hefa.lt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:21:4f:a8:f1:1c:5e:03:42:58:06:28:87:a8:a2:89:64 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hefa.lt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:21:4f:a8:f1:1c:5e:03:42:58:06:28:87:a8:a2:89:64
Serial Number (int): 324673656184435600433359160411517236709732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:05:a2:f3:a0:27:b1:5c:e0:5d:39:f3:05:7a:6e:d4:a3:8b:eb:98
Fingerprint (sha256): 15:eb:21:2c:ec:30:fc:11:85:bf:ba:c5:38:f7:ed:08:86:17:c7:b3:07:d7:cb:01:72:bc:cd:8e:03:38:f0:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hefa.lt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hefa.lt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.yamatovalve.wowdesk.jp
app.live.trvlbud.com
baetylus.io
bigtop.tv
booking.als.sg
botillsammans.nu
br.gympassplus.webplayer.fit
chatter.dev.raymannair.com
climax.works
console.smartrails.ch
console.social-auditor.ru
contact.adias.tech
coronavirusagora.com.br
covid19indiatracker.com
cp.americanmeat.jp
denchdev.co.uk
distributor-test.hybrone.com
envoycars.com
es.gympassplus.webplayer.fit
evanmattsen.com
faces.bogdan-niculescu.co.uk
fb.j-l.win
fhmghs.com
fitness.themillennialcompany.co.za
flare.university
fr.gympassplus.webplayer.fit
franchise.mrpestcontroller.com.au
grand-p.app2.1on1navi.com
grant-mastrandonas.com
hefa.lt
hobbylist.net
instellar.studio
ioaldoferrante.it
it.gympassplus.webplayer.fit
jonathanvang.com
kleisin.com
kunalkamble.com
leadgen-dashboard.interest-media.com
lesoft365.com
lovetocook.app
magnumpolish.com
maxines.app
medlab.ge
my-test.hybrone.com
nikebyyou.niketh.app
noeosorio.com
nogari.site
nomuda.pl
pikasoutez.cz
produttori.tumn.it
qassure.quantiphi.com
ra.ranker-stage.com
ra.ranker.com
reactworkshops.com
rothlawassociates.com
sbank.jp
shop.el-manchi.at
siddhiplywood.cf
skipit.care
summy.dev
terms.softus.co.kr
testing.sparkdj.com
tim-wang.com
torusknot.slappar.nu
track.allridi.com
tuskaraivojarikka.us
url.hepsijet.com
vip-zip.com
vipzip.in
web.beta.passfolio.us
web.development.passfolio.us
web.internal.passfolio.us
web.passfolio.us
www.ahhmused.com
www.botillsammans.nu
www.ccc.community.zonehaven.com
www.ditebak.com
www.enablerealty.in
www.envoycars.com
www.handsmade.info
www.ioaldoferrante.it
www.jonathanvang.com
www.kalenderapp.dk
www.magnumpolish.com
www.medlab.ge
www.mervix.live
www.noeosorio.com
www.nomuda.pl
www.reactworkshops.com
www.renginiuasai.lt
www.robotex.my
www.rssistemas.tech
www.shop.el-manchi.at
www.skipit.care
www.skipit.us
www.smco.community.zonehaven.com
www.staance.today
www.uditmaherwal.com
www.zizzu.it
yamatovalve.wowdesk.jp

Other certificates including the domain name hefa.lt

(limited to 100 certificates)
vlv.hefa.lt
inventory.heartandsolecycleandfitness.com
chq.hefa.lt
sha.hefa.lt
jex.hefa.lt
hefa.lt
joy.hefa.lt
fly.hefa.lt
claudia.hefa.lt
dev.elog.ph
www.hefa.lt
dld.hefa.lt
bws.hefa.lt
claudia.hefa.lt
www.hefa.lt
outlet.hefa.lt
son.hefa.lt
hefa.lt
inventory.heartandsolecycleandfitness.com
sfg-manching.de
ats.hefa.lt
smt.hefa.lt
solvarea.speakylink.com
hefa.lt
luc.hefa.lt
top.hefa.lt
fly.hefa.lt
www.dead-fund.com
fcp.hefa.lt
autostadt.buildonvolkswagen.com
fry.hefa.lt
api-test.wecovr.com
key.hefa.lt
app.taskfolio.pt
tir.hefa.lt
podiumai.org
hefa.lt
fsx.hefa.lt
its.hefa.lt
gtr.hefa.lt
www.torly.co.il
top.hefa.lt
ankitpareek.com
fastify.pandicorn.app
ldf.hefa.lt
trinidadrugs.com
sni.cloudflaressl.com
trinidadrugs.com
ensio.hefa.lt
fastify.pandicorn.app
reservation.pneusystem.sk
wdp.hefa.lt
www.torly.co.il
wlk.hefa.lt
stk.hefa.lt
ghs.hefa.lt
val.hefa.lt
cow.hefa.lt
utb.hefa.lt
hefa.lt
grw.hefa.lt
sfg-manching.de
gaz.hefa.lt
fds.hefa.lt

Certificate

The complete raw certificate details for hefa.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324673656184435600433359160411517236709732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 08:50:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 08:50:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hefa.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.yamatovalve.wowdesk.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.live.trvlbud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baetylus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigtop.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.als.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botillsammans.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.gympassplus.webplayer.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatter.dev.raymannair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climax.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.smartrails.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.social-auditor.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.adias.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirusagora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19indiatracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.americanmeat.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denchdev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributor-test.hybrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.gympassplus.webplayer.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evanmattsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faces.bogdan-niculescu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.j-l.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhmghs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness.themillennialcompany.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flare.university'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.gympassplus.webplayer.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.mrpestcontroller.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grand-p.app2.1on1navi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant-mastrandonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hefa.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobbylist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instellar.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ioaldoferrante.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.gympassplus.webplayer.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonathanvang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleisin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunalkamble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadgen-dashboard.interest-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesoft365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovetocook.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnumpolish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxines.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medlab.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.hybrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikebyyou.niketh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noeosorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nogari.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomuda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikasoutez.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produttori.tumn.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qassure.quantiphi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.ranker-stage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra.ranker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reactworkshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rothlawassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbank.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.el-manchi.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siddhiplywood.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skipit.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summy.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terms.softus.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.sparkdj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tim-wang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torusknot.slappar.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.allridi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuskaraivojarikka.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.hepsijet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip-zip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipzip.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.beta.passfolio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.development.passfolio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.internal.passfolio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.passfolio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahhmused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.botillsammans.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccc.community.zonehaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ditebak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enablerealty.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envoycars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handsmade.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ioaldoferrante.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonathanvang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalenderapp.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnumpolish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medlab.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mervix.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noeosorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nomuda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reactworkshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renginiuasai.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robotex.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rssistemas.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.el-manchi.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skipit.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skipit.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smco.community.zonehaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staance.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uditmaherwal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zizzu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamatovalve.wowdesk.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017130003d68000004030046304402206f805fe08f5d27ab50ee44c49aa39e439ef373f165c99f95414deb256b373da2022079006d4c8b370898bfb81409751751ed24b41bf89c29e63ec75069b4f8641e0f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017130003da2000004030047304502206b7209284642045ab9daca20da7141241ef4acc9ed6f80fcb0561e11ffc03081022100f96e2a88b6da2e65f5f5c44c665048758229a71bc6a8b166ee38c2bf2c3640dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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