vlajky.org

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:13:3a:25:a1:30:a9:a4:25:ca:a7:4c:fd:6d:b8:3d:33 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vlajky.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:13:3a:25:a1:30:a9:a4:25:ca:a7:4c:fd:6d:b8:3d:33
Serial Number (int): 297772628304178813816048947526284986563891
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:60:db:c7:aa:67:49:f7:ad:7a:b6:10:99:18:ff:d6:e9:ff:61:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:3c:a2:90:28:c2:51:2e:61:59:95:25:fd:2a:42:b9:98:9c:9c:02
Fingerprint (sha256): ff:d4:cf:cd:95:70:d2:ae:ce:51:d3:0f:a7:f3:3c:ff:df:e8:e1:02:52:39:76:d3:4d:05:9e:20:15:af:04:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vlajky.org

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vlajky.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alilandry.dns1.us
amandabynes.ezua.com
amyweber.changeip.org
ashleyjudd.ydns.eu
ashleyolsen.dynuddns.com
bandeira.vlajky.org
bandera.vlajky.org
blahoprani.1cooldns.com
blahoprani.bumbleshrimp.com
blahopranicka.ddnsfree.com
brittanymurphy.isasecret.com
brookeburke.gleeze.com
brookeshields.freeddns.org
christinaapplegate.4cloud.click
christinaricci.ooguy.com
drapeau.vlajky.org
drewbarrymore.giize.com
elizabethhurley.wikaba.com
emmawatson.ydns.eu
erikaeleniak.kozow.com
flaga.vlajky.org
flagge.vlajky.org
flags-of-the-world.vlajky.org
flags.vlajky.org
free.mysynology.net
gabinapartysova.theworkpc.com
giselebundchen.my03.com
gratulace.camdvr.org
gratulace.ooguy.com
gwenstephanie.mywire.org
hilaryduff.itemdb.com
historicke.vlajky.org
hollyvalance.longmusic.com
islafisher.dynv6.net
jenniferlopez.ddns.info
jessicabiel.v6.navy
juliastiles.v6.army
katherineheigl.v6.rocks
keiraknightley.x24hr.com
kellyclarkson.dns.navy
kirstendunst.iownyour.biz
lindsaylohan.mefound.com
lionel-messi.zyns.com
mariasharapova.dns.army
mary-kate-olsen.accesscam.org
mesta.vlajky.org
milakunis.loseyourip.com
monicabellucci.mrbonus.com
narozeniny-jmeniny.mysynology.net
nataliaoreiro.dynuddns.net
nellyfurtado.dns.navy
omalovanky.ydns.eu
online-casino-roulette.duckdns.org
oslava.casacam.net
parishilton.4pu.com
pink.dedyn.io
prani-k-svatku.vlajky.org
prani.myz.info
prani.ydns.eu
pranicka.dynuddns.net
pranicka.webredirect.org
regionalni.vlajky.org
rihanna.ddns.us
roulette-online-how-play.duckdns.org
sarah-michelle-gellar.theworkpc.com
sarahjessicaparker.ddnsguru.com
shannonelizabeth.ddnsguru.com
shiriappleby.freemyip.com
statni.vlajky.org
staty-usa.vlajky.org
testy.vlajky.org
texas-holdem-poker.duckdns.org
umathurman.ddnsgeek.com
vlajka-statu.vlajky.org
vlajky.org
wallpapers.onmypc.us
winonaryder.webredirect.org
world-countries-flags.vlajky.org
world-flags.vlajky.org
www.vlajky.org
xxx-xxx.duckdns.org
zastave.vlajky.org
zdarma.25u.com
zdarma.hopto.org
zdarma.loseyourip.com
zivotopisy.zzux.com

Other certificates including the domain name vlajky.org

(limited to 100 certificates)
vlajky.org
vlajky.org
vlajky.org

Certificate

The complete raw certificate details for vlajky.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM9TCCC92gAwIBAgISA2sTOiWhMKmkJcqnTP1tuD0zMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDgyMDAwNTRaFw0yNDA1MDgyMDAwNTNaMBUxEzARBgNVBAMT
CnZsYWpreS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKgYN
C6q1/mQskwc2wAzDazeNhSRhRPfIdZyN/5OlspkqA/gjkikuCbB+XWDPmBI+Af6i
Ye9ognvmGKlpxfOwHXd7RmikkqtTVhIvd3tCVbC0QW6iBQuIl2zNLDKC1k2QM9qI
ONyfn3qaNuJ8rNJwepb01WbAnYvT0MQHkmV8Q/k8YyyqCGOwWKv66xHXg2c50Ojd
LyGgBdqPtCPQdXZL1RiVCoXcMthkTClKHcYk+kNV0BtG9qC3qpwfbRqOM1sRd8g4
68rd98oaNyu2b8PY/rHUSUm/F7QNvZFc8i4qKrQ907gi3JUuv1e9RxDmJQNDg15s
ELdJlItwv5YYfExBAgMBAAGjggogMIIKHDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FFJg28eqZ0n3rXq2EJkY/9bp/2ETMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIII
JgYDVR0RBIIIHTCCCBmCEWFsaWxhbmRyeS5kbnMxLnVzghRhbWFuZGFieW5lcy5l
enVhLmNvbYIVYW15d2ViZXIuY2hhbmdlaXAub3JnghJhc2hsZXlqdWRkLnlkbnMu
ZXWCGGFzaGxleW9sc2VuLmR5bnVkZG5zLmNvbYITYmFuZGVpcmEudmxhamt5Lm9y
Z4ISYmFuZGVyYS52bGFqa3kub3JnghdibGFob3ByYW5pLjFjb29sZG5zLmNvbYIb
YmxhaG9wcmFuaS5idW1ibGVzaHJpbXAuY29tghpibGFob3ByYW5pY2thLmRkbnNm
cmVlLmNvbYIcYnJpdHRhbnltdXJwaHkuaXNhc2VjcmV0LmNvbYIWYnJvb2tlYnVy
a2UuZ2xlZXplLmNvbYIaYnJvb2tlc2hpZWxkcy5mcmVlZGRucy5vcmeCH2Nocmlz
dGluYWFwcGxlZ2F0ZS40Y2xvdWQuY2xpY2uCGGNocmlzdGluYXJpY2NpLm9vZ3V5
LmNvbYISZHJhcGVhdS52bGFqa3kub3JnghdkcmV3YmFycnltb3JlLmdpaXplLmNv
bYIaZWxpemFiZXRoaHVybGV5Lndpa2FiYS5jb22CEmVtbWF3YXRzb24ueWRucy5l
dYIWZXJpa2FlbGVuaWFrLmtvem93LmNvbYIQZmxhZ2Eudmxhamt5Lm9yZ4IRZmxh
Z2dlLnZsYWpreS5vcmeCHWZsYWdzLW9mLXRoZS13b3JsZC52bGFqa3kub3JnghBm
bGFncy52bGFqa3kub3JnghNmcmVlLm15c3lub2xvZ3kubmV0gh1nYWJpbmFwYXJ0
eXNvdmEudGhld29ya3BjLmNvbYIXZ2lzZWxlYnVuZGNoZW4ubXkwMy5jb22CFGdy
YXR1bGFjZS5jYW1kdnIub3JnghNncmF0dWxhY2Uub29ndXkuY29tghhnd2Vuc3Rl
cGhhbmllLm15d2lyZS5vcmeCFWhpbGFyeWR1ZmYuaXRlbWRiLmNvbYIVaGlzdG9y
aWNrZS52bGFqa3kub3Jnghpob2xseXZhbGFuY2UubG9uZ211c2ljLmNvbYIUaXNs
YWZpc2hlci5keW52Ni5uZXSCF2plbm5pZmVybG9wZXouZGRucy5pbmZvghNqZXNz
aWNhYmllbC52Ni5uYXZ5ghNqdWxpYXN0aWxlcy52Ni5hcm15ghdrYXRoZXJpbmVo
ZWlnbC52Ni5yb2Nrc4IYa2VpcmFrbmlnaHRsZXkueDI0aHIuY29tghZrZWxseWNs
YXJrc29uLmRucy5uYXZ5ghlraXJzdGVuZHVuc3QuaW93bnlvdXIuYml6ghhsaW5k
c2F5bG9oYW4ubWVmb3VuZC5jb22CFWxpb25lbC1tZXNzaS56eW5zLmNvbYIXbWFy
aWFzaGFyYXBvdmEuZG5zLmFybXmCHW1hcnkta2F0ZS1vbHNlbi5hY2Nlc3NjYW0u
b3JnghBtZXN0YS52bGFqa3kub3JnghhtaWxha3VuaXMubG9zZXlvdXJpcC5jb22C
Gm1vbmljYWJlbGx1Y2NpLm1yYm9udXMuY29tgiFuYXJvemVuaW55LWptZW5pbnku
bXlzeW5vbG9neS5uZXSCGm5hdGFsaWFvcmVpcm8uZHludWRkbnMubmV0ghVuZWxs
eWZ1cnRhZG8uZG5zLm5hdnmCEm9tYWxvdmFua3kueWRucy5ldYIib25saW5lLWNh
c2luby1yb3VsZXR0ZS5kdWNrZG5zLm9yZ4ISb3NsYXZhLmNhc2FjYW0ubmV0ghNw
YXJpc2hpbHRvbi40cHUuY29tgg1waW5rLmRlZHluLmlvghlwcmFuaS1rLXN2YXRr
dS52bGFqa3kub3Jngg5wcmFuaS5teXouaW5mb4INcHJhbmkueWRucy5ldYIVcHJh
bmlja2EuZHludWRkbnMubmV0ghhwcmFuaWNrYS53ZWJyZWRpcmVjdC5vcmeCFXJl
Z2lvbmFsbmkudmxhamt5Lm9yZ4IPcmloYW5uYS5kZG5zLnVzgiRyb3VsZXR0ZS1v
bmxpbmUtaG93LXBsYXkuZHVja2Rucy5vcmeCI3NhcmFoLW1pY2hlbGxlLWdlbGxh
ci50aGV3b3JrcGMuY29tgh9zYXJhaGplc3NpY2FwYXJrZXIuZGRuc2d1cnUuY29t
gh1zaGFubm9uZWxpemFiZXRoLmRkbnNndXJ1LmNvbYIZc2hpcmlhcHBsZWJ5LmZy
ZWVteWlwLmNvbYIRc3RhdG5pLnZsYWpreS5vcmeCFHN0YXR5LXVzYS52bGFqa3ku
b3JnghB0ZXN0eS52bGFqa3kub3Jngh50ZXhhcy1ob2xkZW0tcG9rZXIuZHVja2Ru
cy5vcmeCF3VtYXRodXJtYW4uZGRuc2dlZWsuY29tghd2bGFqa2Etc3RhdHUudmxh
amt5Lm9yZ4IKdmxhamt5Lm9yZ4IUd2FsbHBhcGVycy5vbm15cGMudXOCG3dpbm9u
YXJ5ZGVyLndlYnJlZGlyZWN0Lm9yZ4Igd29ybGQtY291bnRyaWVzLWZsYWdzLnZs
YWpreS5vcmeCFndvcmxkLWZsYWdzLnZsYWpreS5vcmeCDnd3dy52bGFqa3kub3Jn
ghN4eHgteHh4LmR1Y2tkbnMub3JnghJ6YXN0YXZlLnZsYWpreS5vcmeCDnpkYXJt
YS4yNXUuY29tghB6ZGFybWEuaG9wdG8ub3JnghV6ZGFybWEubG9zZXlvdXJpcC5j
b22CE3ppdm90b3Bpc3kuenp1eC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3
iviabfUX2AAAAY2KhgCtAAAEAwBIMEYCIQDKIiaQjBzx5jhNpdVB6DMssCJV+l+4
KFw3LJDGj2uxjQIhAPHSEMywj3MY8DvGQKdimo0JDGvNlq37+ch5WrOvvXD8AHYA
dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNioYA9AAABAMARzBF
AiEAnEhRgaMrfOZBsSQv15tKHGBQufkHvHbrJWkNLFlvZc8CIG4Apdh9o+vqPwfz
aF6zYvLCH2J75EE/MizPL9lTLK3gMA0GCSqGSIb3DQEBCwUAA4IBAQABIjrdNHvz
96jR/AaE2+Z0QhpKBjgUMKGInYD3205ygmImShuIZrb3n8Isp4T8G7FXFI2q9deQ
jYcPircqTkSEs/WRu6yeCJRbYTdVIqiYAhc6rZUfS4Y6Y1VerKUi4SWkeikfWZgY
uO6ObyZtqv03gNDbbydv3Zjbt+d5mm35Fd0zqg5bhU+YoP+zCbG3HYcwCE/iibPZ
Hvsl9y8iOhjPfslPFKI+MPpQ0m+ZBlQ11wnpZF+7lUs1pdfNdd3cNl+woNjZTqp8
E0LRpSnTmV4FrphlkMQDXOs5HsfXWmZiUnwOgAYkSo+gQ7WcfP0ZXCQAWOMIIRYZ
G6RmyfpWsdSY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yoGDQuqtf5kLJMHNsAM
w2s3jYUkYUT3yHWcjf+TpbKZKgP4I5IpLgmwfl1gz5gSPgH+omHvaIJ75hipacXz
sB13e0ZopJKrU1YSL3d7QlWwtEFuogULiJdszSwygtZNkDPaiDjcn596mjbifKzS
cHqW9NVmwJ2L09DEB5JlfEP5PGMsqghjsFir+usR14NnOdDo3S8hoAXaj7Qj0HV2
S9UYlQqF3DLYZEwpSh3GJPpDVdAbRvagt6qcH20ajjNbEXfIOOvK3ffKGjcrtm/D
2P6x1ElJvxe0Db2RXPIuKiq0PdO4ItyVLr9XvUcQ5iUDQ4NebBC3SZSLcL+WGHxM
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297772628304178813816048947526284986563891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 20:00:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 20:00:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vlajky.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26657004975368840466009268603124262219296278028476457665120405622914284784772946275135513869134103464275896371105444526207159857788814685342037670441660767229425267041233947801628548493846308772151194265376682026955708264645173831257429629799525691140448091614809078429908789962395834399520095052374617218106323963447800868783816665587643568461276622144161881611136669890991647213565777940450102496226622929693130787737577159358586273320138824118353072148033717918125104850756833871143823646185251740311494528137104981535588955778127021573232656123977573150817899599695475166878190818526700422403616206018141879028801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5260dbc7aa6749f7ad7ab6109918ffd6e9ff6113
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2077 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alilandry.dns1.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amandabynes.ezua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amyweber.changeip.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyjudd.ydns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyolsen.dynuddns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandeira.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandera.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blahoprani.1cooldns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blahoprani.bumbleshrimp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blahopranicka.ddnsfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brittanymurphy.isasecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookeburke.gleeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookeshields.freeddns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christinaapplegate.4cloud.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christinaricci.ooguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drapeau.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drewbarrymore.giize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabethhurley.wikaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmawatson.ydns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erikaeleniak.kozow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaga.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagge.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flags-of-the-world.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flags.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free.mysynology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabinapartysova.theworkpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giselebundchen.my03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratulace.camdvr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratulace.ooguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwenstephanie.mywire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilaryduff.itemdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicke.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollyvalance.longmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islafisher.dynv6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenniferlopez.ddns.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessicabiel.v6.navy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juliastiles.v6.army'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katherineheigl.v6.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keiraknightley.x24hr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellyclarkson.dns.navy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirstendunst.iownyour.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindsaylohan.mefound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionel-messi.zyns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariasharapova.dns.army'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mary-kate-olsen.accesscam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesta.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milakunis.loseyourip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monicabellucci.mrbonus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narozeniny-jmeniny.mysynology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nataliaoreiro.dynuddns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nellyfurtado.dns.navy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omalovanky.ydns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-casino-roulette.duckdns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oslava.casacam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parishilton.4pu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pink.dedyn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prani-k-svatku.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prani.myz.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prani.ydns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pranicka.dynuddns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pranicka.webredirect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regionalni.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rihanna.ddns.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roulette-online-how-play.duckdns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarah-michelle-gellar.theworkpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarahjessicaparker.ddnsguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shannonelizabeth.ddnsguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiriappleby.freemyip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statni.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staty-usa.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testy.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas-holdem-poker.duckdns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umathurman.ddnsgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlajka-statu.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallpapers.onmypc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winonaryder.webredirect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world-countries-flags.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world-flags.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxx-xxx.duckdns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zastave.vlajky.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdarma.25u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdarma.hopto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdarma.loseyourip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zivotopisy.zzux.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d8a8600ad0000040300483046022100ca2226908c1cf1e6384da5d541e8332cb02255fa5fb8285c372c90c68f6bb18d022100f1d210ccb08f7318f03bc640a7629a8d090c6bcd96adfbf9c8795ab3afbd70fc00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d8a8600f400000403004730450221009c485181a32b7ce641b1242fd79b4a1c6050b9f907bc76eb25690d2c596f65cf02206e00a5d87da3ebea3f07f3685eb362f2c21f627be4413f322ccf2fd9532cade0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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