nccaa.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6c:16:02:e3:cf:6d:60:18:71:e2:2f:7c:d4:69:84:70:bb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nccaa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6c:16:02:e3:cf:6d:60:18:71:e2:2f:7c:d4:69:84:70:bb
Serial Number (int): 385228897375544385567167886215890740736187
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:77:93:f5:24:84:c3:d7:8e:44:fb:38:28:32:98:3a:eb:32:90:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:cf:81:59:69:f3:54:51:7d:20:9b:9f:e2:61:63:d3:11:f5:73:6c
Fingerprint (sha256): fb:ee:93:ee:b6:0a:2f:aa:9f:13:c6:e8:0f:da:f9:06:b1:7b:38:df:86:da:4e:88:80:42:58:90:a8:42:60:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nccaa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nccaa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abordo.com
*.artjobgo2021.com
*.bestpersonalloan.co
*.cabins.me
*.chilean.world
*.chimayotahoe.com
*.circologardena.org
*.collaboratewith.me
*.consalud.com
*.crakcstreams.me
*.crrackstreams.me
*.danbao128.com
*.derlta.com
*.dffnt-campaign.com
*.everthingbutt.com
*.fullyfollow.me
*.getway-cloud.info
*.havanacmc.com
*.iflswa.com
*.inaby.com
*.irving.church
*.kakanj.com
*.lasvegas-128.com
*.laure.com
*.mailwayz.com
*.missingpassword.com
*.mysticmetals.com
*.nccaa.com
*.payonee.com
*.perrys.academy
*.perrys.events
*.physio.cash
*.redferreteradelperu.com
*.saibinden.com
*.samsung-europe.com
*.samuela.com
*.sexysleep-favorite.life
*.socialmediatraffic.com.au
*.texasmedicaid.com
*.thestrreameast.io
*.tvnew.in
*.vasuda.com
*.visitmoney.info
*.vmovee.biz
*.w-h-i-p.us
*.wastecoin.me
*.xmg69.com
*.yk22.cc
*.yt800c.com
*.zwgay.com
abordo.com
artjobgo2021.com
bestpersonalloan.co
cabins.me
chilean.world
chimayotahoe.com
circologardena.org
collaboratewith.me
consalud.com
crakcstreams.me
crrackstreams.me
danbao128.com
derlta.com
dffnt-campaign.com
everthingbutt.com
fullyfollow.me
getway-cloud.info
havanacmc.com
iflswa.com
inaby.com
irving.church
kakanj.com
lasvegas-128.com
laure.com
mailwayz.com
missingpassword.com
mysticmetals.com
nccaa.com
payonee.com
perrys.academy
perrys.events
physio.cash
redferreteradelperu.com
saibinden.com
samsung-europe.com
samuela.com
sexysleep-favorite.life
socialmediatraffic.com.au
texasmedicaid.com
thestrreameast.io
tvnew.in
vasuda.com
visitmoney.info
vmovee.biz
w-h-i-p.us
wastecoin.me
xmg69.com
yk22.cc
yt800c.com
zwgay.com

Other certificates including the domain name nccaa.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nccaa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385228897375544385567167886215890740736187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 20:13:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 20:13:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nccaa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723995336327237931796011191740251222637361280006746943599989674433861470678036184613800546544842087473942764020464439786617257204839166003016442673674432378945108899840400441133335154275787115645735736210436432361154179768538553050319208835794940221602103537186700516961182565743495213613808968893427088950100479715461477383838712646555063110712289215923169910971269962667253506354712417212308888508486430808630950239102100595140664721892898169395333438907005606096908781570257367718212422047444782656860514510589544815374194436438901177776949625950066645027020896251440500603924233665673905462050330552000128555005086245570890128144957355408080138720530675720149755620913291390194226886151619226266319263075631063683431894772979274974321874798958583973709590241836830592255786935473833595195939223134424680322218374388409223705660076833972781953353265495988757531100962338102102137494254582193568982260965466010564729380146361159157869220058793444075653755047443094773322766727123477778685873047327570006944411287970534283396610420273289221879805085887089404121849775477346637216868224293839622044248086889682215896647790560555746802015128683628433458131464214836311589991225020370242553362227364700021549590358171795506617446969311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a17793f52484c3d78e44fb382832983aeb329035
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1670 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abordo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artjobgo2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestpersonalloan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabins.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chilean.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chimayotahoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circologardena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collaboratewith.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crakcstreams.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crrackstreams.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danbao128.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derlta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dffnt-campaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everthingbutt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullyfollow.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getway-cloud.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havanacmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iflswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irving.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kakanj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasvegas-128.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mailwayz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.missingpassword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysticmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payonee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perrys.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perrys.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.physio.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redferreteradelperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saibinden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsung-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexysleep-favorite.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialmediatraffic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texasmedicaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thestrreameast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvnew.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vasuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitmoney.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vmovee.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w-h-i-p.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wastecoin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xmg69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yk22.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yt800c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zwgay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abordo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artjobgo2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpersonalloan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabins.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilean.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chimayotahoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circologardena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboratewith.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crakcstreams.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crrackstreams.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danbao128.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derlta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dffnt-campaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everthingbutt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullyfollow.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getway-cloud.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havanacmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iflswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irving.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kakanj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegas-128.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailwayz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missingpassword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysticmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payonee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrys.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrys.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physio.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redferreteradelperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saibinden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexysleep-favorite.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialmediatraffic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasmedicaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestrreameast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvnew.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmoney.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmovee.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-i-p.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wastecoin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmg69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yk22.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yt800c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwgay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c1cee5ad600000403004730450221009f5431b106ec13c904f4ef59b7f20050bfc08080aef626ebcb49bc2922490a2602200a90bd5885f168868544b2d53fd254f8183be243544485977f6999005a3f618100750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c1cee5b31000004030046304402207246e00781f97c35351a755a74fbacfb4cfb33ff02ee234b90b0b99bde953555022018a9b98d4380296be27d47bef571068d546b11e3f592d7a7fe70bc073bb35a35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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