www.sos-childrensvillages.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number df:b9:16:b6:29:17:08:2d:0f:6a:58:d9:be:04:42:3c was issued on by Sectigo Limited.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sos-childrensvillages.org

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): df:b9:16:b6:29:17:08:2d:0f:6a:58:d9:be:04:42:3c
Serial Number (int): 297378878624118770008358313641094955580
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d4:31:b5:63:4f:25:20:98:e6:46:78:52:38:80:c9:23:8b:71:54:5d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 0b:be:fb:f1:8f:54:5a:53:a4:e3:89:f4:5e:47:f3:81:f6:e3:04:ef
Fingerprint (sha256): 13:b6:61:b9:e8:8c:b9:d6:dc:5d:c5:66:1c:5e:fb:d4:20:d8:ce:d5:7f:ce:db:1d:11:74:76:04:6f:5c:7c:87

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.sos-childrensvillages.org

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sos-childrensvillages.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sos-childrensvillages.org
aldeasinfantiles.org.co
aldeasinfantiles.org.pe
aldeasinfantilessos.cl
dona.sositalia.it
future.sos-kinderdorf.at
give.sos-usa.org
mein.sos-kinderdorf.at
meine.sos-kinderdoerfer.de
rataufdraht.at
soscambodia.org
soshongkong.org
sosvietnam.org
wichtelpost.sos-kinderdorf.at
www.4raum.at
www.aldeasinfantiles.or.cr
www.aldeasinfantiles.org
www.aldeasinfantiles.org.ar
www.aldeasinfantiles.org.bo
www.aldeasinfantiles.org.co
www.aldeasinfantiles.org.ec
www.aldeasinfantiles.org.gt
www.aldeasinfantiles.org.hn
www.aldeasinfantiles.org.mx
www.aldeasinfantiles.org.pa
www.aldeasinfantiles.org.pe
www.aldeasinfantiles.org.py
www.aldeasinfantiles.org.ve
www.aldeasinfantilessos.cl
www.aldeasinfantilessos.org.do
www.aldeasos.org.ni
www.aldeassos.org.sv
www.aldeias-sos.org
www.aldeiasinfantis.org.br
www.digify.org
www.hermanngmeineracademy.org
www.hermanngmeinerakademie.org
www.juquest.at
www.lehrher.at
www.ombuds-sos-childrensvillages.org
www.rataufdraht.at
www.sos-bangladesh.org
www.sos-childrensvillages.ae
www.sos-jamaica.org
www.sos-kinderdoerfer.org
www.sos-kinderdorf.at
www.sos-somalia.org
www.sos-syria-ar.org
www.sos-syria.org
www.sos-usa.org
www.sos.or.id
www.sosacrowdfunding.org
www.soschildrensvillages-arabic.org
www.soschildrensvillages.lk
www.sositalia.it
www.sosnepal.org.np
www.sosphilippines.org
www.sosthailand.or.th
www.sosthailand.org
www.we-r-sos.at
www.wichtelpost.sos-kinderdorf.at

Other certificates including the domain name sos-childrensvillages.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sos-childrensvillages.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFAXqRBgsuvuoJJLQOOp
146RptxnBLn6FVkxIRMEr9EVJfbzoN+nLJvf4nc3QdK7cqITlHdDrS84CWNe5A7J
/98LXkhnMp4EV5loGBE8m+XBqAu7t41qlDyNSnUXZ+HIhk/s2QMcQzRWtmuV39Dx
HsoIuUz/NGE7sFWPIcrzwPaQLgMLHvvox/Q8GYs+MMO2MitxUVD5RBKrHW7Fqf1h
ufj9tNXdxJmPjc+uMsz7fN+SRrEd0iXVP+x7yf/9qLhw01puoXo614+M176SFxKy
NoU5zyAlWya6Qohb4sn3TgdIXrQGtCCse4i5qbF4hHNI3QEPlcTtop4+c3o2H5kg
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297378878624118770008358313641094955580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sos-childrensvillages.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24277249599492664222187810977401385345974704867685453628441668701667113833235618684413819747434869084453583229040997674311899080936511929322099144920103554596946950305878456176807767126387854852506103375251821503183048702858887965825973306868446286036262876767051044538128590387359186206163645635994169438845990218719177657244459326845827651856261856741156737496320952553138357967010602351467937620348143653548608637278849525810278283619912581168288854215851427717415140101111047381673140770110169832728888953477582007308024474418442166991906899409783630726275574147870510878189693430098825847567147909793117267107961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d431b5634f252098e64678523880c9238b71545d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1499 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-childrensvillages.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantiles.org.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantiles.org.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantilessos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dona.sositalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.sos-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meine.sos-kinderdoerfer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rataufdraht.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soscambodia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soshongkong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosvietnam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wichtelpost.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4raum.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.or.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantilessos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantilessos.org.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasos.org.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeassos.org.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeias-sos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeiasinfantis.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digify.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermanngmeineracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermanngmeinerakademie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juquest.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lehrher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ombuds-sos-childrensvillages.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rataufdraht.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-bangladesh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-childrensvillages.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-jamaica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-kinderdoerfer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-somalia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-syria-ar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-syria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosacrowdfunding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soschildrensvillages-arabic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soschildrensvillages.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sositalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosnepal.org.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosphilippines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosthailand.or.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosthailand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.we-r-sos.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wichtelpost.sos-kinderdorf.at'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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