abong.ufcespanol.com

Issued by R3

About this certificate

This digital certificate with serial number 04:cf:21:2e:bd:aa:4f:67:8e:35:ad:60:6d:53:80:b3:2e:fd was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abong.ufcespanol.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cf:21:2e:bd:aa:4f:67:8e:35:ad:60:6d:53:80:b3:2e:fd
Serial Number (int): 418931700896060420573583044977462242127613
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:93:e8:d0:72:66:5d:20:24:95:f1:12:a5:43:2c:7c:fc:19:4d:bf
Fingerprint (sha256): 23:54:da:38:c2:b9:21:66:e9:3d:02:3a:ba:ee:b8:de:35:9d:f4:e1:b6:f6:e2:38:88:7e:ef:c6:6a:c6:c0:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abong.ufcespanol.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abong.ufcespanol.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abong.ufcespanol.com
adada.jhpiego.org
applyartdesign.mercy.edu
audiscover.m4.rocktape.com
bandar-slot-4d.operationhope.org
bet88.ufc.com.br
cam.gsm.cornell.edu
carp-staging.sfsu.edu
cehhs.umich.edu
coloktoto-dev.live.oceana.org
coloktoto-test.live.oceana.org
coloktoto.live.oceana.org
dev-annual-reports-pantheon.fsc.org
dev-eden-hamburg.perrier-jouet.com
digmaan.gsm.cornell.edu
drupal.christiancentury.org
gas-togel.gbci.org
goceng.govdelivery.com
hahahihi.aagrapevine.org
hiduplah.kjzz.org
hurahura.aagrapevine.org
implementation-test.blogs.govdelivery.com
implementluxury.pernod-ricard.com
job.nebrwesleyan.edu
jsublue.jsums.edu
kaido.ufc.com.br
lemonrrq.agbu.org
lib.rockhurst.edu
link-togel.test.webservices.umich.edu
linkrtp.ufcespanol.com
med-irt.dev.umich.edu
messipoker.dana.org
nofeeds.orie.cornell.edu
old.stimson.org
origin-dev-gcms.absolut.com
publication.agbu.org
rm.mcny.org
rtf-test.nwcouncil.org
rtpslot.dev.oceana.org
safemovement.csuohio.edu
sfseed-staging.sfsu.edu
site.gsm.cornell.edu
site.searac.org
site.ufc.com.br
situscmdplay.livestrong.org
situscmdplay.ufc.com.br
situscmdplay.ufcespanol.com
slot2023.ufc.com.br
slot88-online.rockhurst.edu
slotdeposit.dana.org
slotterpercaya.ufcespanol.com
soe.test.webservices.umich.edu
ssa1.dev-blogs.govdelivery.com
stage.courses.extension.harvard.edu
study.test.webservices.umich.edu
supermoto.livestrong.org
totomacau5d.gsm.cornell.edu
traces.unc.edu
vivarrq.acacamps.org
weather.jsums.edu
webdisk.braggcrane.com
www.ctx.spirinet.com
www.digmaan.gsm.cornell.edu
www.mark.rockhurst.edu
www.resources.rockhurst.edu
www.saw.gsm.cornell.edu
www.test.mville.edu
www.theoldsite.felician.edu
www.webctrl.rockhurst.edu
www.ww2.rockhurst.edu

Other certificates including the domain name ufcespanol.com

(limited to 100 certificates)
au.ufc.com
streetfilms.org
au.ufc.com
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
streetfilms.org
5766752193478656-fe4.pantheonsite.io
local3599.com
communityadvancementfirm.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
2fadmin.govdelivery.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
abong.ufcespanol.com
5766752193478656-fe4.pantheonsite.io
2fadmin.govdelivery.com
5755424754106368-fe2.pantheonsite.io
2023.rocktape.com
asikmpo.discoverlosangeles.com
160.166.tmcapital.com
lcthomsen.com
5766752193478656-fe4.pantheonsite.io
sandiegozoo100.org
5755424754106368-fe2.pantheonsite.io
admission.gsm.cornell.edu
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
yakamafish-star.net
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
sters.us
5755424754106368-fe2.pantheonsite.io
deanbphilips.com
deanbphilips.com
hepwebstudy.org
deanbphilips.com
streetfilms.org
5766752193478656-fe4.pantheonsite.io
streetfilms.org
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
agenslotgacor.gsm.cornell.edu
streetfilms.org
ufcespanol.com
abong.ufcespanol.com
5755424754106368-fe2.pantheonsite.io
lcthomsen.com
5766752193478656-fe4.pantheonsite.io
ufcespanol.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
2020.sundialsolarenergy.com
advance.cccu.org
yakamafish-star.net
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
sandiegozoo100.org
sandiegozoo100.org
au.ufc.com
2fwww.govdelivery.com
*.ufcespanol.com
5755424754106368-fe2.pantheonsite.io
ufcespanol.com
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
advance.cccu.org
asikmpo.discoverlosangeles.com
12.05.85-demo.kjzz.org
au.ufc.com
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
2fadmin.govdelivery.com
5755424754106368-fe2.pantheonsite.io
advance.cccu.org
ufcespanol.com
berkscountyweddings.com
4d.gsm.cornell.edu
5755424754106368-fe2.pantheonsite.io
afrinul.crl.edu
alternatif.dev.oceana.org
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io

Certificate

The complete raw certificate details for abong.ufcespanol.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418931700896060420573583044977462242127613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 14:57:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 14:57:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abong.ufcespanol.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abong.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adada.jhpiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applyartdesign.mercy.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiscover.m4.rocktape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandar-slot-4d.operationhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bet88.ufc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cam.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carp-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cehhs.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloktoto-dev.live.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloktoto-test.live.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloktoto.live.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-annual-reports-pantheon.fsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-eden-hamburg.perrier-jouet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digmaan.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.christiancentury.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gas-togel.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goceng.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hahahihi.aagrapevine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiduplah.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurahura.aagrapevine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'implementation-test.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'implementluxury.pernod-ricard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsublue.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaido.ufc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonrrq.agbu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lib.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-togel.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkrtp.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'med-irt.dev.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messipoker.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nofeeds.orie.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.stimson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dev-gcms.absolut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publication.agbu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtf-test.nwcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtpslot.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safemovement.csuohio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfseed-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.searac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.ufc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situscmdplay.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situscmdplay.ufc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situscmdplay.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot2023.ufc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot88-online.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotdeposit.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotterpercaya.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soe.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssa1.dev-blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.courses.extension.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'study.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermoto.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totomacau5d.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traces.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivarrq.acacamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.braggcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctx.spirinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digmaan.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mark.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resources.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saw.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.mville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoldsite.felician.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webctrl.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ww2.rockhurst.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cc097e27d0000040300483046022100f15ba0aa44c57dd79ec95286e1f71c88b028e085c10233c0a4c74ffb941513840221009d118165cc98d480d2eb96309795c09e2b3fb02cd5b8a2bc76c13af2c0776f2d0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc097e3610000040300463044022065fd3779d112371a7a7a5d10c1bb5262d94b22875644b2aba4f3664af232642a022038318ce2b8db07d0dfaca0a361d3c3f431614571f9bb5a0b63c81a8e3c7526b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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