f.chtah.com

Issued by R3

About this certificate

This digital certificate with serial number 04:da:c7:a9:1b:63:4a:66:47:fe:1a:8c:d4:63:c0:a2:66:5c was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=f.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:da:c7:a9:1b:63:4a:66:47:fe:1a:8c:d4:63:c0:a2:66:5c
Serial Number (int): 422896094140627535194731399200663295649372
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:d8:56:40:e6:c4:f9:80:14:a1:68:ba:18:bf:fd:92:de:3f:ed:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:70:ea:b9:3e:50:92:4b:e0:2a:04:b4:92:1e:e4:3c:6b:d5:58:a5
Fingerprint (sha256): 15:66:23:f9:e6:de:83:a6:be:67:8b:7c:64:a6:3a:92:75:f9:c0:13:fa:69:8a:89:5c:8a:dd:52:bf:84:09:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f.chtah.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.basspronews.com
f.cedarbranches.com
f.chtah.com
f.creditonemail.com
f.e.deventing.com
f.e.direct-day.com
f.e.disneyconsumerproductsinteractive.com
f.e.kgstores.com
f.e.lordandtaylor.com
f.e.lucasfilm.com
f.e.machinemart.co.uk
f.e.martinandosa.com
f.e.menswearhouse.com
f.e.mooresclothing.com
f.e.qvcemail.com
f.e.sonderstudio.co.uk
f.e.starbucks.com
f.e.walgreens.com
f.ecs.walgreens.com
f.elcapitantheatre.go.com
f.em.adventuresbydisney.com
f.em.disneybaby.com
f.em.disneycruiseline.com
f.em.disneydigitalbooks.com
f.em.disneygiftcard.com
f.em.disneyonbroadway.com
f.em.disneypublishing.com
f.em.disneyvacationclub.com
f.em.hollywoodrecords.com
f.em.radiodisney.com
f.em.spoonful.com
f.em.waltdisneyrecords.com
f.email.bankmobilevibe.com
f.email.disneycreditcard.com
f.email.disneynow.com
f.email.expertcare.amexgbt.com
f.email1.skybet.com
f.emails.cabelas.ca
f.emails.cabelas.com
f.enews.hbc.com
f.enews.hbcrewards.com
f.enews.homeoutfitters.com
f.enews.hudsonsbayfinancial.com
f.enews.saks.com
f.enews.thebay.com
f.enews.zellers.com
f.mktg.cabelas.com
f.mom365mail.com
f.n.direct-day.com
f.n.direct-weekly.com
f.news.finishline.com
f.news.saks.com
f.news.saksoff5th.com
f.news2.saksoff5th.com
f.news3.saksoff5th.com
f.newsletter.amazepromos.com
f.newsletter.basspro.com
f.qvcservices.qvcemail.com
f.r.direct-day.com
f.r.josbank.com
f.r.kgstores.com
f.r.menswearhouse.com
f.r.mooresclothing.com
f.re.walgreens.com
f.rxmail.alliancerxwp.com
f.rxorder.walgreens.com
f.sbagmail.skybettingandgaming.com
f.shop.cabelas.com
f.shop.josbank.com
f.skymail.sky.com
f.storereceipts.katespade.com
f.wpht.walgreens.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com

Certificate

The complete raw certificate details for f.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8mEsxLkD8oA1Qapyeu1
8rnkZtwS9YQ1j37kWd4wDlNq/OWLlZAZEyO9tyFwTdCnhPZ2BcWrX0A84CNYTBA4
dQ+z1m17bzvmlC8E5j2oRrmAJYSpv7sXbJIxuY2U34ggRrzgPE/R9ct1J6MSMo4E
ynR8jUSzRbowoYyl93Zghvy0wjXiGjU0EXxuq44B5EaYHd04C4HKLJbdUf+5R0ET
dK0YZIvaGZvAKsmzlCi2GEBv/maD+wW/WAQhooptMehnYtrR0fH/EtS723+pRC7Y
1UjuQ8FFNFWpjJqgUkGNRuwwxk3MfoSlIBFCL1zOJ1LfKBBtnwKBYVQL2AmHTy5R
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422896094140627535194731399200663295649372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 21:28:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 21:28:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21686122554914518724613964272389020733467328052120829555501273757887044699928484588709545564313041164289076273466917755063620547422330910247962860725348287688181567581993602263597703574181559307392128188820767009099658966020049499458025924128580192192661022390684188960729367339521663624694341789515497734801857549097533930742891532258673899072215158943865671754747284242833313766113610057792727500414033169281011760543926259186425845057694285728783479364186404521230776629909099686299057250467491364117810308145172391680535223269674715682127132855881162572128422075330809145403152480283413814614803793363474154672531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fd85640e6c4f98014a168ba18bffd92de3fedfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1686 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.basspronews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cedarbranches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.chtah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.creditonemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.deventing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.direct-day.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.disneyconsumerproductsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.kgstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.lordandtaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.lucasfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.machinemart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.martinandosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.menswearhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.mooresclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.qvcemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.sonderstudio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.starbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.walgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ecs.walgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.elcapitantheatre.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.adventuresbydisney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.disneybaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.disneycruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.disneydigitalbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.disneygiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.disneyonbroadway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.disneypublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.disneyvacationclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.hollywoodrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.radiodisney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.spoonful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.em.waltdisneyrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.bankmobilevibe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.disneycreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.disneynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.expertcare.amexgbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email1.skybet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.emails.cabelas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.emails.cabelas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.hbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.hbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.homeoutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.hudsonsbayfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.saks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.thebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.enews.zellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mktg.cabelas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mom365mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.n.direct-day.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.n.direct-weekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.finishline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.saks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.saksoff5th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news2.saksoff5th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news3.saksoff5th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.amazepromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.basspro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.qvcservices.qvcemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.direct-day.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.josbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.kgstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.menswearhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.mooresclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.re.walgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.rxmail.alliancerxwp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.rxorder.walgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sbagmail.skybettingandgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.shop.cabelas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.shop.josbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.skymail.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.storereceipts.katespade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.wpht.walgreens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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