legacalcio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:00:2b:c2:db:ec:ff:bf:d7:cf:4a:65:22:de:3a:72:ab:39 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacalcio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:2b:c2:db:ec:ff:bf:d7:cf:4a:65:22:de:3a:72:ab:39
Serial Number (int): 348507312297074993880141223102733075262265
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:fd:79:ef:27:79:7b:32:c7:2f:f2:f1:bb:2b:4a:9f:a5:c7:5f:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:a5:10:fa:9d:88:16:1b:30:76:a8:d7:3e:b9:0c:64:a1:c6:f6:e5
Fingerprint (sha256): c0:df:95:2e:1d:b1:28:08:d3:85:dc:76:ef:50:9c:4e:14:f0:c1:04:93:33:30:f2:47:11:2b:44:db:9f:9b:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacalcio.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacalcio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aedna.com
*.angelesbaseball.com
*.argosycruise.com
*.astorgford.com
*.atwoodmobil.com
*.axcuweather.com
*.bagelcity.com
*.bananarepupublic.com
*.bankofamerina.com
*.banofofamerica.com
*.basilstreetgallery.com
*.belgiancookieiron.com
*.braziliangame.com
*.capitatalone.com
*.clasificadoshipicos.com
*.connetitcut.com
*.cupond.com
*.elmotorista.com
*.enportada.com
*.escueladenegociosonline.com
*.etahnallen.com
*.famliyfeud.com
*.fastapprovals.com
*.firstone.com
*.hammerheadsteel.com
*.hk959.com
*.ketekunan.com
*.legacalcio.com
*.llexa.com
*.lykkemay.com
*.mainstays.com
*.minecraftsins.com
*.mlbplayoffs.com
*.mymahj.com
*.nchomeloan.com
*.negociosdeexito.com
*.nfleagles.com
*.predatorhunters.com
*.sixflagssanantonio.com
*.sonnenshein.com
*.sorror.com
*.spaits.com
*.sukniewieczorowe.com
*.sunshiny.com
*.thepirtatebay.com
*.thisweeksnews.com
*.tidketmaster.com
*.twettor.com
*.unempolyment.com
*.utahchampions.com
aedna.com
angelesbaseball.com
argosycruise.com
astorgford.com
atwoodmobil.com
axcuweather.com
bagelcity.com
bananarepupublic.com
bankofamerina.com
banofofamerica.com
basilstreetgallery.com
belgiancookieiron.com
braziliangame.com
capitatalone.com
clasificadoshipicos.com
connetitcut.com
cupond.com
elmotorista.com
enportada.com
escueladenegociosonline.com
etahnallen.com
famliyfeud.com
fastapprovals.com
firstone.com
hammerheadsteel.com
hk959.com
ketekunan.com
legacalcio.com
llexa.com
lykkemay.com
mainstays.com
minecraftsins.com
mlbplayoffs.com
mymahj.com
nchomeloan.com
negociosdeexito.com
nfleagles.com
predatorhunters.com
sixflagssanantonio.com
sonnenshein.com
sorror.com
spaits.com
sukniewieczorowe.com
sunshiny.com
thepirtatebay.com
thisweeksnews.com
tidketmaster.com
twettor.com
unempolyment.com
utahchampions.com

Other certificates including the domain name legacalcio.com

(limited to 100 certificates)
belgiancookieiron.com
totaltrucks.com
myaccountatt.com
elmotorista.com
legacalcio.com

Certificate

The complete raw certificate details for legacalcio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxvlqRy5qzQtECyxIlcNX
i/zm5XM+DqQZFj41CVSO1uaabRjCXjzvpkGZDRxNb+wGsZwMsHrz9TxtboWHkvvZ
nAcBRjBgF8196UN2prZWr9PoQMYBqwJNfF+vZWE2Waosg0I9ebl0LRhkY21kH/AH
sCSBh79qqlPgcHVzUSfmxJjpn/nPTEGa1It3Ru2AyfM1Xd0dFCtVaMfa9cXNuqR0
5Qhj9ZKDVH/6dHkvBN8yoLNrQt6qQem/ybLUFzcY1MWZ3Fma6hwoi8h9sPswD+BB
OFdoSw5nLVMYsaT6CGQwHX4TU+cMHkDm12tSTgkSl8jv/3gL5Pi2DvD4sj5XLHIQ
+okNEe8XbQesxpfAR6Eh5ReZCjJjEnKBlIZ1VOTzo4IWf7Z/w/AXgPrPuEnlxGFz
TnXn8S+U/MUSPYtMUvM5pdHc5Hz0MLXXDIHhnk+SjPwu6XvT2dxnJ3dJJIL4r0mp
BSh8ON8zBvcIPzcgnURthp4hPd9Z30jHTzHIwqosarrCTkm9OzpLiDbRfnvYAotC
IF1dEUUyKtvdnS1MZBXA7+3udMPXcoiakeoC/1zSPwEXYA019GBesRTUYpg2tjOm
MFVG73uhIh3CBC5KvFy4lcHajpuTkVmz+s0hQ2/fYugJeXijgkPgoeZPFpF82+dX
OnHFVmQs8sPntU3SM1FqO8sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348507312297074993880141223102733075262265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 17:13:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 17:13:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacalcio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811744232622775785677526366424354958530515281500515118439983072539460891985409445775411097797567601231412950420738307184500746491582195030931652722126436066389355863990581062361591614288272051161583613752580005140909964009177517144315490717389999626296398087082709620746676620732127697993395289785629666410710226311183703160839037101359741689218304438315976368196508294043149469366029959342673448668541329848588582241304866450614056052790796201115659428496800997323989224324812111526163577704875271481714240130937752359813000825187040059411491461620339864395563190383754870140665281656519496315607366980121056273343124875371520910387251754924786230945338039133929571674916776204469266966099689338433593297056168988786309139803823970425961132308757032675222033953803174556237984343701753133239730313735272332607947238557379557416732581039882375908127169909039311238261180859651513927349828978501419378908123875354208438393910203789323825530850483592456831333730114010680099477695508701762025934524329967073782324946500346225144273237380285331813734907999268498382576756420625677916958371643269031631328293547917838250863597343413302566285501383870826207029986026611077582760692817418595008643419222213936462498109187099215936568835019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23fd79ef27797b32c72ff2f1bb2b4a9fa5c75fb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aedna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelesbaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argosycruise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astorgford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atwoodmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axcuweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bagelcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bananarepupublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankofamerina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banofofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basilstreetgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belgiancookieiron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braziliangame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitatalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clasificadoshipicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connetitcut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cupond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmotorista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enportada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escueladenegociosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etahnallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.famliyfeud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastapprovals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hammerheadsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hk959.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketekunan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legacalcio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llexa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lykkemay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainstays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecraftsins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlbplayoffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymahj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nchomeloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negociosdeexito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfleagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.predatorhunters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixflagssanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonnenshein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sorror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sukniewieczorowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunshiny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepirtatebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisweeksnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tidketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twettor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unempolyment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utahchampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aedna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelesbaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argosycruise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astorgford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atwoodmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axcuweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagelcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bananarepupublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofamerina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banofofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basilstreetgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgiancookieiron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braziliangame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitatalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clasificadoshipicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connetitcut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmotorista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enportada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escueladenegociosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etahnallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famliyfeud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastapprovals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hammerheadsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk959.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketekunan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacalcio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llexa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lykkemay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainstays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraftsins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlbplayoffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymahj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nchomeloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negociosdeexito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfleagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predatorhunters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixflagssanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonnenshein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukniewieczorowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunshiny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepirtatebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisweeksnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tidketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twettor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unempolyment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahchampions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017092277ca50000040300483046022100c92589150c7828de1516aea434c38e4938729af2e4e0c62a9289c569452c2033022100dba4ebb330db7385d100a991c01444f2523321759a746d13d5db94c33e83a5550077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017092277cdb000004030048304602210086ff132c3b2b4f53633797d24ce48891b63721545097d2b85646d79a5d892f74022100f5da2b171fe24a0806d17c4222c675a2d2611eb070e3082ee200d6e35d2a8db3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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