www.jx.fi

Issued by R3

About this certificate

This digital certificate with serial number 03:ee:75:fb:ff:1f:cb:6d:22:c4:69:43:ff:dd:a3:9a:9d:3d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.jx.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:75:fb:ff:1f:cb:6d:22:c4:69:43:ff:dd:a3:9a:9d:3d
Serial Number (int): 342480889239015901006229192716010198310205
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:8a:79:5a:04:4d:15:90:fe:9c:76:08:58:e3:b6:75:f8:bf:6b:28
Fingerprint (sha256): 4f:5b:77:77:50:c4:ef:55:5a:e5:78:4c:c3:84:53:b0:c7:e8:ad:5a:29:42:ef:a8:3c:d3:2a:f1:74:c0:c1:a5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.jx.fi

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jx.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.hostsoft.eu
admin.sandbox.backed.fi
app-sandbox.astra.finance
app-staging.astra.finance
app-testing.astra.finance
app.astra.finance
app.augmented.finance
app.babyfootball.finance
app.inuko.finance
app.musasoppi.fi
app.sandbox.backed.fi
asset.inuko.finance
avalanche.augmented.finance
avely.fi
babyfootball.finance
c.pmdn.eu
cdn.macioszektv.eu
compass.wunderdog.fi
cream.finance
ct.itpagency.eu
dao.mero.finance
dashboard-sandbox.astra.finance
dashboard-staging.astra.finance
dashboard-testing.astra.finance
dashboard.astra.finance
defisherpa.fi
dev-admin.zahra.farm
dex.loremboard.finance
digiblocks.eu
docs.botswap.fi
ecn.triomarkets.eu
ecn2.triomarkets.eu
ecomexpress.express
empower.greentrips.eu
ethereum.augmented.finance
flint.finance
gyro.finance
hermes.pimpify.eu
hours.dataops.fi
hover.fi
kotisivuthelposti.fi
kovan.augmented.finance
kyc.metablock.exchange
loremboard.finance
loveandlight.fi
melilotus.fi
mero.finance
meta.gao.fi
mng.zahra.farm
novo.casanana.eu
ofi.fan
oskarkopra.fi
phm.wunderdog.fi
pool.bomb.exchange
preprod.bo.livv.eu
recipes.siobhanmaher.eu
referral.klever.finance
rewards.bomb.exchange
s.pmdn.eu
sampletown.eu
satumatto.fi
shop.zahra.farm
snoop.augmented.finance
stage.augmented.finance
tectec.eu
test.bepay.finance
testnet.delta.exchange
theos.fi
track-my-niyams.oldhammandir.faith
vector-sandbox.astra.finance
vector-testing.astra.finance
vector.astra.finance
visitkamk.fi
web-sdk-sandbox.astra.finance
web-sdk-staging.astra.finance
web-sdk-testing.astra.finance
web-sdk.astra.finance
website-builder.captag.events
www.babyfootball.finance
www.botswap.fi
www.digiblocks.eu
www.donkey.fans
www.freights.express
www.hostsoft.eu
www.hover.fi
www.ienaga.estate
www.joery.eu
www.justbe.fans
www.jx.fi
www.kotisivuthelposti.fi
www.kryptoverotus.fi
www.loveandlight.fi
www.macioszektv.eu
www.maranatha.farm
www.ofi.fan
www.ouimet.family
www.sampletown.eu
www.satumatto.fi
www.teva.farm
www.utsavniyams.bolton.swaminarayan.faith

Other certificates including the domain name jx.fi

(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni222550.cloudflaressl.com
jx.fi
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
jkl.goforecrew.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni222550.cloudflaressl.com
cdn.golfisverige.com
firebaseapp.com
nerdy.life
firebaseapp.com
www.retros.app
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.debbify.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni222550.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.endak-dhlail.com
sni222550.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
josephmaxim.io
sni222550.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
routinesuccess.net
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com

Certificate

The complete raw certificate details for www.jx.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342480889239015901006229192716010198310205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 23:24:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 23:24:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jx.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2065 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hostsoft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sandbox.backed.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-sandbox.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-staging.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-testing.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.augmented.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.babyfootball.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.inuko.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.musasoppi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sandbox.backed.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.inuko.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalanche.augmented.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avely.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyfootball.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.pmdn.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.macioszektv.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.wunderdog.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cream.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct.itpagency.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dao.mero.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-sandbox.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-staging.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-testing.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defisherpa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-admin.zahra.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dex.loremboard.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiblocks.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.botswap.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecn.triomarkets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecn2.triomarkets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecomexpress.express'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empower.greentrips.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethereum.augmented.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flint.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyro.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermes.pimpify.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hours.dataops.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hover.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kotisivuthelposti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kovan.augmented.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyc.metablock.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loremboard.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveandlight.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melilotus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mero.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta.gao.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mng.zahra.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novo.casanana.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofi.fan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oskarkopra.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phm.wunderdog.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pool.bomb.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.bo.livv.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipes.siobhanmaher.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referral.klever.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.bomb.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.pmdn.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sampletown.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satumatto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.zahra.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snoop.augmented.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.augmented.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tectec.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.bepay.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnet.delta.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track-my-niyams.oldhammandir.faith'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vector-sandbox.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vector-testing.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vector.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitkamk.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-sdk-sandbox.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-sdk-staging.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-sdk-testing.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-sdk.astra.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website-builder.captag.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babyfootball.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.botswap.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digiblocks.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donkey.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freights.express'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hostsoft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hover.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ienaga.estate'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joery.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justbe.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jx.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kotisivuthelposti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kryptoverotus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loveandlight.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macioszektv.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maranatha.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofi.fan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouimet.family'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sampletown.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satumatto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teva.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utsavniyams.bolton.swaminarayan.faith'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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