events.biggestfantour.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ae:c2:8a:ec:e9:0d:f7:ff:10:bd:43:62:9d:15:26:36:db was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=events.biggestfantour.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:c2:8a:ec:e9:0d:f7:ff:10:bd:43:62:9d:15:26:36:db
Serial Number (int): 407916867144546182156614027381055049578203
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:42:ce:05:56:dd:de:14:80:fa:ed:3f:77:67:64:74:ea:eb:df:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:54:c7:c5:80:1a:06:83:94:c9:d4:f3:26:86:72:8c:87:43:4d:97
Fingerprint (sha256): 03:12:19:04:b3:fc:4f:44:4c:de:bf:23:0e:44:a4:35:19:a2:9f:bb:59:6f:42:ef:e5:d5:1d:91:0d:67:8f:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate events.biggestfantour.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for events.biggestfantour.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agencias.carglass.pt
agents.mofbinsurance.com
amp.locations.yext.com
answers.dignityfunerals.yext-cdn.com
answers.healthcareassociates.com.yext-cdn.com
branches.bargainbooze.co.uk
cashflow.ccbg.com
clinics.connecthearing.com
clinics.tritonhearing.co.nz
davenporthiring.portillos.com
doctors.capecodhealth.org
events.banksunwest.com
events.biggestfantour.com
events.mykidsdentistclinton.com
fest.capitalalehouse.com
home.jbhallfuneraldirectors.co.uk
it-stores.iqos.com.yext-cdn.com
katastimata.carglass.gr
kr-stores.iqos.com.yext-cdn.com
l.csa.canon.com
local.albertsons.com
local.amigosunited.com
local.fuel.carrsqc.com
local.pharmacy.carrsqc.com
local.pharmacy.unitedsupermarkets.com
local.prestigeportraits.ca
local.safeway.com
location.1-800boardup.com
location.debonairspizza.co.za
location.eastdevoncrematorium.co.uk
locations.af247.com
locations.alegrecare.com
locations.alliedcash.com
locations.bcbg.com
locations.bk.com
locations.blissworld.com
locations.buffalos.com
locations.car.riteaid.com
locations.firstent.org
locations.frankieandbennys.com
locations.haircuttery.com
locations.krystal.com
locations.legacytexas.com
locations.massageenvy.com
locations.newks.com
locations.office-beerbar.com
locations.ohio.aaa.com
locations.promise.co.jp
locations.romeospizza.com
locations.swisslife.ch
locations.tropicalsmoothiecafe.com
locations.uspolo.org
locations.wendys.com
locations.winmedical.org
locations.xfinity.com
magasins.casper.com
my-stores.iqos.com.yext-cdn.com
nl-stores.iqos.com.yext-cdn.com
providers.winmedical.org
restaurants.fiveguys.fr
retailers.jaguar.com.my
retailers.landrover.com.au
retailers.landrover.com.br
salp-il.yext-cdn.com
salp-ima-home.yext-cdn.com
salp-va.yext-cdn.com
standorte.carglass.at
standorte.carglass.de
standorte.geers.de
store-events.loft.com
store.josbank.com
stores.bestbuy.ca
stores.bestwaywholesale.co.uk
stores.celine.com
stores.comma-fashion.com
stores.dxl.com
stores.godiva.com
stores.ippudo.com
stores.jcpenney.com
stores.kourakuen.co.jp
stores.lanebryant.com
stores.motherhoodcanada.ca
stores.nyxcosmetics.de
stores.nyxcosmetics.es
stores.oakley.com
stores.optimum.com
stores.poloralphlaurenfactorystore.com
stores.redux.com
stores.staples.com
stores.sterlingjewelers.com
stores.topshop.com
stores.torafuku.jp
stores.usapawnandjewelry.net
stores.zales.com
subz.yext-cdn.com
szervizek.carglass.hu
toimipisteemme.carglass.fi
www.farmerskorean.com
www.farmersnewyork.com
www.farmerssouthjersey.com

Other certificates including the domain name biggestfantour.com

(limited to 100 certificates)
3.7.prod.bubbleup.com
answers-texaneyecare.pagescdn.com
events.biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
events.biggestfantour.com
3.7.prod.bubbleup.com
events.biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
restaurants.swisschalet.com.pagescdn.com
events.biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
answers-texaneyecare.pagescdn.com
biggestfantour.com
3.7.prod.bubbleup.com
biggestfantour.com
biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
restaurants.swisschalet.com.pagescdn.com
3513761.supportembed.com.pagescdn.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3513761.supportembed.com.pagescdn.com
3.7.prod.bubbleup.com
events.biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
locations.keyrealtyservices.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
events.biggestfantour.com
biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
stores.torafuku.jp
events.biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
www.farmersatlanta.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
stores.sakura-dining-tokyo.jp
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
biggestfantour.com
biggestfantour.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
stores.torafuku.jp
3512286.supportembed.com.pagescdn.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com
3.7.prod.bubbleup.com

Certificate

The complete raw certificate details for events.biggestfantour.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DPPB7oZV1wcsAmEXfTL
Dmaltnaht4dpNxTd6lq7XMIrxqMs4SVvjMZ+Mp5KaGsrNPe2Ph5Rymy6vV4MpfEQ
OtFFOSHj3c50ak+lgPsBjYnsqvTq6p2h+F9f34gKuyBUxMi/dZi0U7ktOQ3OC6tU
zSEuJVv4nlN9ztQT4tva+PY59ivOa0vgOm+ekJikHHk8au3ib24YoL9nU+ZnxYCx
27KYytFi4BKZBcBGZ8Z0UK0L48veGxkGZxeyLuAZeRngwrwkt2cPgh3C3hnYcAn9
i048CYhi+KxnR4DcmCjKyjpgKkbppruhF4RvzY/vLJQJTHxaFOKeseUwE1WIk+Rt
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407916867144546182156614027381055049578203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 19:23:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 19:23:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'events.biggestfantour.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26788068480701545328528107431258249385359810682531683100679138797479781502136994052730315223609912579107946127072701644179847890599105474154852688690870752222598899791948990172318174345014323655552932653791341719724607936426796336817223685461660952474683387372076692915708267696301689059269502880555618183803820971247878831885151198390659081975428224030705478149037045398844553728165953823451491211645874956355086598233587777585766781603668694624630006556526897208228745682732385919402966216334245338026008298832449209986665644093902732597767908131449992249636309524198894476503423567940559855020558751361853714361669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b42ce0556ddde1480faed3f77676474eaebdfc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2555 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencias.carglass.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.mofbinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.locations.yext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.dignityfunerals.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.healthcareassociates.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branches.bargainbooze.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashflow.ccbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinics.connecthearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinics.tritonhearing.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davenporthiring.portillos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.capecodhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.banksunwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.biggestfantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.mykidsdentistclinton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fest.capitalalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.jbhallfuneraldirectors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katastimata.carglass.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.csa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.amigosunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fuel.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pharmacy.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pharmacy.unitedsupermarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prestigeportraits.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.1-800boardup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.debonairspizza.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.eastdevoncrematorium.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.af247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.alegrecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.alliedcash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bcbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.bk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.blissworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.buffalos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.car.riteaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.firstent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.frankieandbennys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.haircuttery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.krystal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.legacytexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.massageenvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.newks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.office-beerbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.ohio.aaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.promise.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.romeospizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.swisslife.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tropicalsmoothiecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.uspolo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.wendys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.winmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magasins.casper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providers.winmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.fiveguys.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.jaguar.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landrover.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landrover.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salp-il.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salp-ima-home.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salp-va.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standorte.carglass.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standorte.carglass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standorte.geers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-events.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.josbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bestwaywholesale.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.celine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.comma-fashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.godiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.ippudo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.jcpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.kourakuen.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.lanebryant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.motherhoodcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.nyxcosmetics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.nyxcosmetics.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.optimum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.poloralphlaurenfactorystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.redux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.staples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.sterlingjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.topshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.torafuku.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.usapawnandjewelry.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.zales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subz.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szervizek.carglass.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toimipisteemme.carglass.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmerskorean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmerssouthjersey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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