www.calculategst.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:a9:1f:26:9f:d2:32:b8:88:ae:23:3a:8b:e6:fa:eb:04 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.calculategst.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:a9:1f:26:9f:d2:32:b8:88:ae:23:3a:8b:e6:fa:eb:04
Serial Number (int): 317708249613119747721827443535071854390020
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:64:ad:4d:c0:6a:2c:00:30:c7:1b:2e:c5:17:7f:04:ab:62:f2:84
Fingerprint (sha256): 08:02:87:07:0e:c3:da:0c:3b:ab:cb:23:a4:8f:37:69:88:df:ad:5b:c3:ec:9a:91:bb:21:96:b9:a0:cd:c7:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.calculategst.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.calculategst.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0.jaunty.dev
accounts.veteransadvantage.com
admin-beta.9dots.org
admin.applerecruits.com
aniatranslation.com
api-testing.escaroo.com
api.dev.events
app.conectimed.com
app.seawex.com
appsicle.userjoy.co
bestamericas.travel
beta.labshug.co
blockcurr.com
buku-buka.my
canvasapp.co
caravita.keenlyhealth.com
carlosllana.tv
checkers.sqwadapp.co
cico.mindiver.se
cosmobia.com
crazyoffers.today
da03-lp-pre.app-ca-robots.com
dev-api.tappable.io
dev.startgdpr.ro
dgfitness.com.hr
dictionary.finjanschool.co.il
draft.duyquoc.com
drivet.tk
ebill.decorum.work
ensession.com
erpgsjm.solutionjm.ca
exitium.ml
file.blerp.com
firebase.wikufest.org
gerente.acheifarmacias.com.br
german.ovcharov.me
happymakarsankranti2020.gadgetsteach.com
hawkersky.com
holcroft.dev
hotels.order.place
ichat.vmarketing.vn
jompa.co
kinginthenorth.co
labshug.co
litto.shop
merchant.value8.app
minitreinamento.crowsec.com.br
misueldo.app
mp.thewer.com
occ.dudy.kr
old.travel360.com
philecker.dev
picount.com
psikologblog.com
q9labs.ml
quick-tick.com
research-sample.mrly.work
research-staging.mrly.work
rplnational.com.au
simulador.sejabid.com.br
smstest.hivecore.io
southport.dev
startgdpr.ro
sudesh.info.np
sugao.me
sunilkumar.design
techblaze.biz
thatch.chatnat.ai
train-ap.azumalab.net
tripsimple.co
verify-eu.vygoapp.com
weedweek.rollmops.pl
wh1ter0se.com
whac.coinapp.co
witblox.school
www.aluvw.com
www.aniatranslation.com
www.bearssoft.com
www.better-invoice.com
www.boletosjan20.com
www.brad7a0.com
www.brandmefy.com
www.calculategst.co.nz
www.comparaholic.com
www.flugio.ch
www.follege.com
www.habershamhome.com
www.hd88ca.com
www.holcroft.dev
www.insightsofficer.pwc.com
www.labshug.co
www.q9labs.ml
www.quemsonha.com.br
www.skillscred.io
www.startgdpr.ro
www.vetted-cyber-talent.com
www.winterline.tech
yonlenme.kismetim.net
yosh.ai
z.3feng.im

Other certificates including the domain name calculategst.co.nz

(limited to 100 certificates)
app-dev.boutiquemadame.be
sni160045.cloudflaressl.com
www.calculategst.co.nz
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
tribeofwolvesapp.com
rotomania3d.com
sni160045.cloudflaressl.com
www.simplecapital.ca
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
hod.encadyma.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
www.insighealth.com
sni160045.cloudflaressl.com
widget-staging.donr.ai
gethi.co
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
www.calculategst.co.nz
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
www.insighealth.com
vincebrook.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com

Certificate

The complete raw certificate details for www.calculategst.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317708249613119747721827443535071854390020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 08:20:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 08:20:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.calculategst.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1924 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0.jaunty.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.veteransadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-beta.9dots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.applerecruits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aniatranslation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-testing.escaroo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.conectimed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.seawex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsicle.userjoy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestamericas.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.labshug.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockcurr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buku-buka.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvasapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caravita.keenlyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlosllana.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkers.sqwadapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cico.mindiver.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmobia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazyoffers.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da03-lp-pre.app-ca-robots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-api.tappable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.startgdpr.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgfitness.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dictionary.finjanschool.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draft.duyquoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivet.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebill.decorum.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erpgsjm.solutionjm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exitium.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'file.blerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.wikufest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerente.acheifarmacias.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'german.ovcharov.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happymakarsankranti2020.gadgetsteach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkersky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holcroft.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotels.order.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ichat.vmarketing.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jompa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinginthenorth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labshug.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litto.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchant.value8.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minitreinamento.crowsec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misueldo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp.thewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occ.dudy.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.travel360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philecker.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psikologblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q9labs.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quick-tick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-sample.mrly.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-staging.mrly.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rplnational.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulador.sejabid.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smstest.hivecore.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southport.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startgdpr.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudesh.info.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugao.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunilkumar.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techblaze.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatch.chatnat.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train-ap.azumalab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripsimple.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify-eu.vygoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedweek.rollmops.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wh1ter0se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whac.coinapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witblox.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aluvw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aniatranslation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bearssoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.better-invoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boletosjan20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brad7a0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandmefy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calculategst.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comparaholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flugio.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.follege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.habershamhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hd88ca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holcroft.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insightsofficer.pwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labshug.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q9labs.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quemsonha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skillscred.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.startgdpr.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetted-cyber-talent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winterline.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yonlenme.kismetim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yosh.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z.3feng.im'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001713f572194000004030047304502202a80e7d836f4cb4a719b2988f7d1d775c57ea848f03a9ee2634bbc59833fd596022100e819bf4de8de6e0b38d282b84f23579b66fe590536a1f8d64a207758b27ca4fd00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001713f5721c90000040300483046022100c92adac928f599dcb284619944b871212274a9ed0884799f65398df98a09e431022100fef8c7f613829b9eb364c9a6288cc69c02fb2acc86ccb827b776e2a879333f73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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