www.digiheft.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:33:60:8e:0e:3b:57:9a:12:a0:34:d3:ca:3d:1a:24:3a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.digiheft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:33:60:8e:0e:3b:57:9a:12:a0:34:d3:ca:3d:1a:24:3a
Serial Number (int): 308023834032962483000775143411946947748922
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:22:62:df:4b:70:c4:eb:f9:22:9b:75:0c:00:fb:4e:f4:83:31:ed
Fingerprint (sha256): 11:89:d2:78:0e:9a:71:f7:62:d9:04:8a:5f:80:ca:eb:94:0b:78:38:ef:eb:6c:09:50:d2:42:db:8f:2d:89:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.digiheft.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.digiheft.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ai-education.app
amanos-pizzeria.com
api-stage-asduytasdufyaskjdfysajdf.unyte.com
app.dredgerx.com
app.fbredacao.com
app.ignisight.com
app.jeugdtornooi.be
app.next.ignisight.com
app.truebizpulse.com
appdev.events66.com
bestow.app
bikayi.com
cartageosys.com
cavalheiromoderno.com.br
celebra.app
celoricodebasto.g2canal.com.br
cmsdev.events66.com
compro.192.works
console.almamaters.co
dashboard.crave-cloud.com
dashboard.staging.drcuco.com.br
demo.devridezum.com
documentos.galconsulting.co
dowerapport.com
emergententerprises.biz
fotografogeraldooliveira.com.br
francedrafting.com
georgsteyn.com
getgoldilocks.com
getkiddopia.com
haarlem1.co.za
harvestingrainwater.ca
ivanmultimarcas1.com.br
ja.dev
jacobkeith.com
jkrader.com
kansei-stg.tck.link
klikr.app
loanenhancer.com
lpdevelopers.co.in
marcosvrs.com
meeseeks.horrible.solutions
mijn.hronlineportaal.nl
mistformultimus.com
mtgchangeling.com
ob.tools
open.firebase.fredliang.cn
optimize.fitness
orange-rocket.knownuggets.com
otnielhenig.com
p53-dev.credeo.io
pasandoelgrado.cl
placenote.vertical.ai
qbot.alchemycodelab.io
racot-headspa.com
raffwedssarah.co.uk
realgt.com
sasandha.com
sasandha.net
scheduler-ui.development.carecloud.com
seac-ap.com
sigx.iterate.ai
spiralup.at
spiralupberatung.at
stg.hive.band
survey.velocityps.com.au
test.blindsqua.re
thriveapp2.biz
tsdm-band.fr
www.7april2019.com
www.bestow.app
www.caroke.us
www.cdbc.com.br
www.dev.chatshier.com
www.digiheft.com
www.estudionotarial.com
www.f2020technology.com
www.francedrafting.com
www.getkiddopia.com
www.haarlem1.co.za
www.impexcars.bg
www.ivanmultimarcas1.com.br
www.ja.dev
www.jeffersonortiz.com
www.jkrader.com
www.labuanservices.com
www.loanenhancer.com
www.mistformultimus.com
www.msigroup.tk
www.mtgchangeling.com
www.ob.tools
www.otnielhenig.com
www.raffwedssarah.co.uk
www.reconcilemoney.com
www.sasandha.com
www.sasandha.in
www.sasandha.net
www.sasandha.org
www.steeltech.app
www.vinaandecor.com

Other certificates including the domain name digiheft.com

(limited to 100 certificates)
apc.dev.smithey.com.au
www.digiheft.com
www.efcohort13.com
atomgamming.ga
thiagobapti.com.br
www.javebratt.com
digiheft.com
www.digiheft.com
cdn.fpt123.net
pma.digiheft.com

Certificate

The complete raw certificate details for www.digiheft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308023834032962483000775143411946947748922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:45:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:45:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digiheft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2038 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai-education.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amanos-pizzeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stage-asduytasdufyaskjdfysajdf.unyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dredgerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fbredacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ignisight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.jeugdtornooi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.next.ignisight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.truebizpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdev.events66.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestow.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikayi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartageosys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavalheiromoderno.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebra.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celoricodebasto.g2canal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsdev.events66.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compro.192.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.almamaters.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.crave-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.staging.drcuco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.devridezum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentos.galconsulting.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dowerapport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergententerprises.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotografogeraldooliveira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francedrafting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgsteyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getgoldilocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getkiddopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haarlem1.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvestingrainwater.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanmultimarcas1.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ja.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacobkeith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansei-stg.tck.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanenhancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpdevelopers.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcosvrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeseeks.horrible.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.hronlineportaal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistformultimus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgchangeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ob.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.firebase.fredliang.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimize.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orange-rocket.knownuggets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otnielhenig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p53-dev.credeo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasandoelgrado.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placenote.vertical.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbot.alchemycodelab.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racot-headspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raffwedssarah.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasandha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasandha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler-ui.development.carecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seac-ap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigx.iterate.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiralup.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiralupberatung.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.hive.band'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.velocityps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.blindsqua.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thriveapp2.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsdm-band.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7april2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestow.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caroke.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdbc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.chatshier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digiheft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estudionotarial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f2020technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francedrafting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getkiddopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haarlem1.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impexcars.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivanmultimarcas1.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ja.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffersonortiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jkrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labuanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loanenhancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mistformultimus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msigroup.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgchangeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ob.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otnielhenig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raffwedssarah.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconcilemoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasandha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasandha.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasandha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasandha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steeltech.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinaandecor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016affc2aef0000004030047304502205da17e1530776bca6524a16943805a67d1132a31e0a36b6ad7ba9e7378462c4f022100c584c36f01f83375128699cb89b3ae3705059749114a6623c61dbc73fc29269c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016affc2af1100000403004730450221009398a30c1fdb965c8854e5ec67f934088ed628bc9de2a2ee925a477b0df7d9b002204965d2ed33e2bc88efe46365a5e652c835d48b2e2fd13e71f3d77ec0bf96551c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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