www.gruposafira.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7b:47:d9:6a:e1:6d:dd:91:4a:9f:e4:b0:c4:87:8c:db:b9 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gruposafira.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:47:d9:6a:e1:6d:dd:91:4a:9f:e4:b0:c4:87:8c:db:b9
Serial Number (int): 303287093010470958308021259588841375587257
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:cc:2f:cc:5f:91:3d:cf:a2:49:3a:fa:fe:6d:85:76:5d:f6:b5:cc
Fingerprint (sha256): 3c:7b:6a:54:be:71:f6:5c:74:44:25:c5:11:20:50:31:76:70:91:f0:22:4b:f3:0c:e7:29:3e:8a:8c:31:be:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gruposafira.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gruposafira.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts.netpark.com.br
admin.kontainers.io
agencies.influens.fr
aldolamberti.com
almankaas.me
analytics.slices.co
aneeshsharma.tk
api-staging.erwin.today
app.chatcenter.ai
app.differ.chat
app.pdr.cloud
arthurmelo.com
aurant.ga
bandsynch.com
blaskapelle-karambolage.at
boomchiki.com
challenge.zeroliu.com
cheergig.com
cheyenne-and-maya.com
cyberadviser.com.au
cyberneticfitness.app
deserteur.vin
dscsjce.ml
erin.mentalgraffiti.com
eventos.ccc.org.co
fa.tibas.london
firebase.aertrip.com
flights.lszt.ch
fotos.sanluis.edu.ar
getitt.app
havn.co
health.slaying.io
homestadium.live
influx.pt
ionicexperts.com
issei.com.br
katieanddryden.com
kditor.nettar.in
link.alemana.cl
mail.nydaltech.no
marinabikinis.cl
matthewrperry.com
meesenburg-voting.its-em.de
mentalist-dev.codestuffers.com
micro-cruising.com.au
mobylis.fr
mrogalski.eu
museum.bepro11.com
muszr.me
mymovielist.christianmutti.com
naxeu.app
nicolegile.app
numnum.menu
play.skyro.co
rmxst.com
roastedliberals.com
scan.machinedocument.com
sexelimu.deafelimuplus.co.ke
sextpixels.com
skmseller.smartkidsmarket.com
slingshot.company
snapchot.com
substrate.io
tabvn.encadyma.com
talks.procergs.com.br
taro.hodlme.app
tattbooks.com
vip.ganza.biz
westlink.io
wheresgertie.ca
ww.uxphilippines.com
www.17-cents.com
www.5280startupsolutions.co
www.akashsahu.com
www.benbrewerbowman.com
www.boomchiki.com
www.cheyenne-and-maya.com
www.corytak.com
www.doncuak.com
www.flight.run
www.getitt.app
www.gruposafira.com.br
www.hodlme.app
www.influx.pt
www.katieanddryden.com
www.marthacorrea.com.br
www.matthewrperry.com
www.median.tech
www.nict-lab.com
www.nucamp.co
www.rmxst.com
www.rooffixingsupplies.com.au
www.sarmis.gr
www.schedula.co
www.substrate.io
www.tattbooks.com
www.ttcartrader.com
www.voteolaughlin.com
www.wheresgertie.ca
ziqiwu.me

Other certificates including the domain name gruposafira.com.br

(limited to 100 certificates)
wimstar.com
admin.staging.rover.io
sendsms.cc
www.marthacorrea.com.br
skystars.tw
artegestic.com
mx09.it
hopstopapp.com
bio.apartments
www.gruposafira.com.br
gruposafira.com.br
www.gruposafira.com.br
projects.devpyxl.com
fireflow.xyz
www.lk-panenka.cz
tattbooks.com
api.deerbot.cf
portal.gruposafira.com.br
www.gruposafira.com.br
securelogs.com.au
www.remadis.eu
auctioneer.owenwood.com.au
shiftfirst.ai
www.blowwhalestudios.uk
admin.newbittv.com
reserva.colegioceciliameireles.com
www.tutorialisland.net
www.vinu.app
pitchxo.com
www.nextflick.co
greentag.app
web.taskio.app
www.primariacepari.ro
www.gruposafira.com.br
issei.com.br
albamoraleslopez.com
io.deeploop.com

Certificate

The complete raw certificate details for www.gruposafira.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303287093010470958308021259588841375587257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 10:14:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 10:14:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gruposafira.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1891 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.netpark.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kontainers.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencies.influens.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldolamberti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almankaas.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.slices.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aneeshsharma.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.erwin.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.chatcenter.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.differ.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pdr.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arthurmelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurant.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandsynch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaskapelle-karambolage.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boomchiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challenge.zeroliu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheergig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheyenne-and-maya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberadviser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberneticfitness.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deserteur.vin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dscsjce.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erin.mentalgraffiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.ccc.org.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.tibas.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.aertrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flights.lszt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotos.sanluis.edu.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getitt.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.slaying.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homestadium.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'influx.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionicexperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issei.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katieanddryden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kditor.nettar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.alemana.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nydaltech.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinabikinis.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewrperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meesenburg-voting.its-em.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalist-dev.codestuffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micro-cruising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobylis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrogalski.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museum.bepro11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muszr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymovielist.christianmutti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naxeu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicolegile.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numnum.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.skyro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmxst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roastedliberals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scan.machinedocument.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexelimu.deafelimuplus.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sextpixels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skmseller.smartkidsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slingshot.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapchot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substrate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabvn.encadyma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talks.procergs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taro.hodlme.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.ganza.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westlink.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheresgertie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.uxphilippines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.17-cents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5280startupsolutions.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akashsahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benbrewerbowman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boomchiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheyenne-and-maya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corytak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doncuak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flight.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getitt.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruposafira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hodlme.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.influx.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katieanddryden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marthacorrea.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matthewrperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.median.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nict-lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nucamp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmxst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rooffixingsupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarmis.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schedula.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.substrate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tattbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ttcartrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voteolaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheresgertie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziqiwu.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c8062f94c0000040300483046022100e5ceb1a55d4e6167b65a0613ca7b1e112eb80311fdd7487dd9121343546119ad022100f4532249d7dec3f552d50575145bf71247c3ba340f4cd2119b84908b9558cf3000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c8062f9490000040300463044022017db9d4c1b51b669612dcefecea6e8a820bfb501ee14a9eede4b40e57a872ebb022014fa8365142e1e329eaa038157df268c7bc1043877b1066a87015bb34f79b647
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00344168ba50966c48f4e8653f28594acd7c12c2fd1448e64ce45822a090bcafa53f87c96c74e767921a866357051bc46f49998cf80c10659828d40aa85bdb4f7e0c145050a2a20ecfb908f3b25c775198348d65f51d82140740f90b5d0101b3c212b4cf34db24126233b4389536f7ea389eea4e53677a35d60501f5b904026978a1d62abdf88b24ad6038108aaf3611159a6e869e6838ca8f33cd2e15535c8da94fd891d3bea9ace16cfc955efebb40c486c9dfdc01ed4901cf7f7f8b52e52035ca0b6d190430b248ff233089b0697c880781f43a16984b83227f713d30c70542a42d2b26235ec4f6f9de1c8cf9d5f5d89f303d1a25a861f8504f251439ff36a7