoviessc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tabuausadabrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmastger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradempowered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treehousearts.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trretreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valleyvetnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vebo88.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vercord.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistapritn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wodmancastingx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ya1krevedko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuillow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '44400.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agorajobs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autooacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besregg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buscomachos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancer-insight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djsconstruction.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finecare.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationasweetheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isaiminigo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwuportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jav18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleingartnetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcchurchofjesuschrist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md-boutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnordstromrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monypak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motilaloswalsecurities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mouserelectronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mowhawkind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'municipaldistricservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musinotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybobfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymatsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noyonbond.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogua.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panerabreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimslerulanguagecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playosomo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiqilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpturescompressionwear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'september-news.za.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarmoviessc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabuausadabrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmastger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradempowered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treehousearts.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trretreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyvetnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vebo88.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vercord.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistapritn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wodmancastingx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ya1krevedko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuillow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f9ed3d6c60000040300483046022100f930152333e5886f0f01f0180bf8d07b9275c395c9b3fbfdba6a91845b84fa83022100c1cd123ec8df7f8357f1368334a495801236d97fba36a0f8ed454356df067f4300770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f9ed3d7250000040300483046022100eda5c38f5307d9e3603bc7b97d265f1f016e2a642273bc200ff74028b4ef89eb022100ee6455b9610909d1485f7947fa162721aa3258e6ce944747077d9a3e7cc2f650
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ea9395fc16a4d69595218b8dcf9036471fee2c39e94a86bf21baca0f69b8362b0dc2f617e100a0d4aa3caf2b29642c53771b925c72c7c22e93eed0a1788f60a2f21218dcc8384fcaeeba22376e2e16ec558bd1db8ebe1b6887aac4464b2635b8379983f6701e51545c31a7b10d74101f7394704793704e87ff1562aa9a093611df95b41fc9cd37ff172e13d36f678f2c323196bf10a5fef2370194364785ea2595fbc051a4e69807bdf3669f627b1e793e21a9f9e4604f82390ccb548fa49abc5928425753b1807948338281ba983648fbb2f30c89284062d78ebd5089f075435d7cb9f534acfbbd58a0ad05cf616f536e8cc7e7eb2380db845c74158f15ccb