nfltop.us

Issued by R3

About this certificate

This digital certificate with serial number 03:04:06:c2:10:87:00:9a:9b:9c:41:44:6d:38:42:59:ee:49 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nfltop.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:06:c2:10:87:00:9a:9b:9c:41:44:6d:38:42:59:ee:49
Serial Number (int): 262706970271744301552800387631444947234377
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:d3:47:c2:f4:77:a0:74:9d:e6:40:3c:16:5b:8f:a6:0f:d8:cd:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:3a:6a:b1:8e:29:b3:61:32:f7:af:f4:48:22:f3:d3:92:da:14:9f
Fingerprint (sha256): 73:5a:50:ea:21:a2:db:b6:c0:de:33:20:5b:d4:9b:8b:3b:db:2a:96:e4:de:48:34:01:4f:6b:db:fa:bb:49:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nfltop.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfltop.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amexgiiftcard.com
*.amgrfhwcqb.com
*.animekida.tv
*.anthrolpologie.com
*.autoguitarhero.com
*.bentrods.com
*.bosslist.co
*.cairo-booking.com
*.coalmine.com.au
*.damejidlo.com
*.destockage-canape.co
*.dividendoemocional.com
*.elurbanoweb.com
*.filethietke.com
*.flatpaneltv.com.au
*.fncbr.co
*.gamtrex.com
*.ginkz.co
*.hellokavita.net
*.ihfstravel.com
*.k12parentportal.com
*.mashmall.com
*.metodoadestramento.com
*.mp3hits.co
*.muswellbrooklandscapesupplies.com.au
*.mxwheels.com
*.ncoe-defrost.org
*.newbalanve.com
*.nfltop.us
*.notyourgod.co
*.ospital.com
*.ownerspenthouse.com
*.partnersone.com
*.pdkfundraising.co.uk
*.pianoforspecialneeds.com
*.pine-this.org
*.replaceents.com
*.rvxpwmgoje.com
*.seaviewcabin.com
*.silvergenerator.com.au
*.sironadecor.com
*.smokesignalstmt.com
*.stepsislovesme.co
*.sunlightgem.com
*.tjxrewrads.com
*.totalsolarsolutions.net
*.tubemasterpro.com
*.universobebe.com
*.willowpipe.com
*.yinczpvw.com
amexgiiftcard.com
amgrfhwcqb.com
animekida.tv
anthrolpologie.com
autoguitarhero.com
bentrods.com
bosslist.co
cairo-booking.com
coalmine.com.au
damejidlo.com
destockage-canape.co
dividendoemocional.com
elurbanoweb.com
filethietke.com
flatpaneltv.com.au
fncbr.co
gamtrex.com
ginkz.co
hellokavita.net
ihfstravel.com
k12parentportal.com
mashmall.com
metodoadestramento.com
mp3hits.co
muswellbrooklandscapesupplies.com.au
mxwheels.com
ncoe-defrost.org
newbalanve.com
nfltop.us
notyourgod.co
ospital.com
ownerspenthouse.com
partnersone.com
pdkfundraising.co.uk
pianoforspecialneeds.com
pine-this.org
replaceents.com
rvxpwmgoje.com
seaviewcabin.com
silvergenerator.com.au
sironadecor.com
smokesignalstmt.com
stepsislovesme.co
sunlightgem.com
tjxrewrads.com
totalsolarsolutions.net
tubemasterpro.com
universobebe.com
willowpipe.com
yinczpvw.com

Other certificates including the domain name nfltop.us

(limited to 100 certificates)
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
therealtoriblack.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
chilgozay.com
comobajar10kilos.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
goodreaads.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
nfltop.us
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
sni160660.cloudflaressl.com
free-amazon-gift-card-codes.com

Certificate

The complete raw certificate details for nfltop.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262706970271744301552800387631444947234377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 19:27:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 19:27:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfltop.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694230906634174847775547201561368624950635488080413889578592390157535046640230744695135787450655194876877227406697270749942364949295964350330381570746963211759672485609378510061233498778555268324036067769396964282970134834164846306757217037876976303624091086458118135629596126606486698665737197495629768035408329262177699581919264522125977064736785846945786153353294933523924148912291046972407969180219053990855559935182004900250867858901762835307567000358094290965752024940531828355625030853603678882100248025986833627964255306017000959086945578681261883937313784959143561255471642950206595995110165410312603903747336750643588891257985680048529598716788486885294227225799946647785071656194085278790170186689281909114035046394142014099877422800408265385734099598550881683109442730272005045431943270034147667671469316925171445984405393210156932466423258654089571558827125986299312041117058725597312302369992539709518031257382849634352869541736488613916329519324165547674408375020971529690674390298382584474497700203438396204383094465717604523221182615832557184450793553732409490468791121816199276888190550238066217735213383314245801153536375049470099468554538350812316486943142107884998492196186131034270991315644868640953013003667731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69d347c2f477a0749de6403c165b8fa60fd8cd1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amexgiiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amgrfhwcqb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animekida.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anthrolpologie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoguitarhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bentrods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bosslist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cairo-booking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coalmine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damejidlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.destockage-canape.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dividendoemocional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elurbanoweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filethietke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flatpaneltv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fncbr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamtrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ginkz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellokavita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihfstravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k12parentportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mashmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metodoadestramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mp3hits.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muswellbrooklandscapesupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mxwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncoe-defrost.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newbalanve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfltop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notyourgod.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ownerspenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnersone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdkfundraising.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pianoforspecialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pine-this.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.replaceents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvxpwmgoje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seaviewcabin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvergenerator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sironadecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smokesignalstmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stepsislovesme.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunlightgem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjxrewrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalsolarsolutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubemasterpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universobebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willowpipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yinczpvw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amexgiiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amgrfhwcqb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animekida.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthrolpologie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoguitarhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentrods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosslist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cairo-booking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalmine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damejidlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destockage-canape.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dividendoemocional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elurbanoweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filethietke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatpaneltv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fncbr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamtrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginkz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellokavita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihfstravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12parentportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metodoadestramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp3hits.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muswellbrooklandscapesupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncoe-defrost.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbalanve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfltop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notyourgod.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownerspenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnersone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdkfundraising.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianoforspecialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pine-this.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replaceents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvxpwmgoje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaviewcabin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvergenerator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sironadecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokesignalstmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepsislovesme.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunlightgem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjxrewrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalsolarsolutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubemasterpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universobebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yinczpvw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9a87464200000403004730450220435ddfdadb71a9926fa748bdd91a601edaca35e057375d82c5b0bac2557ce92102210095d2fab32931c4617cb4c0aad9b088fbda76d8c5bbfa636b309140b3a40cf69f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9a874688000004030047304502204db0081993a9b848877852c45374bd46a92430d9b6dceadf9104c49119899e3f022100a422eea666ac834c8124c613ca74b15a1e9c28ae407ef3794d12f99a70d90ae2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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