legacy32.touchplan.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:57:0b:63:3a:3a:a4:76:a1:9c:ea:be:44:a2:0a:95:ac was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy32.touchplan.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:57:0b:63:3a:3a:a4:76:a1:9c:ea:be:44:a2:0a:95:ac
Serial Number (int): 302286443789264020261490432646990124455340
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:5c:ff:d2:f4:38:93:26:16:5a:15:19:81:09:4e:65:40:00:33:bd
Fingerprint (sha256): 28:76:f5:18:42:f4:49:48:72:22:83:fe:2c:39:b0:3d:35:e0:46:f6:a1:1d:a9:64:dc:04:72:a0:e5:ed:72:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacy32.touchplan.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy32.touchplan.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abrahamhunt.com
acroexplorers.com
akcioskatalogusok.com
alex-sommer.de
app.users-pay.me
appitto.com
backoffice.weblium.io
biketouringacademy.com
blog.aureliuslab.com
bookslovekids.com
btboudreau.me
cardypto.com
carroll.cintel.io
codev.kz
cycosoft.com
danielpfinnegan.com
dashboard.ariia.io
decoright.biz
deeplink.chronoscloud.com
dev-invest-app.influxfin.com
dev.doctorraksa.com
dmaksa.me
dumppi.app
elsewhereretreats.com
eureca.space
getalldeals.xyz
getbacktome.org
getelleratlet.se
grevian.org
happy-neda.com
innovapps.co
instantical.com
intign.com
intouchtool.com
intranet.lempls.com
iskconmsf.com
itshouldntbeajobtogetajob.com
justicekrenak.com
leavecoinbase.com
legacy32.touchplan.io
livebusinessupdate.allerganbroadcast.com
m.godz.cc
market.caspirations.org
mazemazemaze.com
minterns.org
mobonme.com
nioletstietheknot.com
noxi-debug.mobileupdate.dk
oceangvr.com
office-stage.getbookinghero.com
one-scs.com
paradisoamadeo.com
parlanceapp.com
photos.ic-miller.net
pokerkiu.win
preview.talea.de
qrdesign.se
rd.coremeducation.com
sanadna.com
servicedesk.evosysglobal.com
share.aureliuslab.com
slut.coffee
stage-helpdesk.lily-health.co
tabian.co
tacogif.com
teacher-demo.amy.ac
teamegg.co.jp
teppen-games.com
testautomationu.applitools.com
timesheetapp.co
toypo.co.jp
travisdockery.com
upspot.com.au
vishwamcorp.com
wagler.dev
wantedtextmate.com
www.akcioskatalogusok.com
www.bergheim.international
www.bluglasssoftware.com
www.bookslovekids.com
www.choiceschoices.com
www.clubezz.com.br
www.cup-cup.cf
www.dockmasters.ca
www.dumppi.app
www.eightme.com
www.fell8.io
www.happy-neda.com
www.innovapps.co
www.intign.com
www.mazemazemaze.com
www.millennialcredit.com
www.organisationdufutur.be
www.picklesnpies.com
www.rainz.com.au
www.stadhuiskwartierutrecht.nl
www.tamusignrec.com
www.teppen-games.com
www.upspot.com.au
www.webespro.com

Other certificates including the domain name touchplan.io

(limited to 100 certificates)
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
sl.touchplan.io
my.touchplan.io
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
www.codemakro.com
www.docapp.tk
bridgesroyalecommunications.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
sni61338.cloudflaressl.com
sni61338.cloudflaressl.com
*.firebaseapp.com
sni61338.cloudflaressl.com
*.firebaseapp.com
*.firebaseapp.com
app.tomatoma.app
*.firebaseapp.com
lastfar.com
*.firebaseapp.com
sni61338.cloudflaressl.com
doc.dev.creationdose.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
mobile.mab.touchplan.io
*.firebaseapp.com
app.hisab.co
*.firebaseapp.com
bluebeakai.com.au
massagerepublica.com
*.firebaseapp.com
www.dylanvarghese.com
*.firebaseapp.com
*.firebaseapp.com
info.touchplan.io
*.firebaseapp.com
sni61338.cloudflaressl.com
repair.me
*.firebaseapp.com
excitation.app
*.firebaseapp.com
*.firebaseapp.com
dashclicker.live
*.firebaseapp.com
*.firebaseapp.com
admissions.sjc.co.za
*.firebaseapp.com
*.firebaseapp.com
tezaaa.com
*.firebaseapp.com
casaverde.ai
sni61338.cloudflaressl.com
www.stream.gakuseiguild.co.jp
www.barkatulhadees.net
*.firebaseapp.com
sni61338.cloudflaressl.com
*.firebaseapp.com
*.firebaseapp.com
my.touchplan.io
sni61338.cloudflaressl.com
sni61338.cloudflaressl.com
*.firebaseapp.com
*.firebaseapp.com
sni61338.cloudflaressl.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
*.firebaseapp.com
www.mural21.com
msjewels.co.in
sni61338.cloudflaressl.com
*.firebaseapp.com
*.firebaseapp.com
www.brunocarvalho.eti.br
*.firebaseapp.com
*.firebaseapp.com
sni61338.cloudflaressl.com
*.firebaseapp.com
frankspin.nl
www.nordpole.at
zoom-deauth.gmelius.io
*.firebaseapp.com
mc34.xtend.events
*.firebaseapp.com

Certificate

The complete raw certificate details for legacy32.touchplan.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302286443789264020261490432646990124455340
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 09:48:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 09:48:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy32.touchplan.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abrahamhunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acroexplorers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akcioskatalogusok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alex-sommer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.users-pay.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appitto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.weblium.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biketouringacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.aureliuslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookslovekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btboudreau.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carroll.cintel.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codev.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielpfinnegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.ariia.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoright.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplink.chronoscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-invest-app.influxfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.doctorraksa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmaksa.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumppi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsewhereretreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eureca.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getalldeals.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getbacktome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getelleratlet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grevian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happy-neda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovapps.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intouchtool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.lempls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iskconmsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itshouldntbeajobtogetajob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justicekrenak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leavecoinbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy32.touchplan.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebusinessupdate.allerganbroadcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.godz.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market.caspirations.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazemazemaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minterns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobonme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nioletstietheknot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noxi-debug.mobileupdate.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceangvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-stage.getbookinghero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-scs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisoamadeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parlanceapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.ic-miller.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokerkiu.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.talea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrdesign.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.coremeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanadna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.evosysglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.aureliuslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slut.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-helpdesk.lily-health.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabian.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacogif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher-demo.amy.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamegg.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teppen-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testautomationu.applitools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesheetapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toypo.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travisdockery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upspot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vishwamcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagler.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wantedtextmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akcioskatalogusok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergheim.international'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluglasssoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookslovekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choiceschoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubezz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cup-cup.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dockmasters.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dumppi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eightme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fell8.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happy-neda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovapps.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazemazemaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millennialcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organisationdufutur.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.picklesnpies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rainz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadhuiskwartierutrecht.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamusignrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teppen-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upspot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webespro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bd659be4000000403004630440220201aea7f4501963228bbf30345851adfd5a0926074c919f27fc83532a5cf13d302207acdb9936a4cdc6a6410cc46497c4ec62d80dc05a4706e553b43776a2762723c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bd659be630000040300473045022011e30bd9f9e8a9cbb9c70a6bb3f140d73ee7055641533466fbbfc37767a0500b022100875c874acb29c88947eb5ee2e65b33ac1e7e9b0027c4bb628c075369caee9a78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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