purnama.app

Issued by R3

About this certificate

This digital certificate with serial number 03:d5:4f:84:87:28:2f:6a:40:77:5f:a2:0e:dd:04:50:59:76 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=purnama.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:4f:84:87:28:2f:6a:40:77:5f:a2:0e:dd:04:50:59:76
Serial Number (int): 333922699085602064848354928314536468437366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:ce:a3:2c:b1:f1:ad:a7:4c:55:1b:9e:1f:e9:3b:c7:9d:1e:59:77
Fingerprint (sha256): 42:64:02:ee:be:e5:a7:f6:ef:ee:57:26:23:05:85:ac:00:22:42:b5:82:87:d6:a5:01:dd:7b:1e:0e:12:bd:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate purnama.app

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for purnama.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

031uno.com
admin.can.org.za
admin.sloops.waat.eu
admin.xn--bb0bw4mtof.kr
amoyah.be
app.fazpi.com
app.medpex.de
app.pod.io
app.yorochange.com
assets-staging.inszu.com
assets.inszu.com
auth.auth.xn--gavenske-84a.no
auth.telov.app
braindrainglobalacademy.in
brindoor.com
c5o-1uno.com
carrito.digital
cloud.gcgr.tech
dashboard-dev.rtm.vnlp.ai
dev2.verda.com
easytalent.co.za
econcoaching.kku.ac.th
entrecuentasydedales.com
espacioportiempo.com
excellentdesigns.in
firebase.xn--hndvrker-9zan.dk
gavita.in
hawkersoftwares.com
indigrub.in
infobusinessleads.com
ipsapl.com
jestnaswiecej.pl
jjuteachershealth.in
juanjomart.in
kanapkaman.pl
karolploski.eu
karolploski.pl
make-font.yaroslav.uz
marstakers.com
monitor.misrusachd.in
nacita.id
nikhiljemili.xyz
pedilo.enimod.com
polkafoundry.site
professional.xn--hier-jra.com
purnama.app
resources.ssg.co.uk
shirosaki.xyz
sobrenosotros.proposito.com.ar
system.admin.ordee.io
tokhaiyte.vietnamkhoemanh.vn
tst-oig.elrego.com
tst-partner.elrego.com
verdebags.eu
web.phonebookapp.in
widgets.quinv.io
workflows.typeform.com
workflowsdev.typeform.com
www.algostation.in
www.brindoor.com
www.brujotesco.xyz
www.chiesimexico.com
www.chmlasrozas.es
www.indigrub.in
www.interact4500.com
www.jedzmynaszeryby.pl
www.jestnaswiecej.pl
www.jjuteachershealth.in
www.juanjomart.in
www.kabilesh.com
www.karolploski.eu
www.lifestylerhythm.com
www.marstakers.com
www.metadragons.finance
www.mettaimob.com.br
www.purnama.app
www.tepari.tech
www.xn--bm-challenge-gcb.de
www.xn--dsseldorf-q9a.space
www.xn--erkanetinkaya-mgb.com.tr
www.xn--lnen-qoa.se
www.xn--pernillashlsa-kfb.se
www.xn--re100-og6un08dexf.kr
www.xn--reseasengoogle-tnb.com
www.xn--santogrocorretora-eqb.com
www.xn--torredelmartodoelao-d4b.es
www.zecmr.tech
xn--33-mlc1aafce4bg.xn--p1ai
xn--3r9h.vgood.science
xn--42ca6gb2i0b8d.com
xn--bb0bw4mqlc.com
xn--dalenvr-rxa.no
xn--erkanetinkaya-mgb.com.tr
xn--fretag-wxa.bokabrollop.se
xn--javiervillaseor-brb.com
xn--skrplabbet-s5a.se
xn--u0c.com
xn--utkrning-p4a.nu
zecmr.tech
zycosports.com

Other certificates including the domain name purnama.app

(limited to 100 certificates)
beirut-roastery.com
dev-api.ula.africa
dashboard-dev.rtm.vnlp.ai
www.jusmulticreation.ca
tst-dyson.elrego.com
v1.aujezus.me
plannabel.com
purnama.app
admin.sandboxnuts.app
wire-beta.io-fund.com
explore.saga.einride.tech
widgets.firstdollar.com
purnama.app
wire-beta.io-fund.com
purnama.app
dugoly.com
beirut-roastery.com
www.jusmulticreation.ca
winrar.xn--h1ar.com
admin.sandboxnuts.app
www.xn--trbolsonorense-ckb.com
www.brindoor.com
admin.can.org.za
link.halo.app
widgets.firstdollar.com

Certificate

The complete raw certificate details for purnama.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333922699085602064848354928314536468437366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 07:49:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-26 07:49:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'purnama.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '031uno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.can.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sloops.waat.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.xn--bb0bw4mtof.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amoyah.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fazpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.medpex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pod.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.yorochange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-staging.inszu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.inszu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.auth.xn--gavenske-84a.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.telov.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braindrainglobalacademy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brindoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c5o-1uno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrito.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.gcgr.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-dev.rtm.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.verda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easytalent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econcoaching.kku.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrecuentasydedales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacioportiempo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excellentdesigns.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.xn--hndvrker-9zan.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gavita.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkersoftwares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigrub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infobusinessleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipsapl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jestnaswiecej.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjuteachershealth.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juanjomart.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanapkaman.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karolploski.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karolploski.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'make-font.yaroslav.uz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marstakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.misrusachd.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacita.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikhiljemili.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedilo.enimod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polkafoundry.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professional.xn--hier-jra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purnama.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.ssg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirosaki.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sobrenosotros.proposito.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.admin.ordee.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokhaiyte.vietnamkhoemanh.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-oig.elrego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-partner.elrego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdebags.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.phonebookapp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.quinv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflows.typeform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflowsdev.typeform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algostation.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brindoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brujotesco.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiesimexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chmlasrozas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indigrub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interact4500.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jedzmynaszeryby.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jestnaswiecej.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jjuteachershealth.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juanjomart.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kabilesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karolploski.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifestylerhythm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marstakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metadragons.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mettaimob.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purnama.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepari.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bm-challenge-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--dsseldorf-q9a.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--erkanetinkaya-mgb.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--lnen-qoa.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--pernillashlsa-kfb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--re100-og6un08dexf.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--reseasengoogle-tnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--santogrocorretora-eqb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--torredelmartodoelao-d4b.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zecmr.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--33-mlc1aafce4bg.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--3r9h.vgood.science'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--42ca6gb2i0b8d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bb0bw4mqlc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dalenvr-rxa.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--erkanetinkaya-mgb.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fretag-wxa.bokabrollop.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--javiervillaseor-brb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--skrplabbet-s5a.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--u0c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--utkrning-p4a.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zecmr.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zycosports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001806a360543000004030046304402203dc1f97067154e7cb708592e25298bda4092c156abcf6e85c0126b7e883169f9022037352ae56362264c5f8800e199123f1f518a8bcd2e7eeba21df6f0937901163f0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001806a3605380000040300473045022100e93f1731677eaf302afb69c25a705da801c90fa562d0a8ae6e77c59e901df56e02207e3360dbbcf5c9e1eb04bfce7986de3273039a87c8a7656fbf4a1437c9dc18dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f9b8f7a54d89aff4f104f817d1ae1456697b6971dfce2637c24f593fcc388bdba445465b9b75bf09cd72ba28d5a0010a5b6c974c9affd2fbc512e431bc1568558dafcb8d675beee11a45691a9ce6e0d512a20e88deb9da7322b0783ccf7dac024c386f1a15a971de1a15779e2dc7bd1ce2890f058e478b86e0aa60dc178894a3f03de87f3e524017edfa549d6c3068383a02cd10753aefb87c0e1ac9799357875bafa934d5ece1b5e69c24af71c97a995398831caa030d111fe97da18a3a80e55c83e009bf5ec867838a31461c4a02c752a5f7b91ea525c9b696018ac3ef94cbe080776fc50450ea602e4712bb1bcb9f24909b6b9394147245bc8224bddb4c7