f01.chtah.com

Issued by R3

About this certificate

This digital certificate with serial number 03:36:20:10:ce:6d:55:4c:d1:3d:99:64:0d:d1:68:c3:52:3c was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=f01.chtah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:20:10:ce:6d:55:4c:d1:3d:99:64:0d:d1:68:c3:52:3c
Serial Number (int): 279754728168464917990675830079103311237692
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:fe:da:94:99:39:4b:db:d2:f4:7b:12:ce:2b:3b:bb:96:f4:1c:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 74:0d:5c:96:55:cc:ff:07:c0:24:42:2a:6c:a5:fb:5b:c3:d3:43:62
Fingerprint (sha256): 4f:05:42:9e:5e:9b:8c:60:a2:de:ee:85:3a:45:b0:f1:8c:46:fa:fe:83:97:2d:a3:81:30:79:7a:6e:37:b8:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f01.chtah.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f01.chtah.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f.advisor.fundsindia.com
f.ctm.ralphlauren.co.jp
f.e.adolfodominguez.com
f.e.barenecessities.com
f.e.bobbibrown.com.au
f.e.bookonmail.com
f.e.burlingtoncoatfactory.com
f.e.crystalholidays.co.uk
f.e.esteelauder.com.au
f.e.golden1.com
f.e.hollandamerica.com
f.e.lightinthebox.com
f.e.maccosmetics.ch
f.e.miniinthebox.com
f.e.starbucks.co.uk
f.e.thomsonslm.co.uk
f.edm.sgx.com
f.email.bullseyeinsurance.co.uk
f.email.divainsurance.co.uk
f.email.equiniti.com
f.email.freepeople.com
f.email.freepeoplewholesale.com
f.email.its4me.co.uk
f.email.lloydstsbsharedealing.com
f.email.motorinsurancewarehouse.com
f.email.pocruises.com
f.email.shopterrain.com
f.email.theinsuranceline.co.uk
f.equity.fundsindia.com
f.i.rba.es
f.ikea-asia.com
f.mail.architectsjournal.co.uk
f.mail.architectural-review.com
f.mail.broadcastnow.co.uk
f.mail.cnplus.co.uk
f.mail.dominospizza.es
f.mail.drapersonline.com
f.mail.ferrybooker.com
f.mail.ferrycheap.com
f.mail.ferryonline.co.uk
f.mail.ferrysavers.com
f.mail.fostershollywood.es
f.mail.hvnplus.co.uk
f.mail.leisuredirection.co.uk
f.mail.lgcplus.com
f.mail.meed.com
f.mail.mrw.co.uk
f.mail.nce.co.uk
f.mail.nursingtimes.net
f.mail.racplus.com
f.mail.retail-jeweller.com
f.mail.screendaily.com
f.mail.shots.net
f.mailer.fundsindia.com
f.news.1800getlens.com
f.news.bestbuyeyeglasses.com
f.news.contactsamerica.com
f.news.eyetest.com
f.news.justlenses.com
f.news.lens.com
f.news2.lens.com
f.newsletter.adams.es
f.newsletter.sky.com
f.newsletters.hcf.com.au
f.promotions.fundsindia.com
f.research.fundsindia.com
f.signup.fundsindia.com
f.support.fundsindia.com
f.webmail.axa.ie
f01.chtah.com

Other certificates including the domain name chtah.com

(limited to 100 certificates)
f06.chtah.com
f04.chtah.com
f05.chtah.com
f03.chtah.com
f01.chtah.com
f04.chtah.com
f01.chtah.com
f.chtah.com
f.chtah.com
wpm.ccmp.eu
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f01.chtah.com
f01.chtah.com
f05.chtah.com
f.chtah.com
f.chtah.com
f02.chtah.com
f.chtah.com
f.chtah.com
*.chtah.com
f.chtah.com
f.chtah.com
f06.chtah.com
f03.chtah.com
f.chtah.com
f03.chtah.com
f04.chtah.com
wpm.ccmp.eu
f01.chtah.com
f04.chtah.com
f06.chtah.com
p.chtah.com
f02.chtah.com
p.chtah.com
f04.chtah.com
f04.chtah.com
wpm.ccmp.eu
*.chtah.com
f02.chtah.com
f04.chtah.com
f01.chtah.com
f06.chtah.com
f01.chtah.com
f02.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f01.chtah.com
f06.chtah.com
*.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f05.chtah.com
f02.chtah.com
f06.chtah.com
f05.chtah.com
f.chtah.com
f06.chtah.com
wpm.ccmp.eu
f.chtah.com
f05.chtah.com
f.chtah.com
f02.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com
f02.chtah.com
f04.chtah.com
f03.chtah.com
f01.chtah.com
*.chtah.com
f05.chtah.com
f02.chtah.com
f.chtah.com
wpm.ccmp.eu
f03.chtah.com
f.chtah.com
f01.chtah.com
f04.chtah.com
f06.chtah.com
f05.chtah.com
f03.chtah.com
f05.chtah.com
f04.chtah.com
f02.chtah.com
wpm.ccmp.eu
f04.chtah.com
f02.chtah.com
f03.chtah.com
f01.chtah.com
f06.chtah.com
f.chtah.com
f.chtah.com
f03.chtah.com
f01.chtah.com
f01.chtah.com
f04.chtah.com

Certificate

The complete raw certificate details for f01.chtah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+lhZtKqTOWH2vBMqqW8
B/xv+Q2fVIhlbFMWdtdlTONfFDDJtfZIcACizL5FmwTlOm8nzEVdiOVWL4zmsqw5
So0HyOjaTY5W58V6uI4B/1G7b6/VC+N8nGubRI8dQ9V8bk5mne7Lcb6I85z9Um28
yY6/uq3jkSNWQN2MO9yYRkUEMD44evrWp+sNWGClwWL7nP31P0tisUjFDH3STLpr
DJZSPPCrGzCf8W0lxgayIrCPGJdP3X3kwR9RR/K6K/bJV2jte4t+nWNU/4sJrRG8
L8LGr22sqqdZm8mWvVU3bAwpG1PfV0NGvFKaiKw3Ey0hkCMZwRaDTeCkVwuJKO8H
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279754728168464917990675830079103311237692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 13:07:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 13:07:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f01.chtah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26246413329543720742951072789199184571843512921680580149058189739935078962387388946740577669724085850202081024389761831688748044839579641291142124214134823448813319538690217956006049903398817181871335341220407428109240882213877444947203717007799676619202091418706024156678071980935000085307220090517960503912637667161981040478813792753613831462137481929141224989645979222691631398585377464793096876735203157059344758844190781990986734073408074511228125565712953170432938896791075222725561238809539440011591269575673809794640155812732027547647759161601118964641786678533288276263799006539029578315656275746962434623389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dfeda9499394bdbd2f47b12ce2b3bbb96f41cdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1689 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.advisor.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ctm.ralphlauren.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.adolfodominguez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.barenecessities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bobbibrown.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.bookonmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.burlingtoncoatfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.crystalholidays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.esteelauder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.golden1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.hollandamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.lightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.maccosmetics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.miniinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.starbucks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.e.thomsonslm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.edm.sgx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.bullseyeinsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.divainsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.equiniti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.freepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.freepeoplewholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.its4me.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.lloydstsbsharedealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.motorinsurancewarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.pocruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.shopterrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.email.theinsuranceline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.equity.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.i.rba.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.ikea-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.architectsjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.architectural-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.broadcastnow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.cnplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.dominospizza.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.drapersonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrybooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrycheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferryonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.ferrysavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.fostershollywood.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.hvnplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.leisuredirection.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.lgcplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.meed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.mrw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.nce.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.nursingtimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.racplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.retail-jeweller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.screendaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mail.shots.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.mailer.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.1800getlens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.bestbuyeyeglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.contactsamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.eyetest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.justlenses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news.lens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.news2.lens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.adams.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletter.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.newsletters.hcf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.promotions.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.research.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.signup.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.support.fundsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.webmail.axa.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f01.chtah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa89e7bb10000040300473045022100e7df1ded63fe5aa03741a36d5fa05c770ed6829f97d095442e9b114c5d1282400220613b2bcf163ce26d69e83cdb76990a0ee3885abe2e5ef6a32e4780488af5893f0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa89e7c20000004030047304502210088d9a3d647ebf85bb9219ee75013d633edac47edeae29b3bcb0a143247ce5b22022058cec4b8fbf63967ad0ea8d122c6dd91f52aac6d4c18e49c756ed79358ad1d0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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