f01.chtah.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4f:ff:a6:6a:5f:e2:6b:09:ec:94:aa:d1:38:41:ec:4c:51 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=f01.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:ff:a6:6a:5f:e2:6b:09:ec:94:aa:d1:38:41:ec:4c:51
Serial Number (int): 375671267931530961969158941172576750947409
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bd:15:dd:c5:a2:db:e4:d3:81:90:dd:e9:94:b0:b1:ee:e6:03:ce:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:82:d7:3c:ef:d0:9e:ed:17:21:65:08:51:61:bb:18:b1:0c:01:6a
Fingerprint (sha256): 4b:56:65:b8:d8:8b:d2:98:4e:6b:9b:db:b7:35:d0:cb:14:6c:ee:96:e6:37:3d:5c:db:97:4f:fb:2b:c1:c7:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f01.chtah.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f01.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.advisor.fundsindia.com
f.aigcorpebus.com
f.business.adt.com
f.cambiamostuvida.masterd.es
f.comunicacion.vodafone.es
f.cotydigital.com
f.cotyemail.com
f.crm.homethycare.com
f.ctm.ralphlauren.co.jp
f.e.adolfodominguez.com
f.e.betts.com.au
f.e.bobbibrown.com.au
f.e.bookonmail.com
f.e.burlingtoncoatfactory.com
f.e.cliniqueitaly.it
f.e.crystalholidays.co.uk
f.e.esteelauder.com.au
f.e.esteelauder.it
f.e.golden1.com
f.e.hollandamerica.com
f.e.lightinthebox.com
f.e.maccosmetics.ch
f.e.maccosmetics.it
f.e.miniinthebox.com
f.e.starbucks.co.uk
f.e.swinton.co.uk
f.e.thomsonslm.co.uk
f.edm.sgx.com
f.email.bullseyeinsurance.co.uk
f.email.club-together.org
f.email.divainsurance.co.uk
f.email.equiniti.com
f.email.freepeople.com
f.email.freepeoplewholesale.com
f.email.its4me.co.uk
f.email.lloydstsbsharedealing.com
f.email.motorinsurancewarehouse.com
f.email.pocruises.com
f.email.selftrade.co.uk
f.email.shopterrain.com
f.email.swinton.co.uk
f.email.theinsuranceline.co.uk
f.equity.fundsindia.com
f.i.rba.es
f.ikea-asia.com
f.mail.architectsjournal.co.uk
f.mail.architectural-review.com
f.mail.broadcastnow.co.uk
f.mail.cnplus.co.uk
f.mail.dominospizza.es
f.mail.drapersonline.com
f.mail.ferrybooker.com
f.mail.ferrycheap.com
f.mail.ferryonline.co.uk
f.mail.ferrysavers.com
f.mail.fostershollywood.es
f.mail.hsj.co.uk
f.mail.hvnplus.co.uk
f.mail.leisuredirection.co.uk
f.mail.lgcplus.com
f.mail.meed.com
f.mail.mrw.co.uk
f.mail.nce.co.uk
f.mail.nursingtimes.net
f.mail.racplus.com
f.mail.retail-jeweller.com
f.mail.retail-week.com
f.mail.screendaily.com
f.mail.shots.net
f.mailer.fundsindia.com
f.mailer.fundsindiaadvisor.com
f.news.1800getlens.com
f.news.bestbuyeyeglasses.com
f.news.contactsamerica.com
f.news.eyetest.com
f.news.justlenses.com
f.news.lens.com
f.news2.lens.com
f.newsletter.adams.es
f.newsletter.sky.com
f.newsletters.hcf.com.au
f.promotions.fundsindia.com
f.research.fundsindia.com
f.safehome.adt.com
f.signup.fundsindia.com
f.support.fundsindia.com
f.webmail.axa.ie
f01.chtah.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com

Certificate

The complete raw certificate details for f01.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xkzt+ZeMQVxk4CSP6vk
zSDVDUAM0/aUcCB3XkVWeALH4Tro3nEVAbEaACs3djWS3qecVmw78XdaMTBa+oEG
44ZJlK2yNh2DMYXsJpwMyJft3HYUOEaqPvx+XXOXHldOQZXdO5bDXJPDuxafs1R0
oOuNiAshAPG9GmoQ5lVAftcqDMo1b3iU1tTNnUty/0IANQJ1M4iUiKM9+nOE0RDt
OX1pGQzQ1SzH4FwlAU3CQcyMaL32wRhv5tAUw3nq4izDSnTHbS3C1w5pe5LyYMcp
nvJfHdppklKFv50hjRpGyYUkyaB5nKKzUKI+6RTRooqAk1DNe6rUKav36Zuc0lWJ
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375671267931530961969158941172576750947409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-22 05:36:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-20 05:36:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f01.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30183382468518628041172509530422175656507088811772353551689819921216793634532762475181625705923736413216058948153888561352346766361330159891881029630139287126585672022538491030420856947805350099948605606907982702090898558964441670302633115807080173462720983226036576531769719707853858216261062169384803342095619164738403755260963513410173796014827676784667085133456971900669306362323152444838262051352540603137033969287671795357997409217924484842969210302047714726443499567242587196553167293290095713779404517943552271922421059426197970521021947357564814673330111327056270023127093248781225003015175044323784640530931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd15ddc5a2dbe4d38190dde994b0b1eee603ce5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2089 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.advisor.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.aigcorpebus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.business.adt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cambiamostuvida.masterd.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.comunicacion.vodafone.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cotydigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.cotyemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.crm.homethycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ctm.ralphlauren.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.adolfodominguez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.betts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bookonmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.burlingtoncoatfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.cliniqueitaly.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.crystalholidays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.golden1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.hollandamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.lightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.miniinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.starbucks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.swinton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.thomsonslm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.edm.sgx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.bullseyeinsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.club-together.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.divainsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.equiniti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.freepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.freepeoplewholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.its4me.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.lloydstsbsharedealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.motorinsurancewarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.pocruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.selftrade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.shopterrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.swinton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.theinsuranceline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.equity.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.i.rba.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ikea-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.architectsjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.architectural-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.broadcastnow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.cnplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.dominospizza.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.drapersonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrybooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrycheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferryonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrysavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.fostershollywood.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.hvnplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.leisuredirection.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.lgcplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.meed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.mrw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.nce.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.nursingtimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.racplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.retail-jeweller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.retail-week.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.screendaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.shots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.fundsindiaadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.1800getlens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.bestbuyeyeglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.contactsamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.eyetest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.justlenses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.lens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news2.lens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.adams.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.hcf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.promotions.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.research.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.safehome.adt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.signup.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.support.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.webmail.axa.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f01.chtah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017858a6897d000004030047304502201993759828c1bafb9f9977b53b6d7e2dba5fc4a7678e2d970c51075985a2b3dd02210091fce0ad0200b7d1af06ddf30d29e5389e2f2f2563e0b8c2d5ad14b497b713060077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017858a689b00000040300483046022100b0ec524d02614945c98ea164b7eb4b7bac6d63c74bef42b8472f9ac27c4783c0022100eac83190ec05d5240d51470f96d648563df53a0d366ff659acc5a2219cd9ca22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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