f02.chtah.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:b4:65:af:32:bc:4b:1a:d9:94:24:ab:ce:25:76:7c:09 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=f02.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:b4:65:af:32:bc:4b:1a:d9:94:24:ab:ce:25:76:7c:09
Serial Number (int): 306493919243509976734583885444650041244681
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:35:73:59:74:c6:26:57:26:ba:a1:4f:a3:42:95:7a:65:b4:eb:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:0e:e4:81:13:58:54:39:aa:87:03:87:3d:d9:8e:70:e9:d6:80:a7
Fingerprint (sha256): 2b:08:86:e2:32:67:13:98:8d:b2:12:e1:37:d6:85:36:4c:98:cb:83:b9:65:67:27:07:f3:c4:1e:8a:7e:ce:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate f02.chtah.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f02.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.comunicaciones-libertyseguros.es
f.e.bobbibrown.ch
f.e.bobbibrown.co.za
f.e.bobbibrown.com.hk
f.e.clinique.com.my
f.e.clinique.dk
f.e.clinique.no
f.e.clinique.se
f.e.esteelauder.ch
f.e.esteelauder.dk
f.e.esteelauder.no
f.e.esteelauder.se
f.e.footlocker.com
f.e.jomalone-me.com
f.e.jomalone.ch
f.e.maccosmetics.co.za
f.e.maccosmetics.dk
f.e.maccosmetics.no
f.e.maccosmetics.se
f.e.origins.dk
f.e.smashbox.dk
f.e.smashbox.it
f.ecrm.wynninsidermacau.com
f.email.account.sony.com
f.email.aerie.ae.com
f.email.brighthouseonline.co.uk
f.email.darphin.es
f.email.origins.es
f.email.sonyentertainmentnetwork.com
f.ib.searchbite.com
f.info.e-redbus.in
f.information.hindugroup.in
f.informe.digitalmedia-comunicacion.es
f.intl.ncl.com
f.knowledge.onlinecompliancepanel.net
f.l.soma.com
f.lastcallemail.com
f.mail.anntaylor.com
f.mail.anntaylorfactory.com
f.mail.cignattkonline.in
f.mail.loft.com
f.mail.loftoutlet.com
f.mail.louandgrey.com
f.mail.tataunistore.co.in
f.mailer.buzzalive.com
f.mailers.e-redbus.co
f.mailers.e-redbus.in
f.mailers.e-redbus.pe
f.mailers.redbus.id
f.mailers.redbus.my
f.mailers.redbus.sg
f.mailers.seatseller.travel
f.mailing.serpadres.es
f.mails.hindugroup.in
f.messenger.agilesaver.com
f.messenger.tutorialsaver.com
f.neimanmarcuschina.com.cn
f.neimanmarcusemail.com
f.new.bestloansdeal.com
f.news.careerpromedia.com
f.news.inditex.com
f.news.probatcheducate.com
f.news.taraqikiemi.com
f.news.tutorialvidsonline.com
f.newsletter.clarel.es
f.newsletter.dia.es
f.newsletter.laplazadedia.es
f.newsletter.mail-redbus.in
f.northerntoolemail.com
f.northerntoolmail.com
f.nycmail.nyandcompany.com
f.promo.payback.in
f.r.nyandcompany.com
f.r.restorationhardware.com
f.rue21email.com
f.satisfaccioncliente.dia.es
f.smehk.dbs.com
f.solicitud.digitalmedia-comunicacion.es
f.travel.mail-redbus.in
f.update.bestloansdeal.com
f.update.deal4loans.in
f.update.wishfinemailer.com
f.update.wishfinmailer.com
f.updates.tutorialsaver.com
f.utrechtcmail.com
f.welcomerue21.com
f02.chtah.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com

Certificate

The complete raw certificate details for f02.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7qDQ+TsBidp++s4kbtO
+cneJcOjWs37JWcMbZDjdHE9ozVPa7cW/SVQqyWPWmv0dTt8ILhPv0BoXV6cGJPC
XF8rvPgmOzE4ZzvLxPJuzVScLVVJc0gay6rnRbuiKCDlccyyeEZwQb8mef3Sudq8
5D/fyqua/SPvzlMZ0f0bPpdwZOTu26NaL10ZH0yWM/hD7hxbaxgIAGCoza8NoE82
5tiqkq75gUCb5Zgj3bUvt1vcmzU7Y/QXKGHaBDMc28DJ91I7DkQk5e1ww0FvTXii
6RaZNckdUuEyTqpaxeeAvke/Oe52XHGg/FiWln4Qlvrj886aKZaoMiPoVYwq2xtp
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306493919243509976734583885444650041244681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-02 14:31:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-31 14:31:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f02.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20668816576702438116017807948062890455507386629645101295785039778254609431794603211406449600204861447768888851758189713044679507279062398772180518065090781576714909045691614938034260661377943622084100131474070195306888043432756077561226468113876324873796854216203214484457633921370504540603927170080261281420026995550569979057666825098434065875846954918095256473815650967691774032064597092495725667278877229095352855985198874886915625873620425987098745420506971506850572401597416215811595651279069501994075160595261429451260481699261072666375646995693581389039667015067537424457914074779052508753799689789821922535851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d335735974c6265726baa14fa342957a65b4eb73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.comunicaciones-libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.clinique.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.footlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.jomalone-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.jomalone.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.origins.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.smashbox.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.smashbox.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ecrm.wynninsidermacau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.account.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.aerie.ae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.brighthouseonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.darphin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.origins.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.sonyentertainmentnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ib.searchbite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.info.e-redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.information.hindugroup.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.informe.digitalmedia-comunicacion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.intl.ncl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.knowledge.onlinecompliancepanel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.l.soma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.lastcallemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.anntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.anntaylorfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.cignattkonline.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.loftoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.louandgrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.tataunistore.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.buzzalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.e-redbus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.e-redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.e-redbus.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.redbus.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.redbus.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.redbus.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailers.seatseller.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailing.serpadres.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mails.hindugroup.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.messenger.agilesaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.messenger.tutorialsaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.neimanmarcuschina.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.neimanmarcusemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.new.bestloansdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.careerpromedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.inditex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.probatcheducate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.taraqikiemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.tutorialvidsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.clarel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.dia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.laplazadedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.mail-redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.northerntoolemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.northerntoolmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.nycmail.nyandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.promo.payback.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.nyandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.r.restorationhardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.rue21email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.satisfaccioncliente.dia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.smehk.dbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.solicitud.digitalmedia-comunicacion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travel.mail-redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.update.bestloansdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.update.deal4loans.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.update.wishfinemailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.update.wishfinmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.updates.tutorialsaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.utrechtcmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.welcomerue21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f02.chtah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000175899583960000040300483046022100d0aa62199f3222f4700b6d07eed1d2b4d45d8d4ca6b403c2a42a2194fa38461d022100b627f94c20b4b6a904959a96dedfb656e06a4fecd1c48040fffb4706fb18016e0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000175899583fd0000040300483046022100ee2a961399eb36cb56ede5a2e00b509ef3b17f21e4bcc660428af29c6c34463b022100c45f14d5174b61593c2825a84bde65f358a5b3cb966168b3b464bdf54cbcc78e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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