nfhslearm.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e8:ae:0c:33:e9:bb:4c:72:6c:e4:50:ca:9d:ff:28:e8:ec was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nfhslearm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:ae:0c:33:e9:bb:4c:72:6c:e4:50:ca:9d:ff:28:e8:ec
Serial Number (int): 340513715952688359010807556025806219700460
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:80:06:9f:72:0f:55:70:a3:0b:f6:43:6a:af:ad:51:33:a7:f0:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:f4:ba:2e:1c:2b:e4:97:16:cb:db:65:db:97:9b:47:4a:cb:70:1f
Fingerprint (sha256): 3f:9e:56:0c:fe:84:13:3c:8c:86:f4:13:9f:04:c6:d1:e4:3a:b9:f6:09:5c:2d:08:d3:7d:62:09:98:23:23:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nfhslearm.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfhslearm.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.78minerals.com
*.alyexpres.com
*.amazing-movies.xyz
*.antahabibi49cx26.com
*.arkgamepedia.com
*.ashbyproductionservices.com
*.autodiagnosticobd.com
*.autoevoluti.com
*.benderandbender.com
*.biggen.com
*.bigtitegirls.com
*.botwny.org
*.brrokdale.com
*.calcoloimuweb.com
*.cdchangtong.com
*.citizenswatches.com
*.claudebernard.com
*.clovisshropshire.com
*.connectmlsmredllc.com
*.coronadelsolhighschool.org
*.cryptowin.site
*.eatlunchwithme.com
*.ew43ultipro.com
*.fortwaynerotary.org
*.foxvallaycoins.com
*.friendlines.com
*.fsoufsou.co
*.graciosahotel.com
*.hardencreek.com
*.heathlyliving.com
*.kineticinternetdeal.com
*.littleleaf.com.au
*.loanstarlegal.org
*.mail-proton.me
*.mkios.com
*.movies123.page
*.ndexmovie.biz
*.nfhslearm.com
*.offiemax.com
*.onehansplace.com
*.polagacor.club
*.sgormanplastering.co.uk
*.tinatinyhomes.com
*.trasnsunion.com
*.universaldescramblers.com
*.valleychildrenshospital.com
*.video2mp3.cc
*.walmarygift.com
*.wordinasentence.com
*.xmanster.com
78minerals.com
alyexpres.com
amazing-movies.xyz
antahabibi49cx26.com
arkgamepedia.com
ashbyproductionservices.com
autodiagnosticobd.com
autoevoluti.com
benderandbender.com
biggen.com
bigtitegirls.com
botwny.org
brrokdale.com
calcoloimuweb.com
cdchangtong.com
citizenswatches.com
claudebernard.com
clovisshropshire.com
connectmlsmredllc.com
coronadelsolhighschool.org
cryptowin.site
eatlunchwithme.com
ew43ultipro.com
fortwaynerotary.org
foxvallaycoins.com
friendlines.com
fsoufsou.co
graciosahotel.com
hardencreek.com
heathlyliving.com
kineticinternetdeal.com
littleleaf.com.au
loanstarlegal.org
mail-proton.me
mkios.com
movies123.page
ndexmovie.biz
nfhslearm.com
offiemax.com
onehansplace.com
polagacor.club
sgormanplastering.co.uk
tinatinyhomes.com
trasnsunion.com
universaldescramblers.com
valleychildrenshospital.com
video2mp3.cc
walmarygift.com
wordinasentence.com
xmanster.com

Other certificates including the domain name nfhslearm.com

(limited to 100 certificates)
brrokdale.com
benderandbender.com
bungalowsbertys.com
brrokdale.com
calcoloimuweb.com
nfhslearm.com
arttattoos.com
friendlines.com
nfhslearm.com
nfhslearm.com
nfhslearm.com
urefund.com

Certificate

The complete raw certificate details for nfhslearm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340513715952688359010807556025806219700460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 00:06:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 00:06:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfhslearm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 951716232801005849679550974791187576867947830153162039290246969844719507700917085590853661215978705192702943812703684897821940175072608361715567250603267679155693133501466884466701229623652206577931042633243392786850795286310535124349404169781692640699535550711848258019635945975693070206715306229575891621857353701449216036209918494990596333013179630749900851178493973724174913933391780538548108324363423705176581907723765351275473852114005702487532578043898100091059090768753882841049472763736279398068189234582368582941118181277782214015893129706746423638067936862693364509685376552508867996075658707812671952856196486013417953217675017551178196466348868723325990274015729832617302415797201453317674833360433326723283159526002643437022155512863368507224588343516985683747098528122149469327024108223708930707736216162873035887152326538768522314809886927769582983454700687474270190204943144084855136064366295038780728398175338705257495739313792436556322987518370353362448899775961007501008609665055016629369285751600399319313808946379810174016262917876540749315177477181073076753074315438100715865879678000038655313145926523338580055506700936283104788902426667608609048069566491412662909301519034718895901327203401856053665574352957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc80069f720f5570a30bf6436aafad5133a7f066
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1970 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.78minerals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alyexpres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazing-movies.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antahabibi49cx26.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkgamepedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashbyproductionservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autodiagnosticobd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoevoluti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benderandbender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigtitegirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botwny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brrokdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calcoloimuweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdchangtong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citizenswatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claudebernard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clovisshropshire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectmlsmredllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coronadelsolhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptowin.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatlunchwithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ew43ultipro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortwaynerotary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxvallaycoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsoufsou.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graciosahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardencreek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heathlyliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kineticinternetdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littleleaf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loanstarlegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mail-proton.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movies123.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ndexmovie.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfhslearm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offiemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onehansplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polagacor.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sgormanplastering.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinatinyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trasnsunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universaldescramblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valleychildrenshospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video2mp3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmarygift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wordinasentence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xmanster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '78minerals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alyexpres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazing-movies.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antahabibi49cx26.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkgamepedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashbyproductionservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiagnosticobd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoevoluti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benderandbender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigtitegirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botwny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brrokdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcoloimuweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdchangtong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenswatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claudebernard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clovisshropshire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectmlsmredllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronadelsolhighschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptowin.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatlunchwithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew43ultipro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortwaynerotary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxvallaycoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsoufsou.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graciosahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardencreek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heathlyliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kineticinternetdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littleleaf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanstarlegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-proton.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies123.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndexmovie.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfhslearm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offiemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onehansplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polagacor.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgormanplastering.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinatinyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trasnsunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universaldescramblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleychildrenshospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video2mp3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmarygift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordinasentence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmanster.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e6dff1ceb0000040300473045022100bc44ab2ce76692857f81e4a6abdc0cd9b4a0a103e2c0546cd4e8db68a0e04fd602203902040b01b105dd0788fdb6c1fce464b49ad80081c6952e2d0619fa39173ed400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e6dff1d0100000403004630440220039e4aa9dc043a1ccc8fa14d9b960e3907a44edf63db1180e748f6dd4d469f2002202bca8620936af680fa4ad8c1b63265d1f220013a15f2bacdce09b23478650d03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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