us4certificate-1-202310241337.us4.opz1.com

Issued by R3

About this certificate

This digital certificate with serial number 03:29:a8:01:a8:da:fc:f7:ba:f1:49:ed:6e:ff:fb:24:71:a5 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=us4certificate-1-202310241337.us4.opz1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:a8:01:a8:da:fc:f7:ba:f1:49:ed:6e:ff:fb:24:71:a5
Serial Number (int): 275511753759422783894899364289677474689445
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:1c:59:e7:33:7b:cd:52:8a:8d:21:40:8c:ad:1f:1a:4e:19:27:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:8b:a0:13:66:68:bd:24:08:70:b7:bd:06:b6:69:0f:4c:07:b8:68
Fingerprint (sha256): 2c:55:2f:24:d5:43:f5:3c:81:5c:56:16:3d:a0:96:83:4c:38:0b:f4:8b:37:f9:89:9a:3d:52:de:f4:33:0f:3d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate us4certificate-1-202310241337.us4.opz1.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us4certificate-1-202310241337.us4.opz1.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3d.pikus3d.com
aec.tekexa.com
brizodata.co
cleanoutplayer.cleanguards.com
creator.momenthouse.com
dhan.renergytech.com
discover.rivaengine.com
e.numero.app
email.thesprycare.com
email.unifan.co
emails.mantys.in
emailtracking.saara.ai
engage.ingrity.com
engagement.silverlinecrm.com
growth.antwalk.com
growth.havasedge.com
growth.klubworks.com
growth.loopmails.com
gtr.globaltalentnow.com
hello.ambassadorgroup.com
hello.bluetrunk.co
hello.cc-techgroup.com
hello.cockrum.io
hello.doodlebreaks.com
hello.evacor.com
hello.marginsales.com
hello.oncolens.com
hello.pointerstrategy.com.au
hello.shyft6.com
hello.sirum.org
hello.softlix.tech
hello.springup-pr.com
hello.ubuntoo.com
hello.zen.agency
hi.talentstarter.io
info.englishpathway.co
info.fairwayiq.com
insight.sterlinggrowthpartners.com
links.rocketlane.com
mail.evercam.us
mail.lambdatestonboarding.com
mailo.asaarmedical.info
marketing.akira.co.in
marketing.msaasemail.com
my.dayof.net
o.sales.mail.hivelearning.com
offiga.op.offiga.com
op.adquick.com
op.conformit.com
opv1.inetco.com
out.apexb2b.co
outplay.ambitsoftware.com
outplay.benchmarksolution.com
outplay.constructionrecruiting.com
outplay.flyntlok.com
outplay.givelegacy.com
outplay.hopsoffice.com
outplay.ninjajobs.org
outplay.optimally.com
outplay.payzilla.com.au
outplay.pclub.io
outplay.primetimeship.com
outplay.revenue-reimagined.com
outplay.sinalite.com
outplay.stormboard.com
outplay.thelocobuzz.co
outplay.trustanalytica.com
outplay.trywisk.com
outplay.willowpack.com
outplay.yellow.ai
outplay.zidzid.us
outreach.kansosoftware.com
outreach.thoughtlyticsinternet.com
rob.ship-primetime.com
sales.avidcollective.com.au
sales.cargoclouds.com
sales.discretekernel.com
sales.entropiktech.com
sales.ethiqly.ai
sales.figlearning.com
sales.gelbsy.com
sales.inboxarmy.com
sales.internal.pazcare.com
sales.jukshio.in
sales.konverge.ai
sales.salesvista.com
sales.verloop.email
sales.xenia.team
send.ludtec.com.au
trace.ffoxalex.com
tracking.literalapp.com
tracking.talenstra.net
tracking.vikingpg.com
trackingoutplay.ecoreturns.ai
us4certificate-1-202310241337.us4.opz1.com
wes.shipprimetime.net

Other certificates including the domain name opz1.com

(limited to 100 certificates)
ppl-gifts.opz1.com
us4certificate-1-202312211234.us4.opz1.com
us4certificate-1-202311080235.us4.opz1.com
eu1certificate-1-202310281252.eu1.opz1.com
us2certificate-1-202311211647.us2.opz1.com
us4certificate-1-202310311247.us4.opz1.com
eu1certificate-1-202401260234.eu1.opz1.com
us4certificate-1-202312151719.us4.opz1.com
us4certificate-2-202310111758.us4.opz1.com
sydinnovation.opz1.com
us4certificate-2-202310200232.us4.opz1.com
us2certificate-1-202402071236.us2.opz1.com
paradisecatracho.opz1.com
eu1certificate-1-202312131258.eu1.opz1.com
eu1certificate-1-202311201641.eu1.opz1.com
xenforo.opz1.com
mohamedkotb.opz1.com
us4certificate-1-202312011651.us4.opz1.com
us4certificate-1-202311081628.us4.opz1.com
us4certificate-1-202404021235.us4.opz1.com
eu1certificate-1-202402141639.eu1.opz1.com
rocia2.opz1.com
najib.opz1.com
us4certificate-1-202312041234.us4.opz1.com
us4certificate-1-202311271652.us4.opz1.com
us4certificate-2-202310131347.us4.opz1.com
us4certificate-2-202310051227.us4.opz1.com
eu1certificate-1-202402021305.eu1.opz1.com
fb.news.opz1.com
us4certificate-2-202310091247.us4.opz1.com
eu1certificate-1-202311100250.eu1.opz1.com
gospelmusic.opz1.com
eu1certificate-1-202402071321.eu1.opz1.com
us4certificate-1-202312071234.us4.opz1.com
us4certificate-2-202310141252.us4.opz1.com
eu1certificate-1-202401191814.eu1.opz1.com
us4certificate-2-202310031628.us4.opz1.com
eu1certificate-1-202311171234.eu1.opz1.com
us4certificate-1-202311071233.us4.opz1.com
eu1certificate-1-202311271715.eu1.opz1.com
eu1certificate-1-202311151737.eu1.opz1.com
thevoidalone.opz1.com
eu1certificate-1-202312121719.eu1.opz1.com
us4certificate-1-202310241337.us4.opz1.com
us4certificate-1-202312031234.us4.opz1.com
us4certificate-2-202310150225.us4.opz1.com
eu1certificate-1-202311081307.eu1.opz1.com
us4certificate-1-202311291309.us4.opz1.com
us4certificate-2-202310141252.us4.opz1.com
eu1certificate-1-202311021233.eu1.opz1.com
eu1certificate-1-202310281252.eu1.opz1.com
us4certificate-2-202310110213.us4.opz1.com
us1certificate-1-202402061235.us1.opz1.com
us4certificate-1-202312051234.us4.opz1.com
us4certificate-2-202310120054.us4.opz1.com
eu1certificate-1-202312060216.eu1.opz1.com
eu1certificate-1-202312131258.eu1.opz1.com
us4certificate-2-202310190126.us4.opz1.com
us2certificate-1-202401121233.us2.opz1.com
themagicchannelblog.opz1.com
us1certificate-1-202405101235.us1.opz1.com
us4certificate-1-202311101826.us4.opz1.com
us4certificate-1-202312111723.us4.opz1.com
eu1certificate-1-202311200300.eu1.opz1.com
us4certificate-1-202312051234.us4.opz1.com
wardokpedia.opz1.com
us4certificate-1-202311080235.us4.opz1.com
us4certificate-2-202310060057.us4.opz1.com
us4certificate-1-202310311247.us4.opz1.com
eu1certificate-1-202401311234.eu1.opz1.com
sydinnovation.opz1.com
eu1certificate-1-202311080255.eu1.opz1.com
roida.opz1.com
najib.opz1.com
eu1certificate-1-202404021302.eu1.opz1.com
vypor.opz1.com
us4certificate-2-202310141811.us4.opz1.com
us2certificate-1-202310311232.us2.opz1.com
eu1certificate-1-202401151234.eu1.opz1.com
eu1certificate-1-202311080255.eu1.opz1.com
sydinnovation.opz1.com
us4certificate-2-202312201311.us4.opz1.com
rocia2.opz1.com
eu1certificate-1-202311161312.eu1.opz1.com
fbinbox.news.opz1.com
paradisecatracho.opz1.com
us4certificate-1-202311241234.us4.opz1.com
us4certificate-1-202311271652.us4.opz1.com
us4certificate-1-202312041234.us4.opz1.com
eu1certificate-1-202401051630.eu1.opz1.com
eu1certificate-1-202401091314.eu1.opz1.com
us1certificate-3-202311081233.us1.opz1.com
us4certificate-2-202310030233.us4.opz1.com
reviewit.opz1.com
us4certificate-3-202405221234.us4.opz1.com
eu1certificate-1-202311021233.eu1.opz1.com
justvvpn.opz1.com
themac1.opz1.com
rocia2.opz1.com
us4certificate-1-202311031629.us4.opz1.com

Certificate

The complete raw certificate details for us4certificate-1-202310241337.us4.opz1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+HH/52XWXS75THKMEB1
PDO0/o2cDmsoeIxHLm76grL+RL0MKWsub1yJ57RFvx7q4M08eLV08/t0+f1E/G/F
WCjFuISUDKaYhpNmpMz92EXKYrRZ2PAwFL9v2oL3nDTqgcTzNDv/nvLqMsJLpN1n
4jFrNeuGWd6sajSRjiUfbPwwG5/0SB1ThPgNPeQg/Aa2bNGv2+/sGh8lVTJlTqAH
ZEHa9TrkD9F7Re+Y/sT/u7oEP1kNExk3a/QldW5iZlBi11BELQ3Dmz3JUlP/jI+i
2zebgHPn4DmQI3bfJ6cMHpgT0NsXpxJfmxYHxflC8kByWMuv9m43/U+DPz+Wr/Rp
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275511753759422783894899364289677474689445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 12:46:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 12:46:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us4certificate-1-202310241337.us4.opz1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31292198207681526047609051392399752658262962214546714990415593922038544540541361601866307792075547174765871296150169506539965488511834426370650358699523586321138015791763752236257609398782417027878221302920199119889392237170147248701269547745784562666158056529023965346199066260054703269026417505343370415006236048077091607901299162540924467769064716721768832986309546948595117256877746810491009230233833056155635889712278414838110788864687032268742658846783020858262590328044846622957536452034006380373969763439209275230432586843851697131912976742740675261971908245347677184350087866383212370811017091759965084084731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef1c59e7337bcd528a8d21408cad1f1a4e19277e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3d.pikus3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aec.tekexa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brizodata.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanoutplayer.cleanguards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creator.momenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhan.renergytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.rivaengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.numero.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.thesprycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.unifan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails.mantys.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailtracking.saara.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.ingrity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engagement.silverlinecrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth.antwalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth.havasedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth.klubworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth.loopmails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtr.globaltalentnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.ambassadorgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.bluetrunk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.cc-techgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.cockrum.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.doodlebreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.evacor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.marginsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.oncolens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.pointerstrategy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.shyft6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.sirum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.softlix.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.springup-pr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.ubuntoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.zen.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.talentstarter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.englishpathway.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.fairwayiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.sterlinggrowthpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.rocketlane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.evercam.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lambdatestonboarding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailo.asaarmedical.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.akira.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.msaasemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dayof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.sales.mail.hivelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offiga.op.offiga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op.adquick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op.conformit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opv1.inetco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'out.apexb2b.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.ambitsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.benchmarksolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.constructionrecruiting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.flyntlok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.givelegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.hopsoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.ninjajobs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.optimally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.payzilla.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.pclub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.primetimeship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.revenue-reimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.sinalite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.stormboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.thelocobuzz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.trustanalytica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.trywisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.willowpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.yellow.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outplay.zidzid.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outreach.kansosoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outreach.thoughtlyticsinternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rob.ship-primetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.avidcollective.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.cargoclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.discretekernel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.entropiktech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.ethiqly.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.figlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.gelbsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.inboxarmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.internal.pazcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.jukshio.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.konverge.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.salesvista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.verloop.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.xenia.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'send.ludtec.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trace.ffoxalex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.literalapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.talenstra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.vikingpg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackingoutplay.ecoreturns.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us4certificate-1-202310241337.us4.opz1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.shipprimetime.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b61efcdb40000040300473045022033cd3b0d1c37215839aae9663187f4f7d337987bf581fae7955e1321f016cb8f0221008c6c83b08c471d5da4671a677cb74a0d15bed0bee9a06f1249e0e66d5237ce0200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b61efcdfa0000040300473045022100b5a243373dbfb096aa89617d15d28d3dae5fc5dbaeb9e3e53f093b40e6b2ec580220549450709d7c00d80b988ad5e6fce453d0f07648bd323e88442a797007ab705f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003244166964b8b1c7af0a015a287da9608a7146d3017f2e1fa0f09818f9fd448c3b91cc4337e5199562fa763b24e754e64def7e4a91a60d19aaed0e649d926f6af76e250b11e8097f5c672c3cb42321834061626691d11c79dc43e40615e38fb45b72338619a53c37fa694d8adec95677cdccfc3f7d51880bd1748961d6cbe9eaec0403d74b09cbfc093ce9eea91919e1aa2f38c8516db826310be4259cc9224d556d8a6f801499b55565a615821d2e48db23d9c2bb9c8dd2b26d2d408b8091268ddf995f2a32bb5abd4f564fb2c739a1bc73b45217c075c0b47b6a64ff16ece2c7d10ce81c8b13561703c14f3dec5aa0f2939affa8e7abeaf01b1e02ee28b59f