nayfederal.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ab:f5:fd:c1:92:9d:64:58:e2:5a:1a:4c:a9:71:7a:b5:49 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nayfederal.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:f5:fd:c1:92:9d:64:58:e2:5a:1a:4c:a9:71:7a:b5:49
Serial Number (int): 319852120974954806583082812312245086369097
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:27:c1:0b:f4:80:01:d3:4f:c2:5d:f4:9d:c2:f8:8f:db:4b:7a:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:31:d6:2b:48:04:e9:3b:e7:70:9f:e5:68:14:5a:eb:25:47:6c:cc
Fingerprint (sha256): e8:99:f6:94:6d:ca:73:9c:25:83:44:72:54:5a:92:d6:b1:e4:9e:98:56:a2:f2:a7:89:73:6f:98:ff:27:ea:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nayfederal.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nayfederal.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aarpmdicareplans.com
*.bl8nds.com
*.bondimining.com.au
*.correodiario.com
*.crtv.es
*.eetlustremmers.nl
*.ekleinanzegen.ch
*.evchargerseurope.com
*.fableticss.com
*.fat-burner.dk
*.fat-burner.eu
*.fat-burner.pl
*.fatburner.dk
*.ffcyp16.com
*.flavourcombinations.com
*.generalrobotix.com
*.granadainsurane.com
*.haemorriiden.de
*.k22fx.com
*.katespadw.com
*.kolinsue.com
*.kuntur.com
*.logicsapp.com
*.melting-pot.co
*.nayfederal.org
*.news-lelune.com
*.ntrnaturalbio.com
*.oragami.me
*.pacasylotesderopanueva.com
*.poperinge.com
*.pronuub.com
*.savstaholm.com
*.schuessler-saltse.de
*.secretmoneysystems.co
*.solevar.info
*.thecommongoodparty.com
*.three-one.com
*.toyamadeai.com
*.transcribers.com.au
*.trivgao.com
*.tropfen.com
*.uel.com.au
*.virtualevals.net
*.vishwavalleyhealthcare.com
*.witredux.com
*.wovenwraps.com.au
*.wwwccu.com
*.wwwprimelending.com
*.wwwsurehealth.ca
*.xiaobai188.com
aarpmdicareplans.com
bl8nds.com
bondimining.com.au
correodiario.com
crtv.es
eetlustremmers.nl
ekleinanzegen.ch
evchargerseurope.com
fableticss.com
fat-burner.dk
fat-burner.eu
fat-burner.pl
fatburner.dk
ffcyp16.com
flavourcombinations.com
generalrobotix.com
granadainsurane.com
haemorriiden.de
k22fx.com
katespadw.com
kolinsue.com
kuntur.com
logicsapp.com
melting-pot.co
nayfederal.org
news-lelune.com
ntrnaturalbio.com
oragami.me
pacasylotesderopanueva.com
poperinge.com
pronuub.com
savstaholm.com
schuessler-saltse.de
secretmoneysystems.co
solevar.info
thecommongoodparty.com
three-one.com
toyamadeai.com
transcribers.com.au
trivgao.com
tropfen.com
uel.com.au
virtualevals.net
vishwavalleyhealthcare.com
witredux.com
wovenwraps.com.au
wwwccu.com
wwwprimelending.com
wwwsurehealth.ca
xiaobai188.com

Other certificates including the domain name nayfederal.org

(limited to 100 certificates)
oceanoofgames.com
nayfederal.org
moviestarplanethacker.com
mauve.com.au
clanguage.com
escribaniadevoto.net
cloniallife.com
nayfederal.org
nayfederal.org

Certificate

The complete raw certificate details for nayfederal.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319852120974954806583082812312245086369097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 13:33:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 13:33:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nayfederal.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958179025762030674877585465972206454728550669245040617930878554332653567404618687209997587666705466393889862685400854199539950078141473194875607012981235990231136517311532957240484278802314728109265902561295994972008757719935854148683732345883067588634678742435272359311179543651122646458089695958217365379824012350128595382312330150645359830635485541487370427861825145024684324394934117302078907538492424058258461295096063659569744636454223065032394360831082566930488215123888123590634902561980445594048385038738030880138477206328059045424163362812935067820063653446645946138631061251204564637051567643038984196272431821499315026661189454283183729646317296978423840046714843047794623442153868106334795143818895653630331130643727223589020752117642159910647878951186521044632666935165561842279601854221680610933677996508977100121796113111263563240827522887742187992945028109879176209046397388578305448679273680657948948618617005340276286459589449281750033206170762026020268885783559316959133818904853545441525912181417687356665774047006292331806711257050927398860549786056245840350443189850179445340442625063019269375180230814509910675933558403289187305806534570395578525389994544316999959036901394512777651623064739787269807114768781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6127c10bf48001d34fc25df49dc2f88fdb4b7a7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1802 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aarpmdicareplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bl8nds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bondimining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.correodiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crtv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eetlustremmers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekleinanzegen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evchargerseurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fableticss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-burner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fatburner.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffcyp16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flavourcombinations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generalrobotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granadainsurane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemorriiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k22fx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katespadw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolinsue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuntur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melting-pot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nayfederal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-lelune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntrnaturalbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oragami.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacasylotesderopanueva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poperinge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronuub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savstaholm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-saltse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secretmoneysystems.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solevar.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecommongoodparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.three-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyamadeai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transcribers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trivgao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tropfen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualevals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vishwavalleyhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.witredux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wovenwraps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwccu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwprimelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsurehealth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiaobai188.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarpmdicareplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl8nds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bondimining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correodiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crtv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eetlustremmers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekleinanzegen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evchargerseurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fableticss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-burner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatburner.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffcyp16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flavourcombinations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalrobotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granadainsurane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemorriiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k22fx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katespadw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolinsue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuntur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melting-pot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nayfederal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-lelune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntrnaturalbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oragami.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacasylotesderopanueva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poperinge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronuub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savstaholm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-saltse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretmoneysystems.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solevar.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecommongoodparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'three-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyamadeai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcribers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivgao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropfen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualevals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vishwavalleyhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witredux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wovenwraps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwccu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwprimelending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsurehealth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiaobai188.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9e6906b50000040300473045022100cb42b6b9d81a4eb370252c85b361d7521bfea222665f0371da8e4ff6cb54e2e302207340d448b786e14a954c9bc75505c477dce731999d56c02ad9bbd81909296b7f0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9e6906c600000403004730450221009b49b1d512d03c5fd7e80d2000144b77acb69ce16df7c58674c38591a6540b6502203aec6340e4cf2e888640bdffb5d5dd7ca6f15441dbc8af89f4a7b72fcb72f968
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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