auth.geofyi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:68:b9:2b:14:f7:0a:e4:0b:97:dd:8e:6d:87:4f:5e:d8:2d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=auth.geofyi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:b9:2b:14:f7:0a:e4:0b:97:dd:8e:6d:87:4f:5e:d8:2d
Serial Number (int): 296972354828264385328127128733538597132333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:7a:46:67:4c:05:01:4e:fc:2f:ae:c7:8a:3a:f9:8c:0f:b6:24:5b
Fingerprint (sha256): 46:a3:af:71:0c:47:33:58:da:64:46:c8:20:dc:8e:6a:0c:68:76:72:59:5d:03:a6:9a:70:c1:e9:cb:68:32:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate auth.geofyi.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.geofyi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaradhyagrand.com
abdhub.in
admin.checkvin.org
admin.datarips.com
adscode.com.br
agendaprofissionalonline.com
api.webcapp.com
app.chekpi.com
app.exploreeden.com
app.koyonation.com
app.labellamafia.com.br
app.xn--btvakten-9za.no
apple-teams.live
auth.geofyi.com
auth.octo.asuc.org
auth.resoume.com
b312studio.com
backoffice.labourseauxlivres.fr
beeadsmedia.online
bpm.waffle.city
bziyar.dev
cloud.swiftlogbook.com
depot.barcelomulet.com
dev-maps.auth.density.io
dev.weekly.com.co
development-client.meritcurve.com
donate.shinningstars.org
dtsmadeeasy-staging.expo.opensites.io
ekalsutra.com
eseety.com
eva.scorethebusiness.com
exam.hireidn.com
expense.premble.tech
fidestheam.com
gamerplay.kaeyosthaeron.com
hopiumfolio.com
johnsontran.tech
johntell.se
laluarts.nawebb.com
link.tilig.com
live.xn--sirkusskjrgrds-vibn.no
meetreat.com
nirvana.kaczmarski.dev
package.bookingjini.tech
panel.neutroiptvplayer.com
phonebookapp.in
pos.sterve.shop
prdeploy.developer.sailpoint.com
ruben.xn--araunabea-s6a.com
ryu22e.org
sergebadio.com
share.xn--glckwnsche-bebd.app
shriparamhanshospital.com
siliconggv.tech
sol.sh
staging-capture.usertrb.net
task-time.premble.tech
theme6.itsyourdayofficial.com
togesports.in
tuteehomes.com
url.manima.de
verboedu.com
vip25.mitting.de
whatsnext.daryanritul.in
www.abdhub.in
www.aprendecon.com
www.blogy.click
www.chrealty.com.mx
www.codejo.dev
www.confessto.me
www.ibrew.coffee
www.kieransmith.in
www.liftexpo.es
www.meetreat.com
www.monyandj.com
www.muntprijs.nl
www.mytrove.co.nz
www.plasticstra.ws
www.playpeanuts.com
www.pono.com.pl
www.realmorbo.com
www.ritikmakhija.tech
www.tezpaa.com
www.thegodschallenge.com
www.xn--brk-1na.no
www.xn--elkevakuutukset-1kb.fi
www.xn--gleichgewicht-ernhrungspsychologie-r4c.at
www.xn--grunnbelp-s8a.no
www.xn--hlytyslista-l8a.fi
www.xn--hrscheer-n4a.de
xn----8sbucdnecjjb4cf.xn--p1ai
xn--24-6kcadb7dwak4gzd.xn--p1ai
xn--8bi.gg
xn--elkevakuutukset-1kb.fi
xn--fundacionniosheroes-53b.com
xn--lnene-mra.no
xn--mxaaaatjb6ekrfbcb0d.gr
xn--o3cc6cxbc.com
xn--pamitki-s4a.achook.dev
xn--xbi.je

Other certificates including the domain name geofyi.com

(limited to 100 certificates)
abdhub.in
sejong.cz
aaradhyagrand.com
xn--3e0aon.xn--j6w193g
www.nepesports.club
contact.formationseasy.com
auth.geofyi.com
staging.instigate.ai
link.pirulakalauz.hu
abdhub.in
sejong.cz
share.xn--glckwnsche-bebd.app
exam.hireidn.com
firebase.kodand.com
ichosendroppoint.com
*.geofyi.com
mrbsintercollege.com
exam.hireidn.com

Certificate

The complete raw certificate details for auth.geofyi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296972354828264385328127128733538597132333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 16:12:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 16:12:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.geofyi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaradhyagrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.checkvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.datarips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adscode.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agendaprofissionalonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.webcapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.chekpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.exploreeden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.koyonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.labellamafia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.xn--btvakten-9za.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple-teams.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.geofyi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.octo.asuc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.resoume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b312studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.labourseauxlivres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beeadsmedia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpm.waffle.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bziyar.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.swiftlogbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depot.barcelomulet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-maps.auth.density.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.weekly.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development-client.meritcurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.shinningstars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtsmadeeasy-staging.expo.opensites.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekalsutra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eseety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eva.scorethebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exam.hireidn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expense.premble.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidestheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamerplay.kaeyosthaeron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopiumfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsontran.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johntell.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laluarts.nawebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.tilig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.xn--sirkusskjrgrds-vibn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirvana.kaczmarski.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'package.bookingjini.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.neutroiptvplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonebookapp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos.sterve.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdeploy.developer.sailpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruben.xn--araunabea-s6a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryu22e.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sergebadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.xn--glckwnsche-bebd.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shriparamhanshospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliconggv.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sol.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-capture.usertrb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'task-time.premble.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme6.itsyourdayofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togesports.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuteehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.manima.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verboedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip25.mitting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext.daryanritul.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abdhub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprendecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogy.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrealty.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codejo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.confessto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibrew.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kieransmith.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftexpo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monyandj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muntprijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytrove.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plasticstra.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playpeanuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pono.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmorbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ritikmakhija.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tezpaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegodschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brk-1na.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--elkevakuutukset-1kb.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--gleichgewicht-ernhrungspsychologie-r4c.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--grunnbelp-s8a.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--hlytyslista-l8a.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--hrscheer-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----8sbucdnecjjb4cf.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--24-6kcadb7dwak4gzd.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--8bi.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--elkevakuutukset-1kb.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fundacionniosheroes-53b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lnene-mra.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mxaaaatjb6ekrfbcb0d.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--o3cc6cxbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pamitki-s4a.achook.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--xbi.je'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3af731e70000040300463044022063d5384cc23210bf291e5ceb57590f9e8f38c9df5654c363b53beda40c6a91790220485134cdc8f6a6bc3293afc4dff4aed33e17b54d1fc430547019da6ab080e4c40076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c3af731ef00000403004730450221009bea1dd974daed44b02f52c2ec4a9f687b0de02f9bf21ef5e1f7ec7f2a9ce585022022ea411c939acf44f0f4eeb829b4a89c2e8e1ec464728b4cad39ba4694408cda
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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