uclafootball.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3a:7c:b9:fd:04:55:b3:9c:04:d4:4c:ab:41:3a:ca:31:29 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uclafootball.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3a:7c:b9:fd:04:55:b3:9c:04:d4:4c:ab:41:3a:ca:31:29
Serial Number (int): 368351310986644641712987131511251913027881
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:2f:16:e8:44:c2:46:8d:3a:0b:07:9c:9a:73:98:31:25:1f:a9:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:93:8f:0b:89:6d:88:d5:04:5d:90:23:80:19:bd:56:90:49:72:10
Fingerprint (sha256): 24:74:2d:fa:2d:b5:66:36:2f:2f:c4:92:80:65:89:1b:87:e5:28:64:ba:1f:1f:0b:de:c9:68:1d:21:21:f1:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate uclafootball.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uclafootball.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agissons.com
*.amadergram.us
*.auctiontroubleshooter.com
*.autotraderservice.co.uk
*.beinin.com
*.boardofpharmacy.com
*.boksitogorsk.com
*.compulsiveliar.com
*.condominiocarminha.com
*.d-h-l.co
*.de-ryanair.com
*.differn.com
*.dubaicallgirls.me
*.enhancement.com
*.ephya.com
*.farmersconcreteconstruction.com
*.finestpainting.com
*.ihurtpeople.com
*.internetworkengineering.com
*.kurumu.com
*.kuxue.mobi
*.mymeteo.net
*.mysharedpage.com
*.nesn.cm
*.palmasola.com
*.piangao.com
*.profitinvestor.com
*.purebau-pro.com
*.quntas.com
*.region4.com
*.registos.com
*.ritepharmacy.com
*.salazars.com
*.shahvni.com
*.superbowlgambler.com
*.taggem.com
*.tarad2u.com
*.tekly.com
*.thecashregister.com
*.thetimeless.com
*.tiners.com
*.tunagari.com
*.uclafootball.com
*.untangleart.com
*.valean.com
*.ve7.com
*.whichdietician.com.au
*.wikikb.com
*.xianwu.com
*.yourpolicywallet.com
agissons.com
amadergram.us
auctiontroubleshooter.com
autotraderservice.co.uk
beinin.com
boardofpharmacy.com
boksitogorsk.com
compulsiveliar.com
condominiocarminha.com
d-h-l.co
de-ryanair.com
differn.com
dubaicallgirls.me
enhancement.com
ephya.com
farmersconcreteconstruction.com
finestpainting.com
ihurtpeople.com
internetworkengineering.com
kurumu.com
kuxue.mobi
mymeteo.net
mysharedpage.com
nesn.cm
palmasola.com
piangao.com
profitinvestor.com
purebau-pro.com
quntas.com
region4.com
registos.com
ritepharmacy.com
salazars.com
shahvni.com
superbowlgambler.com
taggem.com
tarad2u.com
tekly.com
thecashregister.com
thetimeless.com
tiners.com
tunagari.com
uclafootball.com
untangleart.com
valean.com
ve7.com
whichdietician.com.au
wikikb.com
xianwu.com
yourpolicywallet.com

Other certificates including the domain name uclafootball.com

(limited to 100 certificates)
uclafootball.com
uclafootball.com
uclafootball.com
uclafootball.com
uclafootball.com
gameslover.com
pindeduo.com
uclafootball.com
turnkeydropships.com
womanwith.com
uclafootball.com
superculos.com

Certificate

The complete raw certificate details for uclafootball.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA12KyjSTen3Uce22O9Dl8
RMlbYeDDy7Sge0MevRmIiOzUbiiQNEVT51Vt3KgoOFxcy5bA7cRB564uzOdCCBop
zwpMVsvsSbBWeB+AnhaREyDE0XtuVmG1BJVzj/Blk/zRFYvK1EB4wLDIsL9zFV46
6W5aDmRWNuaudsyIuM8uGIHQw3PtDc6wWzrK/fWADEE3YOhHg0ouFDLNTEqkmASb
pEUo2QfzLDJeY0qhadc2mjIhclgT6CrYDYHYZv2HM2HDqdd4XdeEj7prK7vx0IG5
SY07jtnadPDBbji9cCLhcPE4FISnNMmKHCBXinOydhImTjOW3on3X4sohiB0c0GN
L7ZmQgdTXrcMH0k00GEbw8VX+OlPLpR/Q29vQ2svAFyNcMaE8HpnzJhOBKgXJdhp
vPmgWDAw81a3Hv993mvt4iVaiUXx8m9WvxN+i/j7IXNbd0OvMTIk49XhzUkiws6M
JBXl6D+j1UTWqN6J6qF5Zto6bUpa1X+RZXpurvcHWclc82ypWy8SdNMRnPguYnYM
msWp3nS8fkr328R36/WatXYq9vhqE0vaao5dhmuqrHAZKmGYKzp5P5xiTRBiPLp+
e/C9nBOCWxXsh6PqpkwfwRMYqAGg7OijOBC7L11v8yAnUBI8MQIS3YzvrLxYR0hq
ONLl++T/eEAAeTpdwLXGpe0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368351310986644641712987131511251913027881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 08:21:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 08:21:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uclafootball.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 878696328266740715187592521594663447366575976101188783656068330007698901454829744339194023595651274661156911126566956702451031047628285440984223869010832987437965988530005154111218360125481070069356191173835446932158303123750315239471290171766146480126375717022038969207699059151657023808240134103190831806024344567042644062928359531076748222896633712058941772213396752576497662975324912280952660138050146518523303427050188723022900986915211940685900583403335953106297630033281060544988647923732241026554584487470419455133090113820492793189354277121386873810435241507680306608961321672131894628455422740534322868113937520594032520100742819784097755935941189645890385827619464393762875213066316977187282652557017057114936406118489857020031662553665839149202331553736033097738884387140712832015477384738940125191098711387483234237474658128352143608191012471622119357574910684069323057956070534882001766172721057931339130035652795358964088518887227788557679762756217351349102418542295012264982099997556735314826136653968853335684544354778830419727811650729760378100334212751235610010461235363650517398504923517402839769072442007183480104940923583904575785239097876999727588077775013031896310367544331663659342750494850901117153929766381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							992f16e844c2468d3a0b079c9a739831251fa9a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amadergram.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctiontroubleshooter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autotraderservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beinin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardofpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boksitogorsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compulsiveliar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condominiocarminha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-h-l.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-ryanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.differn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubaicallgirls.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enhancement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ephya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmersconcreteconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finestpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihurtpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internetworkengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurumu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuxue.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymeteo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysharedpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nesn.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palmasola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piangao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profitinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purebau-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quntas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.region4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ritepharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salazars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shahvni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superbowlgambler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taggem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarad2u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecashregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetimeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tunagari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.untangleart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ve7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichdietician.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikikb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xianwu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourpolicywallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amadergram.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctiontroubleshooter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotraderservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardofpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boksitogorsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compulsiveliar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condominiocarminha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-h-l.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ryanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'differn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaicallgirls.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhancement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ephya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmersconcreteconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finestpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihurtpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetworkengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurumu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuxue.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymeteo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysharedpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesn.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmasola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piangao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profitinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purebau-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quntas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritepharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salazars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shahvni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbowlgambler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taggem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarad2u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecashregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetimeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunagari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uclafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untangleart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 've7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichdietician.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikikb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianwu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourpolicywallet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c10159a4c0000040300473045022061798c1fe7e65f31c9103aa3f40a50883e7a37448fa09a753272a70e3205ce51022100c5c57b228e986edaa3d8808e10201720bbefcd35e8d729c0dcb65b45c729b8650075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c10159a4b000004030046304402203d4e2ddf12634528823a222f920ae31c701add71f6734f60606dc15c1f4672e60220530d60d2ec75611b8ded9eb3509b8eeae818da71cba0e1e534e83f91409894d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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