uclafootball.com

Issued by R3

About this certificate

This digital certificate with serial number 03:88:c4:31:85:4b:d0:3f:07:a1:67:33:b7:1b:f4:0d:12:00 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uclafootball.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:c4:31:85:4b:d0:3f:07:a1:67:33:b7:1b:f4:0d:12:00
Serial Number (int): 307876045509815321243178984161581680366080
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:a7:67:ee:5d:65:1e:2c:94:d7:b5:d1:1e:da:21:0d:69:e1:82:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 81:80:86:af:b7:b4:e3:2e:57:d7:7d:f6:2b:43:34:e2:37:a8:f8:64
Fingerprint (sha256): f5:8d:a9:90:50:b7:a2:c4:56:f6:3a:1b:6f:94:3a:f2:bc:c4:ed:b0:e3:0f:d3:18:af:d8:11:fb:b8:28:bd:ac

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate uclafootball.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uclafootball.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agissons.com
*.amadergram.us
*.areezayjewellers.com
*.autotraderservice.co.uk
*.beinin.com
*.boardofpharmacy.com
*.boksitogorsk.com
*.compulsiveliar.com
*.condominiocarminha.com
*.d-h-l.co
*.de-ryanair.com
*.differn.com
*.dubaicallgirls.me
*.ephya.com
*.farmersconcreteconstruction.com
*.finestpainting.com
*.fruityteens.com
*.ihurtpeople.com
*.kurumu.com
*.kuxue.mobi
*.mokasha.com
*.moneygra.com
*.mymeteo.net
*.nddsystems.com
*.nesn.cm
*.palmasola.com
*.piangao.com
*.poltissat.com
*.region4.com
*.registos.com
*.rkfinanceirasp.com
*.salazars.com
*.sanandotuvida.online
*.shininheat.com
*.stockingsamateur.com
*.superbowlgambler.com
*.taggem.com
*.tekly.com
*.thecashregister.com
*.thepoolcalculator.com
*.thetimeless.com
*.tiners.com
*.tunagari.com
*.uclafootball.com
*.untangleart.com
*.valean.com
*.ve7.com
*.whichdietician.com.au
*.wikikb.com
*.xianwu.com
agissons.com
amadergram.us
areezayjewellers.com
autotraderservice.co.uk
beinin.com
boardofpharmacy.com
boksitogorsk.com
compulsiveliar.com
condominiocarminha.com
d-h-l.co
de-ryanair.com
differn.com
dubaicallgirls.me
ephya.com
farmersconcreteconstruction.com
finestpainting.com
fruityteens.com
ihurtpeople.com
kurumu.com
kuxue.mobi
mokasha.com
moneygra.com
mymeteo.net
nddsystems.com
nesn.cm
palmasola.com
piangao.com
poltissat.com
region4.com
registos.com
rkfinanceirasp.com
salazars.com
sanandotuvida.online
shininheat.com
stockingsamateur.com
superbowlgambler.com
taggem.com
tekly.com
thecashregister.com
thepoolcalculator.com
thetimeless.com
tiners.com
tunagari.com
uclafootball.com
untangleart.com
valean.com
ve7.com
whichdietician.com.au
wikikb.com
xianwu.com

Other certificates including the domain name uclafootball.com

(limited to 100 certificates)
uclafootball.com
uclafootball.com
uclafootball.com
uclafootball.com
uclafootball.com
gameslover.com
pindeduo.com
uclafootball.com
turnkeydropships.com
womanwith.com
uclafootball.com
superculos.com

Certificate

The complete raw certificate details for uclafootball.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1CXosqiaIFPwmpUs09WP
6RCICEj2CNvHXJEQpAvdqJjNDMyxbmf/BH7a/p/Sluw3A/AIndMzsiOR3DwORZUd
qPxreLr8yIqMu4jDqYetkJuG2QWiUAZSoX9RJ9P3Cj90NLHAAi65E/f2y8VPOVr6
sqE3E1Iyssdhu5IHuDhEF/GT7Ptizm5RK7Ksm7sANi4QgYYAkSFRF9IiHvWXZZVJ
8Km7J2ONBLy3xEandmu3zcayoTfh1tz1jnKHZVdGAfabtarNeCRaAdKkq/Jq/uPe
ALhV/A4OLxmHQFru1rMi3yAI5dsGMWoDXUidF4l+DTnQsosnF21VxL7/VYw21ui1
ehaWNCvIoL/QpW2hh3tI92C429amuy/Xao9D1Z66oHmc5+D/KLvuQTQl4UMgUpdY
1YZCTCIvRNLW3NQ3URCglkbEE6jueqYUAXrDhtY6aIlHQkDKJiEhZ/xSWfTvH0us
TVViROm2iVo1e50dff0xdI7kUuCXE9zRw3dKc5ksmSQcOZ6cNdZXW3pvL8xDO+8r
mK7A5dGxaFLJy6B5EIAjcNWE3PvGdgShDuN3zYx8tprCR/VdeY2VE+JrlStKcifC
7+069Q7w01ymYR2HIa255+O3VzD9lLuL6UZX0OZGcf3Bu6UrtSYmQ7+sjQtHXUBq
uTSet91DV5gtOyGq1ZBlXlECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307876045509815321243178984161581680366080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 08:23:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 08:23:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uclafootball.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 865488664019985143780076449533685427237061243020573280750625082994848918813553473695956210635582579995515819537416585503664733140127606680895493615822632003582305269795195718502287832764587959754601422241909187479171290212047839147830372803059459213400045832974149982905968556037604775296332808373168159742008264483904081565624195030072436453823737053880161589748873224664538707904288889410232404112919084449685058850759479716456161392023979658674284119930207469743782449525093868810362627906283995173034544551456370015456078728309013453800989160177956501486691933775271748269910831472231311200878166208859420800071935072562517954341582943247171652982674546200269458035709115166457469859043196647203792274080112856509087369981630778111519039036207686945799971298846220633068334004831105121856635049991484187376506601033627805605071285941226567872626864357044353427864198242964219800330782429440807748365003574367815998026381870431200663948015393546516596365087509489706190607474701273499524413939519569929563399680202715017236488346440518742274022385682194877613672479787110563095457717454764555056989617366369207329459233646655574143384728249729217460489597887833126522486873667147364132507613087210030680913515675727632852545003089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faa767ee5d651e2c94d7b5d11eda210d69e182e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1734 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amadergram.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.areezayjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autotraderservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beinin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardofpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boksitogorsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compulsiveliar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condominiocarminha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-h-l.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-ryanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.differn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubaicallgirls.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ephya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmersconcreteconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finestpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fruityteens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihurtpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurumu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuxue.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mokasha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneygra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymeteo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nddsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nesn.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palmasola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piangao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poltissat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.region4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rkfinanceirasp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salazars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanandotuvida.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shininheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockingsamateur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superbowlgambler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taggem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecashregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepoolcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetimeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tunagari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.untangleart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ve7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichdietician.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikikb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xianwu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agissons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amadergram.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'areezayjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotraderservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardofpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boksitogorsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compulsiveliar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condominiocarminha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-h-l.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ryanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'differn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaicallgirls.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ephya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmersconcreteconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finestpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruityteens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihurtpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurumu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuxue.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mokasha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneygra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymeteo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nddsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesn.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmasola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piangao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poltissat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkfinanceirasp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salazars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanandotuvida.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shininheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockingsamateur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbowlgambler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taggem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecashregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepoolcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetimeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunagari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uclafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untangleart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 've7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichdietician.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikikb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianwu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d45148eab0000040300463044022100cd6538f986f8d91b13bbc106114232107df8669c4b743b3f44929ea6b40befe5021f2a6d381997dc986e47008f35f09b225974b1b963b6b8b0c970735b3a256324007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d45148eb70000040300473045022100e1bf5afd268a6f48363ed6165ee595ff791f0dfcd8aa91e84aebc10b3e8089ac022007dd36925b0e64e5b477ded1f495fac8575b229a6e8daf33732443cc474e08a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002134a439ce0472e97186fcb080e5c978bfdf681384b1c162d97c94f9721497e08c0e4698e9c2f510c790ecf84774914a62c9457a66ac958b9fa6614277c6e0992c6fc1f5dbb428335d4d25192ad15df0a52032af28b133f401322e18471f50ac9d4d2d8243999e73f9299e8b4564506413aa7004fdcf69b2609e636ed3c8be0e00f6921654f6dc303c2a47783de8aa932dd81b6c88a356ec2f031dbf1b7e69be32af12ba894be8cae90b420cbcf86576831c6ad122c127e2682387fa22c09172dc01229e03426d70d2b45924cb964703caa996f82f4f93f30eff1de78aaf05394869a41c226338e5c979e9401f3f237cb9600bf1b07e3c60560d25b50a65e67