71.ufc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:72:d1:b5:b6:09:43:70:4c:19:d3:4f:eb:c1:59:3c:f4:1a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=71.ufc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:d1:b5:b6:09:43:70:4c:19:d3:4f:eb:c1:59:3c:f4:1a
Serial Number (int): 300407799773250639577892534553084096738330
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:33:63:6d:d3:1d:5a:0b:61:d2:b2:a8:a6:10:34:83:1a:a5:87:90
Fingerprint (sha256): 45:a4:eb:05:db:d7:55:b6:f4:ff:40:5e:bb:2b:8b:b3:29:d0:ff:2c:11:82:6f:92:99:b2:30:9d:e2:eb:52:6c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 71.ufc.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 71.ufc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

71.ufc.com
academi.ufc.com
admin.ufc.com
akun-gacor.ufc.com
alumni.gsm.cornell.edu
archive.enterprisecommunity.org
articles.catholicreview.org
arts-pan.bloomfield.edu
available.merid.org
bandar-togel.ctd.northwestern.edu
berlin.ufc.com
bioinformatics.gmu.edu
causedev1.worldvision.org
classic.ufc.com
democlient.bazaarvoice.com
dev-live.ufc.com
dev.govdelivery.com
developers.velocityfrequentflyer.com
engage.nysenate.gov
engellab.labsites-dev.cshl.edu
epic.ufc.com
fukuoka.ufc.com
gaskemana.hoover.org
global.rutgers.ufc.com
gratisbet.ufc.com
grupa.ufc.com
hero.ufc.com
hoki.ufc.com
id.test.cms1.asa.uw.edu
id.ufc.com
jackpot.ufc.com
jammy.ufc.com
javier.todb.ca.gov
joker123-resmi.ufc.com
joker123-slot.ufc.com
jrnvry.acacamps.org
judi-bola.ctd.northwestern.edu
larashare.ufc.com
load-test.ufc.com
ls.ufc.com
m.stage.extension.harvard.edu
marketing.ufc.com
mcc.test.sa.ucsb.edu
mcgregor.ufc.com
meet.thebroad.org
menang.ctd.northwestern.edu
mobile.test.cms1.asa.uw.edu
modules.ufc.com
moonfest.arizona.edu
mpo-slot-terbaru.ufc.com
mpo-slot.ufc.com
muhammad.ufc.com
nhacai.ufc.com
onoki.ufc.com
pepe.ufc.com
pkv-games-qq.ufc.com
pkv-games.ufc.com
pkvgame.ufc.com
pr-cfr-map-term.cfr.org
procomm2018.utoronto.ca
rtp-pgsoft.ufc.com
rtp-slot.ufc.com
rtpslot.ufc.com
sbobet2.test.webservices.umich.edu
sbobet24jam.ufc.com
scanme-gradstudies.ucdavis.edu
schedule.ufc.com
slot-2023.ufc.com
slot-pragmatic.ufc.com
slot2023.ufc.com
slot303.ufc.com
slotdana.ufc.com
sportsbusinessacademy.stanford.edu
staredown.ufc.com
stats.ned.org
studioy.marsdd.com
sub.ufc.com
tokyo.ufc.com
toto-slot.gsm.cornell.edu
toto.ufc.com
uppercut.ufc.com
w.doctorswithoutborders.org
www.alumni.gsm.cornell.edu
www.dev.oceana.org
www.energy-business-review.com
www.ethics.pantheon.berkeley.edu
www.infectiousdiseases.utoronto.ca
www.jobs.doctorswithoutborders.org
www.live.oceana.org
www.medicaloncology.utoronto.ca
www.redirects.merid.org
www.rocky.rockhurst.edu
www.tamt.arizona.edu
www.tumblr.doctorswithoutborders.org
www.veterans.umbc.edu
www.wri.cals.cornell.edu
www0.ctd.northwestern.edu
www1.ufc.com
yakuza.ufc.com
zona.test.cms1.asa.uw.edu

Other certificates including the domain name ufc.com

(limited to 100 certificates)
au.ufc.com
3fadmin.govdelivery.com
facebook.bars.ufc.com
*.ufc.com
ftp.ufc.com
webmail.ufc.com
2021convention.ncte.org
au.ufc.com
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
live.ucdavis.edu
5766752193478656-fe4.pantheonsite.io
a.ns.christiancentury.org
ftp.ufc.com
academi.ufc.com
dev.ufc.com
communityadvancementfirm.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
on.ufc.com
a.ns.christiancentury.org
alumnimail.albion.edu
71.ufc.com
live.bme.cornell.edu
5766752193478656-fe4.pantheonsite.io
*.dev.ufc.com
5755424754106368-fe2.pantheonsite.io
jp.ufc.com
ftp.ufc.com
ufc.com
*.test.ufc.com
5766752193478656-fe4.pantheonsite.io
collector.ufc.com
5755424754106368-fe2.pantheonsite.io
ufc.com
asikmpo.discoverlosangeles.com
alumnimail.albion.edu
alumnimail.albion.edu
5766752193478656-fe4.pantheonsite.io
sandiegozoo100.org
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
bars.ufc.com
5766752193478656-fe4.pantheonsite.io
2fsupport.govdelivery.com
webmail.ufc.com
2fsupport.govdelivery.com
5755424754106368-fe2.pantheonsite.io
on.ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
sandiegozoo100.org
5755424754106368-fe2.pantheonsite.io
sters.us
71.ufc.com
5755424754106368-fe2.pantheonsite.io
*.dev.ufc.com
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
*.ufc.com
on.ufc.com
on.ufc.com
ufc.com
webmail.ufc.com
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
webmail.ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
ufc.com
5755424754106368-fe2.pantheonsite.io
rewards.ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
jc.edu
ufc.com
5766752193478656-fe4.pantheonsite.io
5755424754106368-fe2.pantheonsite.io
cci520-new.courtinnovation.org
jc.edu
2fsupport.govdelivery.com
collector.ufc.com
71.ufc.com
71.ufc.com
5766752193478656-fe4.pantheonsite.io
bars.ufc.com
5766752193478656-fe4.pantheonsite.io
*.ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
ufc.com
5755424754106368-fe2.pantheonsite.io
5766752193478656-fe4.pantheonsite.io
cervello.ufc.com
sandiegozoo100.org

Certificate

The complete raw certificate details for 71.ufc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMzDCCC7SgAwIBAgISA3LRtbYJQ3BMGdNP68FZPPQaMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMTUwNjExMDFaFw0yMzA0MTUwNjExMDBaMBUxEzARBgNVBAMT
CjcxLnVmYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjqJE
wXuHA21Uj64qXlQXQIPlTdSRAx4EXyy99T10ailBTjQieDZBWrUH4EUwbUyfsgLO
ER1hpB3/zPajjIJK8Q6u4cdu9HH2Pw2uQHZUN1OGiiYUoRrRhyv43sm30GIa6p8U
VyCR/cnrUaC10595ve7UTW8t8UPXgcmYkaUO28XCnsq1mZK4qdQO+21kCl6CHOXD
VL5CtLuxmjl6k3kCzblXgxWdbl1MkVN+aGdsH2+SEkOH47oN4tizNfR1LFWuwYjr
qAgO+Ty/BnVraKyUgsZDZYML/ahZXZH4+9Ydm5QqrMsa1E5Ya69ktHRDOI0OvIX5
xUYgKw60zI66+/hlAgMBAAGjggn3MIIJ8zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FAREasijGdWxSnN8WH+39Ww5AbJiMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIII
uAYDVR0RBIIIrzCCCKuCCjcxLnVmYy5jb22CD2FjYWRlbWkudWZjLmNvbYINYWRt
aW4udWZjLmNvbYISYWt1bi1nYWNvci51ZmMuY29tghZhbHVtbmkuZ3NtLmNvcm5l
bGwuZWR1gh9hcmNoaXZlLmVudGVycHJpc2Vjb21tdW5pdHkub3JnghthcnRpY2xl
cy5jYXRob2xpY3Jldmlldy5vcmeCF2FydHMtcGFuLmJsb29tZmllbGQuZWR1ghNh
dmFpbGFibGUubWVyaWQub3JngiFiYW5kYXItdG9nZWwuY3RkLm5vcnRod2VzdGVy
bi5lZHWCDmJlcmxpbi51ZmMuY29tghZiaW9pbmZvcm1hdGljcy5nbXUuZWR1ghlj
YXVzZWRldjEud29ybGR2aXNpb24ub3Jngg9jbGFzc2ljLnVmYy5jb22CGmRlbW9j
bGllbnQuYmF6YWFydm9pY2UuY29tghBkZXYtbGl2ZS51ZmMuY29tghNkZXYuZ292
ZGVsaXZlcnkuY29tgiRkZXZlbG9wZXJzLnZlbG9jaXR5ZnJlcXVlbnRmbHllci5j
b22CE2VuZ2FnZS5ueXNlbmF0ZS5nb3aCHmVuZ2VsbGFiLmxhYnNpdGVzLWRldi5j
c2hsLmVkdYIMZXBpYy51ZmMuY29tgg9mdWt1b2thLnVmYy5jb22CFGdhc2tlbWFu
YS5ob292ZXIub3JnghZnbG9iYWwucnV0Z2Vycy51ZmMuY29tghFncmF0aXNiZXQu
dWZjLmNvbYINZ3J1cGEudWZjLmNvbYIMaGVyby51ZmMuY29tggxob2tpLnVmYy5j
b22CF2lkLnRlc3QuY21zMS5hc2EudXcuZWR1ggppZC51ZmMuY29tgg9qYWNrcG90
LnVmYy5jb22CDWphbW15LnVmYy5jb22CEmphdmllci50b2RiLmNhLmdvdoIWam9r
ZXIxMjMtcmVzbWkudWZjLmNvbYIVam9rZXIxMjMtc2xvdC51ZmMuY29tghNqcm52
cnkuYWNhY2FtcHMub3Jngh5qdWRpLWJvbGEuY3RkLm5vcnRod2VzdGVybi5lZHWC
EWxhcmFzaGFyZS51ZmMuY29tghFsb2FkLXRlc3QudWZjLmNvbYIKbHMudWZjLmNv
bYIdbS5zdGFnZS5leHRlbnNpb24uaGFydmFyZC5lZHWCEW1hcmtldGluZy51ZmMu
Y29tghRtY2MudGVzdC5zYS51Y3NiLmVkdYIQbWNncmVnb3IudWZjLmNvbYIRbWVl
dC50aGVicm9hZC5vcmeCG21lbmFuZy5jdGQubm9ydGh3ZXN0ZXJuLmVkdYIbbW9i
aWxlLnRlc3QuY21zMS5hc2EudXcuZWR1gg9tb2R1bGVzLnVmYy5jb22CFG1vb25m
ZXN0LmFyaXpvbmEuZWR1ghhtcG8tc2xvdC10ZXJiYXJ1LnVmYy5jb22CEG1wby1z
bG90LnVmYy5jb22CEG11aGFtbWFkLnVmYy5jb22CDm5oYWNhaS51ZmMuY29tgg1v
bm9raS51ZmMuY29tggxwZXBlLnVmYy5jb22CFHBrdi1nYW1lcy1xcS51ZmMuY29t
ghFwa3YtZ2FtZXMudWZjLmNvbYIPcGt2Z2FtZS51ZmMuY29tghdwci1jZnItbWFw
LXRlcm0uY2ZyLm9yZ4IXcHJvY29tbTIwMTgudXRvcm9udG8uY2GCEnJ0cC1wZ3Nv
ZnQudWZjLmNvbYIQcnRwLXNsb3QudWZjLmNvbYIPcnRwc2xvdC51ZmMuY29tgiJz
Ym9iZXQyLnRlc3Qud2Vic2VydmljZXMudW1pY2guZWR1ghNzYm9iZXQyNGphbS51
ZmMuY29tgh5zY2FubWUtZ3JhZHN0dWRpZXMudWNkYXZpcy5lZHWCEHNjaGVkdWxl
LnVmYy5jb22CEXNsb3QtMjAyMy51ZmMuY29tghZzbG90LXByYWdtYXRpYy51ZmMu
Y29tghBzbG90MjAyMy51ZmMuY29tgg9zbG90MzAzLnVmYy5jb22CEHNsb3RkYW5h
LnVmYy5jb22CInNwb3J0c2J1c2luZXNzYWNhZGVteS5zdGFuZm9yZC5lZHWCEXN0
YXJlZG93bi51ZmMuY29tgg1zdGF0cy5uZWQub3JnghJzdHVkaW95Lm1hcnNkZC5j
b22CC3N1Yi51ZmMuY29tgg10b2t5by51ZmMuY29tghl0b3RvLXNsb3QuZ3NtLmNv
cm5lbGwuZWR1ggx0b3RvLnVmYy5jb22CEHVwcGVyY3V0LnVmYy5jb22CG3cuZG9j
dG9yc3dpdGhvdXRib3JkZXJzLm9yZ4Iad3d3LmFsdW1uaS5nc20uY29ybmVsbC5l
ZHWCEnd3dy5kZXYub2NlYW5hLm9yZ4Ied3d3LmVuZXJneS1idXNpbmVzcy1yZXZp
ZXcuY29tgiB3d3cuZXRoaWNzLnBhbnRoZW9uLmJlcmtlbGV5LmVkdYIid3d3Lmlu
ZmVjdGlvdXNkaXNlYXNlcy51dG9yb250by5jYYIid3d3LmpvYnMuZG9jdG9yc3dp
dGhvdXRib3JkZXJzLm9yZ4ITd3d3LmxpdmUub2NlYW5hLm9yZ4Ifd3d3Lm1lZGlj
YWxvbmNvbG9neS51dG9yb250by5jYYIXd3d3LnJlZGlyZWN0cy5tZXJpZC5vcmeC
F3d3dy5yb2NreS5yb2NraHVyc3QuZWR1ghR3d3cudGFtdC5hcml6b25hLmVkdYIk
d3d3LnR1bWJsci5kb2N0b3Jzd2l0aG91dGJvcmRlcnMub3JnghV3d3cudmV0ZXJh
bnMudW1iYy5lZHWCGHd3dy53cmkuY2Fscy5jb3JuZWxsLmVkdYIZd3d3MC5jdGQu
bm9ydGh3ZXN0ZXJuLmVkdYIMd3d3MS51ZmMuY29tgg55YWt1emEudWZjLmNvbYIZ
em9uYS50ZXN0LmNtczEuYXNhLnV3LmVkdTBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
gxaExq4lg+u6dPago2tF8jJQc9vi2UL/4GuOj2AMSh4b5aI37vfjU99n7d6OpPhy
mIkvvr2FTTW1kP/2QbfinatnYuJpEveDcTffEC+Kj1zwHjJC7TCeRuAlxRxkdmM8
GOzOaj2d3fKWKSBf1twdo0OpRdbIZ2qaE/Zf4C1jTUfo19uBvrIkcRe3nlTFEJI4
6o378YUaHaAw1Uyypr9LJBgCsDbLmKk28rvGP+YUR+eOmWKT/Vyq5aTOK24gTbK3
MlUdh1aICCcB227ZT4rFVOuppsEm8mIY0ttva+T1gSJuc8Jueebcmi56uTKJR5Tm
d4JqSRM+7ILyhA3vyvMIwg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U
F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC
SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf
eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5
As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is
lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300407799773250639577892534553084096738330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-15 06:11:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-15 06:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '71.ufc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04446ac8a319d5b14a737c587fb7f56c3901b262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '71.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academi.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akun-gacor.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.enterprisecommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts-pan.bloomfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'available.merid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandar-togel.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlin.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioinformatics.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'causedev1.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classic.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'democlient.bazaarvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-live.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.velocityfrequentflyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engellab.labsites-dev.cshl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fukuoka.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaskemana.hoover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.rutgers.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratisbet.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupa.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hero.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoki.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.test.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackpot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jammy.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javier.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123-resmi.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123-slot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrnvry.acacamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judi-bola.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larashare.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'load-test.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ls.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.stage.extension.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcc.test.sa.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcgregor.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.thebroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menang.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.test.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modules.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonfest.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpo-slot-terbaru.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpo-slot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhammad.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhacai.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onoki.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepe.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkv-games-qq.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkv-games.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkvgame.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-cfr-map-term.cfr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procomm2018.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-pgsoft.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-slot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtpslot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet2.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet24jam.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanme-gradstudies.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schedule.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-2023.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-pragmatic.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot2023.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot303.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotdana.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbusinessacademy.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staredown.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.ned.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioy.marsdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyo.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toto-slot.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toto.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uppercut.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energy-business-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethics.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infectiousdiseases.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobs.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicaloncology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redirects.merid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocky.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamt.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tumblr.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veterans.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wri.cals.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakuza.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zona.test.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00831684c6ae2583ebba74f6a0a36b45f2325073dbe2d942ffe06b8e8f600c4a1e1be5a237eef7e353df67edde8ea4f87298892fbebd854d35b590fff641b7e29dab6762e26912f7837137df102f8a8f5cf01e3242ed309e46e025c51c6476633c18ecce6a3d9dddf29629205fd6dc1da343a945d6c8676a9a13f65fe02d634d47e8d7db81beb2247117b79e54c5109238ea8dfbf1851a1da030d54cb2a6bf4b241802b036cb98a936f2bbc63fe61447e78e996293fd5caae5a4ce2b6e204db2b732551d875688082701db6ed94f8ac554eba9a6c126f26218d2db6f6be4f581226e73c26e79e6dc9a2e7ab932894794e677826a49133eec82f2840defcaf308c2