wpm.ccmp.eu

Issued by R3

About this certificate

This digital certificate with serial number 03:31:bd:a3:93:16:9b:88:1f:07:68:ec:11:3b:3d:63:2f:7b was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wpm.ccmp.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:bd:a3:93:16:9b:88:1f:07:68:ec:11:3b:3d:63:2f:7b
Serial Number (int): 278262767193303380975532516713868831174523
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:f8:14:92:4c:94:4d:f2:be:d1:b9:9c:b4:13:cd:41:4c:05:42:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 84:17:8b:25:8f:69:12:a8:78:f3:2e:ce:6a:e2:ba:19:01:84:b7:5d
Fingerprint (sha256): d8:27:1f:48:ec:5d:af:d9:7d:38:77:32:e2:f6:96:f5:82:ca:a3:4a:ed:6b:eb:01:eb:18:b3:01:a5:5a:66:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wpm.ccmp.eu

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wpm.ccmp.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awswpm.ccmp.eu
deals.teesnap.com
flight.deals.allegiant.com
i.a.starbucks.com
i.anniescatalog-news.com
i.arkbluecross.info
i.athletics.belmont.edu
i.athletics.duq.edu
i.athletics.uconn.edu
i.athletics.usfdons.com
i.basspronews.com
i.c.auntieannes.com
i.c.carvel.com
i.c.cinnabon.com
i.c.jamba.com
i.c.mcalistersdeli.com
i.c.moes.com
i.c.schlotzskys.com
i.cadastropontosmultiplus.com.br
i.cd.thelumery.net.au
i.cheetahdemo.com
i.club.lacoste.com.br
i.e.allegiant.com
i.e.flemingssteakhouse.com
i.e.pchfrontpage.com
i.e.talbots.com
i.e.teesnap.com
i.edm.sgx.com
i.em.advantagememberservices.com
i.em.amica.com
i.em.answerfinancial.com
i.em.collectionsetcpremiersavings.com
i.em.disneyemailexpress.com
i.em.disneyrewards.com
i.em.freeshipping.com
i.email.bakersdelight.com.au
i.email.eviteideas.com
i.email.pens.com
i.email.perfectpen.ca
i.email.sunseekerresorts.com
i.email.watchabc.com
i.eml.hearstmags.com
i.h1.hilton.com
i.mail.express-scripts.com
i.mail.markandgraham.com
i.mail.pbteen.com
i.mail.potterybarn.com
i.mail.potterybarnkids.com
i.mail.rejuvenation.com
i.mail.thekeyrewards.com
i.mail.westelm.com
i.mail.williams-sonoma.com
i.marketing01.email-allstate.com
i.northerntoolemail.com
i.promo-flash.newegg.com
i.promo.global.newegg.com
i.promo.newegg.ca
i.promo.newegg.com
i.promo.neweggbusiness.com
namwpm.eccmp.com
snamwpm.eccmp.com
sta.wpm.ccmp.eu
stscdn.eccmp.com
tom.bhan.cheetahmail.com
wpm.ccmp.eu
wpm.marketingsuite.jp

Other certificates including the domain name ccmp.eu

(limited to 100 certificates)
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wts.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
returnpath.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
ats.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
rts.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
r.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
sts.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
login.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
datascience1.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
returnpath.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu

Certificate

The complete raw certificate details for wpm.ccmp.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoLeVEFt+SzkkCEMFmTF
OdLlmhv8eIed+jWuj6ExsuYs9M22WjgOu0APhDNKstw++J0ziZWXKZnvTRdo5gD7
2B8neN4EErX/c4ePaXkD9l4B9l/d71wRNRAhILCtd8s0yKPJqrwIJzTCU+755IH+
Vr7/rEYjUlowa4YfFQExb4Ba1RnVyfJZ9x1VgXITeFqIHClvbMnbxQHJGUiYNF91
vCmxtWK1sz+mkcrnRv/MlyZo/7hXn1eSBSWTt1zqauE2mDhR/Aijz4OJcxAfMkw1
T6xytVM3bsiIwHuHhgHMyB6a6f9xaufZQ6b5SL1sTi7DNywxnviSkUxXEZ5gJlyV
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278262767193303380975532516713868831174523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 21:08:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 21:08:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wpm.ccmp.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23039905153129157801843163044228690560108228639753052874879443760275524349331438812832752351656395431068412455558415637341447341621484742982239144325444080918340866060677572839731656283358429263831222630965847096517924066871864147999916206848696540409675756422114584462234131530359290957397871583551360396474187167850489040815370520890806494306096387194509532246100282007060621587830009191876967793224612019997658310832885634242464903718923704915194994465129975947271218700637266475472007041253890444581441898404385950349157475886177200224274399170493746656398811436667665503588340418430058571412095792125992020776323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17f814924c944df2bed1b99cb413cd414c0542ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1506 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awswpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals.teesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight.deals.allegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.a.starbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.anniescatalog-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.arkbluecross.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.belmont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.duq.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.uconn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.athletics.usfdons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.basspronews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.auntieannes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.carvel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.cinnabon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.jamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.mcalistersdeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.moes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.c.schlotzskys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cadastropontosmultiplus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cd.thelumery.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cheetahdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.club.lacoste.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.allegiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.flemingssteakhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.pchfrontpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.talbots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e.teesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.edm.sgx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.advantagememberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.amica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.answerfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.collectionsetcpremiersavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.disneyemailexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.disneyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.freeshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.bakersdelight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.eviteideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.pens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.perfectpen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.sunseekerresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.watchabc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.eml.hearstmags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.h1.hilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.express-scripts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.markandgraham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.pbteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.potterybarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.potterybarnkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.rejuvenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.thekeyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.westelm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.williams-sonoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.marketing01.email-allstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.northerntoolemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo-flash.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.global.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.newegg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.newegg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.promo.neweggbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namwpm.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snamwpm.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta.wpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stscdn.eccmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tom.bhan.cheetahmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.marketingsuite.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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