f01.chtah.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f8:8b:ad:3b:4f:fa:51:ef:13:7e:e7:ab:28:df:cd:75:a1 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=f01.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f8:8b:ad:3b:4f:fa:51:ef:13:7e:e7:ab:28:df:cd:75:a1
Serial Number (int): 433024832885203017115453250354381360821665
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:25:40:e5:ba:51:06:6a:b7:eb:ce:0f:67:1b:6c:dc:7d:d9:9c:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:78:eb:0b:3f:7a:7a:14:6e:68:26:17:58:f1:44:a7:f2:a4:64:bc
Fingerprint (sha256): 38:0c:54:6f:70:3b:b5:55:b0:9b:0d:96:bd:42:f3:47:8c:29:4a:ff:3d:8c:1a:4f:a9:93:26:ff:b1:3a:73:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f01.chtah.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f01.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.advisor.fundsindia.com
f.business.adt.com
f.comunicacion.vodafone.es
f.cotydigital.com
f.cotyemail.com
f.crm.homethycare.com
f.ctm.ralphlauren.co.jp
f.e.adolfodominguez.com
f.e.barenecessities.com
f.e.betts.com.au
f.e.bobbibrown.com.au
f.e.bookonmail.com
f.e.burlingtoncoatfactory.com
f.e.cliniqueitaly.it
f.e.crystalholidays.co.uk
f.e.esteelauder.com.au
f.e.esteelauder.it
f.e.golden1.com
f.e.hollandamerica.com
f.e.lightinthebox.com
f.e.maccosmetics.ch
f.e.maccosmetics.it
f.e.miniinthebox.com
f.e.starbucks.co.uk
f.e.swinton.co.uk
f.e.thomsonslm.co.uk
f.edm.sgx.com
f.email.bullseyeinsurance.co.uk
f.email.club-together.org
f.email.divainsurance.co.uk
f.email.equiniti.com
f.email.freepeople.com
f.email.freepeoplewholesale.com
f.email.its4me.co.uk
f.email.lloydstsbsharedealing.com
f.email.motorinsurancewarehouse.com
f.email.pocruises.com
f.email.selftrade.co.uk
f.email.shopterrain.com
f.email.swinton.co.uk
f.email.theinsuranceline.co.uk
f.equity.fundsindia.com
f.i.rba.es
f.ikea-asia.com
f.mail.architectsjournal.co.uk
f.mail.architectural-review.com
f.mail.broadcastnow.co.uk
f.mail.cnplus.co.uk
f.mail.dominospizza.es
f.mail.drapersonline.com
f.mail.ferrybooker.com
f.mail.ferrycheap.com
f.mail.ferryonline.co.uk
f.mail.ferrysavers.com
f.mail.fostershollywood.es
f.mail.hsj.co.uk
f.mail.hvnplus.co.uk
f.mail.leisuredirection.co.uk
f.mail.lgcplus.com
f.mail.meed.com
f.mail.mrw.co.uk
f.mail.nce.co.uk
f.mail.nursingtimes.net
f.mail.racplus.com
f.mail.retail-jeweller.com
f.mail.retail-week.com
f.mail.screendaily.com
f.mail.shots.net
f.mailer.fundsindia.com
f.mailer.fundsindiaadvisor.com
f.news.1800getlens.com
f.news.bestbuyeyeglasses.com
f.news.contactsamerica.com
f.news.eyetest.com
f.news.justlenses.com
f.news.lens.com
f.news2.lens.com
f.newsletter.adams.es
f.newsletter.sky.com
f.newsletters.hcf.com.au
f.promotions.fundsindia.com
f.research.fundsindia.com
f.safehome.adt.com
f.signup.fundsindia.com
f.support.fundsindia.com
f.webmail.axa.ie
f01.chtah.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com

Certificate

The complete raw certificate details for f01.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SCkX2jiWVnOxb0vM3gA
NHpdrGHfWzd2OWenIP3PjraHxDuflO/ka6mmue3PO8BWh5qO2np/EUjAGhhyv+sA
qdf22jRIo+LwrDGD8ZDNWXB9KEsAm4+WIrbhorLq/512KGUIg7gFWW6iuGISW/33
dCsOMFv6HEVVnDN3vREcxCz/yEveCxXXAaJe10V9EFrioWjkeLQMYkGnmxkuXVJE
SpTnbWBU30m9g9MSqokceWJevDxHMnbrr6n4poZVJt+n5ZWEmlmQYwFxoXoaHI4W
n/9yqVwyxEg/Z+ka7+iqncVVHWxdfPSrL9svrWxav2QjIQDEDWIfecYcIM6QM+MJ
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433024832885203017115453250354381360821665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-25 23:43:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-23 23:43:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f01.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27914761807480871551017168392498787599959008400386301139070542296967076775361528135311778926679911714644785775703295897150017284949208849212470001192813217328921457028248526186514626522397025356752974106228197258636845695138170620246331261619112696938474081537562492494552684909359986985346353500216375606561856054251145082882098259002731212068400040440823815805167908646492010333722111101914809693237193988309904314032759605214997572302781211079426638134822655535367828469032896817411400348334925900988385376053141924045724212103912848219361013818527969713502463482248972074128413507265600193607588690522716256799041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a62540e5ba51066ab7ebce0f671b6cdc7dd99c27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2065 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.advisor.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.business.adt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.comunicacion.vodafone.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cotydigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cotyemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.crm.homethycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ctm.ralphlauren.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.adolfodominguez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.barenecessities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.betts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bookonmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.burlingtoncoatfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.cliniqueitaly.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.crystalholidays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.golden1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.hollandamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.lightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.miniinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.starbucks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.swinton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.thomsonslm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.edm.sgx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.bullseyeinsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.club-together.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.divainsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.equiniti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.freepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.freepeoplewholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.its4me.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.lloydstsbsharedealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.motorinsurancewarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.pocruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.selftrade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.shopterrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.swinton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.theinsuranceline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.equity.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.i.rba.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ikea-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.architectsjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.architectural-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.broadcastnow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.cnplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.dominospizza.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.drapersonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrybooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrycheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferryonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrysavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.fostershollywood.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.hvnplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.leisuredirection.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.lgcplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.meed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.mrw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.nce.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.nursingtimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.racplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.retail-jeweller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.retail-week.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.screendaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.shots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.fundsindiaadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.1800getlens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.bestbuyeyeglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.contactsamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.eyetest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.justlenses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.lens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news2.lens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.adams.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.hcf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.promotions.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.research.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.safehome.adt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.signup.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.support.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.webmail.axa.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f01.chtah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000179a6205a6700000403004630440220049e9f661066b5b5f6b9713bba5cd57f1ddb4cb9f00cba1e70db0c36454b110b022026c813d491f5129dda371e551f7b4b261647e89b752337543212c3a61a59967c007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179a6205a670000040300463044022035d0cb56a31493ef7eb28bac5482a2cd760dbcf4eb315c8288a6bdc04927978c0220741fd17e9f45c8889677d16c4412556b99153726fdbca3c1b2af2d9e6561c351
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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