nccaa.com

Issued by R3

About this certificate

This digital certificate with serial number 04:cc:b4:4d:8f:df:a6:ea:f1:e7:fb:1a:a6:1f:b9:52:26:64 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nccaa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cc:b4:4d:8f:df:a6:ea:f1:e7:fb:1a:a6:1f:b9:52:26:64
Serial Number (int): 418106410343115937277385665267451106043492
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e6:ad:3e:79:ae:55:e7:37:c5:01:77:85:be:88:d8:be:01:87:b5:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8e:f2:e6:55:c0:a9:d6:98:22:d9:c5:54:4b:f8:b3:a0:6e:f4:a1:21
Fingerprint (sha256): 67:32:fb:5b:fe:7a:3a:e2:df:26:84:6f:37:7d:86:3f:0d:6b:27:11:a5:af:a6:be:98:4e:cf:d3:5a:c7:eb:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nccaa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nccaa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advanquest.com
*.autoservis.pro
*.barnes.academy
*.birdwatching.guru
*.cabi-net.pro
*.cicero.fitness
*.compton.tools
*.coopers.land
*.dhatudesignstudio.com
*.edmans.com
*.erophoto.info
*.facewwbook.com
*.gemstone.gifts
*.globalstatusofwomen-conf.org
*.gmmk.pro
*.goooglesearches.com
*.gotoairi.live
*.hairgrowfast.com
*.helsinki.school
*.hemorrhoids.chat
*.jones.catering
*.juicy-company.com
*.landmark.town
*.marion.contractors
*.martha.clothing
*.meth-stream.ai
*.mincraft-hosting.pro
*.moviesarena-bg.info
*.mysticmetals.com
*.nationalgeographicwild.com
*.nccaa.com
*.newwikipedia.org
*.parafuso.com
*.porno-moms.com
*.premiumnarrativetodiscover-today.info
*.profesjonal.com
*.protargets.com
*.quebec.computer
*.sherwimwilliams.com
*.sonarcapetown.com
*.specialist.style
*.these.bargains
*.thomas.gripe
*.toxicpro.xyz
*.ubirataniorio.org
*.viernes-series.com
*.viewier-pr0filead0be-rf098.info
*.virginia.fail
*.whitehouse.deals
*.why-youmad.com
advanquest.com
autoservis.pro
barnes.academy
birdwatching.guru
cabi-net.pro
cicero.fitness
compton.tools
coopers.land
dhatudesignstudio.com
edmans.com
erophoto.info
facewwbook.com
gemstone.gifts
globalstatusofwomen-conf.org
gmmk.pro
goooglesearches.com
gotoairi.live
hairgrowfast.com
helsinki.school
hemorrhoids.chat
jones.catering
juicy-company.com
landmark.town
marion.contractors
martha.clothing
meth-stream.ai
mincraft-hosting.pro
moviesarena-bg.info
mysticmetals.com
nationalgeographicwild.com
nccaa.com
newwikipedia.org
parafuso.com
porno-moms.com
premiumnarrativetodiscover-today.info
profesjonal.com
protargets.com
quebec.computer
sherwimwilliams.com
sonarcapetown.com
specialist.style
these.bargains
thomas.gripe
toxicpro.xyz
ubirataniorio.org
viernes-series.com
viewier-pr0filead0be-rf098.info
virginia.fail
whitehouse.deals
why-youmad.com

Other certificates including the domain name nccaa.com

(limited to 100 certificates)
nccaa.com
perra.com
*.abordo.com
nccaa.com
nccaa.com
nccaa.com
unlockiphone6.com
nccaa.com
nccaa.com
samanali.com
caminaconmigo.com
nccaa.com
caminaconmigo.com

Certificate

The complete raw certificate details for nccaa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418106410343115937277385665267451106043492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 20:15:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 20:15:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nccaa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745401121251847328912387629975005658175902123284817020803021168688185616845182913437447542477355382114498397398659791759167440420753351567450701021701847590336971716560374220930371223854234327976719725909287384541866621187867416541231448119413124276872480688730590387030014203383192586702608818194957832625128602187758462407045613676893613750574340719475289101652083228153074061766128321357849106227650802780488914174215191253064276084217649356043582809658845499335051256635734216477214262393469514329396917794605056741526962320398920151823360312098115539407786735189228092878395809619182948238267226562511793002482407383956281479022723185326400158388064856085085354409868201713619554820669852866864864288263723133893057049689825183380615812599365401920449636842926573317065035548312432100467470803232460033742233051770960869019778225382380085567331213354601684552207557588428000397537088286277752521924133659581237692366927225866583000697443238045601557097181291033535393450428110075808966824483709132490711794802843055872980015684856016784077625134560764815237183610272763680887317172323604834911928929783181714034471007043326794882827808215848682395779818871076362267555951740707816431239052159374100641861140300228326568636821667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6ad3e79ae55e737c5017785be88d8be0187b5f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1904 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advanquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoservis.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barnes.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birdwatching.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabi-net.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cicero.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compton.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coopers.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhatudesignstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erophoto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facewwbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemstone.gifts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalstatusofwomen-conf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmmk.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goooglesearches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotoairi.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairgrowfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helsinki.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hemorrhoids.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jones.catering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juicy-company.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landmark.town'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marion.contractors'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martha.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meth-stream.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mincraft-hosting.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviesarena-bg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysticmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalgeographicwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newwikipedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parafuso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porno-moms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premiumnarrativetodiscover-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profesjonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protargets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quebec.computer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherwimwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonarcapetown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialist.style'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.these.bargains'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thomas.gripe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toxicpro.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubirataniorio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viernes-series.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewier-pr0filead0be-rf098.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virginia.fail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehouse.deals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.why-youmad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoservis.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnes.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdwatching.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabi-net.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicero.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compton.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopers.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhatudesignstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erophoto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facewwbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemstone.gifts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalstatusofwomen-conf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmmk.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goooglesearches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotoairi.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairgrowfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinki.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemorrhoids.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jones.catering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicy-company.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landmark.town'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marion.contractors'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martha.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meth-stream.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mincraft-hosting.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesarena-bg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysticmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeographicwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newwikipedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafuso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porno-moms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumnarrativetodiscover-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesjonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protargets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quebec.computer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherwimwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonarcapetown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialist.style'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'these.bargains'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomas.gripe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toxicpro.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubirataniorio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viernes-series.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewier-pr0filead0be-rf098.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginia.fail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehouse.deals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'why-youmad.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e86eac7470000040300473045022100fc6e595ce149b970148c0abfbeb1571e2b687940465bc38c4cc44cb553830afe022008567712d024d7a5b5196a6830b6ee3e26d7dbb4a2fda7926d4176cba0b9e035007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e86eac7a80000040300473045022100d4800436906daeae7389a99e036273fa9317f9cc261e318c49ebba9c328e616e022018cece86ad42d5ad417f52f6997fab65d4c51c0274091cb4711895fd296782d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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