www.cfrancis.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cb:0a:9a:c2:fe:23:f3:eb:4b:af:ce:e7:3e:52:96:8f:d6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cfrancis.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:0a:9a:c2:fe:23:f3:eb:4b:af:ce:e7:3e:52:96:8f:d6
Serial Number (int): 330428274128827854787637990607057711435734
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:b7:0b:71:e6:d2:fe:09:ad:b7:0a:92:2b:29:43:8d:9a:12:1c:bd
Fingerprint (sha256): 1c:37:31:0b:44:5d:dc:eb:ca:38:be:02:5b:7f:3e:98:d0:76:30:ec:fa:c3:01:3a:d0:77:68:66:27:38:c9:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cfrancis.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cfrancis.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

305smok.com
admin.thrivefantasy.com
agent.smartdigiseva.com
apertura-stagin.alfyinversiones.com.ar
apexlegendsroyale.com
app.msgsndr.com
arbitran.com
bnc-pp.poweredbygrow.com
builder.ems-partner.ch
cetlikspor.com
chronus-stopwatches.com
codebirds.com
conhecimentodapalavra.com
console.produvar.com
darshik.com
demo1.ionicfirebaseapp.com
devapp.opensooth.com
docs.adastrahire.co.uk
drunkevolution.com
ems-partner.ch
enchantour.com
eric.smyth.app
eskridge.hyperfaze.com
evbox.vip
everwood.co.za
farmfu.com
feedback.userjoy.co
fiestaokrs.com
financeiro.apecom.org.br
ftfl.erikpedia.science
games.feli.page
geigerslist.org
health-shared.com
hipsterhuntress.com
introduction.atlascopco.com
lafinyhealth.com
nbc-pp.poweredbygrow.com
nirville.com
nutrichef.cl
onurotel.net
palota.com
parkering.mortenlyng.com
pierrefabre2019.rebus.com.mx
pulse.senti.com.ph
queues.live
redlettergospel.com
ridesharelogger.com
rpgobjects.app
sdsolution.rs
stage.nicuportal.com
stagingadmin.twprotection.com
stash.bobbydreamer.com
stream.northnitch.com
styleguide.orbitalads.io
sub1.fdltest.net
sub10.fdltest.net
sub11.fdltest.net
sub12.fdltest.net
sub13.fdltest.net
sub14.fdltest.net
sub2.fdltest.net
sub3.fdltest.net
sub4.fdltest.net
sub5.fdltest.net
sub6.fdltest.net
sub7.fdltest.net
sub8.fdltest.net
themebubble.angularfeed.com
trustybrain.com
v31.staff.esportsconstruct.com
www.305smok.com
www.cetlikspor.com
www.cfrancis.ca
www.codebirds.com
www.codeschooldirectory.co.za
www.denis-sepertino.com
www.denzelvanbelle-photography.com
www.diaroogle.com
www.evbox.vip
www.everwood.co.za
www.fletchergroves.com
www.geigerslist.org
www.glitchpets.com
www.guardianangel.app
www.holibetes.com
www.iguatemi.codes
www.ikbenken.nl
www.introduction.atlascopco.com
www.nirville.com
www.nutrichef.cl
www.offf-portal.info
www.onurotel.net
www.optinoo.com
www.peterfriese.net
www.salsarod.com
www.scraphousemedia.in
www.stoktalk.com
www.trustybrain.com
www.tvattkalendern.app
yourcafe.app

Other certificates including the domain name cfrancis.ca

(limited to 100 certificates)
www.tvattkalendern.app
machinazap.com.br
www.dashboard.l-line.ro
facss.com.br
bootspruefung.de
www.cfrancis.ca
intriot.io
www.enchird.com
ssalvail.com
staging.chatcenter.ai
www.dev.devv.jobs
www.hi21.org
app.justrussel.com
www.cfrancis.ca
new.smileforafrica.eu
staging.hlthdsk.com
resources.njcareers.org
drugs.joshuabennett.dev
sompo-de-noru.jp
onward.to
app.justrussel.com
www.scarapp.com
mogeserd.tk
parkering.mortenlyng.com
ayayadg.com
fireauth.becon.my
www.innomon.ventures
team.center
railway.acegadgets.biz
portal.pickeat.app
www.camarote.vip
www.arikaplun.com
www.techies.app
team.center
thuna.org
app.medicarmais.com.br
app.renynsys.es
finemaster.app
portal.pickeat.app
pro.cefiapp.com
www.smstweb.com
www.ielnexus.com
admin.foodcourtamerica.com
www.nustro.com.br
allthegoodquotes.com
flyrides.joyridecity.bike
miesmuschel.live
www.mndoobk.com
letsdindin.com
www.formation.network
gestion.slared.cl
devfest.gdgtmn.ru
optymalnik.pl
www.akut-medizin.de
enclavia.org
fm.5qr.co
www.calligraphy.org
xcallbackexampleapp.qrbot.net
montreeservices.com
enclavia.org
sandy.chabbaman.com
undial-test.service.deloitte.ai
www.camarote.vip
janemanavian.com
cfrancis.ca
machinazap.com.br

Certificate

The complete raw certificate details for www.cfrancis.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330428274128827854787637990607057711435734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 06:20:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 06:20:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cfrancis.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2056 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '305smok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thrivefantasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.smartdigiseva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apertura-stagin.alfyinversiones.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apexlegendsroyale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.msgsndr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnc-pp.poweredbygrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'builder.ems-partner.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetlikspor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chronus-stopwatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codebirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conhecimentodapalavra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.produvar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darshik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo1.ionicfirebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devapp.opensooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.adastrahire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drunkevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems-partner.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enchantour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eric.smyth.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eskridge.hyperfaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evbox.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everwood.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmfu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.userjoy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiestaokrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeiro.apecom.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftfl.erikpedia.science'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.feli.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geigerslist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-shared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipsterhuntress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'introduction.atlascopco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafinyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbc-pp.poweredbygrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrichef.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onurotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkering.mortenlyng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pierrefabre2019.rebus.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.senti.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queues.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redlettergospel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridesharelogger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgobjects.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdsolution.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nicuportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingadmin.twprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stash.bobbydreamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.northnitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styleguide.orbitalads.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub1.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub10.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub11.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub12.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub13.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub14.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub2.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub3.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub4.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub5.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub6.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub7.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub8.fdltest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themebubble.angularfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustybrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v31.staff.esportsconstruct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.305smok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetlikspor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfrancis.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codebirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeschooldirectory.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denis-sepertino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denzelvanbelle-photography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diaroogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evbox.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everwood.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fletchergroves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geigerslist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glitchpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guardianangel.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holibetes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iguatemi.codes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikbenken.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.introduction.atlascopco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nirville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutrichef.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offf-portal.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onurotel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optinoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterfriese.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salsarod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scraphousemedia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoktalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trustybrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvattkalendern.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourcafe.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bd0746af30000040300483046022100cdc9315fba1fbaaa30de78275545558fefc2f8ae09e6ebdc053af95bda445db2022100e2be0a8e23298a8cb030877e16e0fc8822997d0d113dd9daca6481abd5482e87007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bd0746ae100000403004630440220280f53b4024d8e7639917b66ab90d576e6476bbfd7fae67c75283c716b58708502205bbde3f61043773163b3331db32a29f06d3954fdbb7f31ff9a2306ba565ddafb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0078744e4d777e5c62208725d4d83d0f5a03c16b3dfdaf9f347941c324d21c223f70cbd7c66de97f89ab1e6259ea73b3fbe67ae5c9f21d346f5912158dfe9ab7d1f05d146b7fd9258b09cddf924b90d44dfadcc2e69acbbbeb2ed842873bdc5068095501d5d3b28409ded76d3100d7d8f3d178dd12e3765110209d92293a5c713304c170f3cccc0d96a30e285d02b3d25438bbae4313d8185e9d48af136d8adf201c7e9a354917f388eb7065c716ce8bc045de60dffd9633765b41e391e872e428d209f2be9fa5feb8148525ff486d2e27ca40fc64848f71f1cadcd6dad6604f7ced5f943e3a3a43b30689ef4821cd7cf53d98fd8b82ad5301a69857beec98ad93