ministeri.anccp.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:a2:04:d6:f2:d3:48:4c:a4:c1:27:f4:43:ab:6f:c5:c8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ministeri.anccp.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:a2:04:d6:f2:d3:48:4c:a4:c1:27:f4:43:ab:6f:c5:c8
Serial Number (int): 314636267099125990002458861705781769651656
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:fe:0d:15:2c:74:3c:32:6a:d7:f8:79:17:ac:ec:26:0f:3b:2b:b0
Fingerprint (sha256): 2d:30:c5:ca:61:f1:c3:06:cd:f6:e9:5a:94:9b:12:66:18:28:8f:85:fc:1d:e0:4e:72:15:7b:e6:0c:f8:6e:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ministeri.anccp.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ministeri.anccp.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.fitnesslifestyle.app
admissaotreinamento.hrestart.com.br
affinityfcu.digitalonboarding.com
app.arraycreate.com
app.iotlivingtech.com
babyandme.co.in
balushome.com
bednarpe.cz
bencasalino.com
bitestechnology.com
book-recommend.botlogy.com
braximob.com
contratacao.segurize.com.br
daq.morgansolar.xyz
desertroad.org
dev.entertainment-passport.com
dosa-n-curry.com
embed.sponsormatch.eu
evenuu.com
flex-uhasselt.ga
getadventurely.com
gharkokaam.com
goose.codeandgo.no
heliosappliedscience.com
hepamet-fibrosis-score.eu
iloveremote.com
ispettori.anccp.it
juni.codeandgo.no
kanthan.kustoms.in
kartawfrp.pl
log.botc-boston.com
math.tsochetra.com
mdcamp2020.zinglio.com
medicinaprepaga.ballesta.com.ar
ministeri.anccp.it
morpheus-qa.crnt.com.br
ng-cruise.com
other.digitalonboarding.com
pressto.easybus.app
prevencionsalud.tuasesoramigo.com.ar
ps.ballesta.com.ar
pubblijuice.pubbli.io
puppyfi.com.br
pvges.com
quentin-bis.codeandgo.no
rag-dev.idana.app
rag.idana.app
ravichaudhary.ca
rehabengineering.com
salud.ballesta.com.ar
saptarishicg.com
sarkariresultup.com
searchbase.artience.me
shop.meck-schweizer.de
sinc.business
smackerelbakes.com
smileconnect.co
snapcore.in
stage-admin.eecertification.com
starwars.se.codeandgo.no
teamdagarna.com
thegoldenlist.nl
thelarryob.club
titan2u.com
trbuckley.com
treinamento.hrestart.com.br
umbrelo.com
vaplayer.com
walacesilva.net
wannath.com
webservices.dams4u.be
www.aroundom.com
www.bforbilly.com
www.dosa-n-curry.com
www.fam2con.com
www.feedmejefferson.com
www.getadventurely.com
www.giacomoschiesaro.com
www.haibrian.com
www.kowalski.app
www.myactivesenior.com
www.nebesar.cz
www.noterouter.com
www.puppyfi.com.br
www.pvges.com
www.sarkariresultup.com
www.smileconnect.co
www.starwars-visualguide.com
www.stepinsight.com.au
www.striptyzbrno.cz
www.sugarnroses.com
www.thegallerys.com
www.timafactoryapp.com
www.titan2u.com
www.umbrelo.com
www.vaplayer.com
www.vitsi.com
www.yourworkshop.com
xn--mgbqn1f.cinemoz.com
zulloo.com

Other certificates including the domain name anccp.it

(limited to 100 certificates)
colaborador.limatransvial.com
www.akiyamasho.com
app.dev.ispettori.anccp.it
connection.wowtalk.jp
secure.tryhowdy.com
stage.formity.ai
nhayendathung.com
sale.forgottenchain.com
www.sisco.app
auth.cloud.orchesty.io
chatters.alxios.com
portale-qualita.anccp.it
app-enterprise.velauto.com.br
www.stoutmotivation.com
enishi.nanaimori.com
planetapelicula.com.br
purgatorio.mx
suzme.app
scrum-poker.cards
sale.forgottenchain.com
redessinviolencia.org
www.bugragezer.com
oneboard.live
anccp.it
saude.edocol.com.br
ministeri.anccp.it
www.webetter.work
www.urustoko.com
searchclinic.jp
remnode.com
www.shoplystr.app
prevencionsalud.tuasesoramigo.com.ar
pandadare.in
busyq.io
redirect-app.heaveness.com
www.kakumei.com.mx
admin.greeko.com.br
s.transflynd.com
donate.netgiverapp.com
classtech.shop
class.fticourse.id
vibhuruh.com
www.unitedlogistics.app
www.blood119.com
imperial.supply
oauth.cyliah.com
www.anccp.it
www.notah.net
portale-qualita.anccp.it
tms.waylar.net
dev.getatelier.app
ministeri.anccp.it
www.spaceweather.app
www.defcon.codes
aimaderecipes.com
www.menurx.io
links.memoapp.pro
heabit.com
bahamutech.com
international.semac.app
www.transatlascargo.net
tms.waylar.net
www.anccp.it
lanin.io
i.getin.sh
www.geniteam.llc
nbtasks.com
linkca.hayati.co.id
rentkarma.in
app.boomerangapi.com
stefangeorgescu.com
www.akiyamasho.com
www.shoplystr.app
www.chaperonsetvous.com
www.ovio.org
sourceandstardust.agency
www.walue.app
qieli.app
support.thedailychrist.com
app.boomerangapi.com
link.entango.app
app.agrim8.farm
www.agentx.agency
www.bernardobraga.com
applinks.audeara.io
map.tidalforce.org
mashingmonsters.com
sci.blueberryx.com
app.stempl-app.de
ispettori.anccp.it
www.dgsys.com.br
marioplan.onlinewebapps.ca
departures.schmidt-allgaeu.de
blazeui.com
jinsapp-jp.jins.com
www.tacstorm.com
www.longanespa.com
ecobrightnwa.com
auth.cloud.orchesty.io
tetraoils.ca

Certificate

The complete raw certificate details for ministeri.anccp.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314636267099125990002458861705781769651656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 16:14:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 16:14:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ministeri.anccp.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2075 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fitnesslifestyle.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissaotreinamento.hrestart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinityfcu.digitalonboarding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.arraycreate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.iotlivingtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyandme.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balushome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bednarpe.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bencasalino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitestechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-recommend.botlogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braximob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contratacao.segurize.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daq.morgansolar.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desertroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.entertainment-passport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dosa-n-curry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.sponsormatch.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evenuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flex-uhasselt.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getadventurely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gharkokaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goose.codeandgo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heliosappliedscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepamet-fibrosis-score.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iloveremote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispettori.anccp.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juni.codeandgo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanthan.kustoms.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartawfrp.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'log.botc-boston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'math.tsochetra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdcamp2020.zinglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicinaprepaga.ballesta.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ministeri.anccp.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morpheus-qa.crnt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng-cruise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'other.digitalonboarding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressto.easybus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevencionsalud.tuasesoramigo.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.ballesta.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubblijuice.pubbli.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puppyfi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quentin-bis.codeandgo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rag-dev.idana.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rag.idana.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravichaudhary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rehabengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salud.ballesta.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saptarishicg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarkariresultup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchbase.artience.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.meck-schweizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinc.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smackerelbakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smileconnect.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapcore.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-admin.eecertification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starwars.se.codeandgo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamdagarna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoldenlist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelarryob.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titan2u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trbuckley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treinamento.hrestart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umbrelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walacesilva.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wannath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.dams4u.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aroundom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bforbilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dosa-n-curry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fam2con.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feedmejefferson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getadventurely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giacomoschiesaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haibrian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kowalski.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myactivesenior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebesar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noterouter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puppyfi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pvges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarkariresultup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smileconnect.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starwars-visualguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stepinsight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.striptyzbrno.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sugarnroses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegallerys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timafactoryapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titan2u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umbrelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mgbqn1f.cinemoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zulloo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b6b95516b0000040300473045022100a8bed17f2b4b364754e6cdcbdd6b6985cfed8c55219c845476366c7b072ee20702201c62f74ced7377d8c9057462ff160252bca74c14bf3cf8659587e301934fa66900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b6b95519400000403004630440220336243286aa13abd3a2851917e549887bab93dbd675a1274de8cb389c65cb03b022002a8bbaeb34dcb1bb1d84165f427a4ca654ea2c18b2b1a05b6f3ec40440bb47a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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