71.ufc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:39:31:02:ab:95:33:5a:eb:a1:47:94:f5:23:1a:19:19:80 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=71.ufc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:39:31:02:ab:95:33:5a:eb:a1:47:94:f5:23:1a:19:19:80
Serial Number (int): 367910384678034589041952384239474757409152
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:5d:07:12:34:77:13:44:a6:29:7d:d2:db:c7:d2:1d:29:da:4c:c8
Fingerprint (sha256): 3b:78:d2:30:d8:25:c3:ba:21:08:69:bd:e6:19:73:79:da:9a:30:de:d9:67:38:ef:5d:f2:d8:1d:d3:29:41:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 71.ufc.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 71.ufc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

71.ufc.com
academi.ufc.com
admin.ufc.com
akun-gacor.ufc.com
alumni.gsm.cornell.edu
archive.enterprisecommunity.org
articles.catholicreview.org
arts-pan.bloomfield.edu
available.merid.org
bandar-togel.ctd.northwestern.edu
berlin.ufc.com
bioinformatics.gmu.edu
causedev1.worldvision.org
classic.ufc.com
democlient.bazaarvoice.com
demoslot.ufc.com
dev-live.ufc.com
dev.govdelivery.com
developers.velocityfrequentflyer.com
engage.nysenate.gov
engellab.labsites-dev.cshl.edu
epic.ufc.com
fukuoka.ufc.com
gaskemana.hoover.org
global.rutgers.ufc.com
gratisbet.ufc.com
grupa.ufc.com
hero.ufc.com
hoki.ufc.com
id.test.cms1.asa.uw.edu
id.ufc.com
idnscore.ufc.com
jackpot.ufc.com
jammy.ufc.com
javier.todb.ca.gov
joker123-resmi.ufc.com
joker123-slot.ufc.com
jrnvry.acacamps.org
judi-bola.ctd.northwestern.edu
larashare.ufc.com
load-test.ufc.com
ls.ufc.com
m.stage.extension.harvard.edu
marketing.ufc.com
mcc.test.sa.ucsb.edu
mcgregor.ufc.com
meet.thebroad.org
menang.ctd.northwestern.edu
mobile.test.cms1.asa.uw.edu
modules.ufc.com
moonfest.arizona.edu
mpo-slot-terbaru.ufc.com
mpo-slot.ufc.com
muhammad.ufc.com
nhacai.ufc.com
onoki.ufc.com
pepe.ufc.com
pkv-games-qq.ufc.com
pkv-games.ufc.com
pkvgame.ufc.com
pr-cfr-map-term.cfr.org
procomm2018.utoronto.ca
rtp-pgsoft.ufc.com
rtp-slot.ufc.com
rtpslot.ufc.com
sbobet2.test.webservices.umich.edu
scanme-gradstudies.ucdavis.edu
schedule.ufc.com
slot-2023.ufc.com
slot-pragmatic.ufc.com
slot2023.ufc.com
slot303.ufc.com
slotdana.ufc.com
slotgacor.religionnews.com
sportsbusinessacademy.stanford.edu
staredown.ufc.com
stats.ned.org
studioy.marsdd.com
sub.ufc.com
tokyo.ufc.com
top-slot138.ufc.com
toto-slot.gsm.cornell.edu
toto.ufc.com
uppercut.ufc.com
vang.ufc.com
w.doctorswithoutborders.org
www.alumni.gsm.cornell.edu
www.carolinacommitment.unc.edu
www.dev.oceana.org
www.energy-business-review.com
www.ethics.pantheon.berkeley.edu
www.infectiousdiseases.utoronto.ca
www.jobs.doctorswithoutborders.org
www.live.oceana.org
www.liver.arizona.edu
www.medicaloncology.utoronto.ca
www.redirects.merid.org
www.rocky.rockhurst.edu

Other certificates including the domain name ufc.com

(limited to 100 certificates)
au.ufc.com
3fadmin.govdelivery.com
facebook.bars.ufc.com
*.ufc.com
ftp.ufc.com
webmail.ufc.com
2021convention.ncte.org
au.ufc.com
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
live.ucdavis.edu
5766752193478656-fe4.pantheonsite.io
a.ns.christiancentury.org
ftp.ufc.com
academi.ufc.com
dev.ufc.com
communityadvancementfirm.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
on.ufc.com
a.ns.christiancentury.org
alumnimail.albion.edu
71.ufc.com
live.bme.cornell.edu
5766752193478656-fe4.pantheonsite.io
*.dev.ufc.com
5755424754106368-fe2.pantheonsite.io
jp.ufc.com
ftp.ufc.com
ufc.com
5766752193478656-fe4.pantheonsite.io
collector.ufc.com
5755424754106368-fe2.pantheonsite.io
ufc.com
asikmpo.discoverlosangeles.com
alumnimail.albion.edu
alumnimail.albion.edu
5766752193478656-fe4.pantheonsite.io
sandiegozoo100.org
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
bars.ufc.com
5766752193478656-fe4.pantheonsite.io
2fsupport.govdelivery.com
webmail.ufc.com
2fsupport.govdelivery.com
5755424754106368-fe2.pantheonsite.io
on.ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
sters.us
71.ufc.com
5755424754106368-fe2.pantheonsite.io
*.dev.ufc.com
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
*.ufc.com
on.ufc.com
on.ufc.com
webmail.ufc.com
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
webmail.ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
ufc.com
5755424754106368-fe2.pantheonsite.io
rewards.ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
jc.edu
ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
cci520-new.courtinnovation.org
jc.edu
2fsupport.govdelivery.com
collector.ufc.com
71.ufc.com
71.ufc.com
5766752193478656-fe4.pantheonsite.io
bars.ufc.com
5766752193478656-fe4.pantheonsite.io
*.ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
cervello.ufc.com
sandiegozoo100.org
1.govdelivery.com
sandiegozoo100.org
au.ufc.com

Certificate

The complete raw certificate details for 71.ufc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U
F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC
SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf
eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5
As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is
lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367910384678034589041952384239474757409152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 12:50:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 12:50:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '71.ufc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04446ac8a319d5b14a737c587fb7f56c3901b262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '71.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academi.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akun-gacor.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.enterprisecommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts-pan.bloomfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'available.merid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandar-togel.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlin.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioinformatics.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'causedev1.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classic.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'democlient.bazaarvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoslot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-live.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.velocityfrequentflyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engellab.labsites-dev.cshl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fukuoka.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaskemana.hoover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.rutgers.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratisbet.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupa.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hero.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoki.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.test.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idnscore.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackpot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jammy.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javier.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123-resmi.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123-slot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrnvry.acacamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judi-bola.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larashare.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'load-test.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ls.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.stage.extension.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcc.test.sa.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcgregor.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.thebroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menang.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.test.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modules.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonfest.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpo-slot-terbaru.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpo-slot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhammad.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhacai.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onoki.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepe.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkv-games-qq.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkv-games.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkvgame.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-cfr-map-term.cfr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procomm2018.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-pgsoft.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-slot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtpslot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet2.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanme-gradstudies.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schedule.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-2023.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-pragmatic.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot2023.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot303.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotdana.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotgacor.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbusinessacademy.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staredown.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.ned.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioy.marsdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyo.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top-slot138.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toto-slot.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toto.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uppercut.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vang.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carolinacommitment.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energy-business-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethics.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infectiousdiseases.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobs.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liver.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicaloncology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redirects.merid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocky.rockhurst.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185d4981ba600000403004630440220280f06a818717f151da4b5492516aae5945359986ca6a3d0944669f829fca19502203179315af88fd535833fee82549f190e28fa7d61cc500d3b37ecbd87269a8aed007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185d4981b85000004030046304402205e8d9bcfb7948f31a20ad7f8ba035ce74d47a746a107259102c8f99edd84b725022055e67c9365800a4eaa0a3546917c69b52c3732f89314691d753480fb43229b67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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