links.afrosaude.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:56:2e:8c:1b:9f:fb:af:b3:b6:20:c3:ff:4e:93:92:f2:73 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=links.afrosaude.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:2e:8c:1b:9f:fb:af:b3:b6:20:c3:ff:4e:93:92:f2:73
Serial Number (int): 290663013320147979090253474303718058029683
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:21:38:30:91:70:d5:1b:4b:af:0e:aa:14:6b:6b:1e:3b:9d:b4:9f
Fingerprint (sha256): 24:e5:90:61:55:12:52:46:66:ea:85:8b:cf:b5:f4:a0:84:db:12:50:01:65:51:c4:f2:0e:5d:9f:4e:58:7e:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate links.afrosaude.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for links.afrosaude.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acap-lpo-dev.bop-tech.com
acap-lpo-qa.bop-tech.com
admin.doconation.com
admin.rtm.vnlp.ai
admin.traitte.store
admin.v-pbx.net
akademiarozwojuprzemyslu40.pl
apap-lpo-dev.bop-tech.com
apiplwarehouse.in
app-music.dwango.jp
app.datafycms.com
app.endekasports.com
apply.enigmavssut.com
arjuntomar.com
assets-easyterm.inszu.com
assets-staging.inszu.com
auth.daftpage.com
auth.google.performanceuniversity.com.br
auth.karaokemassacre.com
auth.scanrad.io
authrsklss.revyrie.co
azur-move-services.pro
bb-list.com
bigeacademy.com
brandonblackmon.com
business.wido.com.br
calculator.dave-becker.com
cards.flashmedapp.com
cashy.pl
checklistpessoal.symbol2.com.br
cmoethiopia.et
connect.klinkfundraising.com
crypt.dave-becker.com
directdone.com
ehtkollen.se
excelparamovil.com
garageparts.lt
get.xn--glckwnsche-bebd.app
giftcard.rituals.com
go.directonedesign.com
greendental.com.co
hub.tecnonegocios.info
i.digitalid.com
icnh.simuladodetran.com.br
image-inspector.nwslab.vrtinnovatie.be
infobusinessleads.com
ingops.com.co
intranet.swimtrack.com.br
jsd-online-demo.preemptive.com
jusmulticreation.ca
kanapkaman.pl
krishnasahu.com
lazarosinesiobjj.com
legals.alassautdusida.com
link.penalosaauditores.com.co
links.afrosaude.com.br
login.aodocs-staging.com
menu.ngtec.site
miprimertrabajoit.com
motorista.oddrive.com.br
musicbox.kitkatyj.com
notes.quiet.works
portal.swimtrack.com.br
rib.library.ethz.ch
smythian.com
southtrade.online
spikey.tech
tallerseguro.com
tm-co-dev.bop-tech.com
tm-co-qa.bop-tech.com
tst-partner.elrego.com
unidays.retorio.com
updates.gorgias.io
url.ginih.com
web.instigate.ai
webapp.be4bet.net
www.aaradhyagrand.com
www.apiplwarehouse.in
www.arenapublisher.com
www.crypt.dave-becker.com
www.directdone.com
www.doncuak.com
www.excelparamovil.com
www.garageparts.lt
www.gspdua.com
www.ingops.com.co
www.leelaconventioncenter.com
www.lifestylerhythm.com
www.meese.pl
www.presconmd.com
www.smythian.com
www.technologytoolkit.clevelandmetroschools.org
www.theautomobilezone.com
www.tilannehuone.xn--hlytyslista-l8a.fi
www.xn----7sbbn2aknde2e.xn--j1amh
www.xn----7sbhdzihcxec9an7e.xn--p1ai
xn----8sbgjdalljqfue2ac1j.xn--p1ai
xn--2t8h.puf.io
xn--72cg8cfab6avx1f9b4a5y.petchpatthana.in.th
xn--rd-yia.app

Other certificates including the domain name afrosaude.com.br

(limited to 100 certificates)
beirut-roastery.com
arminsolecki.com
paineldecontrole.jaentendiagro.com.br
go.strongboxit.com
sergebadio.com
blog.arwinstrating.com
admin-test.vnlp.ai
www.sailcourier.com
link.nwplus.biz
www.madlineindia.com
esar.in
flotaorense.ngtec.site
careers.sre.co.id
www.missingbean.lt
ganeshaviajes.tur.ar
admin-dev1.vnlp.ai
arminsolecki.com
links.afrosaude.com.br
deliverymetropolis.com
way.leopalma.com
www.jusmulticreation.ca
tst-dyson.elrego.com
confirmex.ca
www.nshop.id
v1.aujezus.me
cantoral.jefteapps.com
admin.pundirvaibhav.in
bgedsconsultant.com
www.fixed.com.co
afrosaude.com.br
admin-test.vnlp.ai
xn--vk1b79f2rae3j12b51h9tmi8fba4670alia79i.kr
www.fixed.com.co
arsenal-kr.lifebase.app
arsenal-kr.lifebase.app
l.xn--fz4a.my.id
wire-beta.io-fund.com
www.lifestylerhythm.com
www.yacu.org
www.onlinecvs.xyz
healthyfi.me
blog.arwinstrating.com
wheels-shop.kiibo.mx
coffee.ensvee.com
www.kanjiholic.com
xn--aktivoli-brse-rmb.de
app.iturramasat.com
wire-beta.io-fund.com
www.wyjazdycypr.pl
livechat-ocb.vnlp.ai
debugentity.tech
test-system-tour.illumina.com
admin-dev1.vnlp.ai
www.sprints.top
beirut-roastery.com
admin.walnut.com.vc
debugentity.tech
www.jusmulticreation.ca
test-system-tour.illumina.com
afrosaude.com.br
weekly.com.co
afrosaude.com.br
bitgetm.xn--bb0bw4mtof.kr
www.julenminer.com
bitgetm.xn--bb0bw4mtof.kr
ganeshaviajes.tur.ar
lecturesearch.online
www.julenminer.com
winodomowe.browin.pl
esar.in
www.sailcourier.com
cantoral.jefteapps.com
admin-test.vnlp.ai
xn--vk1b79f2rae3j12b51h9tmi8fba4670alia79i.kr
admin-test.vnlp.ai
www.kanjiholic.com
www.onlinecvs.xyz

Certificate

The complete raw certificate details for links.afrosaude.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290663013320147979090253474303718058029683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 07:43:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 07:43:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'links.afrosaude.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2312 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acap-lpo-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acap-lpo-qa.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.doconation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rtm.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.traitte.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v-pbx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akademiarozwojuprzemyslu40.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apap-lpo-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiplwarehouse.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-music.dwango.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.datafycms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.endekasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.enigmavssut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arjuntomar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-easyterm.inszu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-staging.inszu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.daftpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.performanceuniversity.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.karaokemassacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.scanrad.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authrsklss.revyrie.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azur-move-services.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bb-list.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigeacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandonblackmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.wido.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculator.dave-becker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cards.flashmedapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checklistpessoal.symbol2.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmoethiopia.et'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.klinkfundraising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crypt.dave-becker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directdone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehtkollen.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excelparamovil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garageparts.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.xn--glckwnsche-bebd.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcard.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.directonedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendental.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.tecnonegocios.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.digitalid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icnh.simuladodetran.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image-inspector.nwslab.vrtinnovatie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infobusinessleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingops.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.swimtrack.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsd-online-demo.preemptive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jusmulticreation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanapkaman.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krishnasahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazarosinesiobjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legals.alassautdusida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.penalosaauditores.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.afrosaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aodocs-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menu.ngtec.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miprimertrabajoit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorista.oddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicbox.kitkatyj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notes.quiet.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.swimtrack.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rib.library.ethz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smythian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southtrade.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spikey.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallerseguro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm-co-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm-co-qa.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-partner.elrego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidays.retorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.gorgias.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.ginih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.instigate.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.be4bet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaradhyagrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apiplwarehouse.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arenapublisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crypt.dave-becker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directdone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doncuak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excelparamovil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garageparts.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gspdua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingops.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leelaconventioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifestylerhythm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meese.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presconmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smythian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technologytoolkit.clevelandmetroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theautomobilezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tilannehuone.xn--hlytyslista-l8a.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn----7sbbn2aknde2e.xn--j1amh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn----7sbhdzihcxec9an7e.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----8sbgjdalljqfue2ac1j.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--2t8h.puf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--72cg8cfab6avx1f9b4a5y.petchpatthana.in.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rd-yia.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abc0f39fa000004030047304502206846385b1f284696c48c416747f6c19bcdc55822f26f335305031c2858389e6f0221009b91f3553a94e6ea25f8b186c622dfc345ec314e8c8abda2216a8224e01907d6007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018abc0f3a34000004030047304502201e2da23cc58463bd349450853b8e18f3fb691546230027c12c3484f414768c92022100d57eeb5f5adf1c4ca536e61353b2318d4d5cc8b0dd600ebd01e9e585ff905ebe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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