www.tafadzwamhizha.com

Issued by R3

About this certificate

This digital certificate with serial number 03:50:a9:b7:1c:50:b9:24:03:a0:c0:87:44:f6:f9:37:71:89 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.tafadzwamhizha.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:a9:b7:1c:50:b9:24:03:a0:c0:87:44:f6:f9:37:71:89
Serial Number (int): 288785037444871599841585257051933130584457
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:a7:49:13:b8:f2:9c:cd:f7:96:6c:64:18:b7:16:05:af:03:f4:6c
Fingerprint (sha256): 0b:ec:76:fa:cc:9d:c5:56:1d:b9:36:b7:82:78:7a:28:39:e2:6c:9d:52:b8:b2:38:6d:b0:3a:22:07:5b:de:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.tafadzwamhizha.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tafadzwamhizha.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.myboardprep.com
aimeetheriot.net
app.easy.me
app.labirint.ru
app.pzdrv.ru
app.timtrack.net
auth.telov.app
beam.rd.nyt.net
blog.manpreet.site
blog.samsul.web.id
cdn.not-tweetdelete.online
ciyal.com
company1.aiinsurance.io
compass.partnerhero.com
concierge.eliteclub.com
courses.panarastudios.in
crm.peinturemofax.com
dashboard-dev.rtm.vnlp.ai
degather.tech
dev.beam.rd.nyt.net
dev.can.org.za
dev.link.delli.market
dev.push.techulus.com
digiart.id
extend.saga.einride.tech
fun.eezytutorials.com
guide.beam.rd.nyt.net
help.slingshot.rd.nyt.net
hosting-poc.aiinsurance.io
igotitfam.com
intl.josscenter.com
jjvisuals.in
johnbertram.co.uk
jojol.net
link.choirmate.com
link.friadd.in
link.life.so
link.motobook.org
link.totem.team
links-myvitalsforwork.carebook.com
login.videomatik.com.br
loopout.io
lounas.bites.fi
ludmilareiner.com
make-font.yaroslav.uz
messages.shghs.edu.in
mobile.us.einride.tech
mta-sts.iservicio.com.mx
mta-sts.iservicio.mx
my.traitte.store
mygymday.com
new.admin.skinx.app
ot.om
overthehorizon.site
oztech.co.id
raqamshasi.com
rdinternal-prd.rd.nyt.net
register.umbrellasevents.com
registration.umbrellasevents.com
risk.oraculus.cl
rnsns.com
share.staging.xn--glckwnsche-bebd.app
sharemanager.digitalfabrikate.de
soporte.agora.pe
subnation.org
test-app-music.dwango.jp
uliza.online
unclegeorge.in
victormeireles.com
web.voltranapp.com
www.ahmadnasser.me
www.b312studio.com
www.cgalivrobook.com.br
www.chym-elearning.com
www.codaptive.io
www.courses.panarastudios.in
www.degather.tech
www.duvanceliz.site
www.elgio.de
www.enclass.tech
www.herringbone.fr
www.igotitfam.com
www.jilswebapp1.pikkopay.fr
www.ludmilareiner.com
www.nitrofresh.in
www.radiadoresrubens.com.mx
www.shubhrishta.com
www.softface.in
www.soturimedia.in
www.tafadzwamhizha.com
www.webcloner.online
www.xn--80ahdvfjjiime4m.xn--p1ai
www.xn--domicilioscaaveral-y0b.com
www.yosapa.com
xn--33-mlc1aafce4bg.xn--p1ai
xn--42c6ao8aaf2a9bf9irexc.com
xn--80ahdvfjjiime4m.xn--p1ai
xn--9t4b29cmcb21sgvs.com
xn--pskejakten-15a.no
xn--spr-1na.xn--rd-yia.app

Other certificates including the domain name tafadzwamhizha.com

(limited to 100 certificates)
www.tafadzwamhizha.com
www.luckysoni.com
codifypro.com
flutterwebdemo.sparkendeavors.in
www.portstack.in
get.trade.re
xn--daysblg-5c9qzc.app
www.orusmanager.com
jbuild-staging.beerlabs.com.au
share.xn--glckwnsche-bebd.app
app.diamondedge.com
ibh-portal.thecareerlabs.com
support.woosa.sg
www.sprints.top
www.portstack.in
xn--glckwnsche-bebd.app
hygiene.dooboolab.com
jbuild-staging.beerlabs.com.au

Certificate

The complete raw certificate details for www.tafadzwamhizha.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288785037444871599841585257051933130584457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 15:23:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 15:23:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tafadzwamhizha.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.myboardprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimeetheriot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.easy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.labirint.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pzdrv.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.timtrack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.telov.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beam.rd.nyt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.manpreet.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.samsul.web.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.not-tweetdelete.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciyal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'company1.aiinsurance.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.partnerhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.eliteclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.panarastudios.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.peinturemofax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-dev.rtm.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degather.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.beam.rd.nyt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.can.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.link.delli.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.push.techulus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiart.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extend.saga.einride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fun.eezytutorials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guide.beam.rd.nyt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.slingshot.rd.nyt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting-poc.aiinsurance.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igotitfam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.josscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjvisuals.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnbertram.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.choirmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.friadd.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.life.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.motobook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.totem.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links-myvitalsforwork.carebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.videomatik.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loopout.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounas.bites.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ludmilareiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'make-font.yaroslav.uz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messages.shghs.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.us.einride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.iservicio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.iservicio.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.traitte.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygymday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.admin.skinx.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ot.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overthehorizon.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oztech.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raqamshasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdinternal-prd.rd.nyt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.umbrellasevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.umbrellasevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risk.oraculus.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnsns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.staging.xn--glckwnsche-bebd.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharemanager.digitalfabrikate.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.agora.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subnation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-app-music.dwango.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uliza.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclegeorge.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victormeireles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.voltranapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahmadnasser.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b312studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgalivrobook.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chym-elearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codaptive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courses.panarastudios.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.degather.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvanceliz.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elgio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enclass.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herringbone.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igotitfam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jilswebapp1.pikkopay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ludmilareiner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nitrofresh.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiadoresrubens.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shubhrishta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softface.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soturimedia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tafadzwamhizha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webcloner.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--80ahdvfjjiime4m.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--domicilioscaaveral-y0b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yosapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--33-mlc1aafce4bg.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--42c6ao8aaf2a9bf9irexc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--80ahdvfjjiime4m.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9t4b29cmcb21sgvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pskejakten-15a.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--spr-1na.xn--rd-yia.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018abdb3b746000004030046304402202252b7b2f0475dca2b84ba29379a1afd7612865425adfc437c22ad80fe708e4902207b128b6c3819c5780837c485a987ade201aaccd3362d040a607fd206260b6982007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018abdb3b7250000040300473045022100fd6cce1b5a97a472483cc54dfdb757146e0fcbcdc319ab04ecab884196bd436002204ecc602a2274cacedc067090a1124b201ec8d15e2b76fc8c3aa5d9374a63e0ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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