nfltop.us

Issued by R3

About this certificate

This digital certificate with serial number 03:2e:af:63:0b:05:54:da:ac:63:62:0e:53:a6:bd:27:9b:62 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nfltop.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:2e:af:63:0b:05:54:da:ac:63:62:0e:53:a6:bd:27:9b:62
Serial Number (int): 277222975833824172038354014924182645087074
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:5d:8b:f6:c8:35:41:5f:91:90:64:d9:5c:a6:21:6f:6d:30:5f:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:3a:a9:e0:4b:ce:f6:05:94:71:f5:de:4a:dd:25:aa:6f:4e:70:a4
Fingerprint (sha256): 31:65:d6:80:30:cf:5a:80:0b:ef:1f:ae:4d:d6:d7:9d:31:5b:2c:84:0d:c5:0f:ed:6b:a5:d2:af:87:7f:bd:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nfltop.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfltop.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9hwtek.com
*.asapgetbetter.com
*.avss3.cc
*.avss5.cc
*.benetint.com
*.byethost6.co
*.cultivators.com.au
*.demands.com.au
*.ditia.com
*.ejc.com.au
*.emergencyassistant.com
*.farbfetisch.de
*.frenchyporn.com
*.handcraftedwithcare.com
*.harvardclubs.com
*.innovation-america.org
*.inspireatrandom.co
*.liightinthebox.com
*.masdugrandvallon.com
*.menswearhoise.com
*.mudieselclaim.com
*.nazzaphoto.com
*.nfltop.us
*.nmichaelkors.com
*.norstartech.com
*.papermoney.com.au
*.paviions.com
*.performingartscenter.com
*.pianoforspecialneeds.com
*.pinkpuma.com
*.porno3d.com
*.quantrimang.co
*.rentacloset.biz
*.silerscript.com
*.smsnow.life
*.sportsstream.us
*.sucesiones.com
*.sugarrdaddy.com
*.tee-free.com
*.thiirty.com
*.tjxrewrads.com
*.trove.com.au
*.tubetents.com
*.uhsnic.com
*.veterasunited.com
*.weissfund.com
*.willowpipe.com
*.wingfoss.com
*.wwwjoom.es
*.zdix.me
9hwtek.com
asapgetbetter.com
avss3.cc
avss5.cc
benetint.com
byethost6.co
cultivators.com.au
demands.com.au
ditia.com
ejc.com.au
emergencyassistant.com
farbfetisch.de
frenchyporn.com
handcraftedwithcare.com
harvardclubs.com
innovation-america.org
inspireatrandom.co
liightinthebox.com
masdugrandvallon.com
menswearhoise.com
mudieselclaim.com
nazzaphoto.com
nfltop.us
nmichaelkors.com
norstartech.com
papermoney.com.au
paviions.com
performingartscenter.com
pianoforspecialneeds.com
pinkpuma.com
porno3d.com
quantrimang.co
rentacloset.biz
silerscript.com
smsnow.life
sportsstream.us
sucesiones.com
sugarrdaddy.com
tee-free.com
thiirty.com
tjxrewrads.com
trove.com.au
tubetents.com
uhsnic.com
veterasunited.com
weissfund.com
willowpipe.com
wingfoss.com
wwwjoom.es
zdix.me

Other certificates including the domain name nfltop.us

(limited to 100 certificates)
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
therealtoriblack.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
chilgozay.com
comobajar10kilos.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
goodreaads.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
free-amazon-gift-card-codes.com

Certificate

The complete raw certificate details for nfltop.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277222975833824172038354014924182645087074
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 19:36:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 19:36:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfltop.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816103572014171616221997972504556566250190937137471878184083212019176577146549281598356650030249913736624434324277656109108082149309969349871470383676609996195838379784653124639170777491543071374146004435043885721555988445564941962875447071648125112279195860006995896245348412503286116324470170852216059562903204989075981810983422984531194942594792498021758580021966839301303170089211828125413056690592433539346395782083716217320098848153554576950668593590592065613646178842763006941548326277776135517381643376302087203553528897338135656021269957747313024131969840242147290432357287133643826648569464258572269190083913818479555920977112295155779485270516830389127011772411531731230024432721317220348299543791575456822468314375648613847777844759676806550019643185606086155795533153422581168406045354204739054055942534090027930028966422036894506713535712969156781428133102759473775464338445366641587423920398407386634051212296973033950952055423809926207088031631916393040459826379646481243604030478395243299722484546143008722375114991054052828645687672566442326401392822585669163729479710720338754564334160324708433821391359283499282330330155744277552004018286951535350272056477766863012673754846873364105487790595745154266774239169907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa5d8bf6c835415f919064d95ca6216f6d305fa3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1740 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9hwtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asapgetbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avss3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avss5.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benetint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byethost6.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultivators.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demands.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ditia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ejc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emergencyassistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farbfetisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frenchyporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handcraftedwithcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harvardclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innovation-america.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspireatrandom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masdugrandvallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menswearhoise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mudieselclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nazzaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfltop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmichaelkors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norstartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papermoney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paviions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.performingartscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pianoforspecialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkpuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porno3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quantrimang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentacloset.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silerscript.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smsnow.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsstream.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sucesiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugarrdaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tee-free.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thiirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjxrewrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubetents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhsnic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veterasunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weissfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willowpipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wingfoss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwjoom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zdix.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9hwtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asapgetbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avss3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avss5.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benetint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byethost6.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultivators.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demands.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyassistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farbfetisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frenchyporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handcraftedwithcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-america.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireatrandom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masdugrandvallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menswearhoise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudieselclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazzaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfltop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmichaelkors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norstartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papermoney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paviions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performingartscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianoforspecialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkpuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porno3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantrimang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentacloset.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silerscript.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smsnow.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsstream.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sucesiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarrdaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tee-free.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thiirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjxrewrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubetents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsnic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterasunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weissfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingfoss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwjoom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdix.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f6e853118000004030047304502206a844a1a89a1f52cfe91e6b2f03283a1563a4b7db0bbbd33674de8d7db59f175022100a93abb7c01cf4008d3858563422f76964cfeb652dbebe0fd8f9a801a2a5039bf0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f6e8538d600000403004730450220240e1597eee748c4454f21714283fd3a8bb4050ffd4156a201b946bec7bf52f8022100dbc13598141fa8ea24d08259cad2e1decffedc5acbeb9ef25181badb2725219f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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