alijaya.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:27:57:ee:4c:1d:bd:ff:da:88:e0:28:51:a4:af:c7:36:6a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alijaya.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:57:ee:4c:1d:bd:ff:da:88:e0:28:51:a4:af:c7:36:6a
Serial Number (int): 274724750251302507550243186337878582441578
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:11:9b:e3:2b:8d:f8:56:b9:8a:bb:fe:b9:f2:de:cf:90:ae:ed:99
Fingerprint (sha256): 4d:27:a5:71:6b:ef:1c:4b:75:96:18:72:ba:c3:c6:ab:1c:75:19:10:02:20:b9:48:4f:a0:78:f2:27:47:d8:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alijaya.id

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alijaya.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts.ocular.com.gt
actioninterface.com
admin.trivory.com
admin.v1.varahealthcare.com
albrima.be
alexbeverage.com
alijaya.id
alntransport.com
alomarketadmin.mascoms.com
analytics.farmart.co
api.creatorview.com
app.eyefund.pro
app.native-ux.com
avantiesl.com
axethrowing.org
beta.notify.gluco.zone
beta.sweever.com
bioleaves.com.mx
c2sti.com.br
cada.minga.io
campuseventsprivatelimited.com
chat.yehuizhang.com
cognitioconstruction.com
coldvisa.com
colinandkatie.com
communication-games.com
daewooprinting.com
darkhorseapp.com
demo.agc.portalnfs.com.br
demo.beacons.ai
dev-ltl-xpo.com
doctorbythebay.com
doesthatcausecancer.com
donationcharityapp.com
emnudge.com
enterprisedigitaltechnology.com
fitness.bodysapp.com
flixseats.com
fodmap.guide
garantiaya.com
get.swoovy.com
getspar.com
groovecandy.app
help.trivory.com
htntreatment.com
image.klutz.io
jopdatabase.com
kaldaf.com
kfw2019.nl
link.aios.pe
liveroute.app
mejustexploring.io
mersoul.ma
muvit.com.ar
nfsc.pl
notify.gluco.zone
npsoft.fr
okroo.com
opokuagyemang.com
orator.app
points.dmium.com
rajahatters.com.br
sciencehash.com
search2.fastorapp.com
sendinvitation.online
smarttest.ga
staging.counselmore.com
store.tonow.net
vevola.datablocks.nl
waitlessorders.com
we-are-unicorns.surveyunicorn.com
wifi.loymark.com
www.askmeoffer.com
www.bioleaves.com.mx
www.cognitioconstruction.com
www.crionx.com
www.depositoaquitem.com.br
www.dragonmetrics.com
www.elektroniks.com
www.frontier-findex.com
www.geo-notes.com
www.getspar.com
www.hatchetsoftware.com
www.hypertienda.com
www.kaldaf.com
www.livraison-express.net
www.manga-zone4youth.com
www.medq.com.br
www.mersoul.ma
www.muvit.com.ar
www.mwanatsuki.ninja
www.neology.net
www.nextdreamluxurytravels.com
www.npsoft.fr
www.pams.io
www.projectcapsule.me
www.scribblecal.com
www.sendinvitation.online
www.vindata.online
www.waitlessorders.com

Other certificates including the domain name alijaya.id

(limited to 100 certificates)
alijaya.id
alijaya.id
alijaya.id
alijaya.id
alijaya.id
www.alijaya.id
openday.vu.edu.au

Certificate

The complete raw certificate details for alijaya.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274724750251302507550243186337878582441578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 00:58:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 00:58:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alijaya.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1951 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.ocular.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actioninterface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.trivory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v1.varahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albrima.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexbeverage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alijaya.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alntransport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alomarketadmin.mascoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.farmart.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.creatorview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.eyefund.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.native-ux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantiesl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axethrowing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.notify.gluco.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sweever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioleaves.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2sti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cada.minga.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campuseventsprivatelimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.yehuizhang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitioconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coldvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colinandkatie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communication-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daewooprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkhorseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.agc.portalnfs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.beacons.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorbythebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doesthatcausecancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donationcharityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emnudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprisedigitaltechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness.bodysapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flixseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fodmap.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garantiaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.swoovy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getspar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groovecandy.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.trivory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htntreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.klutz.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jopdatabase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaldaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfw2019.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.aios.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveroute.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mejustexploring.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mersoul.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muvit.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfsc.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notify.gluco.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npsoft.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okroo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opokuagyemang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orator.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points.dmium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajahatters.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencehash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search2.fastorapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendinvitation.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarttest.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.counselmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tonow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vevola.datablocks.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitlessorders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we-are-unicorns.surveyunicorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.loymark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askmeoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bioleaves.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cognitioconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crionx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depositoaquitem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragonmetrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektroniks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frontier-findex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geo-notes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getspar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hatchetsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypertienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaldaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livraison-express.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manga-zone4youth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medq.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mersoul.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muvit.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mwanatsuki.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextdreamluxurytravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npsoft.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pams.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectcapsule.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scribblecal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sendinvitation.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vindata.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitlessorders.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bfda6f6ca0000040300473045022100a1bd494d05d5747b531be509af7e1e8e50b45e9892ed7beff7b62171d10b76ff02205c3e2d818c0b139bc4606c789cb62a9eec1fecadfee61d3610c4425d5edda42f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bfda6f6bc00000403004730450221008501b4c37ca86f98bf03e408078439645fa368f9ccefa0dd9168b6bd2a62551a02203cf480c3df4fda764b304373c2da9840d1a452dde610f11a026f31ba2053de5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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