psufootball.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e0:db:b0:9c:5f:a4:b7:0f:e1:4b:3e:ac:34:bd:ac:80:d8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=psufootball.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:db:b0:9c:5f:a4:b7:0f:e1:4b:3e:ac:34:bd:ac:80:d8
Serial Number (int): 424964411864288751566662890083943025770712
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:94:e6:b4:41:42:28:b0:fb:65:97:ce:80:3a:2d:ce:e6:c8:4e:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 58:8d:33:4e:76:0a:c8:ff:39:bc:60:57:c2:6b:ed:e5:de:42:f6:10
Fingerprint (sha256): 33:48:b9:b4:2e:09:5f:6f:c1:50:71:7a:78:b4:ce:3c:45:6a:2e:8c:8d:b2:8c:01:f4:2b:3e:fb:81:23:84:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate psufootball.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psufootball.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.akoury.com
*.automaticwatches.com.au
*.bietkich.com
*.calopsitas.com
*.cassandras.com
*.cheatersshop.com
*.conmigo.com
*.controlmybeam.com
*.cyberformateur.com
*.dkcreativegroup.com
*.dresel.com
*.dslbillig.com
*.foreclosurers.com
*.freemarkets.eu
*.garywilliamsgolf.com
*.grivot.com
*.juwita.com
*.kavacha.com
*.kellsconnect.com.au
*.kurkcuoglu.com
*.lafantasia.com
*.leombre.com
*.locasto.com
*.maclaughlin.com
*.markplaats.de
*.meltedgemscosmetics.com
*.mirefugio.com
*.mtnlmumbai.net.in
*.naning.com
*.naturismemagazine.com
*.nayaritenlinea.com
*.painsinc.com
*.panfun.com
*.pickupparts.com
*.ponselmurah.com
*.prettyfitbox.com
*.pricingtag.com
*.psufootball.com
*.pwnthis.com
*.raptiviste.com
*.ruralnewspapers.com.au
*.rw-disigner.com
*.scalfari.com
*.sessionsstudio.com
*.shereff.com
*.shoplyfterm.com
*.southernbellecharm.com
*.uniboyaca.com
*.urbanrabbits.com
*.virgincapital.com
akoury.com
automaticwatches.com.au
bietkich.com
calopsitas.com
cassandras.com
cheatersshop.com
conmigo.com
controlmybeam.com
cyberformateur.com
dkcreativegroup.com
dresel.com
dslbillig.com
foreclosurers.com
freemarkets.eu
garywilliamsgolf.com
grivot.com
juwita.com
kavacha.com
kellsconnect.com.au
kurkcuoglu.com
lafantasia.com
leombre.com
locasto.com
maclaughlin.com
markplaats.de
meltedgemscosmetics.com
mirefugio.com
mtnlmumbai.net.in
naning.com
naturismemagazine.com
nayaritenlinea.com
painsinc.com
panfun.com
pickupparts.com
ponselmurah.com
prettyfitbox.com
pricingtag.com
psufootball.com
pwnthis.com
raptiviste.com
ruralnewspapers.com.au
rw-disigner.com
scalfari.com
sessionsstudio.com
shereff.com
shoplyfterm.com
southernbellecharm.com
uniboyaca.com
urbanrabbits.com
virgincapital.com

Other certificates including the domain name psufootball.com

(limited to 100 certificates)
psufootball.com
psufootball.com
2gfhjdfghjfg.online
psufootball.com
psufootball.com

Certificate

The complete raw certificate details for psufootball.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424964411864288751566662890083943025770712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 10:26:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 10:26:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psufootball.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651377266507207394462126697096380355745246217286909765970513482677627217727014271683905919258377961079113860356083490178039199567482843915691391508067942866546526211176413306914534035309344409401539473359498611454641725593430381278825151552739984540723015555268505332440505642658580876878701713710665878330160520789724064604315379722091040174559986588718770323448253273502926495422029566762601967667349961593504772284499631844726808927525754978916185325775536362424253596496297609402303125276945373185844693644618729749094913814908849155198944913937320612860136138810301795777430152641733886334489475535229802153765068468455854537382017995115984530237379138924017252958111960761857542278799705331519790399207692593240751243832843215822246126605456869518764245088394743970065096234155241368856735819474737632818058085997499303932041169024619592268884131110781329647658117262258056653595217134448095499603882667660554393337488456581868588938982933813453610981150827679717059575645035565747203912709120520029802941990132707913428319916723272249654176529299544091080949636093278955257130492429682088543403480887058783793486984481214547544950731790598719993264950679378799871068786447697710332960025477218317362365445266092735444592651637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d294e6b4414228b0fb6597ce803a2dcee6c84e33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1786 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akoury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automaticwatches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bietkich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calopsitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cassandras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheatersshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conmigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controlmybeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyberformateur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dkcreativegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dresel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dslbillig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foreclosurers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemarkets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garywilliamsgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grivot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juwita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kavacha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kellsconnect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurkcuoglu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lafantasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leombre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locasto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maclaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markplaats.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meltedgemscosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirefugio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtnlmumbai.net.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturismemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nayaritenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.painsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pickupparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ponselmurah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prettyfitbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pricingtag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psufootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pwnthis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raptiviste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruralnewspapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rw-disigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scalfari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sessionsstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shereff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoplyfterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southernbellecharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniboyaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanrabbits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virgincapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akoury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automaticwatches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bietkich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calopsitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassandras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheatersshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conmigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlmybeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberformateur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkcreativegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dslbillig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosurers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemarkets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garywilliamsgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grivot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juwita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kavacha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellsconnect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurkcuoglu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafantasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leombre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locasto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maclaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markplaats.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltedgemscosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirefugio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtnlmumbai.net.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturismemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nayaritenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickupparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponselmurah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prettyfitbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricingtag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psufootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwnthis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raptiviste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruralnewspapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rw-disigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scalfari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessionsstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shereff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoplyfterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernbellecharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniboyaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanrabbits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virgincapital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9897607b0000040300483046022100e899599883389564c03fc0b692189cf87d15ada9ba08a61584a7615b2a1df0980221009b8ffe861e4d203f76c8f415d7a6a753adae25c28785008c6aabee7d66e5e2ac007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a989760750000040300483046022100e575708f929a782cc93394fb31654c0129904ba56354d75c00361a31a077271c0221009e6622b0cafb3b86b08874ff2cbf82258df6e3827fa994166366f1d22278f4d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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