nba2k23.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b7:8b:b4:d2:0a:4b:6b:e9:2e:0a:24:f8:85:3b:f7:d4:e6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nba2k23.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b7:8b:b4:d2:0a:4b:6b:e9:2e:0a:24:f8:85:3b:f7:d4:e6
Serial Number (int): 410906518438543005199553319609505355912422
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:4e:c9:50:49:d2:79:1b:9f:40:bc:4f:51:6a:7c:95:b7:a8:68:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:e8:c9:6b:37:48:82:54:09:f5:8f:0f:f3:b7:7f:46:77:49:57:a6
Fingerprint (sha256): 63:c6:54:53:c4:f4:63:77:f4:b9:9f:6e:0e:8a:64:3f:03:d2:c6:bf:ea:c9:a4:72:b7:78:9f:02:38:01:4b:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nba2k23.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nba2k23.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abcdlaw.com
*.ambula.com.au
*.assranceamerica.com
*.atat.tv
*.atlantaexecutivehomes.com
*.augmentedlistening.com
*.azzuri.com.au
*.backpackingqueensland.com.au
*.bettensured.com
*.centuyrlink.com
*.chpicehotels.com
*.contactlenstracking.com
*.currencesdirect.com
*.dyson.cc
*.englishhaula.com
*.googlechome.com
*.graciouslivinghc.com
*.hakchi.com
*.hkrankengymnastik.de
*.hostingshop.com.au
*.invacareonline.com.au
*.jmemi.com
*.kranckengymnastik.de
*.loansmarts.com
*.ltc4you.com
*.magenschleimhaudtentzuendung.de
*.nba2k23.com
*.nicosiaturkishrestaurant.com.au
*.nuticx.com
*.project.pt
*.qadohabank.com
*.quickie.com.au
*.redochre.com.au
*.rewindandunwind.net
*.roichina.com
*.sarahalmendarizcounseling.com
*.shineijyutaku.com
*.socialmedialister.com
*.soylavikkiugc.com
*.sportsmindjunior.com.au
*.starlocal.com.au
*.statestreetinsurance.com
*.stowebrussels.com
*.straighterpath.com
*.tasking.au
*.topmodel-porusski.ru
*.vallejotransit.com
*.wandaborges.com
*.wwwsecurityfirstflorida.com
*.xn--blasenentzndungde-c3b.de
abcdlaw.com
ambula.com.au
assranceamerica.com
atat.tv
atlantaexecutivehomes.com
augmentedlistening.com
azzuri.com.au
backpackingqueensland.com.au
bettensured.com
centuyrlink.com
chpicehotels.com
contactlenstracking.com
currencesdirect.com
dyson.cc
englishhaula.com
googlechome.com
graciouslivinghc.com
hakchi.com
hkrankengymnastik.de
hostingshop.com.au
invacareonline.com.au
jmemi.com
kranckengymnastik.de
loansmarts.com
ltc4you.com
magenschleimhaudtentzuendung.de
nba2k23.com
nicosiaturkishrestaurant.com.au
nuticx.com
project.pt
qadohabank.com
quickie.com.au
redochre.com.au
rewindandunwind.net
roichina.com
sarahalmendarizcounseling.com
shineijyutaku.com
socialmedialister.com
soylavikkiugc.com
sportsmindjunior.com.au
starlocal.com.au
statestreetinsurance.com
stowebrussels.com
straighterpath.com
tasking.au
topmodel-porusski.ru
vallejotransit.com
wandaborges.com
wwwsecurityfirstflorida.com
xn--blasenentzndungde-c3b.de

Other certificates including the domain name nba2k23.com

(limited to 100 certificates)
scotbroker.com
nba2k23.com
nba2k23.com
arduiono.co
nba2k23.com

Certificate

The complete raw certificate details for nba2k23.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410906518438543005199553319609505355912422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 10:04:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 10:04:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nba2k23.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741574820380193957974023520784788350624527003182368499974488630832305373331094761111355199988383246263758070377680941677918496935806033970279631839823203249774638273797967081750350914401059587567815146071175518576350822968602381962241338464057572619925899249488837537879408576704573721470994965304209917312733714305267118383368803180175124983120108624457742141863236410019987779393355648370433855827234904604704130977321213455093066858972239796095279325414464892228767314740319090960380030861520986157168637493253808578393824522017587116195568634472659992511139245582251400800303141988914633996588808427965863832942354369752658505082181247071964824746733223661826170209619871231648749833212442489557094086244680233725960395303487859633322656444485248055821365733541886105440340524049447679039526259040247895667897669679566045157029605828900822369639055346568367827052695022110842462688319498452090491284710198097563102941511978726962195195643152422970458562083672874263888555082867742960510440778545536931375883316363470663917022945210434207533901305089773736620971793281222462260833105866218913400680793396934370753813776302950604000134787909782025704088499718677547084127205645202853361307043608492927772010345558028353527814552533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							554ec95049d2791b9f40bc4f516a7c95b7a86820
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcdlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambula.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assranceamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atat.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantaexecutivehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augmentedlistening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azzuri.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backpackingqueensland.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettensured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centuyrlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chpicehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contactlenstracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currencesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dyson.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.englishhaula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googlechome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graciouslivinghc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hakchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkrankengymnastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostingshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invacareonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kranckengymnastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loansmarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltc4you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magenschleimhaudtentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba2k23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicosiaturkishrestaurant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuticx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qadohabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redochre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewindandunwind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roichina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarahalmendarizcounseling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shineijyutaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialmedialister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soylavikkiugc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsmindjunior.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statestreetinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stowebrussels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.straighterpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tasking.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topmodel-porusski.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vallejotransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wandaborges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsecurityfirstflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blasenentzndungde-c3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcdlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambula.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assranceamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atat.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantaexecutivehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augmentedlistening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azzuri.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backpackingqueensland.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettensured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centuyrlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chpicehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactlenstracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currencesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyson.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishhaula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlechome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graciouslivinghc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hakchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkrankengymnastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostingshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invacareonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kranckengymnastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loansmarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltc4you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magenschleimhaudtentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba2k23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicosiaturkishrestaurant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuticx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qadohabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redochre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewindandunwind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roichina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarahalmendarizcounseling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shineijyutaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialmedialister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soylavikkiugc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmindjunior.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statestreetinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stowebrussels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straighterpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasking.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmodel-porusski.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallejotransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandaborges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecurityfirstflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blasenentzndungde-c3b.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd2a70b3f00000403004830460221008100dd0bf529978655cb204dfd7bc338131d3c436cbc88de9ed8ffc01f752b0e022100ce652e84f7d5a9812d28306302c6b935cdf5e1b7895bff74e1d11de9b40211a300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bd2a70bae0000040300473045022100c26e1df95109fe518b03c7fce7a8f327adf4536ad3c82a52f6a11b3cf92a12ef0220481440693f13b5d3eeaebe17779fac0ba0c0df31bb92d6f5347daed9031f9557
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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