nelnet.cm

Issued by R3

About this certificate

This digital certificate with serial number 04:85:48:10:3f:71:e6:9a:9d:a9:e2:11:91:c1:1e:22:cc:21 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nelnet.cm

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:85:48:10:3f:71:e6:9a:9d:a9:e2:11:91:c1:1e:22:cc:21
Serial Number (int): 393802487306788008592763115790861183667233
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:a1:69:5e:78:e6:54:a8:dd:a2:9a:3f:f4:c8:03:52:b4:8b:62:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:42:77:d7:c1:92:57:69:2a:ac:8e:38:38:db:5a:55:02:a1:98:44
Fingerprint (sha256): 26:59:a3:1d:ce:28:d0:11:aa:0c:cf:d4:d2:52:59:c6:28:df:4c:31:3f:5c:47:2c:c1:6c:99:da:37:c6:30:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nelnet.cm

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nelnet.cm

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adidasub3.us
*.agelocvitality.com
*.airmax-90.us
*.alexherrera.us
*.andredoo.us
*.antivirussupporthelplinenumber.us
*.azantak.us
*.azino777-zerkalo.us
*.bangdolls.us
*.beatswirelessheadphones.us
*.belgianlaekenoisclub.us
*.bobastores.com
*.bretjett.us
*.businessbad.us
*.businessoftheday.us
*.businesspirates.us
*.businessquantum.us
*.dentistswithmorepatients.com
*.fortunaireagency.com
*.gameisboon.com
*.homeremedieschannel.com
*.icsafe.org
*.ilmeteoo.it
*.ittechnician.org
*.kaleidoscopelodge.com
*.luccarbon.com
*.magilllegal.com
*.mail-gruppofs.it
*.moblecountylc.com
*.mooonpalacedc.com
*.muabanbamien.com
*.nelnet.cm
*.pentabilites.com
*.polyhaeven.com
*.primehausplanning.com
*.prinstonhick.com
*.railroasonline.com
*.rawxmovies.com
*.reynkkaneshiro.com
*.reynkvisuals.com
*.rprugvarsjvgm.com
*.sciencilabs.com
*.seekigcursh.com
*.sidhaig2003.com
*.sugarless.com.au
*.thehostelbox.com
*.thpcod.es
*.wpnucdn.com
*.wwwfwisd.org
*.yoskyy.com
adidasub3.us
agelocvitality.com
airmax-90.us
alexherrera.us
andredoo.us
antivirussupporthelplinenumber.us
azantak.us
azino777-zerkalo.us
bangdolls.us
beatswirelessheadphones.us
belgianlaekenoisclub.us
bobastores.com
bretjett.us
businessbad.us
businessoftheday.us
businesspirates.us
businessquantum.us
dentistswithmorepatients.com
fortunaireagency.com
gameisboon.com
homeremedieschannel.com
icsafe.org
ilmeteoo.it
ittechnician.org
kaleidoscopelodge.com
luccarbon.com
magilllegal.com
mail-gruppofs.it
moblecountylc.com
mooonpalacedc.com
muabanbamien.com
nelnet.cm
pentabilites.com
polyhaeven.com
primehausplanning.com
prinstonhick.com
railroasonline.com
rawxmovies.com
reynkkaneshiro.com
reynkvisuals.com
rprugvarsjvgm.com
sciencilabs.com
seekigcursh.com
sidhaig2003.com
sugarless.com.au
thehostelbox.com
thpcod.es
wpnucdn.com
wwwfwisd.org
yoskyy.com

Other certificates including the domain name nelnet.cm

(limited to 100 certificates)
lightsolutions.co
nelnet.cm
nelnet.cm
avalon-bathrooms.co.uk
ckplasticfamily.com
phonetic.ca
day-dreamer.net
theministry.com.au
nelnet.cm
klotrimazol.com
sebastianmogordoy.com

Certificate

The complete raw certificate details for nelnet.cm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsZU68vY7CySFJfKwt9b/
YSY0cwQNpSonCSww9GPl8ukfkoEy+Zf3aF5CD1wpcp/aSKFZz9WHtbJchGdm57g5
qGeDS5rt01J4oU0FXdhztBoSBHEee56t9n59T6jHpXgcwHRNb6kqKvD78bS8Cssf
4G4cvYJ85xjHX/DcN01CnxEMh0FrixnJ4kizm6ifaa6bRNB3SgAT4e6mH0zd/rPZ
s5XQHFxlNW3kKY28PKJr+qnkWdjgxHEGDik7R+jqoVqsVCziAZN3tqseBVsi/NwP
es9VfRJLj85nRqmyEl/m5vfWBCcnvWFxT2pEg6+4K9PFKvuBkYN77gyq0SeN4deY
08a/rfYXn97T0og2Fs+fzWTIiblk4ncKIuW6LOq13w++HkgO+1kf5+yN0FNpJ3Cu
6wt0YrPMIC/IyYtI6mv5xhUzTddMQpKr3dSCdhHyhG3SrFGbJ4Ta3r5XIzo5xYI5
mfhABCpOxzaMSkciYDVIwIfBgveS11p9WLBBpOgBvHjpBZX8LoFkY4IpSgJwDwUQ
dBA2lUxgbGCuhUzP0439LnDex5WWbfN7noZxyfbYCGLujysT2Psapc07Jj+naBqj
U+5KAfhOZ/ZKaaqzm2z1XFsfEHz14gX8u7NPEjMbDZIHwJot/0Nb8Oe5ekD9Yy4h
T7f1axSrC52Lk0buaqXBi/ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393802487306788008592763115790861183667233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 15:59:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 15:59:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nelnet.cm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724475149980861923898994680820916280960860279416939467563368252884710098627515460136859881583181528084088297462983698026741274486360661901782167884454224332422508502329060218101194588082470084458337511796903667725499683968335852976900413888317619486639867380804799439898395399207174606231201444988614101036737941044487271096251550948988870429329664278052826759799925138837563990778786295605003217203102163673787286511731913012243890169011078261612191771055042389944553920403798817719213065057647664084907204315120878265609717496864983594565084337945500548692349710600815888222222938626436953959526336850656610747472872420040865529311448501462088531880478092404249013236845252823214724084084812044749097923679602671703745358821403250411995718693988899457273840539166877103343412075732295024044790428501863315439717336169332660245792286836263425208448746439736210615080516152584142368725653979638616127597440581732208683926697162793004850413601896482343077626849890630822448193459521167132101827849064604747864795095891900596675406827658935614666091475898866770641109582263292223067326581567550477631834935922422763721178437531639963302599215944249042533527745123514494627807421750311513771485350505929207099112821597484336085001669617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9a1695e78e654a8dda29a3ff4c80352b48b6210
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1902 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adidasub3.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agelocvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airmax-90.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexherrera.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andredoo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antivirussupporthelplinenumber.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azantak.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azino777-zerkalo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bangdolls.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatswirelessheadphones.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belgianlaekenoisclub.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobastores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bretjett.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessbad.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessoftheday.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesspirates.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessquantum.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentistswithmorepatients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortunaireagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gameisboon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeremedieschannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icsafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilmeteoo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ittechnician.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaleidoscopelodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luccarbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magilllegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mail-gruppofs.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moblecountylc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mooonpalacedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muabanbamien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nelnet.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pentabilites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polyhaeven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primehausplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prinstonhick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.railroasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rawxmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reynkkaneshiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reynkvisuals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rprugvarsjvgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciencilabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seekigcursh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sidhaig2003.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugarless.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehostelbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thpcod.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpnucdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfwisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yoskyy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adidasub3.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agelocvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airmax-90.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexherrera.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andredoo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antivirussupporthelplinenumber.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azantak.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azino777-zerkalo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangdolls.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatswirelessheadphones.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgianlaekenoisclub.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobastores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretjett.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessbad.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessoftheday.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesspirates.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessquantum.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistswithmorepatients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortunaireagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameisboon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeremedieschannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icsafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilmeteoo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ittechnician.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaleidoscopelodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luccarbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magilllegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-gruppofs.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moblecountylc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooonpalacedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muabanbamien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelnet.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentabilites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyhaeven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primehausplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prinstonhick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'railroasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawxmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reynkkaneshiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reynkvisuals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rprugvarsjvgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencilabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seekigcursh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidhaig2003.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarless.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehostelbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thpcod.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpnucdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfwisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoskyy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189ff49a5760000040300483046022100fc3ad1971db8a37738c6794c4cb2d7f3fa5b8ed57bdc49b2fe3f1a5971ccde17022100e2169e79c24d29aa53c2c85e8f68bb041c88338a916568e0deaac99d40feaf8d007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189ff49a5b5000004030047304502206e04ee29cc8313c3a97c25e4c464b761003248d0ee8b3208501731877733336d0221009f1bd72f00484f169431777ca7ff61f037c0dcd6d02c523a2f5eea9350532aab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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