nfltop.us

Issued by R3

About this certificate

This digital certificate with serial number 03:35:dc:b4:98:e7:3e:3d:c6:ba:3e:93:e0:c7:da:21:17:6a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nfltop.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:dc:b4:98:e7:3e:3d:c6:ba:3e:93:e0:c7:da:21:17:6a
Serial Number (int): 279665191115844924313839579255514698159978
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:18:e2:d4:2d:0b:53:3a:11:d9:6b:e2:e5:2e:eb:b3:19:cb:2c:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:79:1b:75:ff:ec:71:f5:a7:1d:15:25:45:a6:d1:53:a9:43:1d:07
Fingerprint (sha256): 3b:08:6a:52:2c:bf:26:87:ea:dd:e7:93:58:c8:b2:68:4c:54:76:53:53:30:e8:13:b0:8d:ed:04:b3:03:25:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nfltop.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfltop.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9hwtek.com
*.alphastar.me
*.asapgetbetter.com
*.avss3.cc
*.avss5.cc
*.benetint.com
*.byethost6.co
*.clerigo.com
*.coalmine.com.au
*.cultivators.com.au
*.ditia.com
*.ejc.com.au
*.farbfetisch.de
*.flatpaneltv.com.au
*.innovation-america.org
*.inspireatrandom.co
*.jarrettrealestateteamoftexas.com
*.k12parentportal.com
*.liightinthebox.com
*.masdugrandvallon.com
*.mudieselclaim.com
*.mxwheels.com
*.nazzaphoto.com
*.newbalanve.com
*.newwaterbeautyspa.com
*.nfltop.us
*.nmichaelkors.com
*.ospital.com
*.partnersone.com
*.pdkfundraising.co.uk
*.pianoforspecialneeds.com
*.pine-this.org
*.pinkpuma.com
*.reelsigns.com
*.rentacloset.biz
*.replaceents.com
*.seaviewcabin.com
*.stockings-teases.com
*.sucesiones.com
*.sunlightgem.com
*.syniaty.com
*.theschematics.com
*.thiirty.com
*.tjxrewrads.com
*.toutube.cm
*.trove.com.au
*.veterasunited.com
*.willowpipe.com
*.wingfoss.com
*.wwwjoom.es
9hwtek.com
alphastar.me
asapgetbetter.com
avss3.cc
avss5.cc
benetint.com
byethost6.co
clerigo.com
coalmine.com.au
cultivators.com.au
ditia.com
ejc.com.au
farbfetisch.de
flatpaneltv.com.au
innovation-america.org
inspireatrandom.co
jarrettrealestateteamoftexas.com
k12parentportal.com
liightinthebox.com
masdugrandvallon.com
mudieselclaim.com
mxwheels.com
nazzaphoto.com
newbalanve.com
newwaterbeautyspa.com
nfltop.us
nmichaelkors.com
ospital.com
partnersone.com
pdkfundraising.co.uk
pianoforspecialneeds.com
pine-this.org
pinkpuma.com
reelsigns.com
rentacloset.biz
replaceents.com
seaviewcabin.com
stockings-teases.com
sucesiones.com
sunlightgem.com
syniaty.com
theschematics.com
thiirty.com
tjxrewrads.com
toutube.cm
trove.com.au
veterasunited.com
willowpipe.com
wingfoss.com
wwwjoom.es

Other certificates including the domain name nfltop.us

(limited to 100 certificates)
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
therealtoriblack.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
chilgozay.com
comobajar10kilos.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
goodreaads.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
free-amazon-gift-card-codes.com

Certificate

The complete raw certificate details for nfltop.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMyDCCC7CgAwIBAgISAzXctJjnPj3Guj6T4MfaIRdqMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTMxODMxMThaFw0yNDA2MTExODMxMTdaMBQxEjAQBgNVBAMT
CW5mbHRvcC51czCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK1mSa0G
dvz83XUZ6KiBzOopC1gdgEbrOT7DzRNOsDPUmYmuhdygQy0h/xljePEFz76sBm4+
xLikjU0Co1RwDQU7Qi4pnyVjK/LzV+olJ6eKGO0urBw9qO9Cscfu3B0HnZa0o+m7
4L9stgxyoYsIB8BADr/wEvsSao+Lv0qab+U4YNe27ughrQkJLgteCK0QszdtvXGo
1I4zsswv+3oLwJG2DXaqibexE1Npi3r+YiyKulNrCx/L5++U+5XQVY7/exWW57fu
sdWGLx/w5eEcojq5plolEILNqfag5o0i+dkH7l97NILweO41W/WDPTvsAOn1D9bS
J1+MB4ghFfT5Kf7QUM6z+IsaIBNJF1xUZCpg0gzpgDjE6E0t9uAEyuAq6KdLlqv9
pklhgfpagnzz1qOWdapETKhdb8WgNC0cqEPVBMj/rVOUJbooA/5hfC1UPc2CE2+I
h/nL5+hOo0wuSJ+uTggUD4pxZ5XaIqBw8YYLTHL0U17hQPKtvXRGfnxjPLCVfcZF
FDZiG25fskKmOVzAH7qNip+fPDh33hjKorv2uUDIpb6O433i27BUmBELysvajyPS
GpVQWxK+IiKXuXMopxH41V0Iixa3Jn1zwJ4/gXnkICFbKbg/M6APOkAeH9LnuVgk
NOIMEbvR9lV+5/GfxFBHvbZA88rmkOjqdaCHAgMBAAGjggj0MIII8DAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFAsY4tQtC1M6Edlr4uUu67MZyyy/MB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIG+wYDVR0RBIIG8jCCBu6CDCouOWh3dGVrLmNvbYIOKi5h
bHBoYXN0YXIubWWCEyouYXNhcGdldGJldHRlci5jb22CCiouYXZzczMuY2OCCiou
YXZzczUuY2OCDiouYmVuZXRpbnQuY29tgg4qLmJ5ZXRob3N0Ni5jb4INKi5jbGVy
aWdvLmNvbYIRKi5jb2FsbWluZS5jb20uYXWCFCouY3VsdGl2YXRvcnMuY29tLmF1
ggsqLmRpdGlhLmNvbYIMKi5lamMuY29tLmF1ghAqLmZhcmJmZXRpc2NoLmRlghQq
LmZsYXRwYW5lbHR2LmNvbS5hdYIYKi5pbm5vdmF0aW9uLWFtZXJpY2Eub3JnghQq
Lmluc3BpcmVhdHJhbmRvbS5jb4IiKi5qYXJyZXR0cmVhbGVzdGF0ZXRlYW1vZnRl
eGFzLmNvbYIVKi5rMTJwYXJlbnRwb3J0YWwuY29tghQqLmxpaWdodGludGhlYm94
LmNvbYIWKi5tYXNkdWdyYW5kdmFsbG9uLmNvbYITKi5tdWRpZXNlbGNsYWltLmNv
bYIOKi5teHdoZWVscy5jb22CECoubmF6emFwaG90by5jb22CECoubmV3YmFsYW52
ZS5jb22CFyoubmV3d2F0ZXJiZWF1dHlzcGEuY29tggsqLm5mbHRvcC51c4ISKi5u
bWljaGFlbGtvcnMuY29tgg0qLm9zcGl0YWwuY29tghEqLnBhcnRuZXJzb25lLmNv
bYIWKi5wZGtmdW5kcmFpc2luZy5jby51a4IaKi5waWFub2ZvcnNwZWNpYWxuZWVk
cy5jb22CDyoucGluZS10aGlzLm9yZ4IOKi5waW5rcHVtYS5jb22CDyoucmVlbHNp
Z25zLmNvbYIRKi5yZW50YWNsb3NldC5iaXqCESoucmVwbGFjZWVudHMuY29tghIq
LnNlYXZpZXdjYWJpbi5jb22CFiouc3RvY2tpbmdzLXRlYXNlcy5jb22CECouc3Vj
ZXNpb25lcy5jb22CESouc3VubGlnaHRnZW0uY29tgg0qLnN5bmlhdHkuY29tghMq
LnRoZXNjaGVtYXRpY3MuY29tgg0qLnRoaWlydHkuY29tghAqLnRqeHJld3JhZHMu
Y29tggwqLnRvdXR1YmUuY22CDioudHJvdmUuY29tLmF1ghMqLnZldGVyYXN1bml0
ZWQuY29tghAqLndpbGxvd3BpcGUuY29tgg4qLndpbmdmb3NzLmNvbYIMKi53d3dq
b29tLmVzggo5aHd0ZWsuY29tggxhbHBoYXN0YXIubWWCEWFzYXBnZXRiZXR0ZXIu
Y29tgghhdnNzMy5jY4IIYXZzczUuY2OCDGJlbmV0aW50LmNvbYIMYnlldGhvc3Q2
LmNvggtjbGVyaWdvLmNvbYIPY29hbG1pbmUuY29tLmF1ghJjdWx0aXZhdG9ycy5j
b20uYXWCCWRpdGlhLmNvbYIKZWpjLmNvbS5hdYIOZmFyYmZldGlzY2guZGWCEmZs
YXRwYW5lbHR2LmNvbS5hdYIWaW5ub3ZhdGlvbi1hbWVyaWNhLm9yZ4ISaW5zcGly
ZWF0cmFuZG9tLmNvgiBqYXJyZXR0cmVhbGVzdGF0ZXRlYW1vZnRleGFzLmNvbYIT
azEycGFyZW50cG9ydGFsLmNvbYISbGlpZ2h0aW50aGVib3guY29tghRtYXNkdWdy
YW5kdmFsbG9uLmNvbYIRbXVkaWVzZWxjbGFpbS5jb22CDG14d2hlZWxzLmNvbYIO
bmF6emFwaG90by5jb22CDm5ld2JhbGFudmUuY29tghVuZXd3YXRlcmJlYXV0eXNw
YS5jb22CCW5mbHRvcC51c4IQbm1pY2hhZWxrb3JzLmNvbYILb3NwaXRhbC5jb22C
D3BhcnRuZXJzb25lLmNvbYIUcGRrZnVuZHJhaXNpbmcuY28udWuCGHBpYW5vZm9y
c3BlY2lhbG5lZWRzLmNvbYINcGluZS10aGlzLm9yZ4IMcGlua3B1bWEuY29tgg1y
ZWVsc2lnbnMuY29tgg9yZW50YWNsb3NldC5iaXqCD3JlcGxhY2VlbnRzLmNvbYIQ
c2Vhdmlld2NhYmluLmNvbYIUc3RvY2tpbmdzLXRlYXNlcy5jb22CDnN1Y2VzaW9u
ZXMuY29tgg9zdW5saWdodGdlbS5jb22CC3N5bmlhdHkuY29tghF0aGVzY2hlbWF0
aWNzLmNvbYILdGhpaXJ0eS5jb22CDnRqeHJld3JhZHMuY29tggp0b3V0dWJlLmNt
ggx0cm92ZS5jb20uYXWCEXZldGVyYXN1bml0ZWQuY29tgg53aWxsb3dwaXBlLmNv
bYIMd2luZ2Zvc3MuY29tggp3d3dqb29tLmVzMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0
x70ADS1yb+H61BcAAAGOOUwzNgAABAMARzBFAiEA5dmmrRHZ5eBY2Vxdc2obBHUg
RBED+JrZ8Ya4QjsrmPkCIAwCb13fpV+jq+bdF4njgvONqvaG7oAmKPwGAccHDjZs
AHYAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGOOUwzRAAABAMA
RzBFAiBzc7BHoFKrjWYSsrogiK8JukK7VaGicyGS/I8/g7bVUQIhALzxu6o+py81
30Y3+HMZPU7LyKXECin3y2JR2VzNMGjpMA0GCSqGSIb3DQEBCwUAA4IBAQCRh5Q5
KlRTPBTfKUSkoEkDZR2Zb18CxLNQs2M8ufGntcT9DOTz61sWIKuCQ1jlJOX279gC
KmTOptTYfdeMxuNdw0IOykgL/lUe3meXSNAcE2ci95bY5RoWEEXmrhovNOb3Kf9I
Mpv/dfHqIr4jFhKJBP/Xb2W4Mnn8r3yESfwCul/WQAjWho6vH+Lov78jQ6q71+Mp
mmaBP/ew5qjG1IYgi1bK6SiWw8XjaHryN5FM4jxNO2EtD+gKMknh7yPeT3fjN88A
7/TY1FPdawqAjvoqxeP2KnRTbjTk1MzDe/3RruCfUy0fxtBJXU5XAN01SpDpIDf2
c9jOyipZF120ZAXq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArWZJrQZ2/PzddRnoqIHM
6ikLWB2ARus5PsPNE06wM9SZia6F3KBDLSH/GWN48QXPvqwGbj7EuKSNTQKjVHAN
BTtCLimfJWMr8vNX6iUnp4oY7S6sHD2o70Kxx+7cHQedlrSj6bvgv2y2DHKhiwgH
wEAOv/AS+xJqj4u/Sppv5Thg17bu6CGtCQkuC14IrRCzN229cajUjjOyzC/7egvA
kbYNdqqJt7ETU2mLev5iLIq6U2sLH8vn75T7ldBVjv97FZbnt+6x1YYvH/Dl4Ryi
OrmmWiUQgs2p9qDmjSL52QfuX3s0gvB47jVb9YM9O+wA6fUP1tInX4wHiCEV9Pkp
/tBQzrP4ixogE0kXXFRkKmDSDOmAOMToTS324ATK4Crop0uWq/2mSWGB+lqCfPPW
o5Z1qkRMqF1vxaA0LRyoQ9UEyP+tU5QluigD/mF8LVQ9zYITb4iH+cvn6E6jTC5I
n65OCBQPinFnldoioHDxhgtMcvRTXuFA8q29dEZ+fGM8sJV9xkUUNmIbbl+yQqY5
XMAfuo2Kn588OHfeGMqiu/a5QMilvo7jfeLbsFSYEQvKy9qPI9IalVBbEr4iIpe5
cyinEfjVXQiLFrcmfXPAnj+BeeQgIVspuD8zoA86QB4f0ue5WCQ04gwRu9H2VX7n
8Z/EUEe9tkDzyuaQ6Op1oIcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279665191115844924313839579255514698159978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 18:31:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 18:31:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfltop.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 707408493305911400055528187633661625587536852927011229478344458727300493169914071785690950363655079766918197114055985189170213157723197841033481835937326287659173207563311896256451408237152236899736327556044774166505128469835462602160091348784612025920763613221459084729877176208075353700261187960322168413477988154780569895180541087543049696757836223189997099423338638618211620316489097996691750250962158376658916451968953067160005353802290743431394491984289119302867036747658778320188596451716412649145067643328487819069185407184324453425238260476426009554542666694536587793918359226577703780261046080816681076200252953191557075005547222380138044499430575891088431049365586832488182260038897157409244060506980808736691009099748630216972099722744494693650107262606763418857856853440697451390249174586899916095663146427398380987974926691591467929271734537777159544665184760183372785821802067758919773418604726228303284212528205833741717623874128900798609710196586812170672741726215631950341390258078603561180829631618784891598758941538977221147022432855575447273507409472990441409302923972146170681903621860503665818552020862665189301994263689604266565562992765858482874487924940853116769847818128993243342929881775038163215730450567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b18e2d42d0b533a11d96be2e52eebb319cb2cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1778 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9hwtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alphastar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asapgetbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avss3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avss5.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benetint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byethost6.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clerigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coalmine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultivators.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ditia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ejc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farbfetisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flatpaneltv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innovation-america.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspireatrandom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jarrettrealestateteamoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k12parentportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masdugrandvallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mudieselclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mxwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nazzaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newbalanve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newwaterbeautyspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfltop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmichaelkors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnersone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdkfundraising.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pianoforspecialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pine-this.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkpuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reelsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentacloset.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.replaceents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seaviewcabin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockings-teases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sucesiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunlightgem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syniaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theschematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thiirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjxrewrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toutube.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veterasunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willowpipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wingfoss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwjoom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9hwtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphastar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asapgetbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avss3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avss5.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benetint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byethost6.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clerigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalmine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultivators.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farbfetisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatpaneltv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-america.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireatrandom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarrettrealestateteamoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12parentportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masdugrandvallon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudieselclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazzaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbalanve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newwaterbeautyspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfltop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmichaelkors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnersone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdkfundraising.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianoforspecialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pine-this.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkpuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reelsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentacloset.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replaceents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaviewcabin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockings-teases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sucesiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunlightgem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syniaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theschematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thiirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjxrewrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toutube.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterasunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingfoss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwjoom.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e394c33360000040300473045022100e5d9a6ad11d9e5e058d95c5d736a1b047520441103f89ad9f186b8423b2b98f902200c026f5ddfa55fa3abe6dd1789e382f38daaf686ee802628fc0601c7070e366c007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e394c3344000004030047304502207373b047a052ab8d6612b2ba2088af09ba42bb55a1a2732192fc8f3f83b6d551022100bcf1bbaa3ea72f35df4637f873193d4ecbc8a5c40a29f7cb6251d95ccd3068e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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