nccaa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5f:e5:29:74:15:92:f6:a4:bd:f3:d2:20:ec:bd:09:35:39 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nccaa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5f:e5:29:74:15:92:f6:a4:bd:f3:d2:20:ec:bd:09:35:39
Serial Number (int): 293968291102444628053270996588776433202489
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:1f:5f:b6:84:64:2f:a4:22:ef:3d:a9:18:b0:e2:00:c3:d5:01:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:f6:ba:43:95:1a:8d:87:3d:8e:83:a1:d8:b9:0d:f2:78:e5:f2:48
Fingerprint (sha256): 9a:70:78:01:9c:87:a6:82:71:c4:19:e6:d2:07:04:aa:b4:2c:62:f4:af:59:3a:f1:32:9f:af:bc:e0:c5:ba:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nccaa.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nccaa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alibuda.com
*.autoservis.pro
*.brillianceschool.com
*.btmexlex.info
*.cabi-net.pro
*.dejung.com
*.dhatudesignstudio.com
*.diyana.com
*.dtaposse.com
*.ebaybooks.com
*.edmans.com
*.erophoto.info
*.escalamadrid.com
*.facewwbook.com
*.fanatic-cs.info
*.ffekkai.com
*.globalstatusofwomen-conf.org
*.globeapts.com
*.gmmk.pro
*.gorodovoy.com
*.hisroyalfamily.com
*.hjg.au
*.ijijiji.com
*.intimus.site
*.juicy-company.com
*.katem.com
*.lovebackmaulana786.com
*.machantcreditunion.com
*.mincraft-hosting.pro
*.moviesarena-bg.info
*.nationalgeographicwild.com
*.nccaa.com
*.newwikipedia.org
*.parafuso.com
*.parcels.us
*.porno-moms.com
*.premiumnarrativetodiscover-today.info
*.profesjonal.com
*.protargets.com
*.restaurantrecovery.org
*.sherwimwilliams.com
*.sonarcapetown.com
*.tatevik.com
*.toxicpro.xyz
*.ubirataniorio.org
*.viernes-series.com
*.viewier-pr0filead0be-rf098.info
*.why-youmad.com
*.yomikikase.info
alibuda.com
autoservis.pro
brillianceschool.com
btmexlex.info
cabi-net.pro
dejung.com
dhatudesignstudio.com
diyana.com
dtaposse.com
ebaybooks.com
edmans.com
erophoto.info
escalamadrid.com
facewwbook.com
fanatic-cs.info
ffekkai.com
globalstatusofwomen-conf.org
globeapts.com
gmmk.pro
gorodovoy.com
hisroyalfamily.com
hjg.au
ijijiji.com
intimus.site
juicy-company.com
katem.com
lovebackmaulana786.com
machantcreditunion.com
mincraft-hosting.pro
moviesarena-bg.info
nationalgeographicwild.com
nccaa.com
newwikipedia.org
parafuso.com
parcels.us
porno-moms.com
premiumnarrativetodiscover-today.info
profesjonal.com
protargets.com
restaurantrecovery.org
sherwimwilliams.com
sonarcapetown.com
tatevik.com
toxicpro.xyz
ubirataniorio.org
viernes-series.com
viewier-pr0filead0be-rf098.info
why-youmad.com
yomikikase.info

Other certificates including the domain name nccaa.com

(limited to 100 certificates)
nccaa.com
perra.com
*.abordo.com
nccaa.com
nccaa.com
nccaa.com
unlockiphone6.com
nccaa.com
nccaa.com
samanali.com
caminaconmigo.com
nccaa.com
caminaconmigo.com

Certificate

The complete raw certificate details for nccaa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsGnZHEwtA4kxsfp0DT6o
iYaO2gYlDRvjW6+mGwG7KWaCQE56QiYsLTRBGE2n2co0m7yaCqmtFb5LjGuBwxc6
iphjZhmTg57avSfMLcbkdTn39OfCqP/SmbFk4Wp/pgYkXOG/LzHDJWzS45tn1xiM
SnnfPk00hz3JnHpcLuI4KH8HA3zX4Lp0LAjhX6gjRhDCbHaRDP7+a6fr1x2ktGpH
mFwpmY7LsgAoygqwtYYF665wVrBwE6Pfi6KR1Name/ka56LRdvL1pGDuFbqPFg6u
fRjEu+gii7hdE26n+2vybnKLQIXPt/6LjrnhYCseFNXRRYOBoVIWxNpVY91H2hSv
4dBctA0LqhlRTGCySJ7fOtW2BR3I2qnCQ0NoAD7aVUQ8vYwQgsv/XBoTpGFhukeC
Fq8IVoN+/8eswXCylkXaNIPLn1M0rrv7tCe+bHjp/W0YnAVmK5FlPpljUsuIeALj
efLFhU+WTKDZ4mwNdT24zK/p8+Uahx6II/9sExUY3xQv4rFFdtnXz8yBX1xjQlL3
lOdLGByPRVnGUxAmJ31mXJ1jjVryYMXr3dNcxqCSBNG0XlX9+O1T2fywKVTsCWmR
hxsNjwHo5rKPBp0TlgYGyGqCXupyAsU/Pd0HPgnlEDg/auFIq4FI+RJ3Ug9gJeGG
jq5S0sg+2hQOhhmYMncWAokCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293968291102444628053270996588776433202489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 21:17:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-25 21:17:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nccaa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719704162707751297428716460045704124755705363553873838242705504696072868363807428373918107641549221289818618824474520233395826379378007396193441821641486345309871661408750208398252829001359117558045637139364975436372673844820929377143981453366317387758687897974308859159934952769680616456883533382959711143064779531122757625023877655039568184341157323438173614294410846680691217043484385946556761991763627781373113052823326269628982876655386493200288713850173409626681533032491753142423499112056095979733550228741747172103259870337525334527732866117624915576580115137415207221518469304884142723643139134203691939382758332600793048496236147990315277513413602936962396303904381529344921449372879179129869996111183550097014119084174015632729544406087211367596841823809455588636151899591569198509359497030424399233993292114361253791041675571293516685953944845374033181607952619373069073863813986329910277763082486948922405935511284237244366955126260562221786124053137959872234030727997199666817828269216147607611756297943351025044971445072612896241096535145027378754408084898448133524289516678711593903722099265849124422323490617517230390983482479797409591629548911094864549915957057941990160270186271456686822841617647069422693891048073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b1f5fb684642fa422ef3da918b0e200c3d5019b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1822 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alibuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoservis.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brillianceschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btmexlex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabi-net.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dhatudesignstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtaposse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erophoto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escalamadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facewwbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanatic-cs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffekkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalstatusofwomen-conf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globeapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmmk.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gorodovoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hisroyalfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjg.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intimus.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juicy-company.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovebackmaulana786.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.machantcreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mincraft-hosting.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviesarena-bg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalgeographicwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newwikipedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parafuso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parcels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porno-moms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premiumnarrativetodiscover-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profesjonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protargets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurantrecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherwimwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonarcapetown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tatevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toxicpro.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubirataniorio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viernes-series.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewier-pr0filead0be-rf098.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.why-youmad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yomikikase.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alibuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoservis.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brillianceschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btmexlex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabi-net.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhatudesignstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtaposse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erophoto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escalamadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facewwbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatic-cs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffekkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalstatusofwomen-conf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globeapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmmk.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorodovoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hisroyalfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjg.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intimus.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicy-company.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovebackmaulana786.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'machantcreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mincraft-hosting.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesarena-bg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeographicwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newwikipedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafuso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parcels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porno-moms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumnarrativetodiscover-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesjonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protargets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantrecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherwimwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonarcapetown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toxicpro.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubirataniorio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viernes-series.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewier-pr0filead0be-rf098.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'why-youmad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yomikikase.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fbc2115be0000040300473045022100cd5242c3b5e8b46080f79b505182c2a391bd29e39e3760283f18c8a661021d0102204cb4be7dd4f046ee98c42555a9f070d82690ff760b4557c0372b954623b020aa00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fbc2115dd00000403004630440220250624fb833a85fd1428ee8c7ea059178b9851a76b673830a1bef388d9cf75fe02205c2bcfa4c3cbcceeb40ce22b45298c237731cb929ff99b866d4d660eb2705311
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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