bigfamily.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:1e:a7:01:45:14:6f:5b:9b:57:e3:5e:ab:17:c5:2d:cc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bigfamily.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:1e:a7:01:45:14:6f:5b:9b:57:e3:5e:ab:17:c5:2d:cc
Serial Number (int): 333517463561724094127207436213095548399052
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:39:5b:af:0e:79:cd:8d:6b:35:14:04:07:ed:d6:fb:3c:b8:ea:69
Fingerprint (sha256): 11:eb:07:c3:15:a8:f0:6a:7a:3d:29:7c:22:a9:da:72:ff:80:45:f1:90:41:25:b3:fe:c8:a8:4a:68:57:6b:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bigfamily.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bigfamily.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adif.streamgps.com
admin.piccles.com
api.aiderly.de
app.directmed.co.za
app.evochat.ru
app.lightstrategies.com
app.lsigraph.com
app.silentmode.com
app.skipscooters.com
app.wubo.co.uk
bagiware.pl
beta.sliptap.com
bidding.ninja
bigfamily.com.br
blog.morse.camp
bloomjosh.com
bookmarks.lucaseverett.com
clients.avendy.co
clients.paysystems.ca
collectiveio.com
dev.moonlitdoor.com
dicksword.xyz
dobi.run
en.nuberoja.org
fcgomes.com.br
firebase.fmatechnologies.com.br
freeyourbooks.com
fusary.com
geotagger.mistybits.com
gncalculos.com.br
greeklifts.com
growth.non-standard.world
hadaxsheran.com
kashif.app
kingdomsofheckfire.community
l1.tripdigital.com.br
lalamedia.vn
lamyanfoon.com
lickicedtea.com
locals.se
makeyourpringles.com
mesalistapp.com
mujawadiyachashmaghar.tk
ntaledata.com
pinangular.tk
pinreact.tk
piriapunkis.tk
rainrockdev.com
releaseplug.com
renaichinese.com.au
roster.outline.org.nz
rushing.com.br
shivusoft.com
skanelag.com
soragh.com.np
soyfreelancer.com
spotify-app.erictanaka.com
staging.listnow.app
staging.parkkoribangladesh.com
tallyinteractive.com
test.order.kitchinn.sk
thebanlists.com
top50tracks.com
trello-utils.codelenny.com
unitein.com
vidracariavidrotec.com.br
wearesme.co.za
www.aprl.biz
www.bagiware.pl
www.bidding.ninja
www.bigfamily.com.br
www.bramtrabaho.com
www.chunet.org
www.collectiveio.com
www.en.nuberoja.org
www.forexadvisor.ca
www.fucktoken.com
www.gebrato.de
www.getnetworkerapp.com
www.gigthai.com
www.gncalculos.com.br
www.greet.social
www.lambertstrategygroup.com
www.lickicedtea.com
www.mesalistapp.com
www.piriapunkis.tk
www.releaseplug.com
www.rushing.com.br
www.sherlakeselfstorage.com
www.shivusoft.com
www.soragh.com.np
www.soyfreelancer.com
www.splendenstudios.com.br
www.thebanlists.com
www.top50tracks.com
www.unitein.com
www.visaexpresstravel.club
www.wearesme.co.za
xn--kvrner-qua.opint.cogniteapp.com
yawperschat.com

Other certificates including the domain name bigfamily.com.br

(limited to 100 certificates)
bildx.studio
lifeium.app
csuohio.emirror.app
bigfamily.com.br
ksusliderprediction.sqwadhq.com
castlevania.tonycasale.net
ankester.com
valentinelys.art
www.jenova.ie
bloo-management.com
bacill.ai
storygoes.co
morpheus.qa.crnt.com.br
ankester.com
rhino.savannahpods.com
playprologue.com
playprologue.com
pxlbots.com
moviedb.ekal.se
leesistersukulele.com
chat.automatadg.com
myhue.brgr.io
www.lunebleue.coop
staging.listnow.app
bafanl.lobsterdoodle.co.uk
floridatech.camp
kawkaby.com
www.hideokaizuka.com
myhue.brgr.io
www.bigfamily.com.br
gncalculos.com.br
bigfamily.com.br
store.avatarmetal.com
nandhanservices.estore.business
demo.peerly.app
officermedicalcentre.com.au
stock-options.internal.bigblue.co
demo.peerly.app
www.bitcows.farm
cliente.vendeme.app
service.rameshelectricals.com
csuohio.emirror.app
www.miles2one.com
www.vitechd.com
bildx.studio
mobile.servicevanguard.com
bigfamily.com.br
japy.travel
app.meritu.co
affirmationsinaction.goalkix.com
www.ghranek.com
www.svbellamarina.com
www.pic.amc0.com

Certificate

The complete raw certificate details for bigfamily.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333517463561724094127207436213095548399052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 02:44:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 02:44:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bigfamily.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1980 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adif.streamgps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.piccles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.aiderly.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.directmed.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.evochat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lightstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lsigraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.silentmode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.skipscooters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.wubo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagiware.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sliptap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidding.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigfamily.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.morse.camp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomjosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookmarks.lucaseverett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.avendy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.paysystems.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectiveio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.moonlitdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicksword.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dobi.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.nuberoja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcgomes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.fmatechnologies.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeyourbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geotagger.mistybits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gncalculos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeklifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth.non-standard.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadaxsheran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kashif.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingdomsofheckfire.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l1.tripdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalamedia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamyanfoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lickicedtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locals.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeyourpringles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesalistapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mujawadiyachashmaghar.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntaledata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinangular.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinreact.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piriapunkis.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainrockdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releaseplug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaichinese.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roster.outline.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushing.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shivusoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skanelag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soragh.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soyfreelancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotify-app.erictanaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.listnow.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.parkkoribangladesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallyinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.order.kitchinn.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebanlists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top50tracks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trello-utils.codelenny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidracariavidrotec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearesme.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprl.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bagiware.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bidding.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigfamily.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bramtrabaho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chunet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collectiveio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.nuberoja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forexadvisor.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fucktoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gebrato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getnetworkerapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gigthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gncalculos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greet.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lambertstrategygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lickicedtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesalistapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piriapunkis.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.releaseplug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rushing.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sherlakeselfstorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shivusoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soragh.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soyfreelancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splendenstudios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebanlists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.top50tracks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visaexpresstravel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearesme.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kvrner-qua.opint.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yawperschat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166a42c278f0000040300463044022027a80e9edc72df1259259cf1fe1c03a7717b548f55c6803d9f40655b1095621002203234acc64c247560be7553a76e1a60a69f00b85f1987751bae1ae9b0fa71f532007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166a42c28810000040300473045022100eb441d72024a4411af8696a93f772cb281f34bddb85ced7961339f78ff710f2c02202850d5ed85eb2d4909852a23585457a0c61966e60a79c35021e7a0bfd13e390a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00826616a97b00a1dc477c6b630309f1c81398493cba78425290cd7579d6c787592bff5139e24de6766f591dfad0c5f7dbe95c9200c4e13feb97ad2de541fb48fff1281d8345b5d7044244555cc5706e532ebeeecd926a102a833fcfc7714a08c248c40b89943eafea2a940520d3819f5ca0a9e2f41f58c34016fce52cdf62229327f63df143233b51b570c190acc97e8c030de9f5d5df69c1397022dc994719473ac17b4e6aa2ca67b8954493d96b2fe6c1f69e2f2a0cdbb2b1a89231c9c27dbc7b74ddf14624cda7fec386ac421daaecde698651a6745e43e4b83446ee102a74e7f68b4a533dc2efa28aeb7eb019ab2456e72fb2bb07512bccfbf20e5aa77dca