sejong.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:d6:74:af:bd:dd:33:8c:62:66:81:49:77:11:6f:0e:41:23 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sejong.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d6:74:af:bd:dd:33:8c:62:66:81:49:77:11:6f:0e:41:23
Serial Number (int): 421424673198483904059366161162136867193123
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:49:8b:dc:0f:51:48:43:81:ce:3d:ee:d1:7a:14:2a:a8:9e:d1:40
Fingerprint (sha256): 0f:cc:dd:d9:af:69:1f:3f:67:05:60:d0:6a:4c:10:8b:73:88:19:5a:88:a9:75:a4:94:a6:8e:b7:c3:76:e9:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sejong.cz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sejong.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaradhyagrand.com
abdhub.in
admin.checkvin.org
admin.datarips.com
adsxfreela.site
agendaprofissionalonline.com
api.liveapp.cc
app.chekpi.com
app.exploreeden.com
app.koyonation.com
app.xn--btvakten-9za.no
apple-teams.live
auth.geofyi.com
auth.octo.asuc.org
auth.resoume.com
b312studio.com
bocustoserlink.com
bpm.waffle.city
clinic.skinx.app
cloud.swiftlogbook.com
demo.platforma.agencjapower.pl
depot.barcelomulet.com
dev.weekly.com.co
development-client.meritcurve.com
donate.shinningstars.org
dtsmadeeasy-staging.expo.opensites.io
eva.scorethebusiness.com
exam.hireidn.com
fidestheam.com
firebase.rudylee.cn
hopiumfolio.com
investment-preprod.freetrade.io
johnsontran.tech
johntell.se
kamency.com
live.xn--sirkusskjrgrds-vibn.no
meetreat.com
package.bookingjini.tech
panel.neutroiptvplayer.com
parkbird.dk
phil-ge.de
phonebookapp.in
pos.sterve.shop
posrednictwo.pracy.org
prdeploy.developer.sailpoint.com
ruben.xn--araunabea-s6a.com
ryu22e.org
sejong.cz
sergebadio.com
share.xn--glckwnsche-bebd.app
shriparamhanshospital.com
siliconggv.tech
sol.sh
staging-capture.usertrb.net
staging.braid.health
staging.instigate.ai
togesports.in
tuteehomes.com
verboedu.com
vip25.mitting.de
whatsnext.daryanritul.in
www.abdhub.in
www.aprendecon.com
www.artbo.site
www.chrealty.com.mx
www.confessto.me
www.kanapkaman.pl
www.kieransmith.in
www.liftexpo.es
www.medixs.jp
www.meetreat.com
www.monyandj.com
www.muntprijs.nl
www.parkbird.dk
www.playpeanuts.com
www.pono.com.pl
www.realmorbo.com
www.sejong.cz
www.tezpaa.com
www.thegodschallenge.com
www.wyjazdycypr.pl
www.xn--0ci.gg
www.xn--brk-1na.no
www.xn--elkevakuutukset-1kb.fi
www.xn--gleichgewicht-ernhrungspsychologie-r4c.at
www.xn--grunnbelp-s8a.no
www.xn--hlytyslista-l8a.fi
www.xn--hrscheer-n4a.de
www.xn--o3ceaf2bc7e5d3dtd.com
www.xn--seniseviyorumak-m6c.net
xn----8sbucdnecjjb4cf.xn--p1ai
xn--24-6kcadb7dwak4gzd.xn--p1ai
xn--8bi.gg
xn--elkevakuutukset-1kb.fi
xn--fundacionniosheroes-53b.com
xn--lnene-mra.no
xn--mxaaaatjb6ekrfbcb0d.gr
xn--o3cc6cxbc.com
xn--pamitki-s4a.achook.dev
xn--xbi.je

Other certificates including the domain name sejong.cz

(limited to 100 certificates)
sejong.cz
www.ayanengenharia.com
sejong.cz
www.andrijakostic.com
chiin.org
sejong.cz
sejong.cz
chiin.org

Certificate

The complete raw certificate details for sejong.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINMTCCDBmgAwIBAgISBNZ0r73dM4xiZoFJdxFvDkEjMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMDkyMjMyMjdaFw0yNDAxMDcyMjMyMjZaMBQxEjAQBgNVBAMT
CXNlam9uZy5jejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKrbNMni
4A1i6VxvLEQdokPCI988xC3Z+g+hMQkCJFBxgr+h7sJfUPDyCF7ImcmrfokkL0IQ
WfcEh2GLmBVr1w7dSsY9QDTihVg5Flr4gvc1nYXWij3ZWM7QiXnDfpwK6xj5+iR6
KYzxq6aAsjauTh1zcpxRgbX79Gh3z5t+9WP3lK2lDnRAQzJV97aDnMoSC5WZ40Ie
hpXRFfTbBnc+QD0Pxc8J8I76beGjyR1T2ghfQBpANJeGDvqqu+yfLb6vnfw1y7HQ
87v8x4cmaxciA2vAucfnMIfD9qIbQ3OWLy4OCYZxsqSI2P78TOOmTpYatQXRCJBe
PS0GyVlg+V5VVFUCAwEAAaOCCl0wggpZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
IUXCO6xMLOtrT7XnyeLDatG9s8IwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgghk
BgNVHREEgghbMIIIV4IRYWFyYWRoeWFncmFuZC5jb22CCWFiZGh1Yi5pboISYWRt
aW4uY2hlY2t2aW4ub3JnghJhZG1pbi5kYXRhcmlwcy5jb22CD2Fkc3hmcmVlbGEu
c2l0ZYIcYWdlbmRhcHJvZmlzc2lvbmFsb25saW5lLmNvbYIOYXBpLmxpdmVhcHAu
Y2OCDmFwcC5jaGVrcGkuY29tghNhcHAuZXhwbG9yZWVkZW4uY29tghJhcHAua295
b25hdGlvbi5jb22CF2FwcC54bi0tYnR2YWt0ZW4tOXphLm5vghBhcHBsZS10ZWFt
cy5saXZlgg9hdXRoLmdlb2Z5aS5jb22CEmF1dGgub2N0by5hc3VjLm9yZ4IQYXV0
aC5yZXNvdW1lLmNvbYIOYjMxMnN0dWRpby5jb22CEmJvY3VzdG9zZXJsaW5rLmNv
bYIPYnBtLndhZmZsZS5jaXR5ghBjbGluaWMuc2tpbnguYXBwghZjbG91ZC5zd2lm
dGxvZ2Jvb2suY29tgh5kZW1vLnBsYXRmb3JtYS5hZ2VuY2phcG93ZXIucGyCFmRl
cG90LmJhcmNlbG9tdWxldC5jb22CEWRldi53ZWVrbHkuY29tLmNvgiFkZXZlbG9w
bWVudC1jbGllbnQubWVyaXRjdXJ2ZS5jb22CGGRvbmF0ZS5zaGlubmluZ3N0YXJz
Lm9yZ4IlZHRzbWFkZWVhc3ktc3RhZ2luZy5leHBvLm9wZW5zaXRlcy5pb4IYZXZh
LnNjb3JldGhlYnVzaW5lc3MuY29tghBleGFtLmhpcmVpZG4uY29tgg5maWRlc3Ro
ZWFtLmNvbYITZmlyZWJhc2UucnVkeWxlZS5jboIPaG9waXVtZm9saW8uY29tgh9p
bnZlc3RtZW50LXByZXByb2QuZnJlZXRyYWRlLmlvghBqb2huc29udHJhbi50ZWNo
ggtqb2hudGVsbC5zZYILa2FtZW5jeS5jb22CH2xpdmUueG4tLXNpcmt1c3NranJn
cmRzLXZpYm4ubm+CDG1lZXRyZWF0LmNvbYIYcGFja2FnZS5ib29raW5namluaS50
ZWNoghpwYW5lbC5uZXV0cm9pcHR2cGxheWVyLmNvbYILcGFya2JpcmQuZGuCCnBo
aWwtZ2UuZGWCD3Bob25lYm9va2FwcC5pboIPcG9zLnN0ZXJ2ZS5zaG9wghZwb3Ny
ZWRuaWN0d28ucHJhY3kub3JngiBwcmRlcGxveS5kZXZlbG9wZXIuc2FpbHBvaW50
LmNvbYIbcnViZW4ueG4tLWFyYXVuYWJlYS1zNmEuY29tggpyeXUyMmUub3Jngglz
ZWpvbmcuY3qCDnNlcmdlYmFkaW8uY29tgh1zaGFyZS54bi0tZ2xja3duc2NoZS1i
ZWJkLmFwcIIZc2hyaXBhcmFtaGFuc2hvc3BpdGFsLmNvbYIPc2lsaWNvbmdndi50
ZWNoggZzb2wuc2iCG3N0YWdpbmctY2FwdHVyZS51c2VydHJiLm5ldIIUc3RhZ2lu
Zy5icmFpZC5oZWFsdGiCFHN0YWdpbmcuaW5zdGlnYXRlLmFpgg10b2dlc3BvcnRz
Lmlugg50dXRlZWhvbWVzLmNvbYIMdmVyYm9lZHUuY29tghB2aXAyNS5taXR0aW5n
LmRlghh3aGF0c25leHQuZGFyeWFucml0dWwuaW6CDXd3dy5hYmRodWIuaW6CEnd3
dy5hcHJlbmRlY29uLmNvbYIOd3d3LmFydGJvLnNpdGWCE3d3dy5jaHJlYWx0eS5j
b20ubXiCEHd3dy5jb25mZXNzdG8ubWWCEXd3dy5rYW5hcGthbWFuLnBsghJ3d3cu
a2llcmFuc21pdGguaW6CD3d3dy5saWZ0ZXhwby5lc4INd3d3Lm1lZGl4cy5qcIIQ
d3d3Lm1lZXRyZWF0LmNvbYIQd3d3Lm1vbnlhbmRqLmNvbYIQd3d3Lm11bnRwcmlq
cy5ubIIPd3d3LnBhcmtiaXJkLmRrghN3d3cucGxheXBlYW51dHMuY29tgg93d3cu
cG9uby5jb20ucGyCEXd3dy5yZWFsbW9yYm8uY29tgg13d3cuc2Vqb25nLmN6gg53
d3cudGV6cGFhLmNvbYIYd3d3LnRoZWdvZHNjaGFsbGVuZ2UuY29tghJ3d3cud3lq
YXpkeWN5cHIucGyCDnd3dy54bi0tMGNpLmdnghJ3d3cueG4tLWJyay0xbmEubm+C
Hnd3dy54bi0tZWxrZXZha3V1dHVrc2V0LTFrYi5maYIxd3d3LnhuLS1nbGVpY2hn
ZXdpY2h0LWVybmhydW5nc3BzeWNob2xvZ2llLXI0Yy5hdIIYd3d3LnhuLS1ncnVu
bmJlbHAtczhhLm5vghp3d3cueG4tLWhseXR5c2xpc3RhLWw4YS5maYIXd3d3Lnhu
LS1ocnNjaGVlci1uNGEuZGWCHXd3dy54bi0tbzNjZWFmMmJjN2U1ZDNkdGQuY29t
gh93d3cueG4tLXNlbmlzZXZpeW9ydW1hay1tNmMubmV0gh54bi0tLS04c2J1Y2Ru
ZWNqamI0Y2YueG4tLXAxYWmCH3huLS0yNC02a2NhZGI3ZHdhazRnemQueG4tLXAx
YWmCCnhuLS04YmkuZ2eCGnhuLS1lbGtldmFrdXV0dWtzZXQtMWtiLmZpgh94bi0t
ZnVuZGFjaW9ubmlvc2hlcm9lcy01M2IuY29tghB4bi0tbG5lbmUtbXJhLm5vghp4
bi0tbXhhYWFhdGpiNmVrcmZiY2IwZC5ncoIReG4tLW8zY2M2Y3hiYy5jb22CGnhu
LS1wYW1pdGtpLXM0YS5hY2hvb2suZGV2ggp4bi0teGJpLmplMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAO1N3dT4tuYBOizBb
Bv5AO2fYT8P0x70ADS1yb+H61BcAAAGLFsjpTwAABAMARjBEAiBMWmNdJ/Vel5Fj
MESyGzqlJuB6bJlVefHNN/JSdAndIAIgZ3FJ+yQITf5Fftu/FlIzOSWVaLtVPXTJ
Ft4TFNiVp5oAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYsW
yOmhAAAEAwBIMEYCIQDZWa8jzPK08gAH+O0vs0+Kf6h6cDnESFb/4Lgxsc8flQIh
AM6/DpxKxXcjl9irvk40G81yHVlfjWT6lPmSi2aq4GMTMA0GCSqGSIb3DQEBCwUA
A4IBAQCyQrxuT3H9Qq5eblQdp1u6B3qbom0zzX8xVWWeBxBfl85eFjqU7AWdIP4t
k2eI3yy67VPrZIRQJW3EvIuMU2OUEdSquxd7aZvp7b9B3uAag7gQkWQUEODvJE8i
6V3FazsITfo9NHB5CBu6f+Z6FeaIzcYL3apGT+WST3IoSlZq1OVmwbihwUcco99p
ntmVx6XrxkrLWa7MszeWc1WoGGRWmPnDI+t0+f5m3NAhBvaZYN1ocg6ZdxDynt4M
slvwGyaR+y+NIwROdljdIG4dQRiVxNRuzaWaXG66cMDAlp+h6Q5RUa2W9eZWo5fm
NwzzSAf+auzXbJuSMdrksyGITPRF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421424673198483904059366161162136867193123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 22:32:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 22:32:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sejong.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaradhyagrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.checkvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.datarips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsxfreela.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agendaprofissionalonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.liveapp.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.chekpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.exploreeden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.koyonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.xn--btvakten-9za.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple-teams.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.geofyi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.octo.asuc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.resoume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b312studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bocustoserlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpm.waffle.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic.skinx.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.swiftlogbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.platforma.agencjapower.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depot.barcelomulet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.weekly.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development-client.meritcurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.shinningstars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtsmadeeasy-staging.expo.opensites.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eva.scorethebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exam.hireidn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidestheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.rudylee.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopiumfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-preprod.freetrade.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsontran.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johntell.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.xn--sirkusskjrgrds-vibn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'package.bookingjini.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.neutroiptvplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkbird.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phil-ge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonebookapp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos.sterve.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posrednictwo.pracy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdeploy.developer.sailpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruben.xn--araunabea-s6a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryu22e.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sejong.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sergebadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.xn--glckwnsche-bebd.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shriparamhanshospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliconggv.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sol.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-capture.usertrb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.braid.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.instigate.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togesports.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuteehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verboedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip25.mitting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext.daryanritul.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abdhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprendecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artbo.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrealty.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.confessto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanapkaman.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kieransmith.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftexpo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medixs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monyandj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muntprijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkbird.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playpeanuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pono.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmorbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sejong.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tezpaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegodschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyjazdycypr.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--0ci.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brk-1na.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--elkevakuutukset-1kb.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--gleichgewicht-ernhrungspsychologie-r4c.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--grunnbelp-s8a.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--hlytyslista-l8a.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--hrscheer-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--o3ceaf2bc7e5d3dtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--seniseviyorumak-m6c.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----8sbucdnecjjb4cf.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--24-6kcadb7dwak4gzd.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--8bi.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--elkevakuutukset-1kb.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fundacionniosheroes-53b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lnene-mra.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mxaaaatjb6ekrfbcb0d.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--o3cc6cxbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pamitki-s4a.achook.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--xbi.je'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b16c8e94f000004030046304402204c5a635d27f55e9791633044b21b3aa526e07a6c995579f1cd37f2527409dd200220677149fb24084dfe457edbbf16523339259568bb553d74c916de1314d895a79a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b16c8e9a10000040300483046022100d959af23ccf2b4f20007f8ed2fb34f8a7fa87a7039c44856ffe0b831b1cf1f95022100cebf0e9c4ac5772397d8abbe4e341bcd721d595f8d64fa94f9928b66aae06313
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b242bc6e4f71fd42ae5e6e541da75bba077a9ba26d33cd7f3155659e07105f97ce5e163a94ec059d20fe2d936788df2cbaed53eb648450256dc4bc8b8c53639411d4aabb177b699be9edbf41dee01a83b81091641410e0ef244f22e95dc56b3b084dfa3d347079081bba7fe67a15e688cdc60bddaa464fe5924f72284a566ad4e566c1b8a1c1471ca3df699ed995c7a5ebc64acb59aeccb337967355a818645698f9c323eb74f9fe66dcd02106f69960dd68720e997710f29ede0cb25bf01b2691fb2f8d23044e7658dd206e1d411895c4d46ecda59a5c6eba70c0c0969fa1e90e5151ad96f5e656a397e6370cf34807fe6aecd76c9b9231dae4b321884cf445