nccaa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4b:90:d8:9b:6a:2a:e9:fe:df:38:b2:a5:1d:e8:55:45:cf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nccaa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:90:d8:9b:6a:2a:e9:fe:df:38:b2:a5:1d:e8:55:45:cf
Serial Number (int): 287050568834050551154338903153778802116047
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:f0:7f:01:14:12:a1:c3:69:f1:18:55:57:67:22:cf:73:b1:47:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:bf:78:8e:85:0d:1c:89:21:8e:9f:3d:16:b5:ad:a2:73:bb:b1:31
Fingerprint (sha256): 35:70:13:80:9d:6c:17:72:87:54:52:66:83:ea:cf:2b:54:af:69:f7:df:63:58:ef:86:88:8d:23:52:77:4f:91

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nccaa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nccaa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abordo.com
*.acuarismo.com
*.bafaj.com
*.chajon.com
*.chisaki.com
*.colebrooke.com
*.consalud.com
*.craisglist.co
*.derlta.com
*.drog.com
*.dterra.com
*.ebayy.ca
*.ehland.com
*.everthingbutt.com
*.focusedfm.au
*.freemilfsearch.com
*.hejna.com
*.hinet.au
*.iflswa.com
*.inaby.com
*.kakanj.com
*.kostenmanagement.com
*.krazycouponlady.co
*.lapista.com
*.laure.com
*.miaso.com
*.missingpassword.com
*.mrbenbrown.com
*.mysticmetals.com
*.nccaa.com
*.nyankichi.com
*.payonee.com
*.podiu.co
*.pornmedium.co
*.rcpeasy.com
*.realcucktube.com
*.sadiedeyscafe.com
*.saibinden.com
*.samsung-europe.com
*.samuela.com
*.sanapdeal.com
*.saracini.com
*.sellerhere.com
*.texasmedicaid.com
*.tonogratis.com
*.upmassageatlanta.com
*.vakantieappartementen.com
*.vasuda.com
*.vehicalehistory.com
*.zwgay.com
abordo.com
acuarismo.com
bafaj.com
chajon.com
chisaki.com
colebrooke.com
consalud.com
craisglist.co
derlta.com
drog.com
dterra.com
ebayy.ca
ehland.com
everthingbutt.com
focusedfm.au
freemilfsearch.com
hejna.com
hinet.au
iflswa.com
inaby.com
kakanj.com
kostenmanagement.com
krazycouponlady.co
lapista.com
laure.com
miaso.com
missingpassword.com
mrbenbrown.com
mysticmetals.com
nccaa.com
nyankichi.com
payonee.com
podiu.co
pornmedium.co
rcpeasy.com
realcucktube.com
sadiedeyscafe.com
saibinden.com
samsung-europe.com
samuela.com
sanapdeal.com
saracini.com
sellerhere.com
texasmedicaid.com
tonogratis.com
upmassageatlanta.com
vakantieappartementen.com
vasuda.com
vehicalehistory.com
zwgay.com

Other certificates including the domain name nccaa.com

(limited to 100 certificates)
nccaa.com
perra.com
*.abordo.com
nccaa.com
nccaa.com
nccaa.com
unlockiphone6.com
nccaa.com
nccaa.com
samanali.com
caminaconmigo.com
nccaa.com
caminaconmigo.com

Certificate

The complete raw certificate details for nccaa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287050568834050551154338903153778802116047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 20:12:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 20:12:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nccaa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897201130452595229252408778037955919731971588410238611421259706572001647316061333430013493958180807087777232314492113748260167389534239860964138424213903636406569351514392510048263597665862747580065945797979571708755635271630873229837092684077962144606449485317655497485018848943035546768007712230025211113574615212081111948314288243584352210867035762860604122808551711334234855404322773250066381550083117097915685378470172496454945422089934314249024829726458312091569685119365949777643901100924088801493665302623635336509059386849421546667017026328362088596180420890753298770612359388992855278336531838283088954668692834677895227210212201331765658429533262215155030190447642446353605470730842882951133145360707059617936126290109582017796732703070768024185416277049742693197549460355689650897081530924067182516037511355453333464878162574260757367294903900954313248220817197446129563037722879901650201223147173392359428862000978505903939155716784640942147518580465813796840414217861058226094206431009433262447446043586393544486116518710080062834490727063444691643652029972272028620671790365421921963223914719478594906631709200469612278636069324326278895708446933650215294552146006797530562259168687441365645232630839141303700066194193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2f07f011412a1c369f11855576722cf73b147e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abordo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acuarismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bafaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chajon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chisaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colebrooke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craisglist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derlta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebayy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everthingbutt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.focusedfm.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemilfsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hejna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hinet.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iflswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kakanj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kostenmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krazycouponlady.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miaso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.missingpassword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrbenbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysticmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyankichi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payonee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podiu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornmedium.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcpeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realcucktube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sadiedeyscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saibinden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsung-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanapdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saracini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sellerhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texasmedicaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonogratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upmassageatlanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vakantieappartementen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vasuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vehicalehistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zwgay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abordo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuarismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bafaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chajon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chisaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colebrooke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craisglist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derlta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebayy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everthingbutt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focusedfm.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemilfsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hejna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hinet.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iflswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kakanj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostenmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krazycouponlady.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miaso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missingpassword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrbenbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysticmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyankichi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payonee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podiu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornmedium.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcpeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcucktube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadiedeyscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saibinden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanapdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saracini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellerhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasmedicaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonogratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upmassageatlanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakantieappartementen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehicalehistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwgay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae7effba50000040300483046022100dee0df3fc7ced9243b50de7edb71cc5bf985e2a1a99401c32702a3da468c867a022100e4987c39c973fd4535e89c56b5c7fbc1d24464c9df49be23cfc75d1bd22819570076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae7effbb200000403004730450220406cddf8c6b979c0ddcb9b8ed580e78ce20b8b38bdb268cb829585093ce9a92f022100cfa20a3be7b7bb4a3649e63678a1e98414b64ab49424a9694a8cd52ae462202a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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