nfltop.us

Issued by R3

About this certificate

This digital certificate with serial number 03:22:87:5d:34:75:b9:8e:25:b7:5e:86:dc:f1:18:f7:84:ed was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nfltop.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:87:5d:34:75:b9:8e:25:b7:5e:86:dc:f1:18:f7:84:ed
Serial Number (int): 273086387997643876055887151514413400818925
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:52:2c:42:eb:20:87:23:2e:3c:68:8a:c0:07:d9:db:59:57:f3:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:30:3e:50:b4:1b:65:0e:37:cf:58:78:a1:aa:9a:f9:79:24:3b:55
Fingerprint (sha256): 6f:56:a6:7d:30:d7:f2:b3:17:e8:e9:28:bf:bc:3d:af:17:58:68:8b:58:93:96:ec:b9:b3:c5:20:b2:ea:1f:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nfltop.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfltop.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9hwtek.com
*.alphastar.me
*.amexgiiftcard.com
*.anthrolpologie.com
*.asapgetbetter.com
*.benetint.com
*.bentrods.com
*.brusselsaccountant.com
*.bustyblondewhores.com
*.byethost6.co
*.callara.com
*.clerigo.com
*.ditia.com
*.esportsmentors.com
*.farbfetisch.de
*.gamtrex.com
*.harboursurfandturf.co.uk
*.innovation-america.org
*.inspireatrandom.co
*.installturborax.com
*.jarrettrealestateteamoftexas.com
*.liightinthebox.com
*.mobiloand.com
*.monetkey.com
*.mudieselclaim.com
*.mxwheels.com
*.nazzaphoto.com
*.newwaterbeautyspa.com
*.nfltop.us
*.nmichaelkors.com
*.notsocleverbot.com
*.pianoforspecialneeds.com
*.poontangtube.com
*.pvdl.us
*.reelsigns.com
*.safeclothes.com
*.shareiew.co.uk
*.sucesiones.com
*.syniaty.com
*.theschematics.com
*.thiirty.com
*.tjxrewrads.com
*.totalsolarsolutions.net
*.trove.com.au
*.uktvplat.co.uk
*.universobebe.com
*.veterasunited.com
*.viacheslav.com
*.willowpipe.com
*.xlm.com.au
9hwtek.com
alphastar.me
amexgiiftcard.com
anthrolpologie.com
asapgetbetter.com
benetint.com
bentrods.com
brusselsaccountant.com
bustyblondewhores.com
byethost6.co
callara.com
clerigo.com
ditia.com
esportsmentors.com
farbfetisch.de
gamtrex.com
harboursurfandturf.co.uk
innovation-america.org
inspireatrandom.co
installturborax.com
jarrettrealestateteamoftexas.com
liightinthebox.com
mobiloand.com
monetkey.com
mudieselclaim.com
mxwheels.com
nazzaphoto.com
newwaterbeautyspa.com
nfltop.us
nmichaelkors.com
notsocleverbot.com
pianoforspecialneeds.com
poontangtube.com
pvdl.us
reelsigns.com
safeclothes.com
shareiew.co.uk
sucesiones.com
syniaty.com
theschematics.com
thiirty.com
tjxrewrads.com
totalsolarsolutions.net
trove.com.au
uktvplat.co.uk
universobebe.com
veterasunited.com
viacheslav.com
willowpipe.com
xlm.com.au

Other certificates including the domain name nfltop.us

(limited to 100 certificates)
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
therealtoriblack.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
chilgozay.com
comobajar10kilos.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
goodreaads.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
free-amazon-gift-card-codes.com

Certificate

The complete raw certificate details for nfltop.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273086387997643876055887151514413400818925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 18:29:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 18:29:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfltop.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879595929562628809595308555868171236877698699407425479625227251671414261000416383817640590332038276598182266838265812929107335330569580631136395351627380321531211820465622210879946698029533238631819834667069569417791717852621271939629150756771993178869964278995022296697375344131436028921744226435222985287678634652717504509936981081933331846897574518263019849716873342311018720723005372112602469499709230835028541784565811637706382138265973194634433963880145216487062604217736542591975898848858648098504853129433933669284746578187902517956334631316947324470792032407740877747492075786252802725314727089739571021342784847243370731615060226621643671425843487521701769336250830234607336343158212540156884111990046594079571508277261843787256534821344533793121144489852999528760318655087943717389027435729713264222970061047629417935084246254782346584979585074614974941207428486969910280874547706040297440633348239009952207970826770446857357318816497184632830268330848723752564893815680458596299791268461518619098128769324588839615756141956541498007327445298945535631931485379172485686871806369588137903569796472315248158409296402132289052543294720181337461080564540620343121445231733901734042586460777509544266191996632308291528851700177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96522c42eb2087232e3c688ac007d9db5957f324
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1840 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9hwtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alphastar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amexgiiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anthrolpologie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asapgetbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benetint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bentrods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brusselsaccountant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bustyblondewhores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byethost6.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clerigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ditia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esportsmentors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farbfetisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamtrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harboursurfandturf.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innovation-america.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspireatrandom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.installturborax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jarrettrealestateteamoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobiloand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monetkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mudieselclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mxwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nazzaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newwaterbeautyspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfltop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmichaelkors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notsocleverbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pianoforspecialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poontangtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvdl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reelsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safeclothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shareiew.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sucesiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syniaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theschematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thiirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjxrewrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalsolarsolutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uktvplat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universobebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veterasunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacheslav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willowpipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xlm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9hwtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphastar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amexgiiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthrolpologie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asapgetbetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benetint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentrods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brusselsaccountant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bustyblondewhores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byethost6.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clerigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ditia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportsmentors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farbfetisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamtrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboursurfandturf.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-america.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireatrandom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'installturborax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarrettrealestateteamoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liightinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiloand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monetkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudieselclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazzaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newwaterbeautyspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfltop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmichaelkors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notsocleverbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianoforspecialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poontangtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvdl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reelsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeclothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareiew.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sucesiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syniaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theschematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thiirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjxrewrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalsolarsolutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trove.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uktvplat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universobebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterasunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacheslav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlm.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d044c98c8000004030047304502206b202f663847060f9d9b5e850e96113771db7e44a37e2fa5e00fd8a96cdacfd2022100a75a1f2091c6b1e264d4da5768c6a9a819241dcdc473e9a2a9dea563a580e6200076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d044c98c00000040300473045022100b897fea3a3fb063bd5cb544b2b3f6608712311e204e18a844690135f0387078502207a0c80d0321bf1edde289894fa695093dbbea57f37ea633b5c48f70a6ba42555
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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