nccaa.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6e:32:c8:05:72:9b:85:d1:97:c0:eb:a4:73:ee:c0:c9:04 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nccaa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6e:32:c8:05:72:9b:85:d1:97:c0:eb:a4:73:ee:c0:c9:04
Serial Number (int): 385947704057997360824952459777016491723012
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:ec:98:74:eb:0a:a6:37:eb:63:ae:ea:0e:2d:9c:5d:e3:9c:2f:af
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0c:79:ec:ce:32:7b:97:e5:97:69:f2:eb:e7:ad:77:5b:a0:f3:cf:63
Fingerprint (sha256): 3e:c8:02:31:39:df:0a:45:c4:0d:7e:12:6e:9f:75:e4:87:6b:79:47:45:75:81:83:b1:a7:2f:a1:f2:b4:fd:6c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nccaa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nccaa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2xingchen.com
*.advanquest.com
*.alabama.cafe
*.beneficios-sociales-ar.com
*.brime.live
*.c9nn.com
*.checkrain.pro
*.cymplermails.com
*.dnewszone.com
*.edmans.com
*.eroerotengoku.com
*.facewwbook.com
*.find-digitalmarketingjobs-es.info
*.floridadepartmentofcorrections.com
*.gsmempire.com
*.hairgrowfast.com
*.hmanhwan.net
*.iraqi.church
*.jairocarioca.com
*.jamesvillepizza.com
*.kirvin.com
*.laid.live
*.marks.repair
*.mysticmetals.com
*.nationalgeographicwild.com
*.nccaa.com
*.northcarolina.direct
*.parafuso.com
*.physio.cards
*.polygonhomeloans.com
*.porno-moms.com
*.priceless-poses-photography.com
*.profesjonal.com
*.protargets.com
*.shangbaozhai2012.com
*.sherwimwilliams.com
*.solar-movie.pro
*.springfield.clothing
*.stvincentcatholicchurch.org
*.superiorlocal.com
*.tacoma.direct
*.thathotelwasgood.com
*.thewebisnice.com
*.top1-seo-service.com
*.vote.gripe
*.why-youmad.com
*.xsm18.com
*.xsm93.com
*.xubep1.com
*.ygf144.com
2xingchen.com
advanquest.com
alabama.cafe
beneficios-sociales-ar.com
brime.live
c9nn.com
checkrain.pro
cymplermails.com
dnewszone.com
edmans.com
eroerotengoku.com
facewwbook.com
find-digitalmarketingjobs-es.info
floridadepartmentofcorrections.com
gsmempire.com
hairgrowfast.com
hmanhwan.net
iraqi.church
jairocarioca.com
jamesvillepizza.com
kirvin.com
laid.live
marks.repair
mysticmetals.com
nationalgeographicwild.com
nccaa.com
northcarolina.direct
parafuso.com
physio.cards
polygonhomeloans.com
porno-moms.com
priceless-poses-photography.com
profesjonal.com
protargets.com
shangbaozhai2012.com
sherwimwilliams.com
solar-movie.pro
springfield.clothing
stvincentcatholicchurch.org
superiorlocal.com
tacoma.direct
thathotelwasgood.com
thewebisnice.com
top1-seo-service.com
vote.gripe
why-youmad.com
xsm18.com
xsm93.com
xubep1.com
ygf144.com

Other certificates including the domain name nccaa.com

(limited to 100 certificates)
nccaa.com
perra.com
*.abordo.com
nccaa.com
nccaa.com
nccaa.com
unlockiphone6.com
nccaa.com
nccaa.com
samanali.com
caminaconmigo.com
nccaa.com
caminaconmigo.com

Certificate

The complete raw certificate details for nccaa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385947704057997360824952459777016491723012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 20:14:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 20:14:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nccaa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753448253581257130421747097191085843221714742992041991866297969658030333735924527829311964976950317299138006556721326665776923406737189465528886008746148319216055603074193478612196459879167956782117839982753051286252732431469385053137250356181914895364121676284882920938254847254289774094374276003007234090707295998621098708133113015288446421783755849121464560429816209234338078940525825101544808733033862815846400085460855279261417307803021356073904321635577688112271008427885971846270977495854217962390360892437707396575698572936985002451796531649379305461475644301028935249854315195526124299534297251060862449040915411849162623469377731718980092088485836380415898401940730818378609027248420356985763553567172771981138817336602556149546231254143397087147236883194174586250160381234642751844830034001074296887358066062288280960339590450835651148046854356611095619657454461973366389515390068096575763670092711054103108861552600999946554594256477866153857491681946823259474940200733957268078102723861408447336165053872599722371029876769227495237915920776082379819440803409872872519935195325480391518583262847628640521677100577111608728787216608054071503953701031507492524246533902864701967160497735883703321590761748372871295611819279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05ec9874eb0aa637eb63aeea0e2d9c5de39c2faf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2xingchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advanquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alabama.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beneficios-sociales-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brime.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c9nn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkrain.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cymplermails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnewszone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eroerotengoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facewwbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.find-digitalmarketingjobs-es.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floridadepartmentofcorrections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsmempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairgrowfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hmanhwan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iraqi.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jairocarioca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamesvillepizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laid.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marks.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysticmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalgeographicwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northcarolina.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parafuso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.physio.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polygonhomeloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porno-moms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.priceless-poses-photography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profesjonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protargets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shangbaozhai2012.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherwimwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solar-movie.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springfield.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stvincentcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superiorlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tacoma.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thathotelwasgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewebisnice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.top1-seo-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vote.gripe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.why-youmad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsm18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsm93.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xubep1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ygf144.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2xingchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabama.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneficios-sociales-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brime.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c9nn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkrain.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cymplermails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnewszone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroerotengoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facewwbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'find-digitalmarketingjobs-es.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridadepartmentofcorrections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsmempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairgrowfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmanhwan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iraqi.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jairocarioca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesvillepizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laid.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marks.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysticmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeographicwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolina.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafuso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physio.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polygonhomeloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porno-moms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priceless-poses-photography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesjonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protargets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shangbaozhai2012.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherwimwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-movie.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springfield.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacoma.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thathotelwasgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewebisnice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top1-seo-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.gripe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'why-youmad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsm18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsm93.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xubep1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygf144.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d51ece2e60000040300483046022100dd7575945291b506900dc18f5d933d4c7144d7a9d3fc77ea91da3a9cc2bf16d6022100f6971e6e97d189b69debb871cd40dd285aaaf9299fb857270518e3f254f093900077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d51ece2dd0000040300483046022100f5e99e178073fde68e2a0d77721d92830e4b8b9b39a109a085a56d6bd363386002210094d60d893bf0d48bd787b8724d485a25425d447c1b225722af4d7d536b992a9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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