psufootball.com

Issued by R3

About this certificate

This digital certificate with serial number 04:90:14:ad:ed:97:a3:31:e5:2d:7b:86:b8:85:72:33:40:34 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=psufootball.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:14:ad:ed:97:a3:31:e5:2d:7b:86:b8:85:72:33:40:34
Serial Number (int): 397477292209873385149186128277593738395700
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:90:63:71:0a:4a:f4:7c:82:c0:d7:40:a5:af:08:09:42:da:d7:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b7:33:50:e6:e9:06:53:50:34:77:14:12:98:60:5a:05:0a:60:4b:68
Fingerprint (sha256): ce:d5:a7:4e:f8:47:47:b7:3b:8f:36:ab:af:56:94:9d:07:25:8a:78:6a:02:0c:80:bd:31:93:44:57:03:20:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate psufootball.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psufootball.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adaven.com
*.baohiemtructuyen.com
*.bietkich.com
*.blackmillionaires.com
*.comosedice.com
*.controlmybeam.com
*.countrytonightpf.com
*.cuijas.com
*.dreadlockwax.com
*.encuadernadora.com
*.ficcio.com
*.flexibilite.com
*.freake.com
*.garywilliamsgolf.com
*.hippocampo.com
*.incorect.com
*.jcpcredotcard.com
*.juwita.com
*.maquita.es
*.masder.com
*.meltedgemscosmetics.com
*.merad.com
*.nayaritenlinea.com
*.novosamigos.com
*.opror.com
*.orsm.org
*.painsinc.com
*.pard.net
*.perik.com
*.pickupparts.com
*.psufootball.com
*.radiokaribena.com
*.randw.com
*.rascle.com
*.renschler.com
*.rw-disigner.com
*.sahebjam.com
*.savewithme.com
*.shoplyfterm.com
*.southernbellecharm.com
*.sprzet.com
*.sunsetproduction.com
*.szkoly.com
*.thanhhuong.com
*.thedaddys.com
*.tinon.com
*.tshirtscafe.com
*.uniboyaca.com
*.viziers.com
*.yubian.com
adaven.com
baohiemtructuyen.com
bietkich.com
blackmillionaires.com
comosedice.com
controlmybeam.com
countrytonightpf.com
cuijas.com
dreadlockwax.com
encuadernadora.com
ficcio.com
flexibilite.com
freake.com
garywilliamsgolf.com
hippocampo.com
incorect.com
jcpcredotcard.com
juwita.com
maquita.es
masder.com
meltedgemscosmetics.com
merad.com
nayaritenlinea.com
novosamigos.com
opror.com
orsm.org
painsinc.com
pard.net
perik.com
pickupparts.com
psufootball.com
radiokaribena.com
randw.com
rascle.com
renschler.com
rw-disigner.com
sahebjam.com
savewithme.com
shoplyfterm.com
southernbellecharm.com
sprzet.com
sunsetproduction.com
szkoly.com
thanhhuong.com
thedaddys.com
tinon.com
tshirtscafe.com
uniboyaca.com
viziers.com
yubian.com

Other certificates including the domain name psufootball.com

(limited to 100 certificates)
psufootball.com
psufootball.com
2gfhjdfghjfg.online
psufootball.com
psufootball.com

Certificate

The complete raw certificate details for psufootball.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwpswJ7RsqpKW9oonWNEp
k9ozRBOPInxwErcZYGuBY1uI40yQ8Bz7VxGq5S0nGgDREtDkbktem4jF6FHDk7TC
ZLXGcqC4MhbG7z5Pc2M7V2pnPaQoxSLzIRpbcwbTyq1Dm3VSKUpSyFGKzfNlB/6x
ffS/V9dmisKfvNz7iZS5tJEA0PRYOVWf0sxoYc7H8suSyKErB2VyTIjlmfelvloA
sqOrSSKec1vaTCDB0+mWGOjY2d7ZaLoeZdmAMT2l4iY3CXFJKHeHNW05Yr0O7pQG
ve/9ZIxnp21iv/nCRiOa2u6uL/S632lgopUwrqlF9y8fjvxZ+Mhafhdb6Wq11GO6
aAutktTqVZO2yAfQUAcaKgd/sBZzcs+MrIwP9CwuM6jY9Tj0zh+lv1FWe8N3xgLj
6wHpzZHh5tLdOq04dygT2p0Ev5KPAgIV/60j6CTCi4t1YkjQSUUjCsc+FJX3FXOE
S8DwNTf35SIRwis3XGU3lTshInjD9IHTZ097u3AB0FqhkVCcyIgJqUbaO8PYPtSE
lM86v4XR6jm0EtnxRWbg8LOZP6KoTIiKULtISCyb7G1MD3J5gGT5kakKXZTKnfQM
oD80N77EBR5tBDRSz9Hbq7qlrFcU4/vqlltUJnXCi5W8y/WTg2ckI8l2B8xq5Hpb
9SN/JLYl9303bI4wqTqngDcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397477292209873385149186128277593738395700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 09:45:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 09:45:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psufootball.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793924043865614115846549810215047014112162815643593992249638801091197937850758572732845559877582115308139176957007517858292349640067425311512514267904389968977906213954946400270868537587463795946943085430358084661983003325686100877658788725356501721333026720584857743417858990773675340804731742854815434436270274447348297049137255978794455866119736369298474785233059382547613887108300794060180924052352208703977648412485447254688317310517617694164356811605752818080229342423545614030615439979974679715927972408231796564626943190185679588286501646894455776902232110248301116936822405495228373738519734749242960200866994362232659261024235576007132498774814195318145765475862836484984202371029636815139592755320793350737741976121590539903368282613761208896755624106129246488140251940824032437659549824450571702146779938105994036224977777092630876471170678207724944859750754431710948906031533168617662336210349638698497448505302537666456391813216707134780540657562153913277971446436549811695197073928815231439300502550642681050315915613631466236570885703167189553095399206580385146418221923930733283046831387595737841297531240633787642305841523600347635436773989532457704230345915504643709669292641107960271134292714689596563870588567607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d29063710a4af47c82c0d740a5af080942dad700
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1662 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baohiemtructuyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bietkich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackmillionaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comosedice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controlmybeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countrytonightpf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuijas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreadlockwax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encuadernadora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ficcio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flexibilite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garywilliamsgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hippocampo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.incorect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcpcredotcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juwita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maquita.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meltedgemscosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nayaritenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novosamigos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orsm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.painsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pickupparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psufootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiokaribena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rascle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renschler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rw-disigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sahebjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savewithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoplyfterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southernbellecharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprzet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunsetproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.szkoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thanhhuong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedaddys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tshirtscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniboyaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viziers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yubian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baohiemtructuyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bietkich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackmillionaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comosedice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlmybeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrytonightpf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuijas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreadlockwax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encuadernadora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ficcio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexibilite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garywilliamsgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippocampo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incorect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpcredotcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juwita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maquita.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltedgemscosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nayaritenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novosamigos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orsm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickupparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psufootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiokaribena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rascle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renschler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rw-disigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahebjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savewithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoplyfterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernbellecharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprzet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szkoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanhhuong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedaddys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tshirtscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniboyaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viziers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yubian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d026d06fe000004030047304502207365b1eb35035e2293d1cb925a9eb4d71f9d2b5cd136eb484ddc9f84dbe251110221009ab24fe45e88e30abf37e5c5ed4a0233ea946a122fe4a13d4b37c87b19b5b82a0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d026d06b9000004030046304402204092bee2ff3b36e2070afe46d8d1cf4473c45075433a41ce1df8af92fa37a70402200ab410d87dc32f40046ab1a83d4a3ff7eb9abe679f807e142cce3ddc38bd03fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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