www.marzanoarchitects.com.ar

Issued by R3

About this certificate

This digital certificate with serial number 03:a8:0c:86:a7:b2:a3:99:fe:01:d4:6d:66:8f:5a:ee:bc:f9 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.marzanoarchitects.com.ar

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:0c:86:a7:b2:a3:99:fe:01:d4:6d:66:8f:5a:ee:bc:f9
Serial Number (int): 318520945343042513418229834899112170798329
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:b1:d3:cb:34:9e:47:2d:58:4e:a2:07:cb:a7:78:48:33:2b:25:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:3f:5a:03:a1:2f:a7:67:fa:03:72:09:33:ed:b2:a7:81:1c:d3:6c
Fingerprint (sha256): 51:18:19:4a:ba:a8:c2:28:99:fe:03:8a:b4:ac:c7:5d:e4:10:be:67:ee:fa:d2:d0:d3:d2:0e:29:aa:5e:7d:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.marzanoarchitects.com.ar

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marzanoarchitects.com.ar

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aa.r42.ch
aaa.r42.ch
aashaar.in
accounts.rereceipt.cc
admin-fe.vnlp.ai
admin.passcard.psu.ac.th
admin.shopguru.store
ahkeongtrading.com
anitachakraborty.co.uk
anshdeep.me
api-stage.platzbuchung.de
api.storyvoice-qa.scholastic.com
app.3ccd.com.br
app.jiniquick.com
app.mercadoenergias.com.br
app.xn--stlstrimmen-hgb.no
appikorn.com
aujezus.me
auth.gsales.io
bardaat.biu.ac.il
beta.solcial.tech
bhxtech.com.br
bnkoverview.online
bytehype.io
castomr.com
contacts.rms.reesco.pl
cowarriors.veans.space
craftniketan.com
crm-test.papayamobile.com
cryptoislandpump.com
cuario.tech
dev.scorethebusiness.com
excotro.com
fb.sinanaksu.com
fixakorkort.se
haribs.com.br
install.oledcomm.net
investor-flow.salesmonk.co
kaustubhamedtech.com
kinefisioblandon.com
l.jarrad.co
legacy.app.telebroad.com
link.keystone.no
m.stg.charitableimpact.com
members.dstteam.com
mikrotik-red.nmerken.com
montawat.xyz
old.backoffice.prexsell.com
onelink.bazaar.chaayos.com
otaku-no-ibekare.emradc.xyz
parasjasuja.tech
pasfoto.fotomichel.nl
portal.sumbawa.in
ptwcode.com
quirovery.com
registration.ald.skipr.co
scryptworxstudios.com
sdvx.net
softleafgame.com
speed-hawk.de
speedywordy.com
staging-auth.beryl.cc
static.gosunow.com
steeljobs.pl
stg.bsk.et
thanks.matchupinfluencer.com
tstruong.dstteam.com
va-vna.vnlp.ai
voluntred.com
wifipublicitario.com
worqflexi.com
www.about.getyrl.com
www.adwarsgame.com
www.ahkeongtrading.com
www.amen.bible
www.brownedandtoasted.com
www.edwinhoksberg.nl
www.ercgeeks.com
www.gamingtales.tech
www.iabdsd.com
www.inmobiliariaecheverria.com
www.janniemczyk.pl
www.krishnasahu.com
www.malaksadekapps.com
www.marzanoarchitects.com.ar
www.nadood.com
www.search.library.ethz.ch
www.sebastianmangini.com.ar
www.shayar.tech
www.workinghours4b.com
www.xn-----8kcdwplbpcboibzlhjr4w.xn--p1ai
www.xn--bydner-yxa.se
xn---38-5cdabe8ayaudmo1ce0d1h.xn--p1ai
xn--42cfakg8enak8d2ar1f0a7djj3dzc8sd.com
xn--950bs4kopb7xebykephca275mvqieif.com
xn--o39aomfqn3p30mk5cl1r.com
xn--opushazrcim-5zb.com
xn--pdden-sra.no
xn--w8j2bwcwc.xn--6ckcgu1jta2b6e.jp
youropy.fr

Other certificates including the domain name marzanoarchitects.com.ar

(limited to 100 certificates)
alaminamdar.tech
milestoneshealthcentre.com
aashaar.in
xn--y8ja6ob5749g5na497h.app
investor-flow.salesmonk.co
quiz.mister-life.com
www.menuqr.store
entrepreneurship.code.berlin
alaminamdar.tech
milestoneshealthcentre.com
www.marzanoarchitects.com.ar
fashionbrandes.online
xn--y8ja6ob5749g5na497h.app
link.healthtap.com
www.menuqr.store
entrepreneurship.code.berlin
fashionbrandes.online
satyamnx.store
www.marzanoarchitects.com.ar
cliohealth.aspire-dev2.com
mybattery.ausgrid.com.au
www.qriositynet.xyz
4fun.live
cofounder.enseedling.com
satyamnx.store
passcard.psu.ac.th
www.shayar.tech
aiegfeedback.online
www.trbull007.in
link.healthtap.com
auth.desaintest.my.id
xn--72cf3aojaiea0apa0cdh9la5d8afc5e7czp8b5a1b.com
xn--72cf3aojaiea0apa0cdh9la5d8afc5e7czp8b5a1b.com
www.mrkilian.es
passcard.psu.ac.th

Certificate

The complete raw certificate details for www.marzanoarchitects.com.ar in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318520945343042513418229834899112170798329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 17:05:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 17:05:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.marzanoarchitects.com.ar'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0b1d3cb349e472d584ea207cba77848332b25d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa.r42.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaa.r42.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aashaar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.rereceipt.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-fe.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.passcard.psu.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shopguru.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahkeongtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anitachakraborty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anshdeep.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stage.platzbuchung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.storyvoice-qa.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.3ccd.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.jiniquick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mercadoenergias.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.xn--stlstrimmen-hgb.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appikorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aujezus.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.gsales.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bardaat.biu.ac.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.solcial.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhxtech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnkoverview.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytehype.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castomr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacts.rms.reesco.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowarriors.veans.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftniketan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-test.papayamobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoislandpump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuario.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.scorethebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excotro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.sinanaksu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixakorkort.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haribs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'install.oledcomm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-flow.salesmonk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaustubhamedtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinefisioblandon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.jarrad.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.app.telebroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.keystone.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.stg.charitableimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.dstteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikrotik-red.nmerken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montawat.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.backoffice.prexsell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelink.bazaar.chaayos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otaku-no-ibekare.emradc.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parasjasuja.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasfoto.fotomichel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.sumbawa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptwcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quirovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.ald.skipr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scryptworxstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdvx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softleafgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speed-hawk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedywordy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-auth.beryl.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.gosunow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steeljobs.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.bsk.et'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanks.matchupinfluencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstruong.dstteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va-vna.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voluntred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifipublicitario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worqflexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.about.getyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adwarsgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahkeongtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amen.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownedandtoasted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwinhoksberg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ercgeeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamingtales.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iabdsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inmobiliariaecheverria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janniemczyk.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krishnasahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaksadekapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marzanoarchitects.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nadood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.search.library.ethz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sebastianmangini.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shayar.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workinghours4b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn-----8kcdwplbpcboibzlhjr4w.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bydner-yxa.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn---38-5cdabe8ayaudmo1ce0d1h.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--42cfakg8enak8d2ar1f0a7djj3dzc8sd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--950bs4kopb7xebykephca275mvqieif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--o39aomfqn3p30mk5cl1r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--opushazrcim-5zb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pdden-sra.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--w8j2bwcwc.xn--6ckcgu1jta2b6e.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youropy.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d41cc3a220000040300473045022100fd8a3d751992076e1d0e95b719f6580fde27604bbbcbce539f50bd87eb6f1174022008d83fad0e2fe9a9ba7fffe3da0c419393da0c8e132408e12d5e88d4bdac56bc0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d41cc3a220000040300483046022100da44912d8bcea201b2eaab0f2f7da9cca373115166ca9310e591cfb09ef6092f0221008583d5802f572dac99204db8df7c43275ed250f3d690ed1deaa8efea98115672
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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