www.nuvemgestao.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:64:bc:1d:cf:43:d3:23:bc:e1:ad:4b:79:21:a1:3f:0d:61 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.nuvemgestao.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:64:bc:1d:cf:43:d3:23:bc:e1:ad:4b:79:21:a1:3f:0d:61
Serial Number (int): 295615144131023467366111684463526674369889
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:e7:fe:9f:52:21:9a:c3:d8:59:15:ed:c3:df:f2:f7:c5:7a:01:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:69:1b:49:4d:9b:8c:54:a8:ba:02:be:87:9c:9b:0f:7b:56:ce:f0
Fingerprint (sha256): 4d:e9:23:f9:27:a2:6e:97:21:f9:3c:73:bc:f9:dd:91:a5:78:3d:d7:14:e5:98:5c:f4:f5:b1:78:f8:95:28:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.nuvemgestao.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nuvemgestao.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adhix11.com
admin-legal.coconala.com
admin-staging.vnlp.ai
admin.bites.fi
admin.dev.can.org.za
admin.irts-one.online
alecmichels.online
aliceasamlaksa.com
anhsarchivehub.online
animals-nature-flutter.quipu.software
app.controle-eventos.nawebb.com
app.gampay.org
app.linkper.gr
app.mova.group
app.turnero.online
app.urusswap.com
arvat.tech
atla.et
auth.daishohq.com
auth.sexyaigirls.fun
auxcorde.com
backoffice.smbe-production.skipr.co
bitaam.com
bmm-lpo-dev.bop-tech.com
bmm-lpo-pro.bop-tech.com
bmm-lpo-qa.bop-tech.com
byteodyssey.tech
cadastro.rogeriossantos.com.br
cafehouse.online
codebyahsan.pro
codeink.in
dashboard.rtm.vnlp.ai
dashboard.software.muqadar.com
devapp.medtech.africa
developerswiki.in
diazadhari.tech
dl.rootsrwanda.rw
doctor.skinx.app
ecommerce.labussola.it
embed.raygum.com
endarlani.com
finance.muqadar.com
go.irts-one.online
is.education.muqadar.com
isd.education.muqadar.com
itaj-ai.cogmo.com.br
itsyourdayofficial.com
itzanas.com
johnpauluy.online
jsobms2019.medicine.psu.ac.th
khawlabeautyindonesia.com
kintai.alphace-aws.com
kreitz.es
krishnasevasansthan.org
labelbox-dev.vnlp.ai
ligadefutbolathenea.com
livechat-mb.vnlp.ai
livechat-vpb.vnlp.ai
mahautwindal.fr
mapa-develop.rogeriossantos.com.br
menuqr.pro
mikrotik.nmerken.com
mint.softengineer.site
modulebanks.com
mta-sts.thehosmers.com
oransoft.net
pay.muqadar.com
phenomanmegummies.site
pryzmity.com
rci.pcdev.in
registration.sxoeu-staging.skipr.co
remindsmart.com
ridecan.com
shariawealth.nokanel.tech
smartcardai.com
sms.nextpointe.net
soundsapp.jacquez.xyz
staging.instigate.ai
streamly.in
tiendas.qpan.cl
torty.sainer.pl
twinninghairandbeauty.co.uk
va-dev.vnlp.ai
va-staging.vnlp.ai
www.card.cerux.com.pl
www.chrealty.com.mx
www.codeink.in
www.dev.can.org.za
www.gooddystrybucja.pl
www.morganebbett.com
www.nuvemgestao.com.br
www.puzzlestorm.com
www.rupha.blog
www.smartcardai.com
www.twinninghairandbeauty.co.uk
www.xn--g6h.je
www.xn--qei.pafc.online
www.xn--smnchecken-ecb.se
xn--ockzbp2a9a.com
xn--residncia-p4a.cubos.academy

Other certificates including the domain name nuvemgestao.com.br

(limited to 100 certificates)
aelconsultoriasistemas.com.br
www.app.bytecv.com
www.nuvemgestao.com.br
www.nuvemgestao.com.br
www.nuvemgestao.com.br
zenui-report-location.asus.com
va-vpb.vnlp.ai
invite.proscle.com
www.nuvemgestao.com.br
www.rupha.blog
www.nuvemgestao.com.br

Certificate

The complete raw certificate details for www.nuvemgestao.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295615144131023467366111684463526674369889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 22:39:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 22:39:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nuvemgestao.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3e7fe9f52219ac3d85915edc3dff2f7c57a01e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adhix11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-legal.coconala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-staging.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bites.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dev.can.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.irts-one.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alecmichels.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliceasamlaksa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anhsarchivehub.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animals-nature-flutter.quipu.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.controle-eventos.nawebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gampay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.linkper.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mova.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.turnero.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.urusswap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvat.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atla.et'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.daishohq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.sexyaigirls.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auxcorde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.smbe-production.skipr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmm-lpo-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmm-lpo-pro.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmm-lpo-qa.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byteodyssey.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadastro.rogeriossantos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafehouse.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codebyahsan.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeink.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.rtm.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.software.muqadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devapp.medtech.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developerswiki.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diazadhari.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.rootsrwanda.rw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctor.skinx.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecommerce.labussola.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.raygum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endarlani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.muqadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.irts-one.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.education.muqadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isd.education.muqadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itaj-ai.cogmo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsyourdayofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itzanas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnpauluy.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsobms2019.medicine.psu.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khawlabeautyindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kintai.alphace-aws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreitz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krishnasevasansthan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labelbox-dev.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ligadefutbolathenea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livechat-mb.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livechat-vpb.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahautwindal.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapa-develop.rogeriossantos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menuqr.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikrotik.nmerken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mint.softengineer.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modulebanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.thehosmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oransoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.muqadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phenomanmegummies.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pryzmity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rci.pcdev.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sxoeu-staging.skipr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remindsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridecan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shariawealth.nokanel.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcardai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.nextpointe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundsapp.jacquez.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.instigate.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamly.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiendas.qpan.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torty.sainer.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinninghairandbeauty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va-dev.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va-staging.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.card.cerux.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrealty.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeink.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.can.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gooddystrybucja.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morganebbett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuvemgestao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puzzlestorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rupha.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartcardai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twinninghairandbeauty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--g6h.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--qei.pafc.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--smnchecken-ecb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ockzbp2a9a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--residncia-p4a.cubos.academy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ea6548acf0000040300463044022061a091183c2a0101971cf58764c019ebfab3fa05e14363afa0a5e4a4de81b20e022054c506d13c1e99b48e4e74f62b70e289b89daab8d247ee5488d359eb53d08b12007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea6548b4c0000040300473045022040b88356d666b33afa14313bbe3fceabc6b6c7379a8349e6778f552950e75b08022100b5d62d7086d9774033ac6aa1ca564bcadc6302dbb327bee7bd20458414f8029b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052aca4e104e1801479cc374ea7f233951ff0409579b12e0e4b61a335dea302e8ad6dee9edbfa41c18c45fc420f9a44d96ccdc5dcf2d9f9496d13d07f52ba060ba756ab02c5141ba45ed08673d555bd025a08dc80345896ed065f577e6d10362fee0a75bf17dc8c584c85edf091a3abfb5d068e5e61e580fa84f1444cdaf73f790f0b030ab553ae46c217ee810bd2a913c3916317024f640a500f698c5132b5f5b1e77eba59962204204282d51ab2b42bc3c94cb0210b984c7d62ea20e124afc7ab146b0977e4c9c93b321d5e3bf30d7d2df25974877b1f719d93c89389e64b0f38acee2668d6f3ca4af7cf8670b6a105212c6e4d8846b3742f4783c7be4c1e0d