www.kiwicampus.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:f3:6e:2c:06:ed:31:07:26:f6:f9:7d:a8:d3:00:56:a6 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kiwicampus.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:f3:6e:2c:06:ed:31:07:26:f6:f9:7d:a8:d3:00:56:a6
Serial Number (int): 269486926683067296741911320574585705879206
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:70:3f:ed:5d:4c:ff:8d:e9:eb:97:65:20:82:10:bb:be:23:de:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:1d:54:f3:8b:cf:3c:15:63:95:92:6f:03:1e:d7:16:f0:01:e1:a7
Fingerprint (sha256): 13:19:25:36:ba:c9:e7:d9:c4:3e:64:04:95:49:a9:c8:0d:a1:e9:f3:c4:eb:00:92:cf:09:c8:33:17:d0:a2:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kiwicampus.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kiwicampus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alphagensystems.com
app.studio
aprikot.io
askspinach.com
atmosinventive.com
beta.aprikot.io
beta.woahapp.com
bharatrawat.com
bluetable.co
brightstory.ca
bureaubilly.company
connexdesk.com
cryptopooch.co
designtoolsberlin.com
diament.co
doodlebuddy.co
elizabethshutters.co
gograb.com.mx
hallhang.com
heartproperty.co.uk
hellounion.news
investors.flyblackbird.com
jovelazquez.com
mandamierda.com
mediasifter.co
myportfolio.design
open.studio
paint.paintzen.com
partnerhero.com
portfolio.brightstory.ca
preview.woahapp.com
sparty.jp
sssin.com
stevenhardge.com
studiolabs.fr
studiolabs.io
thefuturebones.com
therapapp.com
tothetenth.com
tractor.betomer.co.il
tunegocio.gograb.io
tunki.com.pe
usemastermind.com
v3.partnerhero.com
wanderjaunt.com
whatnextt.com
wolffkraft.com
www.alphagensystems.com
www.aprikot.io
www.askspinach.com
www.atmosinventive.com
www.bharatrawat.com
www.bluetable.co
www.brightstory.ca
www.bureaubilly.company
www.casacomercial.com
www.connexdesk.com
www.cryptopooch.co
www.designtoolsberlin.com
www.diament.co
www.doodlebuddy.co
www.hallhang.com
www.heartproperty.co.uk
www.hellounion.news
www.homeprofe.com
www.insane-design.com
www.jovelazquez.com
www.kiwicampus.com
www.mandamierda.com
www.mediasifter.co
www.myportfolio.design
www.nieo.xyz
www.nikolajkoster.com
www.partnerhero.com
www.portfolio.brightstory.ca
www.prexi.io
www.sparty.jp
www.sssin.com
www.stevenhardge.com
www.therapapp.com
www.tothetenth.com
www.tunki.com.pe
www.usemastermind.com
www.wanderjaunt.com
www.whatnextt.com
www.wolffkraft.com
zellalab.com

Other certificates including the domain name kiwicampus.com

(limited to 100 certificates)
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
www.kiwicampus.com
test.blackyankees.com
sni87780.cloudflaressl.com
test.blackyankees.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
sni87780.cloudflaressl.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
box.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
test.blackyankees.com
sni87780.cloudflaressl.com
test.blackyankees.com
www.kiwicampus.com
www.kiwicampus.com
www.kiwicampus.com
test.blackyankees.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
kiwicampus.com
test.blackyankees.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
kiwicampus.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
test.blackyankees.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
test.blackyankees.com
sni87780.cloudflaressl.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
www.kiwicampus.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
test.blackyankees.com
test.blackyankees.com
sni87780.cloudflaressl.com
www.kiwicampus.com
test.blackyankees.com
sni87780.cloudflaressl.com
sni87780.cloudflaressl.com
www.kiwicampus.com
sni87780.cloudflaressl.com
www.kiwicampus.com

Certificate

The complete raw certificate details for www.kiwicampus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVyjREzdx6GJqFwOQdLI
McOMGfiGQ+88MQ1WR8wawKYmlGPkhl3irUO8ybkuiojnUr0kKNcOOD2QudjE4ZqW
c6ZeJzsJbqEcfjzpcCQlSbkgOgAHUx0NgIBazrhQPgRRu4uHiN9T1HH+MwbUPNgC
a3a2rdIwalMhgmZVpiWfgX7lYY7nFnVwhA5bTxGJ37lW1aznWxAFKz4V+8V+e7k4
IT+Epk7jOT/QQxfB0s2prsUP6x9HB8c9IM00pM8YxOwF2A+AN2cXHzPkwbF2jT1d
E+feByj3zSW33PzY0arXMHuN9yFEINxx/DMdc4evFDdcKeNHk0QYRPCfxBWsX1pG
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269486926683067296741911320574585705879206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 14:54:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 14:54:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kiwicampus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22894814581339263114092335753117184201356952383806813069118271306720517897627915428603826159583692435245155377861395303733430852704556955068771001621368926616637741012864385199302766589414818559982246082858475199618459174812889090814545653817033275177152755180162620847190579417935134179563220099406873167477651568778249871559313210251807308174430307557642377534074135471200455854166047523485330688522794510672847234249732916644152571808251309315864151389401051814305933170169580967732633873366845549046697757171086653704684714469230239629270897336672865227114462668836146089172861659723954614872448974512822284862987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3703fed5d4cff8de9eb9765208210bbbe23de2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1636 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphagensystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprikot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askspinach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atmosinventive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.aprikot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.woahapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bharatrawat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluetable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightstory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bureaubilly.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptopooch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designtoolsberlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diament.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doodlebuddy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabethshutters.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gograb.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellounion.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.flyblackbird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jovelazquez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandamierda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasifter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myportfolio.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paint.paintzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.brightstory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.woahapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparty.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sssin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenhardge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiolabs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiolabs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefuturebones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tothetenth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tractor.betomer.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunegocio.gograb.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunki.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usemastermind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v3.partnerhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanderjaunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatnextt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolffkraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphagensystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprikot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askspinach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atmosinventive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bharatrawat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluetable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightstory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bureaubilly.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casacomercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connexdesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptopooch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designtoolsberlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diament.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doodlebuddy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellounion.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeprofe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insane-design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jovelazquez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwicampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandamierda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediasifter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myportfolio.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nieo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikolajkoster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnerhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portfolio.brightstory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prexi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sparty.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sssin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevenhardge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therapapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tothetenth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tunki.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usemastermind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanderjaunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatnextt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolffkraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zellalab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164b865df950000040300463044022059817e58bdd0c4da34a1164e5102c4fc7a8992bb85a337feffbbbe8e302ad928022018f69ac34a5fc9227dd0bd0640623cfe6e35d33a709690fcf8ea2010aecc188b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164b865dfa400000403004630440220689832db612f6d5d3fb1b2d4c5ae11fc814461a41498df3a44bc6f2e0ed52f46022060268056b374a9076de0601f4791950802fb98b0bd4d211939a111231eaaa489
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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